News for hackers. Stuff that matters.
Re:IPVanish “No-Logging” VPN Led Homeland Security to Comcas... by sandworm101 on Thursday June 07, 2018 @11:26AM (#17256620)
>>> I also think that explicitly not keeping logs to protect users from law enforcement is shady to say the least.

I guess that depends on which law enforcement you are talking about. An FBI agent going after someone distributing child pornography is a rather sympathetic police action. What about a Chinese officer going after someone for "treason"? What about a Russian cop looking for someone who tweeted pics taken at a protest rally? Or what about a Canadian cop asking questions about a teenager in Sweden, someone well outside Canadian jurisdiction? Or what about the FBI agent asking for some celeb's home address? Rather than pick sides, the best answer is to just not collect the data in the first place.

VPN companies operate at an international level. The cops from some countries cannot be trusted. Cops in all countries make mistakes. A few of them our there are corrupt. And often times the person claiming to be a cop is either well outside their authority, or just lying about being a cop. I tell my client's to not even respond to communications from any sort of law enforcement or intelligence agency. Pass it to your lawyers. Let them first verify who and what authority is making the request. Do not leave such determinations to engineers and support staff.

Re:IPVanish “No-Logging” VPN Led Homeland Security to Comcas... by openasocket on Thursday June 07, 2018 @11:49AM (#17256906)
I agree that it depends on who the law enforcement is. I think operating a VPN service for Chinese citizens to evade censorship and not doing logging to protect those users would be ethical, for example. Like I said in another comment, you have to think about the odds of dealing with an LE request you consider unethical, and balance the consequences of providing logs or not providing logs. Personally, I trust the US justice system enough that I wouldn't have a problem with complying with a valid warrant (after legal due diligence, of course). But that's subjective and I understand others may not feel the same way.

> VPN companies operate at an international level. The cops from some countries cannot be trusted. Cops in all countries make mistakes. A few of them our there are corrupt. And often times the person claiming to be a cop is either well outside their authority, or just lying about being a cop. I tell my client's to not even respond to communications from any sort of law enforcement. Pass it to your lawyers. Let them first verify who and what authority is making the request. Do not leave such determinations to engineers and support staff.

Totally agree with everything here.

Re:IPVanish “No-Logging” VPN Led Homeland Security to Comcas... by manicdee on Thursday June 07, 2018 @09:19PM (#17261811)
> I agree that it depends on who the law enforcement is.

All Law Enforcement is corrupt. The only unknown is the level of corruption. As a service provider in any country, we have no idea whether we will be dealing with a good cop or a bad cop, and the safest assumption to make is that they are all bad cops. Don't let the good cop set a precedent for interaction that the bad cop can abuse.

The system will work to abuse your trust. If the first warrant tou get is to help catch a pedophile who has been kidnapping children, and you sgree to provide logs for that, the Government will be upset when you don't comply with the next warrant which is a wife beating cop trying to track down his estranged wife who is due to appear in court tomorrow.

You have shown that you have the required data, the purpose of the warrant doesn't have any impact on the legal requirement to comply.

Re:IPVanish “No-Logging” VPN Led Homeland Security to Comcas... by cm2187 on Friday June 08, 2018 @03:10AM (#17263263)
Or Obama trying to uncover who in the White House is talking to journalists.