I’ve been using one but I’m not sure what benefits I’m getting from it. I feel like the only thing happening is I’m adding a little bit of latency to all my requests for no reason.

61 points

Most people in the US use it to avoid getting letter from their ISP from downloading illegal content.

Some people use to access other country content.

Some people use it to avoid ISP snooping their browsing habits

permalink
report
reply
4 points

Genuine question: How can an ISP detect that someone is downloading illegal material if the actual content is encrypted using SSL/TLS? Is it all approximated based on the domains/IPs and the amount of data that is sent? If they can’t tell with a 100% certainty, can it be used as proof when trialed in court?

permalink
report
parent
reply
9 points

Isn’t that mainly just torrent trackers that publish your IP address and then the ISP gets a request for who was using that particular IP address. I don’t think an ISP would itself be interested in detecting whether their customers download illegal content - there is no business case for them to do that.

permalink
report
parent
reply
1 point

Ahh that makes sense - thanks!

permalink
report
parent
reply
1 point

I’m not an expert but I’m guessing unencrypted DNS requests and potentially monitoring IPs of different torrents. DNS requests would show what websites a user is going to, and then you can always see peer IPs when connected to a torrent.

permalink
report
parent
reply
1 point

The links themselves are not encrypted, only the data packets

permalink
report
parent
reply
0 points

Pros:

  • Websites can’t see your real IP and thus can’t figure out your real location that easily
    • You might also be able to blend in with other users who use the same VPN server
  • Your ISP can’t see what you’re websites you’re connecting to
  • Your Network operator (e.g. a coffee shop offering public wifi) and you’re ISP can’t see your unencrypted connections (e.g. HTTP, Telnet)
  • You can bypass regional censorship or other forms of content unavailability

Cons:

  • Your VPN provider can see everything you’re connecting to (but not the content if you use HTTPS, which thankfully has become very common), so you need to be able to trust them
  • A good and trustworthy VPN usually costs money
  • Slightly slower connection and higher latency

Things to look out for when choosing a VPN provider:

  • No-log policy
  • Regular security audits
  • Open source client applications
  • Private/anonymous payment options (crypto currency)
    • Monero is the best option if you want to stay fully anonymous
  • Minimal information required for signing up, ideally none (some providers don’t even require an email address, they just give you a random generated Account ID)
permalink
report
reply
1 point

your* ISP

permalink
report
parent
reply
15 points

Mullvad is the gold standard for VPNs in my book

permalink
report
parent
reply
3 points
*

No port forwarding BTW for anyone looking at this.

They recently gave up the fight against groups (copyright groups) accusing them of aiding with CSAM so they stopped port forwarding

permalink
report
parent
reply

AirVPN has port forwarding if you need that. You can also do it with Proton, but last time I used it, it was quite janky.

permalink
report
parent
reply
4 points

The fact that they allow you to order a physical voucher with a product key, and that product key serves as your only authentication makes it especially anonymous. I love it.

permalink
report
parent
reply
2 points

And ProtonVPN IMO.

permalink
report
parent
reply

Yeah. Proton, Mullvad and IVPN are the three best providers out there. That’s also why they’re recommended by privacy/security enthusiasts: https://www.privacyguides.org/en/vpn/?h=vpn#recommended-providers

permalink
report
parent
reply

It matches all the criteria I outlined. IVPN too btw: https://www.ivpn.net/

They’re also on Mastodon, which is also a plus in my opinion (not really significant though) @ivpn@mastodon.social

permalink
report
parent
reply
3 points

Cash is the best payment option. Only mullvad and proton take cash.

Monero has yet to prove its privacy. Math nerds can’t crack an anonymous letter with cash.

permalink
report
parent
reply
2 points

In the cons there’s also an increase of the attack surface since you’ll be using a program to run the VPN

On the pros, some offer DNS blocking

permalink
report
parent
reply

WireGuard is now even part of the Linux kernel. The protocol and the reference implementation are fully open source, you can just download a WG profile from your provider and you won’t even have to use their application.

On the pros, some offer DNS blocking

You can also set that up without a VPN, or independently of your VPN. The standard WireGuard client doesn’t interfere with your DNS setup.

permalink
report
parent
reply
-3 points

Wireguard and openvpn both have open source clients.

permalink
report
parent
reply
1 point

That may make it more secure than other clients, but the surface is still larger. Any time you add an executable

permalink
report
parent
reply
39 points
*

A few ways I’ve used it.

Odd, a site seems to be non-functional. (Enable VPN). Site begins to work. Oh, my ISP was fucking with me.

A site is stuttering. (Enable VPN). Magically works. Oh, my ISP was fucking with me.

The most annoying, my family’s Internet over the holidays was blocking my laptop from updating Ubuntu, enabled VPN, udpate went just fine.

In general, it stops ISPs from dictating if they approve or disapprove of your behavior. Hide what you’re doing and all traffic is just anonymous bits and bobs.

As it fucking should be by law… but in the US the conservative party continually repeals the law that enforces non-interference. So for now, we need VPNs.

permalink
report
reply
3 points

I don’t think it’s the isp intentionally fucking with you and it’s probably more incompetence on their side.

My isp will occasionally have this issue and then after a few month everything is OK.

permalink
report
parent
reply
19 points

i enjoy not getting threatening letters from my ISP about downloading shit.

permalink
report
reply
1 point

You can use your file server, your git server, your plex server, etc. when you’re not at home.

Oh, you mean the advantages of using somebody ELSE’S vpn?? They get money.

permalink
report
reply

Privacy

!privacy@lemmy.ml

Create post

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

Community stats

  • 5.4K

    Monthly active users

  • 1.8K

    Posts

  • 27K

    Comments