TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Don’t Use VPN Services (2015)

32 点作者 acqbu超过 1 年前

18 条评论

thathndude超过 1 年前
But a VPN service is only additive. The way I see it, it’s one of two ways:<p>1. The VPN is being honest. No tracking. All is well.<p>2. The VPN is lying, tracking, maybe even reselling your traffic. Fair enough, but they’re not in any more privileged situation than your ISP. They still can’t see inside your TLS connections and whatnot. And you still get the ancillary benefits of:<p>A. Geographic diversity of IPs;<p>B. Easy to get a new IP;<p>C. Security at potentially unsafe access points.<p>So, worst case, for $80 a year you get some IP flexibility and security at Starbucks. Best case, you also get the whole no-tracking thing.
评论 #37144687 未加载
评论 #37144665 未加载
评论 #37145026 未加载
评论 #37146701 未加载
romanichm12超过 1 年前
It&#x27;s fascinating how VPN services have successfully marketed themselves as the ultimate privacy solution, when in reality, they are often just a middleman with full visibility into your internet traffic. How can we, as users, ever truly verify a VPN provider&#x27;s claims of &quot;no logging&quot; or &quot;complete privacy&quot;? It&#x27;s a promise based on trust, but why should we trust a company whose business model revolves around our data?
评论 #37144556 未加载
评论 #37144701 未加载
7moritz7超过 1 年前
&gt; Because a VPN in this sense is just a glorified proxy. The VPN provider can see all your traffic, and do with it what they want - including logging.<p>That&#x27;s incorrect, they can see your traffic if you are connecting without tls which basically never happens. Otherwise they see what your destination is, obviously.<p>And anonymizing VPNs literally are proxies, noone is denying this.<p>&gt; The $10&#x2F;month that you&#x27;re paying for your VPN service doesn&#x27;t even pay for the lawyer&#x27;s coffee, so expect them to hand you over.<p>Another nonsensical argument because subscription fees add up. A VPN provider with a 10 $ per month fee and a large userbase like the common providers makes an incredible amount of money.<p>&gt; VPNs don&#x27;t provide privacy, with a few exceptions (detailed below). They are just a proxy. If somebody wants to tap your connection, they can still do so - they just have to do so at a different point (ie. when your traffic leaves the VPN server).<p>Okay, get back to me with directions on how I install a blackbox at the Datapacket datacenters<p>&gt; If you absolutely need a VPN, and you understand what its limitations are, purchase a VPS and set up your own (either using something like Streisand or manually - I recommend using Wireguard). I will not recommend any specific providers (diversity is good!), but there are plenty of cheap ones to be found on LowEndTalk.<p>If you&#x27;ve actually ever browsed Lowendtalk you&#x27;d absolutely not be confident in stating that none of the providers log. These are all super small fish without their own infrastructure. And you have a dedicated IP adress which defeats the user pool benefit per server. And additionally you&#x27;ll need to maintain the OS and software yourself which isn&#x27;t something a layman can or wants to do.<p>&gt; Because it&#x27;s easy money. You just set up OpenVPN on a few servers, and essentially start reselling bandwidth with a markup.<p>So OP suggests here, contradicting their previous claim, that VPN providers do indeed make a lot of money and as such wouldn&#x27;t have issues with legal procedures.<p>Also no, you&#x27;d still need to develop your clients. Anonymizing VPNs absolutely are a lucrative business but it&#x27;s not that simple.
jobigoud超过 1 年前
I don&#x27;t use a VPN service to &quot;hide myself&quot;, I use a VPN service to access content from other countries that is locked to that specific country. A use-case the OP seems to be completely oblivious about.
评论 #37144655 未加载
评论 #37144612 未加载
Springtime超过 1 年前
Mullvad had national police come with a warrant and nothing was able to be obtained as they were able to prove their servers had nothing identifiable on them (and as such it would be illegal to seize anything per Swedish law).<p>They also had a recent audit of their VPN servers and no leakage or logging was found. Among other factors they&#x27;re the only such VPN I&#x27;m aware of to hold up under scrutiny.<p>Do I even use a third-party VPN? No; but they&#x27;re the only one I&#x27;ve seen that are as close to trustworthy.
评论 #37144827 未加载
评论 #37145004 未加载
Heaton_dev超过 1 年前
&gt; If somebody wants to tap your connection, they can still do so - they just have to do so at a different point (ie. when your traffic leaves the VPN server).<p>Conflating &quot;I use a VPN because my commercial ISP would probably sell my data if given the chance&quot; with &quot;I&#x27;m a potitical dissident being directly attacked by a nation-state actor&quot;.<p>You can still use a VPN despite it being vulnerable to your governments quantum computer...<p>Sure, it&#x27;s hard to find a trustworthy VPN provider, but that&#x27;s not to say they don&#x27;t exist
contctlink超过 1 年前
Building your own VPN is super easy and you can run it on a cheap VPS.<p>I&#x27;ve been using mine for years and it cost me less than $2&#x2F;month.<p>(And it&#x27;s fun to setup)
评论 #37144577 未加载
评论 #37145117 未加载
评论 #37145144 未加载
评论 #37144771 未加载
评论 #37144614 未加载
评论 #37145012 未加载
mongol超过 1 年前
I use a VPN when I query the Youtube API. I don&#x27;t mind if this would be logged, I just don&#x27;t want my real IP to be blocked.
thesaintlives超过 1 年前
Great article and mostly true. I use a vpn to download torrents and protect me from extortion demands!
SigmundurM超过 1 年前
Another great overview of how (and how not) VPNs protect your privacy: <a href="https:&#x2F;&#x2F;www.privacyguides.org&#x2F;en&#x2F;basics&#x2F;vpn-overview&#x2F;" rel="nofollow noreferrer">https:&#x2F;&#x2F;www.privacyguides.org&#x2F;en&#x2F;basics&#x2F;vpn-overview&#x2F;</a>
Gasp0de超过 1 年前
That article is a bit useless. Yeah, some people may not understand VPN and believe it somehow works similar to TOR, but I believe most people do know what to use it for, and this website doesn&#x27;t seem like it caters to mostly non-tech people.
cpach超过 1 年前
For reference, the original post is here: <a href="https:&#x2F;&#x2F;gist.github.com&#x2F;joepie91&#x2F;5a9909939e6ce7d09e29" rel="nofollow noreferrer">https:&#x2F;&#x2F;gist.github.com&#x2F;joepie91&#x2F;5a9909939e6ce7d09e29</a>
PrimeMcFly超过 1 年前
I tend to use an SSH tunnel over a VPN these days. I can control the server, and it&#x27;s in many ways less &#x27;suspicious&#x27; than VPN traffic.<p>There doesn&#x27;t seem to be any performance difference.
ariza超过 1 年前
in china and some few region, vpn is the only way to use twitter&#x2F;Facebook&#x2F;google and many web services fucked by GFW
评论 #37144633 未加载
tsukasagenesis超过 1 年前
you forgot that they solve a real problem like in Germany where torrent got you layer email
评论 #37144593 未加载
Bu9818超过 1 年前
&gt;Why not? Because a VPN in this sense is just a glorified proxy. The VPN provider can see all your traffic, and do with it what they want - including logging.<p>Most people use VPNs because they are a glorified proxy.<p>&gt;Doesn&#x27;t matter. You&#x27;re still connecting to their service from your own IP, and they can log that.<p>This is true, although it can be possible to connect to the VPN from Tor (when using OpenVPN or WireGuard-over-TCP). Obviously, all traffic could be associated with your account so don&#x27;t use multiple identities if you want reasonable anonymity. And it&#x27;s slow, so it&#x27;s usually not worth it.<p>&gt;VPNs don&#x27;t provide privacy, with a few exceptions (detailed below). They are just a proxy. If somebody wants to tap your connection, they can still do so - they just have to do so at a different point (ie. when your traffic leaves the VPN server).<p>Your ISP cannot. Some (many?) countries like Australia have data retention laws. A VPN will hide your traffic from your ISP (although probably not a large sufficiently motivated adversary like a government out to get you), which can be useful even if your VPN provider can log your traffic.<p>(there may be some things like traffic analysis where they might be able to guess the type of traffic you&#x27;re using, though I&#x27;m not sure how effective if is or if many ISPs actually attempt this)<p>&gt;Your IP address is a largely irrelevant metric in modern tracking systems. Marketers have gotten wise to these kind of tactics, and combined with increased adoption of CGNAT and an ever-increasing amount of devices per household, it just isn&#x27;t a reliable data point anymore.<p>&gt;Marketers will almost always use some kind of other metric to identify and distinguish you. That can be anything from a useragent to a fingerprinting profile. A VPN cannot prevent this.<p>This is true, though the impact can be somewhat minimized with Tor Browser with the Tor proxy disabled (or Mullvad Browser), which have decent fingerprinting mitigations.<p>&gt;In the second case, you&#x27;d probably just want a regular proxy specifically for that traffic - sending all of your traffic over a VPN provider (like is the default with almost every VPN client) will still result in the provider being able to snoop on and mess with your traffic.<p>Do any regular proxy (socks5&#x2F;http) providers provide the same quality of service as VPN providers? And you can&#x27;t port forward over a socks5 proxy, which can be useful for torrenting. (if you&#x27;re downloading popular content you don&#x27;t need it, but if you&#x27;re downloading torrents with only a few seeders or maximizing the amount of upload you get on a private tracker, port forwarding can be useful).<p>Also, if you&#x27;re on Linux you can use network namespaces to use some applications over VPNs and not others. (remember to refresh private keys and use a different server before using the namespace for a different identity)<p>&gt;If you absolutely need a VPN, and you understand what its limitations are, purchase a VPS<p>&gt;A VPN provider specifically seeks out those who are looking for privacy, and who may thus have interesting traffic. Statistically speaking, it is more likely that a VPN provider will be malicious or a honeypot, than that an arbitrary generic VPS provider will be.<p>VPSes are arguably worse for some use cases as most probably don&#x27;t handle DMCAs as well as commercial VPNs, you don&#x27;t have access to a large amount of servers and countries to change your IP address, and you have less people to blend in with. I see your point, though I&#x27;m not sure how true that is.
28304283409234超过 1 年前
Can we permaban this nonsense? &quot;It depends on the usecase.&quot;
ThatMedicIsASpy超过 1 年前
Use a VPN service. Always, if you live somewhere that restricts any kind of traffic. I bought a lifetime VPN for 10€ 9years ago. I never trusted this VPN - mainly because of plain text login data on their website. They still have 3 servers online. I gave that to a person in Iraq almost 5 years ago. They are still using it.