4 ms·
Yeah, GP is right in that you can't trust VPNs (for example, PIA is probably a massive honeypot for all we know.) However, if you're using a VPN outside of the
by Throwaway23412 11y ago
Yeah, GP is right in that you can't trust VPNs (for example, PIA is probably a massive honeypot for all we know.) However, if you're using a VPN outside of the jurisdiction of the "Fourteen Eyes", you've substantially increased the effort required for anyone outside of that VPN to monitor you.
- Freak_NL 11y ago> for example, PIA is probably a massive honeypot for all we know. Why the 'probably'? Of course, no VPN-provider should be trusted at face value, but do you know of any sources that claim that Private Internet Access is in fact an elaborate honeypot?
- Throwaway23412 11y agoI was just thinking that PIA would be the perfect candidate for a honeypot, especially since it's under USA jurisdiction. Does the "probably" make it sound like I'm making a claim? I can change it if you'd like.
- extra88 11y agoYes, "PIA is probably a massive honeypot" is equivalent to "more likely than not, PIA is a massive honeypot." I don't think you mean that since you followed it with "for all we know."
- tomjen3 11y agoI would have to agree with extra88, saying "for all we know PIA could be a honeypot" or "PIA would be the perfect honeypot" is every different from saying "PIA is probably a honeypot". Looking at the argument though, even if it is a honeypot blowing it is a one-shot deal. The users are never going to trust PIA nor any other VPN that makes similar claims ever again. That means that they probably wouldn't spring the honeypot, if it is one, for anything but the biggest fish.
- laumars 11y agoHe did say "for all we know"; albeit that followed "probably a honeypot" rather than preceded it. Frankly, I think you're all splitting hairs. Most of us understood the point he was making even if the phrasing of that sentence didn't flow as well as you may have liked.
- Freak_NL 11y agoThis is not an attack on someone's use of language; merely a polite request to clarify a piece of ambiguous phrasing. If there are indeed sources that claim that PIA is acting as a honeypot, then that would be very interesting to know.
- fweespeech 11y agoTbh, even if PIA is a giant honeypot, if you use public wifi and pay with a gift card you purchased with cash...it doesn't really matter in any substantial way unless they are willing to put boots on the ground to find you. If they are willing to do that, even TOR isn't real protection due to the fact it can and will be breached in the event of an active attack by malicious nodes on both ends of the circuit. A VPN you can buy relatively anonymously [e.g. disposable gift cards bought with cash] and use with common sense [e.g. Not via your home LAN] are an effective privacy tool. However, 99% of people aren't going to go through that level of effort which makes them nearly useless for privacy purposes.
- gruez 11y agoIf you're going to use public wifi, what's the point of using a VPN? Are doing it so they need to subpoena one more person before they catch you?
- fweespeech 11y agoMitM on public wifi is a thing.
- joepie91_ 11y agoAs is MitM on VPN services.
- fweespeech 11y agoYes but we've established the concern is someone knowing who you are, not what you are doing. A MitM at the local wifi shop is going to know you are and what you are doing. A MitM at a VPN you paid for with a gift card you paid with cash is just going to know which wifi shop you were at. If you never go back, odds are they can't figure out which customer you were.
- ryanlol 11y agoWell, PIA has completely neglected to acknowledge the fact that their entire customer db was compromised recently. I guess that sums up exactly how trustworthy they are.
- saltedshiv 11y agoDo you have a source for this?
- ryanlol 11y agoNot any public sources, but I've personally seen a copy of the database and know that PIA was using a ridiculously vulnerable version of Kayako Fusion at the time.