redcalcium ,

Free "VPN" app: look at me. You're the VPN now.

PoliticallyIncorrect , (edited )

The only 3 good free unlimited options out there are ProtonVPN, RiseupVPN and BrightVPN(only for windows), limited ones Windscribe and PrivadoVPN(10GB per month).

These are the only good free options anything else it's a scam(you are the product) or you have to pay.

Another option maybe could be self-hosting in Oracle Cloud but it will not be anonymous at all, secure maybe but definitely not anonymous.

michael_palmer ,

I just entered fake name and paid with crypto for my VPS.

PoliticallyIncorrect ,

Then you will be OK 👍👍

Synnr ,

ProtonVPN, RiseupVPN and BrightVPN(only for windows), limited ones Windscribe and PrivadoVPN

Where did you get this idea?

Mullvad, IVPN, Perfect Privacy, and a few others have had independent audits of their no-log behavior and in some cases, law enforcement audits. They sure as hell don't proxy your traffic. They all accept Monero and cash. They all have multihop.

Edit: I see you said free. Yeah, I wouldn't trust a free VPN, regardless. If you're not paying for the product, you are the product.

PoliticallyIncorrect ,

Yeah I'm talking about free options. 👍👍

trolololol ,

I agree,

However I got to a point that I'm skeptical even with paid, well established products. I don't need VPN but if I did I'd try something based on onion routing.

parpol ,

You get a different IP from someone else who uses the VPN, and someone else gets to use yours.
Sounds like a win-win to me in terms of both privacy and having an excuse for damning evidence.
"Your honor, I assure you that 'giant horse cock' and 'how to make anthrax' were from someone else on the VPN network."

avidamoeba ,
@avidamoeba@lemmy.ca avatar

Yeah, I don't know how strong this defense would be when they put you on trial for CSAM.

pivot_root , (edited )

"Your honor, I didn't distribute distribute CSAM. That was somebody else." and "Yes, your honor, I did sign that internet service contract agreeing that I am responsible for all activity that originates from my network."

redcalcium ,

Only if they're stating this upfront, in a giant text. Those apps hide this capability and are thus categorized as malware. Turning the victim's computer into a residential proxy has always been a staple in botnet operations.

Green13 ,

If you're using a free proxy, I have some RAM for you to download

limerod OP ,

How much? I need unlimited ram!

avidamoeba ,
@avidamoeba@lemmy.ca avatar

Free

Vigilante ,

And your the ram now

Mikufan ,
@Mikufan@ani.social avatar

I mean what do you expect...

Also im pretty darn skeptical of all not Proton VPNs.

atrielienz ,

I still use Nord. Never had any problems with it.

colonial ,
@colonial@lemmy.world avatar

I'm not well versed in the machinations of the Chinese government, but if a relatively "normie" VPN like Nord works in China... it's probably controlled opposition (i.e. they're logging everything to a government server.)

atrielienz ,

You also don't appear to be well versed in VPNs.

Mikufan ,
@Mikufan@ani.social avatar
atrielienz ,

So, did you read the article? A rented server was breached because it didn't belong to Nord and the company that it belonged to was at fault. I personally have had no problems with the service. They didn't lose passwords, user data or any credit card information. At worst someone may have been able to monitor some user data and internet traffic. This also happened before I started using them (I had another VPN before that).

Mikufan ,
@Mikufan@ani.social avatar

The fact that they cant protect user data and security is the only necessary fact you need to take from it.

If you defend a VPN service that runs on shitty servers without sufficient security, then you are just against reason.

atrielienz ,

How is it exactly that you think large VPN's work? Because I gotta say, no large VPN isn't using some independent vendor. Can you prove they still do business with that vender?

viking ,
@viking@infosec.pub avatar

Proton is unfortunately using wireguard and openvpn protocols, both of which can be blocked with relative ease.

I used them before moving to China, and within 3 months of arriving, the service was permanently interrupted, and their support acknowledged the outage, said they can't do anything about it, and ghosted me on the refund request since I had an annual subscription.

Mullvad is generally considered the industry leader btw., though for China there's hardly anyone but Astrill that actually works.

hui ,
@hui@fedi.gang.st avatar

@viking @Mikufan
In China there are lot of home brewed solutions like openclash, passwall, vmess...etc. Traditional commercial VPNs are too expensive or suck in China.

viking ,
@viking@infosec.pub avatar

Yeah the problem I have with those is that they are mostly run by Chinese, be it on- or offshore, and they can be compromised or extorted. And any service that accepts payment via alipay is sketchy in my books.

hui ,
@hui@fedi.gang.st avatar

It's opensource, You can get a vps and run your own, very easy and the speed is enough to watch 4k youtube.

viking ,
@viking@infosec.pub avatar

I had a shadowsocks server on a vps, was dead after a few weeks. Hosted on AWS Hong Kong (before China took over). They blacklist IPs very quickly.

hui ,
@hui@fedi.gang.st avatar

@viking
SS on AWS is easy to be found and blocked, try Trojan, Hysteria v2, V2Ray..., I had one of V2Ray on GCP hong kong, and it lasted for a very long time.
Usually GCP and Azure has the best connection to CN.

viking ,
@viking@infosec.pub avatar

Interesting, thanks! My astrill subscription is still running for a couple months, but will test it as a fallback.

Mikufan ,
@Mikufan@ani.social avatar

I mean i don't want to be in China in general. Proton worked fine last time i was there (10 years ago) and they are working on a stealth protocol to circumvent blocks of wireguard and openvpn protocols.

For China the best option is using TOR anyway.

hui ,
@hui@fedi.gang.st avatar

LOL, China is not that bad, and the GFW is easy to break through anyway.

Mikufan ,
@Mikufan@ani.social avatar

LOL, China is not that bad,

It is one of the worst places on earth.

and the GFW is easy to break through anyway.

Initially maybe, but they use a Algorithm to detect VPNs and other holes in their filter and they will block you eventually, or they just scan your traffic regardless of a VPN (yes that's possible, although very Costly)

And then you are fucked.

Also, fuck China.

https://i.ytimg.com/vi/NXpPpFzLcZg/maxresdefault.jpg

hui ,
@hui@fedi.gang.st avatar

Have you ever been to China? I have been lived in China for many years, actually no much complains of my very own experience so far.
And I'd been to US, Indonesia, Thailand...and the worst experience I had is in US, each time I visited there, there were gunshot incidents happened nearby, and homeless people, bad smell on subway...I am not saying all US places are like this, I only visited CA, some places are cool, but I definitely won't go out alone after 8pm in the dark.

Mikufan ,
@Mikufan@ani.social avatar

Pro China troll. Blocked.

Ilandar ,

What makes them a "troll"? Their comment was exactly the same as yours - subjective opinion based on their claimed experiences living there. Neither of you provided any factual evidence. You sound like someone who wants to live in a bubble where anyone who disagrees with their world view is a "troll" and instantly blocked. Ironically, quite a similar outlook to the Chinese government you so despise.

possiblylinux127 ,
@possiblylinux127@lemmy.zip avatar

1989

hui ,
@hui@fedi.gang.st avatar

@possiblylinux127
Thanksgiving

smeg ,

Does this cover Proton's new(ish) Stealth protocol too? They made a big deal about it being unblockable, and I (in my relatively light usage) haven't had any problems with it.

viking ,
@viking@infosec.pub avatar

I'm not sure, haven't read about that yet. But I'm testing it as we speak, since they make it available in the free version as well, which is nice.

Will report back after some more testing (Lemmy isn't blocked [yet]).

viking ,
@viking@infosec.pub avatar

So far so good, I have to say. I've got a subscription for Astrill until November, but will keep the free proton running in parallel as a long term test and then consider switching. Thanks a lot!

Mikufan ,
@Mikufan@ani.social avatar

Mullvad doesn't have port forwarding, otherwise its good. There are some good providers along Proton, but not many and most are not reputable, Nord for example...

redcalcium ,

Unfortunately vpn (and vps) providers are very wary about providing service that specifically target customers in china because when their service inevitable got ip-blocked by the gfw, those customers would immediately issuing chargeback, which is much more expensive to process than refund. The only providers that are still in the market for circumventing gfw now price their service accordingly (i.e. much more expensive than the usual vpn marketrate) to absorb this risk.

Summzashi ,

You dont know that much about VPNs then

Mikufan ,
@Mikufan@ani.social avatar

And why is that? Because i don't trust some companies easily?

Proton and Mullvad are the only trustworthy ones, and of those two only Proton has port forwarding.

Summzashi ,

Ah your list has already doubled

Mikufan ,
@Mikufan@ani.social avatar

Since i need port forwarding i didn't think of Mullvad, so yeah.

possiblylinux127 ,
@possiblylinux127@lemmy.zip avatar

And how do you know Proton VPN isn't exactly the same?

Ilandar ,
possiblylinux127 ,
@possiblylinux127@lemmy.zip avatar

Ah, they say they are trustworthy so it is totally fine

Ilandar ,

No...? Do you not understand the meaning of "open source" and "independently audited by third parties"? Or maybe you just didn't actually click through to the link I shared (what a surprise).

Mikufan ,
@Mikufan@ani.social avatar

Its completely open source and based in Switzerland. Also its kinda non profit and part of CERN.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • android@lemdro.id
  • random
  • All magazines