As someone who worked for a local VPN company, online anonymity doesn't exist and a VPN will take you so far. Take EarthVPN for example... they were a "no-logs" VPN... didn't change the fact that the data center hosting their servers had access to all the metadata and logs. They ended up being able to identify someone who made cyber-bomb threats over their VPN and have them imprisoned.
VPNs are great... but they only get you so far.
So, EarthVPN is right down there with Hide My Ass now?
Yeesh. I really hope that a screening agency for these things can pop up soon. I know there's been talk of one eventually being made, but seriously, there needs to be one.
Well shit. If I connect to a local EarthVPN server over SSTP, I have no problems. 4K video on YouTube pops in immediately at full resolution when I'm connected to the VPN. As soon as I disconnect from the VPN I can barely play 360p video. Centurylink is definitely getting in the way somehow. Fuckers.
Wonder if I can setup my VPN as a virtual interface on my EdgeRouter Lite and just have it accessible as another default gateway.
Not really. IMO, this is one particular item you contractually lay out with a data center.. ie.. 'Do not log or analyze traffic coming out of these servers without our express permission.'
However, the unforgivable part for me is the lack of shared IP addresses. That decision is made 100% by EarthVPN.
Unfortunately, yes and no. HideMyAss. I'm sure there's others that secretly log and the only time you'll find out is when it's too late...
PIA and HMA are considered laughable for privacy in every security and privacy circle I know of.
They are based in the US. The feds could go to them tomorrow, demand they start logging activity and they would have to legally comply. They would not be able to talk about it, confirm or deny they were, or even discuss it. It doesn't matter what their privacy policy says, being based in the US means it's already compromised within law.
This situation has already happened with HideMyAss and EarthVPN.
Too many people believe that these VPN companies will keep you safe. They will not. Their privacy policy is irrelevant and are often lies.
You're okay for using it to hide casual browsing I suppose from simple eavesdropping, but not a lot more. If you're actually doing something you don't want to government to know about, you shouldn't be using these services.
Interesting to see greycoders list of VPNs That I Do Not Recommend ...
Note: The ones in bold were also listed on Torrentfreaks Which VPN Services Take Your Anonymity Seriously? 2013 Edition
Anyone have any good or bad experiences with these providers to share?
It sounds like EarthVPN may be allowing client-to-client support server-side.
It wouldn't be surprising to me, since they have had rather serious security problems in the past.
I'd switch to a new provider and do a bit of research on which ones actually take security seriously.
I used starsports all of last year and after I did extensive research I ended up using EarthVPN, it's $3.99 a month, and you can add extras like mobile use as well. It has 4 locations in India, I usually use Chennai, it's generally the best. I only have about 1.7Mb/s Internet and it hardly ever stops in a game. I also love starsports as you can watch full game replays after the games, really hands down the best service out there!
Not technically sufficient proof, but EarthVPN isn't commenting on this, which makes it all the more worse.
EarthVPN accidentally kept laws by using third party software that kept logs. They didn't intentionally violate their privacy policy and several VPN's don't make the same mistake they make in hosting at places that do keep logs.
That Stack Overflow user doesn't know what he's talking about. I'm pretty sure his "research for over three years" consists of "I looked at their terms of service and found stuff I either didn't understand or didn't like each time"
Any VPNs that give you their services for free doesn't have privacy policies that say "We don't log your activities.", because they make their money by selling analytics data. A far more honest analysis of the state of the VPN industry would be to look at paid or subscription based VPNs.
Not EarthVPN. That shit is fast. I pay the $4 a month and get 100Mb/s on most of their servers. Comcast doesn't know what the hell I'm doing and doesn't throttle it. All those "free" VPN services are almost guaranteed to be documented by your ISP and throttled or just so horribly over congested that they're slow.
check over at /r/vpn I think they keep a list of coupon codes
>EarthVPN: 32 Countries and 87 Locations with P2P/Torrent and PPTP, L2TP, SSTP, OpenVPN and SSH Tunnel/Socks Proxy Support, 25% Discount Coupon code: REDDITVPN
I think this is a tiny bit irrational. You must feel like a big boy for being able to use the PoC that came with that WHMCS public exploit disclosure.
It is a shame you did not mention every single website that uses that billing system was exploitable and chose to word this as EarthVPN is at fault.
It's nice to see you back, vpnsecurityreview.
Edit: Judging by the info you have given out, something tells me you did not get further than running the PoC either. I don't think you're smart enough to understand how to craft that into retrieving customer details.
EarthVPN most likely blamed the DC to get away with that. That's what I believe judging from their reactions, and not only to that incident but also to the hacking and Globalsign CA disclosure. I don't trust them.
Now to answer your question about the DC: YES THEY CAN!
A few months ago I listed some methods on how a 3rd party like a DC or law enforcement can match/correlate and identify connections. And all those methods are actually too complex: they can go the easy route and just seize the server, get the VPN private certificates, put it back and do MiTM all day long and nobody will suspect that. Or backdoor it. Or do WHATEVER THEY WANT because it is in their physical possession! There is virtually no way to protect a powered-on server from someone who has physical access. None.
Tested EarthVPN for a while because CHEAP, but the price also reflects their servers which are not so good. So now I've been using Private Internet Access like a few others before me and I've got to say I'm very happy with it. Simple client with great servers for a cheap price tag.
Hide My Ass situation was different, they never claimed they were NOT logging connection times. This is different to EarthVPN who clearly say 'Neither us nor third parties are technically able to match an IP address to an account.'.
Overall PIA is one of the best VPN.. but PIA users have this concern that they are USA based company.. Everyone wants safety from NSA... well there are more VPN providers which based from other country.. I would suggest you to do more research.. some other country base VPN which I will suggest you.... PureVPN = Hong Kong Based.. VPNtunnel and Mullvad = Sweden Based.. VPNcreative = Denmark based.. EarthVPN = Panama based
>Given that nothing's logged
If they don't own the servers, how can they be sure what's going on with them? Moreover, I've heard the 'no logs' line before, with EarthVPN. Then they gave up user data.
I've tried to do some reading, and it seems like some companies are loved (but are based in US) or some aren't (which is why I tried EarthVPN) but their setup is horrendous. Who would you recommend for torrenting then if not US based? Cheers!
Your all claims are wrong.There is no key was a is still there we did not touch our implementation is as secure as online banking applications using multi million $ transactions per second.Prove otherwise or you are from a competitor trying to bash without knowledge.
Regards, EarthVPN
Since you clearly work for EarthVPN, tell them to up their Encryption like PIA is doing with OUT charging more money for it. Make your program better so that it has bindip/kill switch if the VPN disconnects and stop charging for every little add-on. I was thinking about signing up till i seen the Add-ons cost a lot more money for stuff that PIA already has for free.
This isn't a problem with EarthVPN itself, all VPNs can run into DNS leaks. The easiest way to prevent your ISPs DNS servers from being used is to either manually configure alternate dns servers on the Network adapter itself, or set up the dns servers at the router level, so all Internet traffic both on and off the VPN are sent and processed by the 3rd party. I personally just have OpenDNS set up as the default servers on my router and haven't experienced any leaks from any of my connected devices.
> any hosting provider will undoubtedly be logging
If Choopa were logging, it wouldn't matter as long as PIA is using shared ips since they wouldn't be able to know who did what at what time with 300+ people using the same IP with no logs from the server.
The person from EarthVPN was caught, because EarthVPN was logging and lied about it. I think it's safe to say that PIA isn't logging after this many years with out people getting caught.
I'd definitely say that's either your Internet speed / connection or your DNS proxy, which I find to be notoriously unreliable. I regularly watch games live on starsports with no problems at all, so I'm confident in saying it's not at their end. Either way that sucks, sorry man.
Edit: I use EarthVPN at $4 a month.
I'm in the US. Right now I'm trying out FrootVPN. I bought a month of service to test the waters since they just added a subscription option. They offer a free service that is advertised as limited compared to the paid option. I was able to get 1.5MB download on the free option though.
PIA is good and trusted with low costs. I tried EarthVPN and didn't care for them. So far I haven't got a letter and I've been using a VPN for over 9 months with heavy torrenting.
I've had issues as well and it started when they changed their website. I figured they stopped the free service. I was going to purchase a subscription, but the website is non-functional. I emailed them but haven't gotten a response yet. I ended up getting a one-month plan from EarthVPN. I usually use PIA, but EarthVPN was cheaper. So far it's been working without issues with OpenVPN and they have P2P support on multiple servers. The setup was simple and fast.
Evidently EarthVPN keeps connection logs - but many VPN providers do. Even IPredator/PRQ keep logs of connecting IPs for a short period of time. The case he links regarding EarthVPN seems to be purely bad luck, although they should be more open about the types of logs they keep. The issue of them being hacked is altogether different.
Still, at $4 a month they're one of the cheapest VPNs around (PIA is cheap, and even they're $7 a month).
EDIT: Also, I've used both and TorGuard in the past - never had any issues with them. This is the trouble with lists that are mostly personal opinions.
Eh surfeasy looks okay. AirVPN is a great choice though. But there are a lot of great VPN's out there. I would recommend getting a VPN that doesn't market themselves as a free VPN like surfeasy does.
Great choices are CyberGhost, blackVPN, VikingVPN, EarthVPN. I am not a big fan of the PIA hype, so take a look around. Surfeasy looks more gimmicky for marketing.
It would be helpful if EarthVPN came out and told everyone their side of the story...
On their homepage they still say...
> EarthVPN neither logs VPN usage nor user activity. Neither us nor third parties are technically able to match an IP address to an account.
Well that turned out to be a non-truth after an EarthVPN user was arrested
Using , let's see...
Amsterdam P2P server: 92ms ping, 14.38Mbps down, 15.40Mbps up
Manchester non-P2P server: 37ms ping, 16.6Mbps down, 13.49Mbps up
No VPN: 36ms ping, 56.41Mbps down, 16.2Mbps up
So not much change in ping or upload speed, but a fair reduction in download speed. But I haven't tested all the different server locations, some are faster than others (you can do a speed test on EarthVPN's website for each server to get an idea of which would be best for you).
Also to be fair, I use the VPN all the time for general web browsing, and don't really download an awful much, so 14Mbps down is more than enough for me. YMMV.
So what are they using for a handshake?
It is the only line in the config file. And it is a publicly obtainable key. There appear to be no secret keys, and no signs of ephemeral key usage.
Without the certificate verification lines in the Client OpenVPN config, you can't have a secure handshake.
Also EarthVPN seems to have taken down the page I was referring to :P
lol if they do that. I wouldn't be surprised, actually I found this problem with a few other providers. I don't have an EarthVPN account anymore to test. Anyone care to ping other IP addresses from the internal pool?
The security model of web browsers and of OpenVPN are completely different. Check out our new post with exact instructions of how to MITM EarthVPN for all the non believers.
>Hello ZeroCoolMurphy,
>Thank you for feedback. However you are wrong about . It includes alphassl intermediate certificate that is why both root certificate globalsign and intermetdiate certificate alphassl are included in the crt. You can correct the information on reddit.
> EarthVPN Support
Yeah, I wasn't sure what I was going to find in the responses here. But I am glad the top comment is the same thing I came here to say.
You are probably decreasing your level of security by using Tor, and you SHOULD be using a good VPN from hotspots. See: EarthVPN
And with regards to OP not having anything to hide from the government. . .
That is no reason to willingly sacrafice your and MY rights to privacy. Just because you can't understand the need for that right.
People like you are why we are in this situation in the first place.
Tor hides your IP, it doesn't create a layer of encryption for your data (outside of Tor, which is where your bank and email are).
>EarthVPN : 32 Countries and 87 Locations with P2P/Torrent and PPTP, L2TP, SSTP, OpenVPN and SSH Tunnel/Socks Proxy Support, %25 Discount Coupon code REDDITVPN
Any VPN which has its legal policy defined over lesser known country with fuzzy laws. Example being any ex Soviet or Egypt or actually a country with greatly curropt government. I used EarthVPN for long time because there HQ is in Greece.
You seem to be under the impression that every country outside the 14 eyes would bin a US subpoena. In reality, that's not true, many authorities would happily comply with no legal standing, and many VPN providers would happily rat you out without warrant (e.g. EarthVPN). The only countries I could imagine doing that are Russia & China, and I wouldn't get a VPN in either country.
so i tried doing that with a service called EarthVPN. I don't know if its them or me. When I connect with them it shows my IP from Pakistan but somehow everything that opens up is for the UAE. (it seems to be routing traffic through Sharjah)
Thanks! I saw that but I have unsuccessfully tried to use EarthVPN for tunneling (even paid extra for the service) and it never worked. The only thing that has worked is their desktop client and setting the VPN up on my phone.
And so I assumed there would be something like their client that runs as a firefox plug in. But I might be wrong.
Thanks though!
The other users seem to be confusing what you want. There are two major ways people use VPNs:
You are clearly looking for option 2. While I don't use EarthVPN the logic is the same as in this tutorial for a basic setup. If you have issues jump on the forum and you'll get some assistance.
Just a heads up, even if you do get it working, you will be facing less than 2Mbit speeds.
The processor on that router is a 266MHz MIPS processor at best, and likely slower. It simply can't handle the encryption/decryption on the WAN interface at any reasonable speed.
If EarthVPN is using DHE / RSA with a large key size it may be taking the router too long to complete the handshake and timing out. This is what happens on our network with devices that are too slow to generate / process the ephemeral keys.
Foreign based EarthVPN user arrested after police raid datacenter.
and
Foreign based Perfect Privacy admin raided.
Some kid in the Netherlands, i think, sent a bomb threat to his school over a VPN. The logs kept at EarthVPN led to his arrest.
edit: source
I use EarthVPN. $40 for the year. They support OpenVPN, though I use SSTP with the native windows client. They do not keep logs.
NordVPN has two dedicated IP locations at no extra cost, one of which is US, I think the other is UK. VPNArea allows you to choose one dedicated IP location for no extra cost (US is available).
EarthVPN has very cheap dedicated IPs, they are only about a buck extra and are cheap but it's a little unclear to me how it works with EarthVPN. I'm under the impression you chose dedicated and all IPs are then dedicated and you no longer get access to the shared IPs. It was never made clear to me if they just give you shared IPs for most severs and extra dedicated when you pay for it or not. So if they are an option you want to explore ask support first.
The path from you to your web server is entirely different from the path from you to your VPN to your web server. The VPN is bypassing whatever node is congested between Comcast and your web server
Everyone in this subreddit has zero understanding of how basic Internet traffic works, has decided that the ISPs are evil boogeymen (let's be honest, they all do shitty things to customers), and that if anything abnormal happens, it's the ISP is "throttling" them.
Because if Comcast was throttling you, why would they not just throttle VPN traffic from EarthVPN, PIA, and every other popular VPN as well?
EarthVPN logs. I know it doesn't seem relevant for just unblocking twitter, but who knows what an administration is capable of when they've gone off the deep end.
Betters safe than sorry, especially if this escalates.
EarthVPN should be fine. I have said it many times before. If you use a VPN to commit serious crimes your going to get caught. All VPNs keep their servers in data centers. Data centers cant run without terabytes of logs. So if there is a timestamp and IP of when the threat was made (schools website for instance) it is very easy for a datacenter to look back at that IP address and timestamp and begin to infer things about the connection. For instance all incoming connections to that server at that time and their IPs. They can fwd it to the police and see that 1 of those IPs belong to someone at that school and that is a wrap. EarthVPN may not have had anything to do with it.
When I worked at commercial data centers we would have tiers of logs. The more abuse a server was subject to the more we logged the incoming/outgoing connections on that server.
Plausible deniability. Say the cops come knocking on your door and snoop around and see a randomly generated username. They may have to do a little digging to associate you with the username whereas if you use the same reddit, email, and vpn, you've done the job for them.
Even though they may not keep logs, there are still ways to track a person via their ISP and they don't want to necessarily tie you to that VPN account (consider EarthVPN).
I am not sure about this one, but I do believe that they keep maintenance logs for a period of time (a week?) where they track who logged in/off.
I have been using EarthVPN () for a long time now, it's great, very fast speeds, many, many different locations, and they support PPTP, L2TP and OpenVPN on multiple ports. More importantly they also don't save any logs at all! and give you unlimited bandwidth. To top it even further, they offer a no questions asked 7 day full money back guarantee, so I would definitely suggest you try it, I mean it only costs 3.99$ monthly. Wow I almost sound like one of those advertising peoples haha xD
Yeah. On one end, they did root out a potential bomb threat, but on the other hand, they lied about their services, which I personally think is worse. (If this is true, that is. Since this is the only guy writing about it, I'm still holding out for more evidence that this happened.) EarthVPN was a strong consideration for me, so I'm keeping a close eye on where this goes.
Virtual Private Network -
Think of it like this. You are in your house on your phone and connect to your wireless internet. That's a private network. Now imagine you had a reallllly long cable, or a really big antenna. You could connect to your friend's network in the state next to yours and your phone would show that you were currently in Arizona instead of California or whatever.
A VPN does this through software. Connects you to a "virtual" network somewhere in another country or state which misdirects your internet traffic. So Comcast or TWC or whoever the fuck is throttling you sees your traffic as "harmless" and doesn't throttle it.
EarthVPN is the one I use.
I know, but every one I fucking buy slows me to a crawl. I've used BTGuard, and now just bought EarthVPN at another cordcutter's suggestion, and none of EVPN's servers give me more than a few mbps speed. It's really irritating.
EDIT: I reread the email, this was the episode from last Sunday, which I may have started and left overnight and all day seeding by forgetting and going to work. That may be why the RIAA partner is butthurt and sent the request, I usually cancel seeds as soon as the DL finishes. Either way, I'll just play it safe.
EarthVPN wasn't keeping logs.. the datacenter was
"The conclusion is that it appears there is not much a VPN company can do if the data center where they host the server with decides to start logging VPN users as it is being claimed happened here"
"EarthVPN also claims to have now cancelled the contract with the Dutch datacentre"
Using a VPN Provider requires trust in the VPN Provider.. PIA is as trustworthy as any other, if not more so :)
Its possible perhaps.. but unlikely in my opinion
If you feel this strongly about PIA.. perhaps you should schedule an interview with their attorney
Or talk to them in their IRC channel > #privateinternetaccess @
Or on their forums >
Or with their contact info >
> I skimmed through some and found this: > Private Internet Access prices > EarthVPN prices
PIA monthly > $6.95
EarthVPN monthly > $3.99
PIA yearly > $39.95
EarthVPN yearly > 39.99
Alright.. EarthVPN's monthly price is less, but the yearly is ~the same
And if you buy PIA by 6/months or by the year, its ~the same as EarthVPN's monthly price
The security model of web browsers and of OpenVPN are completely different. Check out our new post with exact instructions of how to MITM EarthVPN for all the non believers.
Check out this comment on blackVPN by ParanoiaNervosa...
> The top 3 I see for speeds are > Private Internet Access > EarthVPN > blackVPN > I know a few people who have 80Mb/s connections, and they all enjoy their higher speeds on the VPN's above (been hearing a lot of good about blackVPN's Total VPN package recently. But also remember, you will need to use OpenVPN, and/or TCP for the most secure connections which will lead to slowdown times. PIA has over a 50 gigabit network. Also, EarthVPN just implemented some updates, and blackVPN has great speeds from what I have seen. That's just what I recommend.
Yes as stated below. It would be nice if a VPN could do this, but it cannot. If you want a VPN that offers proxy software, you can try EarthVPN. But as for custom filters on a VPN, that isn't possible.
EarthVPN's "hack" was not actually real. No customers accounts, or data was actually comprised. EarthVPN has tons of locations, and is more secure than . Even though they were transparent and they did sniff traffic, really isnt that great. I have used them, and their speeds were really not that great, and they have to many different "packages" for the price. VPN's should just be a one price deal, the whole package stuff seems like different ploys to get money. I would recommend
Anyway, EarthVPN is only $3.00. Try it and see how you like it. If not, go for PIA, or blackVPN. blackVPN operates under Hong Kong legal jurisdiction. We all know Hong Kong is the homeland for free speech.
OK, if people were getting caught on PIA we would all know about it. One person already posted about EarthVPN monitoring and how he got in trouble because his friend was using it and one about monitoring. Nothing on PIA yet and their servers are blacklisted for spam all the time. Also PIA application is using an OPEN SOURCE protocol, you probably don't even know how to review code so why are you complaining?
I'm going to add there appears to be something definitely going on, as whenever I used the VPN I would get lots of requests (informed by little snitch) to access my plex server, from within the EarthVPN IP pool. I would also get requests from other EarthVPN IPs to access my torrent client. Which is bizarre, as I had already allowed the torrent client access via specific ports through the firewall. Other local clients appeared to be trying to access on other ports. Very very strange and another reason why I suspect there were many computers that I was being exposed to.
Hello Kma999,
Client to client direct connections and OS file sharing protocols are blocked on our locations.Please contact our support department if you are noticing this issue on a location for further investigation.
Warm Regards, EarthVPN
Other than arguing about the validity of their root certificates (lets assume they're fine), does anyone have any real feedback on their quality of service? I've had nothing but good news from PIA regarding their prices, reliability and speed. What does EarthVPN offer that could give me an incentive to change to them?
Well from what I've seen in the privacy policies, iVPN, IPredator, PRQ and Mullvad. Other VPNs of note are Astrill, PIA, EarthVPN, Boleh, and . I can't vouch for any of these services though.
Note that the ones on PRISM-break are free services, and they're supposed to be low-volume VPNs which means you're not really supposed to be using it for general purpose, but for maybe some e-mail or if you surf the internet text-only. The others are VPN software.
If you are looking for privacy is useless. They use RSA 1024bit which is laughable. Haven't really looked into the others but EarthVPN has a lot of locations. Many people say it is a honeypot and one person got caught using their servers.
I too had the same problem was getting redirected to same with pure and also bing. i worked out it was extension EarthVPN that was redirecting me to bing. I had one redirecting me to search with pure and I think it might've been EarthVPN too but I'm not certain as it stopped happening when I was testing and didn't happen again.
I know PureVPN, IPvanish, EarthVPN, HideMyAss, Betternet, UFO, Proton, Seven, FastVPN, Rabbit, and bunch more have all turned over logs to Law Enforcement while advertising no logging policies.
Someone should start a searchable database of which VPN providers have been caught, and which have held up in court.
Pole päris kursis sellega, mis meil telekast tuleb, sest ise otseselt telekat ei vaata. Aga minu teada on SkySports'i veebilehel sul absoluutselt kõik maitsele vajalik otseülekanne saadaval.
Juhul kui ta ei lase Eestis vaadata, siis investeeri lihtsalt paar kopikat mõne VPN'i peale. Kunagi oli suhteliselt odav EarthVPN, mainimata ei tasuks jätta ka ProtonVPN'i. Viimasel on ka tasuta variant olemas, niiet tasub ära proovida.
Tegu pole küll otseülekandega, aga Formel F1 järelvaatamine peaks olema nende enda veebilehel ka ja seda kõigest mingi jäätise kopika eest.
NordVPN, EarthVPN, PIA vpn, PureVPN, these are all paid but usually have good deals and are very reputable. Betternet is free and unlimited (with ads but its not bad) you can also create your own vpn using a vps for cheap, i would recommend VultrVPS or DigitalOcean. There should be many tutorials on how to do this online. Good luck.
Some tools and recommendations on that website are no longer viable. Also, there's some info on the post that isn't there on the website.
For example, the website still lists EarthVPN as a safe provider. But previously their billing system was hacked and client info was leaked.
Shit, if that happens, then said VPN is pure dog shit and should never be used again. I know EarthVPN, HideMyAss (the classic case with good ole LolzSec), and were guilty of keeping logs and giving up users to the authorities. EarthVPN for example gave up some kid who bombthreated his school (jokingly). Yeah, utterly dumb thing to do of course, but they claimed to not log. proves them to be one never to be used, because they obviously DID log. I use two of them, one I've been with for 5 years and with stellar service and CS who actually listen to you concerning things you may want done on the servers or whatever.
It can be a pain choosing the right one, it has become a huge industry starting about 6-7 years ago. So many are terrible though, and do stupid shit like using the same L2TP pws for all users.
In the age of a president who was willing to declare ON CAMERA that freedom of speech is stupid, you can't be too careful with your privacy. If the FCC gets their way it'll be legal for ISPs to sell ALL your browsing data too
Install the ScriptBlock extension (Brave is chromium based right?) and use a VPN like EarthVPN that doesn't keep logs. I pay $5 a month and get total privacy. Fuck the ISPs I'm an American and I deserve privacy.
I also saw ExpressVPN has good reviews and and a 30-Day money back guarantee, so I could also just do that for two weeks and then cancel before the month is up.
Any personal experience with EarthVPN? You are right that it's $3.99 for a month, so that's an easy move if it comes to that.
I used this tutorial. It's for Raspberry Pi, but it translates well to any Linux flavor.
PS: I use EarthVPN
Potentially a lot; EarthVPN ran into a similar issue a while back where they didn't log but their third party software was subpoenaed and they were able to give up lots of user info.
Most vpn providers work directly with their hosts, use or rent their own bare metal machines, and basically rely only on the provided internet access. Then they just talk to their host and make sure as much as possible that they aren't logging their connections.
If this bothers you, look into getting a non-caching VPN (I use EarthVPN and have been very happy with their service). Change your DNS to a free provider (EarthVPN's FAQ has a pretty good list of free services) and just stay connected 24/7 to whatever server you choose. You can use OpenVPN and a common port like 80 or 443 to make your traffic look more "normal".
I know a lot of that was probably just "computer nonsense" to a lot of you guys reading this but I feel like most of it could be learned with a few minutes of Google. I wouldn't mind expanding on any of those concepts if anyone is interested but ask here don't inbox me so others can read it too.
I for one won't be waiting around for the government to "let" me have my privacy. Consumer protection one of the few reasons I will support government intervention in the market but it looks like Trump is going to go the other way.
It's simple:
1) You choose a VPN provider. (I use EarthVPN) (There are paid VPN's and free VPN's - I prefer the paid ones. They are cheap - $3/month, more stable and faster) 2) Install their software. 3) Before logging in with your username and password, choose your desired server. (Choose the one closest to you. In my case: São Paulo - BR).
Your ping may rise a bit, but the "An unexpected disconnection has occurred" message no longer appears for me.
Check out EarthVPN. It costs $3.99 a month and has unlimited everything, with 52 countries, almost 200 actual servers, plus about 12 P2P enabled servers. I hit my cap bandwidth (90MBps) on half of them. Your first month will be $3.19 with code WELCOME.
Well no one except for the people who run VPN servers can really know if they're logging or not, but they've repeatedly stated they keep no logs of any kind. Realistically, the stated goals of a VPN service plus their track record is the best thing anyone has to go on. So far, they seem to be a good choice.
EarthVPN seems like a different case, and one that can be avoided by properly choosing secure colocation points (ie. one that isn't logging your server traffic).
I don't think the inbound and outbound activity match. For example: let us say you're connecting to a regular http server through a VPN. Your traffic to the VPN is encrypted but the traffic from the VPN to the http server is unencrypted which means that EarthVPN can't match activity.
If you're connecting to a https server through VPN, your traffic is encrypted to the VPN, unencrypted in the VPN server's RAM, and re-encrypted for https.
It would take awhile to learn all of the things you need to know but running a successful VPN company (like any company) takes time. Mullvad, has been in business since 2010, which was around the start of when public VPN's started to gain popularity. Mullvad, has had 6 years to perfect their company, these things do not take days or weeks. One weak link in your company and everything is ruined, like in the case of EarthVPN having a server in a datacenter that logged and it resulted in a Netherlands user getting arrested. If you truly do not understand even the basics of using a VPN, please don't try to start one because you are being dishonest to your customers and are putting them at risk of getting their data intercepted.
> hey're registered in British Virgin Islands and not "North Cyprus".
He read North Cyprus by mistake where EarthVPN (listed 1 space above ExpressVPN) claims to be incorporated.
I'd believe the BVI incorporation thing. BVI has the most corporations of any country and it is quite popular with Chinese people for some reason.
KKTC çıkışlı EarthVPN'in böyle bir olayı var, bir çocuk kendi ülkesi üzerindeki vpn'e bağlanıp kendi okuluna bomba tehtidi yapıyor. Okul dava açıp VPN'e hangi IP'den bağlanıldığını buluyor, sonra çocuğu okuldan atıyorlar. EarthVPN de yasa dışı işler yapılırsa bilgilerinizi veririz deyip kapatıyorlar konuyu. Torrenti çok sorun etmiyor Türkiye, onun için bir sorun olacağını sanmam Türkiye içinden bağlanmanın ama başka şeyler için bulunduğun konumdan bağlanmasan daha iyi. Hangi VPN'i kullanıyorsun bu arada?
EarthVPN didn't work because Iran blocks mainstream encryption tools using DPI. To bypass this, you need some kind of protocol obfuscation method that masks OpenVPN and makes it invisible to firewalls. Best VPN for Iran guide has a list of reliable providers that work there specifically because they trick DPI to believe you're using regular connection.
I don't agree.
If a VPN provider hands over their data to some party (for instance, the government), the customer in question will most likely say this on all kinds of media.
That's how EarthVPN got a bad reputation after a boy in The Netherlands got arrested for sending bomb threats to his school.
Edit: The comment section looks interesting.
Well yeah so the issue is that EarthVPN's datacenter still sees what the servers are connecting to, so in effect there is still some record. You're trusting both the VPN provider AND the datacenter and perhaps even the network provider to ensure your activity is secure.
I think it's more important to understand the limitations of VPN and that VPN isn't designed for anonymity.
EarthVPN, never states they log user activities, which obviously wasn't true if they got caught... How would they be able to match a users users actions to them?
With HideMyAss, I agree, they were stupid for not reading the privacy policy, but also, how would they be able to pin a crime to a certain person if there was 100's of others on a server?
A process of elimination does the trick. They could have followed them over a few instances and matched the same user connected across various servers when certain activities were performed. Or maybe they turned on full logging for a while to pinpoint a specific account. There are actually quite a few "zero-logs" providers that openly admit to logging "for investigation purposes" (I'm not kidding lol).
Are you saying EarthVPN logs activities as in browsing? Can I have a source please because I'm not aware which EarthVPN users you're referring to.
I've been using EarthVPN, and I love it. Servers all over the world, and dedicated Torrent servers. They don't store data, and they wipe their asses with subpoenas. Easy to use, and comes with GUI clients for Mac and Windows.
need a VPN as it only allows access from india .. otherwise its free :).. ( I use EarthVPN)