12 ms·
GoVPN – simple secure free software virtual private network daemon
- aroch 12y agoNot much point in serving .sig's and your PGP key if its over HTTP. Unless you're already in someone's WOT, there's nothing to verify against. At least if you use HTTPS we can somewhat trust that we're being displayed the key you think we should be displayed.
- MichaelApproved 12y agoFor those wondering, I think WOT means "Web of Trust." This seems to be a tool related to that https://www.mywot.com/ https://www.mywot.com/
- tokenizerrr 12y agoNo, this is referring to the PGP Web of Trust https://en.wikipedia.org/wiki/Web_of_trust https://en.wikipedia.org/wiki/Web_of_trust https://www.gnupg.org/gph/en/manual.html#AEN554 https://www.gnupg.org/gph/en/manual.html#AEN554
- draugadrotten 12y ago> Unless you're already in someone's WOT, there's nothing to verify against. Somebody's been trying to fix that with https://keybase.io/ https://keybase.io/
- tokenizerrr 12y agoIf anyone is interested, I have 3 keybase invites to hand out. Contact is in my profile. edit: None left, sorry!
- fernandotakai 12y agoI have 7 invites. contact is also on my profile. edit: they are all gone.
- jnthn 12y agoI have 5 invites, contact in my profile. Edit: invite count update
- mrsteveman1 12y agoI've got 15 more if jnthn's run out :)
- BostonEnginerd 12y agoI also have a pile of invites.
- rlpb 12y agoIndeed; the key used doesn't even appear to be available on any keyserver. However, it does have some use in being able to determine that a newer release was made by the same person as the previous ones. That's something you can't get with HTTPS.
- eikenberry 12y agoAlso if they've had it their for a long time you could get some historical verification of it via archive.org.
- apeacox 12y agoSourceForge?! how about hosting a zip on geocities? :-)
- diakritikal 12y agoSeems to be just a mirror for the tarballs and sigs which area otherwise available on the github project: https://github.com/stargrave/govpn/releases
- ryandvm 12y agoAs an occasional open source producer, I really can't stand when people piss and moan about somebody else's charitable software contributions.
- WorldWideWayne 12y agoYou're conflating light sarcastic teasing with pissing and moaning. Anyway, I'd still complain if someone tried to serve me free food on a dirty plate.
- ciupicri 12y agoThough he didn't complain about the software itself, he complained about the way it's hosted. Different concerns. And in today's world, SourceForge is liked less than GitHub from what I've noticed.
- chrissnell 12y agoSourceforge has inserted adware into projects' downloads in the past. It's also a ghost town and I wonder what sort of resources (if any) they have working on the site to keep it secure. This is a big concern when the software they're hosting is as security-sensitive as a VPN package.
- nine_k 12y agoAdding adware to gzipped and signed source code would be a bit hard. That's the onl;y thing the authors serve from sourceforge.net.
- borski 12y agoIn case you're looking to build your own and rely on existing software, we built an easy way to create a VPN and deploy it to digital ocean or rackspace, in a single click. Check it out here: https://www.tinfoilsecurity.com/vpn/new https://www.tinfoilsecurity.com/vpn/new
- borski 12y agoWhy the downvotes? This is free, and I just posted it as an alternative. You can also take our open source script and run it on a box of your choice, if you don't want to trust us with your keys (which we never store). Our script: https://github.com/tinfoil/openvpn_autoconfig/blob/master/bin/openvpn.sh https://github.com/tinfoil/openvpn_autoconfig/blob/master/bi...
- tjoff 12y agoMan that page looks fraudulent. Doesn't even mention what kind of "VPN" is used other than it is supposedly "open". So, what client can I use? Which devices or operating systems does it support? Not even the FAQ addresses any of it. And with all that one is expected to trust ones key to that site? (the way the page is setup I guess the target audience can not even be expected to know what a "key" is, or why they would even need to trust that site even if they did use it) At the very bottom, in the fine-print, there is a link to a blog post. Great. Start with that! Move the whole page to the bottom of the blog post. "But that will hurt adoptability". GREAT! No one in the in their right mind should be "securing their internets with some cloud thing that some dude recommended" in under 30 seconds anyway. This is only encouraging people being gullible which is kind of ironic since the aim seems to be to help people not trusting public wifi.
- borski 12y agoSo, in a different world, you'd be right. In this case, we originally built this for Sochi so journalists could use a VPN. Journalists are not going to have any idea how to build a box, ssh in, run a script, etc. We later changed the copy to be related to DEF CON, to keep it current, but yeah.
- beefsack 12y ago
- snitko 12y agoThe blog cypherpunks.ru written in Russian contains a lot of spelling and grammar errors, as well as typos, which to me indicates the quality of the content in general.
- pstuart 12y agoDocumentation and code are two different things.
- JustSomeNobody 12y agoIndeed they are but I'm not sure how the refutes what snitko said.
- nthcolumn 12y agoНе всё так плохо.
- hartator 12y agoAnyone knows the best current way to install a VPN on Ubuntu? I've tried several times, it's way more difficult than I thought, and when I've some success, performance is, at best, disappointing. And that's using 1GB/s dedicated server.
- nthcolumn 12y agosudo apt-get install network-manager-vpnc network-manager-pptp network-manager-openvpn # for cisco vpn, microsoft or openvpn Configure from the panel. I use ThreatSpike labs. Too easy.
- SSLy 12y agofor vpn server, there is the streisand project, it includes dead-easy HOWTOs for each connection method.
- nullrouted 12y agoUse this script: https://github.com/Nyr/openvpn-install https://github.com/Nyr/openvpn-install
- sajal83 12y agohttps://help.ubuntu.com/lts/serverguide/openvpn.html https://help.ubuntu.com/lts/serverguide/openvpn.html works all the time... but im on a shitty connection so openvpn itself is not a bottleneck.
- EugeneOZ 12y agoTry Pritunl - simple as "next next done".
- tw04 12y agoI haven't personally used it, but I've heard nothing but good things about SoftEther: https://www.softether.org/ https://www.softether.org/ It supports SSL VPN to boot.
- burke 12y agoIt scares me a bit that it has 4.15 times the codebase size of OpenVPN, but was only released 2 years ago. I already think of OpenVPN as not being simple enough.
- xorcist 12y agoFor what uses should I prefer this over plain old OpenVPN?
- danudey 12y agoPresumably 'I want a VPN, I don't need 90% of what OpenVPN offers, and I don't want to spend a huge amount of time figuring out how to OpenVPN quickly and easily.'
- xorcist 12y agoOpenVPN is just an apt-get install away, and the defaults would suit you fine in if you don't have any special needs. You do need to configure what IP nets you want to tunnel (unless you use it in bridging mode), but that's it.
- JustSomeNobody 12y agoWhy use this and not, say, OpenVPN?
- danudey 12y agoPresumably simplicity? OpenVPN is fairly complex and does a great job, but its power is clearly exposed to users, who may not need most of it.
- JustSomeNobody 12y agoGood point. How can we be sure this is secure enough to use? OpenVPN is widely used, so the thought is any issue with it would be more likely to be found.
- austerity 12y agoPeople looking to set up their own VPN server are missing the point. Your run-off-the-mill hoster is not any more trustworthy than a run-off-the-mill VPN provider so you aren't gaining anything security-wise. In fact you are losing (slightly) by having your traffic exiting the tunnel stick out where with a shared IP extra effort (potentially non-trivial) would be required to tell your traffic apart from that of other users. A subscription with a reputable VPN provider costs less or as much as a VPS with a reputable VPS provider, so you aren't gaining anything cost-wise either. If you do it for the skillz, sure, but otherwise it's completely pointless. Edit: Just to make it clear, that wasn't directed at the project here, but at some of the comments in this and other VPN-related threads. Another VPN protocol and implementation is always cool. (although Windows users need love too)
- mobiplayer 12y agoYou've got some good points there, bu not everyone is a freedom fighter or overly concerned about their privacy up to that level. Some people just don't want to be snooped on by your casual script kiddie while on public wifi.
- alyandon 12y agoThat or having your web browsing data mined by your home ISP.
- EugeneOZ 12y agoyou can setup VPS with VPN on Google Cloud Platform for $6 per month + $1 traffic. It works pretty stable. And you can use any amount of devices and be sure about logs not only because you read it in marketing materials. Most of VPN providers gives single device plan for this price and all promises about logs are just words (maybe honest, who knows).
- ris 12y agoI do not care what language this is written in, and no user should care either. Stop this.
- EugeneOZ 12y agoit's strange to use UDP as only protocol. For most web activity TCP is better (and UDP is not suitable at all).