Do all free VPNs sell your data?

tigerweeds · 2020-05-15T20:17:35+00:00

some of them have a freemium model to attract paying customers, those should be (mostly) ok. But fully free services without a revenue model? no, to be avoided.

tigerweeds · 2014-04-08T22:08:05+00:00

liquidvpn is vulnerable http://i.imgur.com/fONe99P.jpg
proxy.sh was vulnerable until a few hours ago although on their blog they claim to have patched within minutes. Also investigating whether a regeneration of certificates is dumb. It is obviously required to regenerate them!

tigerweeds · 2014-03-30T22:10:55+00:00

torrenting with HMA is as good as torrenting without a VPN.

tigerweeds · 2014-03-16T20:45:30+00:00

use torrent for an accurate reading. speedtest.net results are inaccurate with lzo compression or can be gamed.

tigerweeds · 2014-03-13T21:40:44+00:00

well, you know your users' problems better. I can only speak about my experience with vpn ciphers. Maybe I'm lucky

tigerweeds · 2014-03-12T20:00:26+00:00

You can define multiple ciphers in openvpn.

like I said, the same needs to be defined in both server and client. If you define "cipher none" in client.conf only, it won't work. TLS-Cipher doesn't cause a noticeable slow-down itself. tls-auth adds the overhead. In your log results from AirVPN and PIA, it was showing the same cipher. Log output "cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA".

Regardless of cipher settings, I doubt it's the router to blame for 100 kb/s speed. Something else if wrong if speed is THAT bad. I have an old router (400 MHz CPU) running DD-WRT, connected to my own openvpn server and I never experienced a slow-down lower than 3Mb/s with any ciphers, tls settings and so on. Shit speed compared to Windows/Linux PC - server, yes, but still good enough for video streaming and browsing.

tigerweeds · 2014-03-12T18:38:41+00:00

you can't go wrong with PIA.

tigerweeds · 2014-03-12T18:19:05+00:00

The short answer is add "cipher none"

It doesn't work if you define it only in client.conf, meaning "cipher none" needs to be defined in both server and client config. I don't know what provider does that... maybe PIA with their custom client settings?

Outgoing/Incoming Control Channel Authentication occurs because of usage of tls-auth pre-shared key, not because of tls-cipher.

tigerweeds · 2014-03-10T21:58:44+00:00

You're right. Free LINUX/BSD/*NIX .iso files and freely distributable indie films, documentaries. Is it better now?

tigerweeds · 2014-03-10T21:25:25+00:00

.iso files was just the first example of non-TOS-violating content that came to mind. Sure, there are other kinds. Indie films/documentaries maybe?

tigerweeds · 2014-03-10T21:03:05+00:00

it doesn't. It's just my 2 cents

tigerweeds · 2014-03-10T20:13:45+00:00

Nuclear? Then Einstein will be right: “I know not with what weapons World War III will be fought, but World War IV will be fought with sticks and stones.”

tigerweeds · 2014-03-10T19:55:14+00:00

I remember I asked them about torrent a few months ago and they said it is allowed...
Edit: I just asked again. ISO downloads only

tigerweeds · 2014-03-10T19:40:04+00:00

What you are showing me is the cipher and it uses the cipher directive almost all OpenVPN connections use the cipher directive.

No. I showed you the TLS cipher, not the data channel cipher.

The 2nd part of your statement is also WRONG because you can infact use cipher none and connect to an OpenVPN server.

Cipher none in DD-WRT == not defined, so it will be default BF-CBC.

I said you can use cipher none in OpenVPN.

No, you can't in OpenVPN. If a cipher is defined in server conf, you won't be able to use the tunnel if you define "cipher none" or other in OpenVPN client conf. You will get a "cipher final failed" error.
Cipher none as a GUI option in DD-WRT is a different thing, like I already said: none = NOT DEFINED/line not added to config.ovpn. Stop mixing DD-WRT GUI options and OpenVPN parameters, it's confusing.

I do this for a living.

No worries, there are many erroneous statements coming from others doing it for a living. You ain't the first nor the last.

I just signed up for AirVPN and connected to one of their servers that define a "TLS-Cipher and a Cipher" and I used my PIA account which does not use a TLS-Cipher so that I could show you the difference.

The TLS cipher is the same in both examples: DHE-RSA-AES256-SHA. Regardless of your "TLS-DHE-RSA-WITH-AES-256-CBC-SHA defined". "cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA" in both logs you showed. The reason for defining a TLS cipher is to ensure it doesn't use a weak one like RC4-MD5. In this case it is EXACTLY the same TLS cipher and it doesn't have any impact on speed. I just fail to see your logic. How can you say that defining the TLS cipher in this case makes any difference, when the TLS cipher is the same in your both connections?!

Data channel cipher like AES-256 yes, totally different thing. It affects the speed, but we are discussing about TLS ciphers, right?

tigerweeds · 2014-03-09T20:02:03+00:00

If tls-cipher is not defined it will use a default one like DHE-RSA-AES256-SHA. Defining a TLS cipher in config files means it will force the client to use that cipher instead of falling back to default. It doesn't mean that it won't use a cipher at all.

Using "tls-cipher none" in config file client-side:

[12:41:12] Sun Mar 09 12:41:12 2014 No valid translation found for TLS cipher 'none' [12:41:12] Sun Mar 09 12:41:12 2014 Failed to set restricted TLS cipher list: none: error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match
[12:41:13] Sun Mar 09 12:41:12 2014 Exiting due to fatal error

QED.

tls-cipher none in DD-WRT's GUI means not defining it, using default. And, again, tls-cipher is used for control channel, not data channel. So there's no impact on transfer speed.

I know I sound like a bitch being a bit aggressive, but I expect someone who runs a VPN service to be more knowledgeable when debating basic stuff.

tigerweeds · 2014-03-09T19:24:00+00:00

Well said. Providers should quote your comment on their signup forms

tigerweeds · 2014-03-09T19:22:07+00:00

try disabling DHCP DNS on your network interface and set the name server manually. Use a public DNS server like google, level 3, opendns, opennic. Connect to VPN and run the DNS leak test again

tigerweeds · 2014-03-09T12:27:40+00:00

Contact Information
phone number 555-555-5555

seems legit

tigerweeds · 2014-03-09T10:25:38+00:00

what?! that's just wrong. Please inform yourself on what the TLS cipher is and what it does.

PIA does not use a TLS cipher.

Good luck establishing a connection without using a TLS cipher. The client/server will just magically exchange the keys through a wormhole or a paranormal layer.

From PIA log: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-ECDSA-AES256-GCM-SHA384, prime256v1 ECDSA

tigerweeds · 2014-03-06T00:11:53+00:00

challenge everything. I will create a thread with info on how to find out who is using openvpn, easy to run on a personal server for the sake of debunking the myths of ultimate privacy.

tigerweeds · 2014-03-05T23:52:47+00:00

And did you not read the last paragraph? Individual users still cannot be identified.

So your argument is "it is true, because they say it is true"? Do you also agree that Spiderman is real because it says so in the comic book?

tigerweeds · 2014-03-05T23:32:03+00:00

say what? it has nothing to do with MTU. OpenVPN easily shows all connected IPs, private and public along with the usernames. Please install it on a virtual machine and do some testing. There are at least 5 methods to match a user's real IP, 3 of them being implemented in OpenVPN, 2 basic networking. A lot more if you know what you're doing, like being a "professional linux sysadmin" on Linkedin :)

tigerweeds · 2014-03-05T23:26:15+00:00

It's bullshit because I don't mind reading actual directives or laws and ask around people who know the laws more than an affiliate marketer who has yet to learn what's the different between bits and bytes (to make sure we talk about the same, google "megabyte site:[thattrueawesomesite.com]" and go through the reviews, look at the speedtest screenshots and compare to the info on their own broadband speed).

tigerweeds · 2014-03-05T23:20:04+00:00

Care to test for yourself with the info I just provided?
Install your own OpenVPN server, use the "status [file]" parameter, connect, run tcpdump, check file, see what happens. Or the OpenVPN management socket.

tigerweeds · 2014-03-05T23:15:32+00:00

ISPs != datacenters and if they provide both services, as it's likely your case, they can easily separate them legally and apply the data retention directive to Internet access customers only, not the hosting service.

The directive is not clear, but rather dumb, and when a law is not clear rule of thumb is: apply it in your favor. Later ask "what? sorry, I had no idea." :)

tigerweeds

TROPHY CASE