Do you need a VPN?

Re:Do you need a VPN? by earenndil on Monday October 30, 2017 @01:07PM (#15586773)

Why not just use a trusted solution like openvpn and only use providers who provide openvpn servers? That immediately gets rid of one half of your problem; and as for the other half, vpn services that allow for connections via openvpn are likely to be more trustworthy. In addition, the vpn company can't MitM connections which are already on an encrypted channel outside of the vpn conneciton.

[ Parent | on HN ]

Re:Do you need a VPN? by gowld on Monday October 30, 2017 @01:35PM (#15587085)

> use providers who provide openvpn servers

how can you prove what the provider is using? people can lie

[ Parent | on HN ]

Re:Do you need a VPN? by wyldfire on Monday October 30, 2017 @01:57PM (#15587303)

This suggestion is intended to solve the "free VPN app installs malware" problem and not solve the "VPN provider who actually logs/is in league with govt/MPAA/etc" problem.

[ Parent | on HN ]

Re:Do you need a VPN? by FooHentai on Monday October 30, 2017 @08:32PM (#15590242)

Indeed. Threat models are crucial here.

[ Parent | on HN ]

Re:Do you need a VPN? by ghostly_s on Monday October 30, 2017 @02:16PM (#15587490)

OpenVPN is a protocol. If the VPN provider supports it, you set it up in your own client that supports OpenVPN. Using a VPN provider that requires you use some proprietary app is madness.

I recently signed up for such a service, in order to get my Nintendo Switch online for multiplayer gaming. My home internet connections sub-let from the landlord and could be considered semi-hostile -- not able to connect to peers on the Switch due to triple NAT, and I suspect some QoS throttling as well. The VPN solves my routing problems, but if anyone has a suggestion for another option here I'm all ears.

[ Parent | on HN ]

Re:Do you need a VPN? by benchaney on Monday October 30, 2017 @01:45PM (#15587188)

It is irrelevant what software the provider is using as long as they use the openvpn protocol. This will be obvious to anyone who tries to connect using openvpn.

[ Parent | on HN ]

Re:Do you need a VPN? by thinkloop on Monday October 30, 2017 @02:13PM (#15587458)

Can you explain further, how can you be sure things weren't aded to the software?

[ Parent | on HN ]

Re:Do you need a VPN? by flavor8 on Monday October 30, 2017 @02:56PM (#15587850)

When you use a VPN service that supports openvpn, you:

a) Install OpenVPN yourself (open source)

b) Download an OpenVPN profile from the VPN company

c) Configure OpenVPN with the profile

Specifically, you don't have to install any binary software from the company itself.

[ Parent | on HN ]

Re:Do you need a VPN? by benchaney on Monday October 30, 2017 @02:15PM (#15587471)

To the client side or the server side? On the client side, you should download the code from a location you trust. On the server side, it is irrelevant if something is added to the software for the attack we are discussing.

[ Parent | on HN ]

Re:Do you need a VPN? by thomnottom on Monday October 30, 2017 @02:35PM (#15587673)

You can use your own OpenVPN client.

[ Parent | on HN ]

Re:Do you need a VPN? by hultner on Monday October 30, 2017 @01:20PM (#15586919)

Isn't openvpn kind of a hack and a IKEv2/IPSEC based strongswan solution to prefer?

[ Parent | on HN ]

Re:Do you need a VPN? by mirimir on Monday October 30, 2017 @07:20PM (#15589872)

It's arguably no more a "hack" than TLS is one. Right?

Re OpenVPN vs IKEv2/IPSec, this IVPN FAQ seems accurate.[0] But then, I helped edit it, so I'm biased. Still, if anyone can point to inaccuracies, I'll recommend fixing them :) The major weakness is pre-shared IKE keys.

On the other hand, I get from IVPN that the IPSEC implementation in iOS is very secure.

0) https://www.ivpn.net/knowledgebase/160/Is-using-L2TPorIPSec-...

[ Parent | on HN ]

Re:Do you need a VPN? by joecool1029 on Monday October 30, 2017 @02:40PM (#15587721)

Don't see why you're getting downvoted. From a user standpoint, IKEv2 doesn't require a secondary client and integrates with most major OS better.

For example: It's way easier for a client to install a mobileconfig to ios that supports on demand VPN than it is to have them download and configure openvpn. Fairly set and forget.

[ Parent | on HN ]

Re:Do you need a VPN? by JetSpiegel on Monday October 30, 2017 @04:40PM (#15588687)

IKE is a nightmare to admin, only for Cisco level bureaucracies.

[ Parent | on HN ]

Re:Do you need a VPN? by MichaelGG on Monday October 30, 2017 @06:24PM (#15589507)

OpenVPN protocol is sorta weird (I wrote a clean room client and server impl). But IPSec stuff is such a pain to deal with that it is not worth it despite it having better OS integration.

[ Parent | on HN ]