3 ms·

You should probably ask for a refund, then set up your own VPN. Commerical VPNs are, for the vast majority of cases, simply not a good bet for your privacy. Yo

You should probably ask for a refund, then set up your own VPN. Commerical VPNs are, for the vast majority of cases, simply not a good bet for your privacy. You're changing your network traffic path from a diffuse and byzantine series of paths to once centralized collection point. The payoff for an attack on a VPN rises very quickly. Meanwhile, you're also conditioning yourself to say, "My traffic is secure while my VPN is on." It's not a great combo.

chickenpotpie 7y ago
I thinking about spinning up a Digital Ocean droplet and rolling my own right now
- babayega2 7y ago
  Absolutely. Look for project Streisand.
- leevlad 7y ago
  I'd keep in mind that cloud providers have well-known IP blocks that can sometimes be rate-limited by various internet sites/services, primarily to combat botting. You might inadvertently get caught in the IP range that's being actively rate limited by e.g. Instagram. YMMV.
- ignoramous 7y ago
  https://vultr.com https://vultr.com might provide more bang for the buck at $2.50 a month for 500GB in bandwidth.
rocqua 7y ago
It works for when you need to use untrusted WiFi, because the alternative is worse. Beyond that, it forms a nice defense against unsophisticated attackers. (e.g. it breaks a single datapoint (ip address) used by Google and FaceBook).
- KirinDave 7y ago
  Is the alternative actually worse than SSL? Why? And no, it doesn't break analytical by Facebook or Google in any substantial way. I know some people use them to evade Netflix region exceptions, and that's about all they're good for.
  - crazydoggers 7y ago
    You can’t always ensure that all traffic goes over SSL. DNS traffic is an example. I always assume that hostile public networks like free WiFi have agents actively trying to man in the middle any connections they can. If your device has a known exploit and a single connection not going over SSL you drastically increase your exposure on a public WiFi, hence the one use case for VPN.
    - KirinDave 7y ago
      If your privacy concerns include your DNS requests then a commerical VPN isn't a realistic choice. And unlike some rando pseudo-bespoke brand-less coffee shop wifi, commerical VPNs are a big target. > I always assume that hostile public networks like free WiFi have agents actively trying to man in the middle any connections they can. And VPNs just move that problem. If you're not demanding and forcing SSL, you're not actually addressing this problem. > If your device has a known exploit and a single connection not going over SSL you drastically increase your exposure on a public WiFi, hence the one use case for VPN. I regret to inform you that none of these things you've described stop thise sort those attacks. Forcing SSL on your browser is a realistic option for most threat models. If you're at a level where you're actually being surveilled by a nation-state-level actor, a commercial VPN won't help you. Short of that scenario, forcing SSL will cover most cases.
      - crazydoggers 7y ago
        Try running a traffic or packet monitor on a WiFi network. Now tell me how much of that traffic is going over SSL And even if I don’t run my own VPN, I’d prefer to “move the problem”. It’s so much easier to attack machines on public WiFi than compromise a VPN provider... and much more anonymous, and less likely to incite law enforcement activity. Public airports, libraries, etc are hotbeds of nefarious activity.
darkwater 7y ago
But how can a DIY VPN serve you if you want to, say, avoid geoblocked pages? usually with those VPN services you can choose where your exit node is. I don't feel like using a multi-region setup for this (well, now that i think of it using Terraform + Algo it could be neatly automated...)
- KirinDave 7y ago
  Run a vpn instance in a different region? Lots of providers do this and it's fairly inexpensive for burst use.
gzer0 7y ago
Good way to deploy your own personal vpn on DigitalOcean, google cloud, or any cloud server of your choice really. Took me 5 minutes. https://news.ycombinator.com/item?id=21313902 https://news.ycombinator.com/item?id=21313902

chickenpotpie 7y ago

I thinking about spinning up a Digital Ocean droplet and rolling my own right now

babayega2 7y ago
Absolutely. Look for project Streisand.
leevlad 7y ago
I'd keep in mind that cloud providers have well-known IP blocks that can sometimes be rate-limited by various internet sites/services, primarily to combat botting. You might inadvertently get caught in the IP range that's being actively rate limited by e.g. Instagram. YMMV.
ignoramous 7y ago
https://vultr.com https://vultr.com might provide more bang for the buck at $2.50 a month for 500GB in bandwidth.

rocqua 7y ago

It works for when you need to use untrusted WiFi, because the alternative is worse. Beyond that, it forms a nice defense against unsophisticated attackers. (e.g. it breaks a single datapoint (ip address) used by Google and FaceBook).

KirinDave 7y ago
Is the alternative actually worse than SSL? Why? And no, it doesn't break analytical by Facebook or Google in any substantial way. I know some people use them to evade Netflix region exceptions, and that's about all they're good for.
- crazydoggers 7y ago
  You can’t always ensure that all traffic goes over SSL. DNS traffic is an example. I always assume that hostile public networks like free WiFi have agents actively trying to man in the middle any connections they can. If your device has a known exploit and a single connection not going over SSL you drastically increase your exposure on a public WiFi, hence the one use case for VPN.
  - KirinDave 7y ago
    If your privacy concerns include your DNS requests then a commerical VPN isn't a realistic choice. And unlike some rando pseudo-bespoke brand-less coffee shop wifi, commerical VPNs are a big target. > I always assume that hostile public networks like free WiFi have agents actively trying to man in the middle any connections they can. And VPNs just move that problem. If you're not demanding and forcing SSL, you're not actually addressing this problem. > If your device has a known exploit and a single connection not going over SSL you drastically increase your exposure on a public WiFi, hence the one use case for VPN. I regret to inform you that none of these things you've described stop thise sort those attacks. Forcing SSL on your browser is a realistic option for most threat models. If you're at a level where you're actually being surveilled by a nation-state-level actor, a commercial VPN won't help you. Short of that scenario, forcing SSL will cover most cases.
    - crazydoggers 7y ago
      Try running a traffic or packet monitor on a WiFi network. Now tell me how much of that traffic is going over SSL And even if I don’t run my own VPN, I’d prefer to “move the problem”. It’s so much easier to attack machines on public WiFi than compromise a VPN provider... and much more anonymous, and less likely to incite law enforcement activity. Public airports, libraries, etc are hotbeds of nefarious activity.

darkwater 7y ago

But how can a DIY VPN serve you if you want to, say, avoid geoblocked pages? usually with those VPN services you can choose where your exit node is. I don't feel like using a multi-region setup for this (well, now that i think of it using Terraform + Algo it could be neatly automated...)

KirinDave 7y ago
Run a vpn instance in a different region? Lots of providers do this and it's fairly inexpensive for burst use.

gzer0 7y ago

Good way to deploy your own personal vpn on DigitalOcean, google cloud, or any cloud server of your choice really. Took me 5 minutes. https://news.ycombinator.com/item?id=21313902 https://news.ycombinator.com/item?id=21313902