Re: [liberationtech] // freevpn.me //

2015-07-29 Thread Tempest
Shelley:
 The general rule of free services, as I'm sure most on this list know,
 is: you are not the client, you are the product.  I don't use free VPNs
 or free email, etc. nor do I recommend them to anyone.

the general rule should be that vpns are always a roll of the dice. paid
or free, both have the ability to track you. those that say they don't
or won't often do if their business model is threatened by someone
powerful enough. thus, if privacy and/or anonymity is the goal,
mitigating steps before and after connecting to the vpn should be taken
(unaffiliated public access point, tor/tails/whonix, etc.).

-- 
gpg key - 0x2A49578A7291BB34
fingerprint - 63C4 E106 AC6A 5F2F DDB2 3840 2A49 578A 7291 BB34

-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.


Re: [liberationtech] // freevpn.me //

2015-07-29 Thread Julian Oliver
..on Wed, Jul 29, 2015 at 01:47:38PM +, Tempest wrote:
 Shelley:
  The general rule of free services, as I'm sure most on this list know,
  is: you are not the client, you are the product.  I don't use free VPNs
  or free email, etc. nor do I recommend them to anyone.
 
 the general rule should be that vpns are always a roll of the dice. paid
 or free, both have the ability to track you. those that say they don't
 or won't often do if their business model is threatened by someone
 powerful enough. thus, if privacy and/or anonymity is the goal,
 mitigating steps before and after connecting to the vpn should be taken
 (unaffiliated public access point, tor/tails/whonix, etc.).

Agreed. And in any case, there may be situations where it's more sane to use a
VPN you have no reason to trust (to tunnel you across a hostile border (or route
segment)) than using no VPN at all. 

I was once in a situation where I urgently needed SSH access to my server but
couldn't, as SSH appeared to be blocked at the firewalled. I could only assume
DPI was the culprit, as I was ssh'ing on port 443. With only a Windows laptop
(belonging to someone I didn't know well) at my disposal I did the forbidden and
used a PPTP VPN (famously breakable) through a VPN host I knew nothing about. In
this case, trust in either protocol or provider presented little risk: I SSH'd
with a jailed account (to lower threat from password capture (local keylogger or
evil endpoint)), checked I was actually on my server, su'd to another user and
all was well. 

As usual, context rules the threat model.

Cheers,

-- 
Julian Oliver
http://julianoliver.com
http://criticalengineering.org
PGP key: https://julianoliver.com/key.asc
Beware the auto-complete life.

-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.


Re: [liberationtech] // freevpn.me //

2015-07-26 Thread Shelley

On July 26, 2015 9:59:04 AM Julian Oliver jul...@julianoliver.com wrote:


Hi list,

Does anyone have any dirt (or information at all) on http://freevpn.me?

They have an oddly absent reputation, quote themselves (whilst giving the
appearance the quote is from a review) and seem to have no company/project
footprint elsewhere (that I can find). A whois shows domain registration 
was mid

2013.

Cheers,

--
Julian Oliver
http://julianoliver.com
http://criticalengineering.org
PGP key: https://julianoliver.com/key.asc
Beware the auto-complete life.



I couldn't find much independent/unbiased info either.  As it is hosted on 
cloudflare, I would be wary of it anyway.  Jmo.


-s


--
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, change 
to digest, or change password by emailing moderator at compa...@stanford.edu.


Re: [liberationtech] // freevpn.me //

2015-07-26 Thread Julian Oliver
..on Sun, Jul 26, 2015 at 07:54:10PM +, azrak_k...@hotmail.com wrote:
 Rule of thumb with VPNs do not use one unless you dont trust its source. This 
 looks unreliable and I will be vary of it.

Agreed - I run my own OpenVPN servers. 

I came across 'FreeVPN' while compiling a list of public and free OpenVPN
offerings, and no-one seems to know a thing about them.

Cheers,

Julian

 On Sun, Jul 26, 2015 at 10:57 AM -0700, Shelley shel...@misanthropia.org 
 wrote:
 On July 26, 2015 9:59:04 AM Julian Oliver jul...@julianoliver.com wrote:
 
  Hi list,
 
  Does anyone have any dirt (or information at all) on http://freevpn.me?
 
  They have an oddly absent reputation, quote themselves (whilst giving the
  appearance the quote is from a review) and seem to have no company/project
  footprint elsewhere (that I can find). A whois shows domain registration
  was mid
  2013.
 
  Cheers,
 
  --
  Julian Oliver
  http://julianoliver.com
  http://criticalengineering.org
  PGP key: https://julianoliver.com/key.asc
  Beware the auto-complete life.
 
 
 I couldn't find much independent/unbiased info either.  As it is hosted on
 cloudflare, I would be wary of it anyway.  Jmo.
 
 -s
 
 
 --
 Liberationtech is public  archives are searchable on Google. Violations of 
 list guidelines will get you moderated: 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
 change to digest, or change password by emailing moderator at 
 compa...@stanford.edu.

 -- 
 Liberationtech is public  archives are searchable on Google. Violations of 
 list guidelines will get you moderated: 
 https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
 change to digest, or change password by emailing moderator at 
 compa...@stanford.edu.


-- 
Julian Oliver
http://julianoliver.com
http://criticalengineering.org
PGP key: https://julianoliver.com/key.asc
Beware the auto-complete life.

-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.


Re: [liberationtech] // freevpn.me //

2015-07-26 Thread azrak_khan
Rule of thumb with VPNs do not use one unless you dont trust its source. This 
looks unreliable and I will be vary of it.
A





Sent by Outlook for Android





On Sun, Jul 26, 2015 at 10:57 AM -0700, Shelley shel...@misanthropia.org 
wrote:
On July 26, 2015 9:59:04 AM Julian Oliver jul...@julianoliver.com wrote:

 Hi list,

 Does anyone have any dirt (or information at all) on http://freevpn.me?

 They have an oddly absent reputation, quote themselves (whilst giving the
 appearance the quote is from a review) and seem to have no company/project
 footprint elsewhere (that I can find). A whois shows domain registration
 was mid
 2013.

 Cheers,

 --
 Julian Oliver
 http://julianoliver.com
 http://criticalengineering.org
 PGP key: https://julianoliver.com/key.asc
 Beware the auto-complete life.


I couldn't find much independent/unbiased info either.  As it is hosted on
cloudflare, I would be wary of it anyway.  Jmo.

-s


--
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.
-- 
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
compa...@stanford.edu.

Re: [liberationtech] // freevpn.me //

2015-07-26 Thread Shelley

On July 26, 2015 1:03:51 PM Julian Oliver jul...@julianoliver.com wrote:


..on Sun, Jul 26, 2015 at 07:54:10PM +, azrak_k...@hotmail.com wrote:
 Rule of thumb with VPNs do not use one unless you dont trust its source. 
This looks unreliable and I will be vary of it.


Agreed - I run my own OpenVPN servers.

I came across 'FreeVPN' while compiling a list of public and free OpenVPN
offerings, and no-one seems to know a thing about them.

Cheers,

Julian



The general rule of free services, as I'm sure most on this list know, 
is: you are not the client, you are the product.  I don't use free VPNs or 
free email, etc. nor do I recommend them to anyone.


-s



 On Sun, Jul 26, 2015 at 10:57 AM -0700, Shelley 
shel...@misanthropia.org wrote:

 On July 26, 2015 9:59:04 AM Julian Oliver jul...@julianoliver.com wrote:

  Hi list,
 
  Does anyone have any dirt (or information at all) on http://freevpn.me?
 
  They have an oddly absent reputation, quote themselves (whilst giving the
  appearance the quote is from a review) and seem to have no company/project
  footprint elsewhere (that I can find). A whois shows domain registration
  was mid
  2013.
 
  Cheers,
 
  --
  Julian Oliver
  http://julianoliver.com
  http://criticalengineering.org
  PGP key: https://julianoliver.com/key.asc
  Beware the auto-complete life.


 I couldn't find much independent/unbiased info either.  As it is hosted on
 cloudflare, I would be wary of it anyway.  Jmo.

 -s



--
Liberationtech is public  archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, change 
to digest, or change password by emailing moderator at compa...@stanford.edu.