News for hackers. Stuff that matters.
Re:Outlook is Microsoft's new data collection service by moose44 on Thursday January 11, 2024 @12:26PM (#38955424)
Using the internet in general is a false sense of security. If you want total security crush all of your technology and go live in the woods.

The point of cyber security tools like VPNs is to limit tracking, data sharing and reduce the potential for malicious actions to be taken against you.

You can't honestly say not using a VPN is better than using one. What's the alternative? Unencrypted web traffic? Your ISP harvesting your web data and selling it? Exposure on public networks?

Re:Outlook is Microsoft's new data collection service by okamiueru on Thursday January 11, 2024 @01:12PM (#38956169)
Is it limiting tracking, or potentially exposing a untrusted middleman with knowledge of all your traffic, and who it belongs to?

What is the difference between the ISP knowing this and being a problem, but the VPN sitting with the exact same information, also knowing it?

Re:Outlook is Microsoft's new data collection service by moose44 on Thursday January 11, 2024 @02:05PM (#38957125)
ISPs knowingly collect it and sell it. Proton (at least according to them) do not collect it. You must choose your VPN carefully.
Re:Outlook is Microsoft's new data collection service by Tijdreiziger on Thursday January 11, 2024 @06:11PM (#38960880)
That’s a pretty strong statement to make about all ISPs in the world.
Re:Outlook is Microsoft's new data collection service by moose44 on Friday January 12, 2024 @10:54AM (#38969555)
It's true. In fact, in the US they even lobbied congress to do so: https://techcrunch.com/2017/03/28/house-vote-sj-34-isp-regul...
Re:Outlook is Microsoft's new data collection service by Tijdreiziger on Friday January 12, 2024 @03:56PM (#38973916)
At most, this shows that ISPs in the US sell your data, not that all ISPs do so.
Re:Outlook is Microsoft's new data collection service by reciprocity on Friday January 12, 2024 @01:20PM (#38971793)
Re:Outlook is Microsoft's new data collection service by Tijdreiziger on Friday January 12, 2024 @03:56PM (#38973910)
Those sources appear to be about ISPs in the US. At most, this shows that ISPs in the US sell your data, not that all ISPs do so.
Re:Outlook is Microsoft's new data collection service by okamiueru on Saturday January 13, 2024 @07:51PM (#38986314)
If any ISP were to be caught doing this in the EU, it would be fairly big news.
Re:Outlook is Microsoft's new data collection service by lowbloodsugar on Thursday January 11, 2024 @01:54PM (#38956915)
I mean, sure, it really depends on who is providing the VPN. With Proton, you're already using them for your email, so if they were a bad actor, you're basically fucked already. If you have ProtonMail, then the choices are 1/ No VPN, so your ISP will collect this data, 2/ a popular VPN provide who will collect this data, or 3/ Proton who say they won't and they've already got you email too if they are liars. Option 3 is the lowest risk of event if they are good actor, but also the potential damage of an event, if they are bad actor, is much higher since they have more data including email based 2FA.
Re:Outlook is Microsoft's new data collection service by moose44 on Thursday January 11, 2024 @02:08PM (#38957169)
Like I said above, the best option is to not use technology at all. If you want to use it, you play the odds and attempt to limit nefarious activity against you.
Re:Outlook is Microsoft's new data collection service by tmikaeld on Thursday January 11, 2024 @01:07PM (#38956110)
> Unencrypted web traffic?

I don't know if you're aware, but basically all sites on the internet use something called SSL these days. However, SSL is useless if you use a VPN that also provide DNS servers (which most do) - because the provider could listen in on all of your traffic by hijacking the handshake, DNS and traffic to and from any target server - making it much easier to create a user profile, because you're authenticated to the VPN.

Also, third party cookies are blocked in the mainline browsers by default, making VPNs even more useless.

Most if not all of the ISPs also use dynamic IPs, making it unlikely to be cross-site-tracked based on IP sources.

Re:Outlook is Microsoft's new data collection service by moose44 on Thursday January 11, 2024 @02:00PM (#38957044)
What does that have to do with your ISP having access to this information and selling it? In addition to using public networks?

Additionally, 3rd party cookies may be blocked but cross-site are not.

Re:Outlook is Microsoft's new data collection service by tmikaeld on Friday January 12, 2024 @02:22AM (#38965081)
You realize 3rd party cookies and cross-site cookies are the same thing?
Re:Outlook is Microsoft's new data collection service by syntheticcorp on Thursday January 11, 2024 @08:24PM (#38962274)
Control over a clients DNS doesn’t let the VPN provider view the contents of TLS encrypted traffic. However they can view unencrypted data from connections like SNI headers, DNS queries etc.
Re:Outlook is Microsoft's new data collection service by tmikaeld on Friday January 12, 2024 @01:09AM (#38964550)
The point here is that if you use someone else’s dns, they can redirect any domain to their server and sign the cert too since they also control the traffic.
Re:Outlook is Microsoft's new data collection service by syntheticcorp on Friday January 12, 2024 @12:41PM (#38971259)
You can’t serve a valid certificate chain to the client even if you control their traffic, because your malicious certificate isn’t signed by a trusted CA. And you can’t get a CA signature without demonstrating control of the domain to a CA.
Re:Outlook is Microsoft's new data collection service by gtvwill on Thursday January 11, 2024 @02:42PM (#38957775)
Am my own isp.... I rarely use a VPN. Fixed ip and all.

Your VPN doesn't protect against squat when it comes to the agencies that might be watching. Hell it doesn't even protect much against marketers fingerprinting your movement around the internet. You leave a plenty big breadcrumb trail that isn't just IPV4.

Honestly VPNs have been a great marketing example of the last 5 years. You all buy something without needing it or knowing why t f you have it. Yes using internet without one is better. Why? It's cheaper for starters.Auth. faster! No relay slowing down your connection!

VPN best use isn't on consumer end. It's on orchestration end as another tool to guarantee you are who you say you are via another layer of auth.

Re:Outlook is Microsoft's new data collection service by Tijdreiziger on Thursday January 11, 2024 @06:13PM (#38960907)
There is one specific case in which using a VPN is faster: if your ISP has bad peering in general, but good peering with your VPN provider.