01CGAT

The technology used for this is the same as for locating your lost device and takes care of privacy in a very smart way, more info: https://www.wired.com/story/apple-find-my-cryptography-bluet...

"Apple says an elaborate rotating key scheme will soon let you track down your stolen laptop, but not let anyone track you. Not even Apple."

Visiting the website through WifiMask VPN (using Digital Ocean servers) works fine.

For WifiMask VPN I use the following to block ads & malware: https://github.com/Trellmor/bind-adblock

A snippet from the article on the residential IP's:

"Furthermore, we conducted realtime device fingerprinting when we captured each IP address. And we have successfully identified the device type and vendor information for 547,497 IP addresses. What surprised us is that 237,029 of them turned out to be IoT systems, such as web camera, DVR, and printer."

This was probably the beginning of the end of Facebook, at least for me. I started interacting with Facebook much less and started to forget about it, because I didn't want everybody to see how addicted I was to Facebook. The same happened with Instagram when everybody was able to see what I was liking. This is turned off now, but the damage was already done, I became too paranoid to get addicted to social media again. I'm clean now for almost 2 years, thank you.

It's easier because the current tools of building the planes are not made for this new type of planes. Update the tools and building this new type of plane will be easy too.

2016: https://www.bloomberg.com/news/articles/2016-04-14/norway-s-...

Founder of WifiMask VPN here. Maybe you want to try it with a free trial for 7 days :-) : wifimask.com.

Maybe OpenVPN + UDPspeeder could do something:

https://github.com/wangyu-/UDPspeeder

FTR, they say: "As you can see, the ascp client performs over 200x faster than FTP, and can download the whole file in 9 seconds. It’s pretty magical." But the example shows MB/s vs Mb/s. It's not over 200x times faster, but about 17 times faster.

To maybe better answer this question, I've found this for example: https://gist.github.com/hcooper/814247

To answer this question: yes, OpenVPN can handle multiple users/connections simultaneously.

You could generate a certificate for each user, but without the duplicate-cn option a user is only allowed 1 connection to the same server. You can also use username/password authentication instead of certificates, also in this case you'll need to set the duplicate-cn option to allow multiple connections from the same user to the same server, because in this case you use the option username-as-common-name and the CN (common name) will then be the username.

OpenVPN has the duplicate-cn option available, two connections with the same common name are then allowed.

Using a database for user authentication, you could write a script to fill the database with some usernames and passwords. Or create a webfrontend for users to register their own usernames and passwords.

What can I say, part of the OpenVPN config:

status /dev/null

log /dev/null

verb 0

Part of the IPSec config:

charondebug="asn -1, cfg -1, chd -1, dmn -1, enc -1, esp -1, ike -1, imc -1, imv -1, job -1, knl -1, lib -1, mgr -1, net -1, pts -1, tls -1, tnc -1"

(-1 means absolutely silent)

There are no client connect/disconnect scripts active.

Authorization, Accounting and Authentication log queries in FreeRadius are disabled.

All name server logging is disabled.

iOS subscription receipt validation logging is disabled.

Communication in between servers (for example vpnserver -> dbserver) is encrypted with OpenVPN.

Some television programs are: https://www.utopiatv.nl/live

May I suggest to turn off logging for your own server too? :-) Anyone with physical access to the server can access the logs, maybe even when the disks are encrypted, I can imagine someone with the right knowledge can extract the key from RAM on a running server:

https://blog.appsecco.com/breaking-full-disk-encryption-from...

These are a very interesting questions and invite to write more about in detail, which makes me think to write blog articles about it. Stay tuned! ;-)

Haha, thanks!

We are very flexible, if DO isn't the best choice anymore for our demands, we will look around for other options.

I have seen this throughout macOS lately with other apps too, a rightclick will show you the paste option btw. Meanwhile I will investigate this, thanks!

Thanks for the feedback, we have example OpenVPN config files available for advanced users: https://www.wifimask.com/contact#androidwindows

Customers are confirming it still works, but I cannot say if it will keep working in the future.

I have tested both OVH and Hetzner, Digital Ocean's speed is much faster and stable worldwide.

I'm definitely keeping an eye on WireGuard, it is very promising.

Nice one! I think an optional notification is the best option, it's hard to notice even a red icon I believe.

Your comment makes me think of a "Warrant canary" which we could set up to inform our customers that we have been served with a government subpoena: https://en.wikipedia.org/wiki/Warrant_canary

Thanks!

All servers are purchased from Digital Ocean only at the moment. I think it is very important to buy servers from a thrustworthy party especially in the VPN business, even if that means we pay a little bit extra.

VPN is a brutal business. But because we are bootstrapped and thus no screaming investors/banks behind our backs and we are a small team, costs are low and there's no one who can pull the plug but ourselves. I don't know how many people are working for PIA, but in my opinion you don't need ten's or hundred's of people to build and run a VPN company. I'm not very surprised they are supposedly in that much debt.

The most requested feature is an Android app. ;-) And unblocking Netflix ofcourse, but they seem to get even better at blocking VPN's than the Great Firewall of China. What would your feature request be? :-)

BREIN doesn't care if you use a VPN to protect your privacy and security when you're not doing anything illegal. Especially not when you're connected to a VPN server somewhere on the other side of the planet. ;-)

I will rephrase it, the intention is not to push responsibilities, we are merely asking our customers to let us know if they ever find a vulnerability. Thanks for the feedback!