VPN Questions inc. Nord VPN

DocQuincy

In general I've been thinking about privacy and security more. As such, I'm considering starting to use a VPN but am not sure whether it's worth it. I don't care how tame your internet searches are the thought of that kind of data being leaked makes me nervous. I use Google services a lot and even though I have history switched off I don't trust them to not track things by my IP and account.



I like the idea of a VPN for privacy and have been looking at NordVPN.


My main reservations and questions are:

1. If you don't trust your ISP why would you trust a VPN? Nord claim no logging but how do you know? I guess you take it on faith. How much can/do your ISP log? I'd imagine on a HTTPS connection they only really know the host and IP, nothing more — and logging too much would cripple them in terms of managing the data. Is that right?
2. Do VPNs slow your internet access down by much?
3. I use MacOS, Android and Linux (Fedora so need software in RPM format). When it comes to their desktop software Nord do not support RPM Linux, only .deb. But you can set a VPN connection within the OS. What is the difference between that and using their app (presuming you are familiar with Nord)? If you just want to route all network traffic through the VPN I'd guess I'd be okay without the software.
4. Can you typically use the VPN for specific protocols only? On my Mac in my office I have a dedicated IP because I FTP into servers that require my IP to be whitelisted (cPanel FTP Enforcer). With Nord, can I exclude FTP as a protocol from usng the VPN? I can't find anything on their website. If FTP goes through the VPN it will cause me problems. I don't generally FTP on Linux so this is irrelevant to my previous point.

Thanks.

Frozen_up_north

The question of VPN security crops up regularly, I wouldn’t trust any of them if I needed real security against an oppressive regime. There is nothing to stop a government department setting up a VPN...

Back to practical matters, I’m currently in Tenerife for a Christmas break. The hotel only has Spanish TV, courtesy of my VPN we can watch UK TV via the BBC iPlayer. We are using the free hotel WiFi, so routing all the internet data via a VPN adds a little peace of mind as open WiFi is a known security risk.

Your mileage may differ, but we spend a lot of time overseas and find a VPN almost essential.

Forgot to mention, speeds via a VPN are a bit slower, but it’s still plenty fast. Approx 8Mb/s here via VPN, 10 to 12Mb/s without VPN. I am using an iPhone, with a VPN app.

DocQuincy

Thanks for your reply!

I wouldn’t trust any of them if I needed real security against an oppressive regime. There is nothing to stop a government department setting up a VPN...

That's certainly possible but is it probable?

Back to practical matters, I’m currently in Tenerife for a Christmas break. The hotel only has Spanish TV, courtesy of my VPN we can watch UK TV via the BBC iPlayer. We are using the free hotel WiFi, so routing all the internet data via a VPN adds a little peace of mind as open WiFi is a known security risk.

I don't really use public wi-fis and being able to use the internet under a different location is not really a reason I'd use VPN (though on occasion it would be useful), it's more the privacy side.

Forgot to mention, speeds via a VPN are a bit slower, but it’s still plenty fast. Approx 8Mb/s here via VPN, 10 to 12Mb/s without VPN. I am using an iPhone, with a VPN app.

That's good to know. How easy is it for you to switch between VPN and your direct internet connection? Sometimes you may wish to choose speed over privacy.

Another thing on my mind is if you're sharing a network with other people on the VPN and they use it for illegal activities, is there any chance you could get accused of what they've done?

Also, if you don't mind me asking, what service are you using and how much is it?


The jury is still out for me!

that

DocQuincy wrote: »

My main reservations and questions are:

1. If you don't trust your ISP why would you trust a VPN? Nord claim no logging but how do you know? I guess you take it on faith. How much can/do your ISP log? I'd imagine on a HTTPS connection they only really know the host and IP, nothing more — and logging too much would cripple them in terms of managing the data. Is that right?
2. Do VPNs slow your internet access down by much?
3. I use MacOS, Android and Linux (Fedora so need software in RPM format). When it comes to their desktop software Nord do not support RPM Linux, only .deb. But you can set a VPN connection within the OS. What is the difference between that and using their app (presuming you are familiar with Nord)? If you just want to route all network traffic through the VPN I'd guess I'd be okay without the software.
4. Can you typically use the VPN for specific protocols only? On my Mac in my office I have a dedicated IP because I FTP into servers that require my IP to be whitelisted (cPanel FTP Enforcer). With Nord, can I exclude FTP as a protocol from usng the VPN? I can't find anything on their website. If FTP goes through the VPN it will cause me problems. I don't generally FTP on Linux so this is irrelevant to my previous point.

Thanks.

1) You can never be certain if the vpn supplier logs or not. IpVanish said they did not log, but they did. PIA said they do not keep logs, have been twice challenged by this.
https://restoreprivacy.com/no-logs-vpn/
2) you will usually notice a decrease in speed, and it can make some games unplayable. You can also switch the vpn off too.
3) I am not with Nordvpn, but they are one of the biggest providers, and I am sure google will have a solution for this. Also it is better to run the vpn on the router as it will protect the whole house, but using the client may give you a greater throughput and it will be easier to change country
4) VPN is more akin to a new nic. VPNs do not block, that is not their function. To state the obvious, if you dont ftp, then nothing will go out anyway. Firewall is the device that blocks and lets through traffic to specific nic ip address. it is up to your firewall and its functionality which happens before the data enters the vpn. You can often choose protocol, or ip address, or both to ban or allow.
4b) the VPN 'Kill Switch'. Most client have a killswitch, should you vpn cease, you do not leak data along open path. This 'Kill Switch' look great, but most times it is just a firewall rule that says only communicate along this path. They work, so it would be feasible to stop you ftp traffic too.
5) because there is no logging, it is impossible to say for certain who did what. However, if the vpn is on in an evening and there is a fair amount of data downloading for about 1:40 mins do about 2:00, your isp could summize you are watching a film. It could be a pirate file or it could be Netflix, or bbc. Now if I was your isp and I thought 'this bug-ger is paying someone else to watch a film instead of me, I'm potentially loosing revenue, so I will traffic manage the connection, and that will put an end to it" and he may come back to me.

Frozen_up_north

I’m using CyberGhost, the paid for version. I have the iPhone app in use at the moment, my OH has it on her phone too. I have their app/program on each of our laptops and a desktop. You can use up to 7 devices on the account, cost was €70 for a 2 year contract in October 2017. They have a free trial and various offers from time to time.

While CyberGhost currently works for the BBC iPlayer, there isn’t a guarantee it will continue to work, as the BBC (and others) don’t like you using their services outside the UK... one TV player requires that you turn on the GPS in your phone/iPad in order to watch TV.

As to a government setting up a VPN, there is no easy way to tell who is behind a service, or who has a connection to their servers. Remember the UK was happily selling encryption hardware after the Second World War knowing full well they could easily monitor the traffic!

that

Frozen_up_north wrote: »

While CyberGhost currently works for the BBC iPlayer, there isn’t a guarantee it will continue to work, as the BBC (and others) don’t like you using their services outside the UK... one TV player requires that you turn on the GPS in your phone/iPad in order to watch TV.

Should not effect you long term, as you will just set up another vpn from your home to your mobile device, and bbc will think you are viewing it from uk, but you will have to leave your pc on at home

DocQuincy

Thanks to you both. I am especially pleased to see Nord on the “No Logs VPN” list.


To be clear, I am mainly concerned with hiding my internet searches. I do not do any file sharing and any films, etc I watch online are through iPlayer, Netflix or rented through Google Play, so all legal for me to watch. I would likely switch VPN off for this so I get faster download anyway. If my ISP is sad enough that they want to know which episodes of Would I Lie to You I am watching I really don't care!



Not that I search anything particular risqu! but I think that what you search should be private and no company is immune to having data stolen. As mentioned before, I actually don't want to use VPN for FTP, etc as it would cause me problems, only HTTP(S). So, I guess I should maybe look at Nord's browser extensions first.

VPN is more akin to a new nic. VPNs do not block, that is not their function. To state the obvious, if you dont ftp, then nothing will go out anyway. Firewall is the device that blocks and lets through traffic to specific nic ip address. it is up to your firewall and its functionality which happens before the data enters the vpn. You can often choose protocol, or ip address, or both to ban or allow.

I'm unsure as to the point you're making here but then I am not a network admin. I'm not so much interested in blocking as assigning the VPN to certain ports (just 80 and 443 would do it I guess) and then leaving everything else to my local connection. Are you suggesting it's all-or-nothing? I'm wondering at this stage if I just need the browser extension.



Nord don't seem to do a free trial but they do offer a 30 day money back guarantee so maybe I should just try it!

forgotmyname

If its just searches your trying to hide whats wrong with something like Opera with its built in VPN?

Would i trust a VPN provider not to have logs? Probably not.

Frozen_up_north

Search with DuckDuckGo, rather than Google. See:
https://duckduckgo.com/privacy

zagubov

Epic browser may also be useful.

RumRat

Frozen_up_north wrote: »

I’m using CyberGhost, the paid for version. I have the iPhone app in use at the moment, my OH has it on her phone too. I have their app/program on each of our laptops and a desktop. You can use up to 7 devices on the account, cost was €70 for a 2 year contract in October 2017. They have a free trial and various offers from time to time.

While CyberGhost currently works for the BBC iPlayer, there isn’t a guarantee it will continue to work, as the BBC (and others) don’t like you using their services outside the UK... one TV player requires that you turn on the GPS in your phone/iPad in order to watch TV.

As to a government setting up a VPN, there is no easy way to tell who is behind a service, or who has a connection to their servers. Remember the UK was happily selling encryption hardware after the Second World War knowing full well they could easily monitor the traffic!

I'll second CyberGhost.....I renewed recently £72 for three years added to my remaining 6 months from the last renewal.
Using it on all PC's and a couple of phones.
I've had zero problems to date.
As far as trust goes, I trust them more than I trust the Government.;)