News for hackers. Stuff that matters.
Re:Climate activist arrested after ProtonMail provided his I... by georgyo on Sunday September 05, 2021 @07:30PM (#28428755)
_all_ VPNs are useless. They are the biggest security theater and a massive success of marketing. But really, it's completely bazaar to trust a VPN provider.

They provide protection from your local network, but you they can do all the same things and more.

Re:Climate activist arrested after ProtonMail provided his I... by ezluckyfree on Monday September 06, 2021 @12:37AM (#28430302)
That's just false though. If you're trying to hide from the CIA, then sure they are useless.

I just want to prevent my ISP from throttling my torrents.

You really can't talk about the "use" of any of these tools without a threat model.

Re:Climate activist arrested after ProtonMail provided his I... by BenjiWiebe on Sunday September 05, 2021 @08:28PM (#28429095)
*bizarre Not bazaar. And really both words are spelled quite bizarrely.
Re:Climate activist arrested after ProtonMail provided his I... by cutemonster on Sunday September 05, 2021 @09:07PM (#28429279)
Your local network might be a dangerous country
Re:Climate activist arrested after ProtonMail provided his I... by raxxorrax on Monday September 06, 2021 @02:36AM (#28431060)
You need a VPN provider outside your legislation of course. Access is still not impossible, but much more unlikely. Perhaps choose a country not on good terms with your own.
Re:Climate activist arrested after ProtonMail provided his I... by falcolas on Sunday September 05, 2021 @07:47PM (#28428853)
Yes. Yes! I’ve never understood how people argue that they are somehow better than an ISP by default.
Re:Climate activist arrested after ProtonMail provided his I... by godelski on Sunday September 05, 2021 @11:48PM (#28430029)
My ISP throttles connections (strangely including Zoom).

My ISP mines my data and sells it to the highest bidder despite costs not coming down.

My ISP determines what I can look at and can't (such as torrent sites).

My ISP is participating in anti-competitive behavior and I need the internet but I don't have a meaningful way to tell them to fuck off.

My VPN doesn't log. My VPN doesn't filter my traffic. My VPN reduces what my ISP can know about me and monetize me. My VPN allows me to access sites appearing in different countries or as a different user which changes what content websites serve to me, including price of products.

VPNs are a soft security practice, but one hell of a way to tell your ISP to fuck off. I think there's this group of people that say "oh, a security feature isn't bullet proof, therefore it is useless." But this is just dumb. All security features are probabilistic in nature and depend not only on how you use them, but your threat model and the will of your adversary. For people, like me, trying to escape dragnet operations VPNs do help. But alone they aren't enough and that's okay.

Re:Climate activist arrested after ProtonMail provided his I... by pixxel on Monday September 06, 2021 @09:02AM (#28433246)
Well said.
Re:Climate activist arrested after ProtonMail provided his I... by bigiain on Sunday September 05, 2021 @08:37PM (#28429130)
My ISP is subject to my local laws. Which are not good, in terms of my privacy.

My VPN provider is not - but is obviously subject to their local laws. Which are almost certainly also not good for my privacy either.

Spreading the threat across two different jurisdictions is without doubt "somehow better" than just using my ISP, at least in the case of protection against snooping by non serious crime law enforcement.

(Where I am, organisations like local councils, the taxi commission, fishing inspectors, and dog catchers - can all access our "mandatory telecommunications metal data retention" stuff with very little oversight... While my VPN is still in five eyes, so there's no point pretending national security, intelligence, or serious crime like terrorism/drugtrafficing would have no trouble getting cross jurisdictional access, I'm pretty sure the fishing inspectors or dog catchers won't have that sort of access.)

Re:Climate activist arrested after ProtonMail provided his I... by drivebycomment on Monday September 06, 2021 @12:42AM (#28430332)
What threat model are you trying to protect from by using VPN, and why is HTTPS + DoH (DNS over HTTPS) not sufficient for that threat model ?
Re:Climate activist arrested after ProtonMail provided his I... by crtasm on Monday September 06, 2021 @01:00PM (#28435690)
HTTPS still reveals the domain you're requesting, last I checked.
Re:Climate activist arrested after ProtonMail provided his I... by josephcsible on Monday September 06, 2021 @01:06PM (#28435767)
The eSNI/ECH extensions fix that.
Re:Climate activist arrested after ProtonMail provided his I... by bigiain on Monday September 06, 2021 @06:51PM (#28438995)
It can’t fix the problem that it reveals the ip address you’re connecting to though. Even if the sites you’re visiting are all on servers that virtual host heaps of other sites as well, it certainly narrows that haystack down to a handful of bits of hay with your bright shiny needle standing out in the middle.
Re:Climate activist arrested after ProtonMail provided his I... by crtasm on Wednesday September 08, 2021 @12:47PM (#28459685)
...if you manually turn it on in Firefox and the websites you're connecting to support it.

I don't know where things stand with other browsers.

Re:Climate activist arrested after ProtonMail provided his I... by junon on Monday September 06, 2021 @04:46AM (#28431708)
Because not everything uses a bloated, web-first protocol.
Re:Climate activist arrested after ProtonMail provided his I... by hnaccy on Sunday September 05, 2021 @08:07PM (#28428981)
I get letters and my internet turned off if I torrent on my ISP I don't using VPN. Simple as.
Re:Climate activist arrested after ProtonMail provided his I... by simon1573 on Monday September 06, 2021 @06:05AM (#28432137)
In Sweden we got the "datalagringsdirektivet" that says that every operator must keep their traffic for 6 months. VPN-providers are not bound to this law so that's my reason.