News for hackers. Stuff that matters.
Re:WARP is here by commoner on Wednesday September 25, 2019 @10:13AM (#21070952)
Although Warp doesn't mask IP addresses, it should be useful for these two use cases:

1) Communicating with insecure websites (HTTP instead of HTTPS)

2) Using unsecured wireless networks (e.g. Wi-Fi at a coffee shop)

Beyond these two cases, is there any advantage to using Warp? Does Warp provide any benefits for email (secure IMAP/SMTP), file sharing (BitTorrent), or other protocols?

Re:WARP is here by lgats on Wednesday September 25, 2019 @03:36PM (#21074457)
WARP+ apparently takes advantage of CloudFlare's Argo Smart Routing https://www.cloudflare.com/products/argo-smart-routing/

Statistics from one of my websites running Argo show a 16.73% percent improvement for 32.3% of web traffic routed through Argo.

For my Google Cloud Washington based server, I see 5-15% improvement for some traffic from the EU and US East Coast and 15-30% improvement some traffic from Asia, Africa, and South America. (all according to CF statistics)

Re:WARP is here by bscphil on Wednesday September 25, 2019 @09:12PM (#21077234)
> Statistics from one of my websites running Argo show a 16.73% percent improvement for 32.3% of web traffic routed through Argo.

I don't understand the statistic. Is that the best 32.3%? Is the worst 32.3% 16.73% worse?

Re:WARP is here by kyle-rb on Wednesday September 25, 2019 @11:20AM (#21071599)
What's the actual vulnerability when simply using an unsecured wireless network? Sure, it's easy for them to MitM you if you're using http, but if you're only using https, what's the harm?
Re:WARP is here by sp332 on Wednesday September 25, 2019 @11:45AM (#21071849)
DNS queries and the unencrypted parts of the HTTPS protocol (like SNI without recent enhancements). So passive sniffers can at least see what sites you're visiting.
Re:WARP is here by kyle-rb on Wednesday September 25, 2019 @12:09PM (#21072089)
Huh, didn't know about SNI, thanks for the info. Seems like a relatively small risk though.
Re:WARP is here by yjftsjthsd-h on Wednesday September 25, 2019 @10:19AM (#21071013)
It looks decent for hiding your traffic from your ISP
Re:WARP is here by commoner on Wednesday September 25, 2019 @12:06PM (#21072062)
Thanks, this should have been obvious in hindsight.

One more for people with cell phone plans that don't adhere to net neutrality: Warp can probably bypass quality caps on video streaming.

Traditional VPNs are strictly better than Warp+, as far as I can see, but the free version of Warp is a generous offering for users who would otherwise not be using a VPN.

Re:WARP is here by dylz on Wednesday September 25, 2019 @03:01PM (#21074078)
Warp excludes many sites from traffic routing (like video)
Re:WARP is here by commoner on Wednesday September 25, 2019 @10:44PM (#21077673)
Are you sure? Some comments like this one say that Warp affects YouTube speed:

https://news.ycombinator.com/item?id=21070988

Re:WARP is here by ubercow13 on Thursday September 26, 2019 @05:43AM (#21079521)
Source? That seems like a huge caveat - WARP protects your privacy except for specific sites you visit that Cloudflare silently decides on?
Re:WARP is here by commoner on Sunday September 29, 2019 @07:39PM (#21110383)
Found it.

> Warp and Warp+ will not route traffic data from your device through the Cloudflare network for certain Internet properties, such as over-the-top content provider websites, as determined by Cloudflare in its sole discretion.

https://www.cloudflare.com/application/terms

"Over-the top content provider websites" most likely include Netflix, Hulu, Prime Video, etc.

https://en.wikipedia.org/wiki/Over-the-top_media_services

If this is the case, then Warp would not be helpful for evading speed caps for video on mobile data plans.

Re:WARP is here by dylz on Thursday September 26, 2019 @03:19PM (#21084462)
> WARP is not designed to allow you to access geo-restricted content when you’re traveling. It will not hide your IP address from the websites you visit.

C

Re:WARP is here by commoner on Thursday September 26, 2019 @05:36PM (#21085818)
I think that's because Warp doesn't let you select the location of the server you're connecting to. Almost all VPN services have servers in different areas, and you can choose which geographic area you want an IP address from. In contrast, Warp only lets you connect to a server that's close to you.

Based on speed tests, it doesn't look like Warp is bypassed for video content.

Re:WARP is here by ubercow13 on Friday September 27, 2019 @01:39AM (#21088770)
That’s not the same thing - they could provide your IP to the site you visit in an added header or something without compromising your privacy from your ISP. That doesn’t imply they aren’t routing traffic to some websites.
Re:WARP is here by riquito on Wednesday September 25, 2019 @11:53AM (#21071954)
You forgot your ISP, some collect and resell your activity online
Re:WARP is here by skeletonjelly on Wednesday September 25, 2019 @07:07PM (#21076577)
Some yes. In Australia, all are required by law to record "metadata" and retain for several years (5 I think)