5 ms·

What if you spin up a VPS based in India and install OpenVPN/Wireguard on it? Surely they can’t demand logs of a box you operate yourself?

0des 4y ago
They'd tell the provider not you
Renaud 4y ago
What makes you think you can operate in a country without obeying its laws, however detrimental to privacy they are ?
- hirako2000 4y ago
  I got some for you: - principles, and going as far as extending freedom even if you personally already benefit from it - civil desobedience is a thing, even though some stances are questionable. And, I thought the debate for more needs of privacy, and given the threats have been proven to even come from governments (snowden/NSA, pegasus), was settled, visibly it isn't if even on HN such argument is given in the context of such a clear subject. The overstepping body there is the government, not the busines imo.
- Aperocky 4y ago
  > With a recent data law introduced in India requiring all VPN providers to store user information for at least five years By not being a VPN provider? A private VPN isn't hard to make.
- antihero 4y ago
  Disregard for laws. Can be good, can be bad, but never underestimate the empowerment of disobedience.
wonderbore 4y ago
Yeah but what’s the point? A single-user VPN means all traffic is already attributable to them. If the intent is just to access the Indian web, then sure. I’m sure there are plenty other non-privacy-aware VPNs that let you do that though.
deleted 4y ago
[deleted]
danesparza 4y ago
Do you really think you operate the VPS host box in a foreign country? And you really think a foreign government doesn't have sovereignty over their own soil?
- deleted 4y ago
  [deleted]
stevewatson301 4y ago
The law that they’re talking about also mandates cloud and server providers to maintain IP allocation histories and validate customer identities by way of KYCs.
jaywalk 4y ago
A lot of services (like Netflix) block datacenter IPs to prevent this sort of thing.
marcthe12 4y ago
The law includes data request for owner and IP of VPSes too. So maybe no logs but the IP address and the VPS will be tied to your real identity anyway so no improvement
Anunayj 4y ago
The actual order targets both VPS and VPN providers, here's the excerpt: > Data Centres, Virtual Private Server (VPS) providers, Cloud Service providers and Virtual Private Network Service (VPN Service) providers, shall be required to register the following accurate information which must be maintained by them for a period of 5 years or longer duration as mandated by the law after any cancellation or withdrawal of the registration as the case may be: > a. Validated names of subscribers/customers hiring the services > b. Period of hire including dates > c. IPs allotted to / being used by the members > d. Email address and IP address and time stamp used at the time of registration / on-boarding > e. Purpose for hiring services > f. Validated address and contact numbers > g. Ownership pattern of the subscribers / customers hiring services https://www.cert-in.org.in/PDF/CERT-In_Directions_70B_28.04.2022.pdf https://www.cert-in.org.in/PDF/CERT-In_Directions_70B_28.04....

0des 4y ago

They'd tell the provider not you

Renaud 4y ago

What makes you think you can operate in a country without obeying its laws, however detrimental to privacy they are ?

hirako2000 4y ago
I got some for you: - principles, and going as far as extending freedom even if you personally already benefit from it - civil desobedience is a thing, even though some stances are questionable. And, I thought the debate for more needs of privacy, and given the threats have been proven to even come from governments (snowden/NSA, pegasus), was settled, visibly it isn't if even on HN such argument is given in the context of such a clear subject. The overstepping body there is the government, not the busines imo.
Aperocky 4y ago
> With a recent data law introduced in India requiring all VPN providers to store user information for at least five years By not being a VPN provider? A private VPN isn't hard to make.
antihero 4y ago
Disregard for laws. Can be good, can be bad, but never underestimate the empowerment of disobedience.

wonderbore 4y ago

Yeah but what’s the point? A single-user VPN means all traffic is already attributable to them. If the intent is just to access the Indian web, then sure. I’m sure there are plenty other non-privacy-aware VPNs that let you do that though.

deleted 4y ago

[deleted]

danesparza 4y ago

Do you really think you operate the VPS host box in a foreign country? And you really think a foreign government doesn't have sovereignty over their own soil?

deleted 4y ago
[deleted]

stevewatson301 4y ago

The law that they’re talking about also mandates cloud and server providers to maintain IP allocation histories and validate customer identities by way of KYCs.

jaywalk 4y ago

A lot of services (like Netflix) block datacenter IPs to prevent this sort of thing.

marcthe12 4y ago

The law includes data request for owner and IP of VPSes too. So maybe no logs but the IP address and the VPS will be tied to your real identity anyway so no improvement

Anunayj 4y ago

The actual order targets both VPS and VPN providers, here's the excerpt: > Data Centres, Virtual Private Server (VPS) providers, Cloud Service providers and Virtual Private Network Service (VPN Service) providers, shall be required to register the following accurate information which must be maintained by them for a period of 5 years or longer duration as mandated by the law after any cancellation or withdrawal of the registration as the case may be: > a. Validated names of subscribers/customers hiring the services > b. Period of hire including dates > c. IPs allotted to / being used by the members > d. Email address and IP address and time stamp used at the time of registration / on-boarding > e. Purpose for hiring services > f. Validated address and contact numbers > g. Ownership pattern of the subscribers / customers hiring services https://www.cert-in.org.in/PDF/CERT-In_Directions_70B_28.04.2022.pdf https://www.cert-in.org.in/PDF/CERT-In_Directions_70B_28.04....