VPNs Won't Save You from Congress' Internet Privacy Giveaway

[Miles Archer]

For the record, I am currently using AirVPN, which costs about $8 per month. I have also used ExpressVPN, which is $12 per month. Both are among the top-rated VPNs, and neither keeps logs pertaining to your activity, only raw traffic, which would reveal nothing, so nothing about you can be "sold," either.

Read this article: Which VPN Services Keep You Anonymous in 2017?, https://torrentfreak.com/vpn-services-anonymous-review-2017-170304/ I also do NOT use Tor for the reasons listed below.

The title of the article i posted here is a bit misleading, because a VPN CAN protect you, but you MUST choose the RIGHT one. As an example, Golden Frog DOES keep logs of your activity, and DOES turn them over if asked to. So do many others.

VPNs Won’t Save You from Congress’ Internet Privacy Giveaway

https://www.wired.com/2017/03/vpns-wont-save-congress-internet-privacy-giveaway/

Many security experts recommend that you use what’s called a virtual private network, or VPN for short, to protect your privacy. In effect, VPNs route all your traffic through their service. Instead of your internet provider having a list of websites you’ve visited, you’ll only ever appear to connect to one particular server.

While VPNs are an important privacy tool, they have limitations. The most obvious: You need to trust your VPN provider not to track you and sell your data itself.

While using a VPN, you might find that you can’t connect to all the sites and services you’re used to using. Netflix, for example, tries to block all VPNs to prevent people from accessing content not licensed in their home countries. Others sites may block particular VPN providers used by malicious hackers or criminals to cover their tracks. It can be hard to tell if you can’t access a particular site because you’ve misconfigured your VPN software, the site is down, or if a company has blocked your VPN provider from accessing a site.

Tor, privacy advocates’ favorite browsing software, tries to anonymize your internet use by routing your traffic through multiple servers around the world. It’s free and, since it’s an open source project tied to no company, at least partially solves the trust problem. But it’s more complex to set up, typically slows down your connection speeds, and malicious Tor servers do exist. Many sites and services also block Tor. Regardless, neither VPNs nor Tor would protect you from software like Carrier IQ that tracks what you do locally.

[Kacy]

1. Use DuckDuckGo as your browser.

They don’t track anything. That’s why people use DuckDuckGo. Check it out. I like it.

[jberryhill]

2. That's got nothing to do with this

It doesn't matter what browser you are using. Your ISP can track the connections you are making.

[marked50]

3. I'm no expert but I think that the issue is with

ISP's not Search Engines. DuckDuckGo is a search engine, not a browser and the fact that they(DuckDuckGo) don't track your searches is important it still does not stop your ISP from having the ability to track your website browsing information. So don't assume you are "private" by just using DuckDuckGo.

[Miles Archer]

6. 100% correct.

DuckDuckGo does not retain your search history. But for anyone reading this who is not using a VPN, your ISP has a record of every site you've visited. There may not be a record of what you searched for in DuckDuckGo, but there is a guaranteed record of every site you visited after getting your search results.

Also from the article (same link as my OP):

In 2011, security researcher Trevor Eckhart discovered that AT&T, Sprint, and T-Mobile all sold smartphones with preinstalled tracking software. Carrier IQ could track everything from the websites customers visited to Google search terms–ostensibly for troubleshooting purposes, not advertising.

An FCC investigation later caught Verizon secretly bundling phones with its own tracking files known colloquially as “zombie cookies.” The carriers eventually killed off these programs. But if not for the work of dedicated researchers, customers would never have known they existed in the first place. That’s why laws requiring that internet providers seek explicit, opt-in permission before selling data are important.

The context here is smartphones, but ISPs track everything. They see data...sites you've visited, anything you have downloaded...but a VPN service (IF they have a strict "no logging" policy)...only records traffic with no data attached. If you go to the TorrentFreak link I posted, they asked an extensive list of questions to each VPN provider. People considering this should choose the ones who do not log any persona identifiable data. If they get a court request for logs, they have to comply. Some VPNs that operate outside of the U.S. and are not within the legal jurisdiction don't.

But if a court issues an order for VPN logs, and it meets the criteria outlined in this thread, you are just a fish who spent some time swimming in a stream, and you are pretty much invisible to anyone who wants to snoop into your data, for whatever reason.

[FDRsGhost]

16. That's a search engine, not a browser

[dixiegrrrrl]

4. We use P I A...

Private Internet Access, one of the highest rated.
no logs
even with our slow DSL we manage to roam pretty well. I just keep it on all the time, out of habit now.

[Miles Archer]

5. I used it for a long time, LOVED it, and could not get it to work with Windows 8 or 10

I went back and forth with their tech support...they were very helpful, but in the end, I couldn't get it to work.

In terms of user-friendliness to VNP novices, I would suggest ExpressVPN. I like AirVPN, bit I've also been a moderate computer geek for years, so its slightly higher learning curve wasn't an issue for me.

The other issue for newbies on this is that you have to set the network lock. PIA, ExpressVPN, and AirVPN all have it. Sometimes...not often, but sometimes...VPN servers will drop their connection. If this happens, your IP address is exposed. If you have the network lock set, it shuts off your Internet access until you reconnect. AirVPN and ExpessVPN will automatically reconnect for you and then "unlock" your connection. It has been a while since I have used PIA but I believe it does the same. And with ExpressVPN and AirVPN, I see no noticeable change in my connection speed,

Any one of the three would be my pick. No logs. No hassle.

[dixiegrrrrl]

9. We have outages often, here, for various reasons, some of them not known.

PIA automatically disconnects and it can re-connect once we are back online, so I don't have to worry about any download issues.
I like that it throws out an impossible to miss announcement of connecting and disconnecting.

[Ilsa]

7. You can easily select your ISP or a VPN

When you bring up a web browser?

We use Netflix and my spouse needs to use our ISP for work. But it sure would be nice to prevent our info from being sold, as much as possible.

[dixiegrrrrl]

8. Your ISP is what you are paying for to connect you to the internet

Like Comcast or whatever

Once you are connected to the internet, you can go find a VPN site, learn about it, and sign on.
they tell you to download the connection to make your VPN work.
I only use it on Firefox because I read that Chrome browser can track even with a VPN.

I am also aware that Windows, esp. 10, send Microsoft a lot of details of your browsing.

We won't use Windows, we use Linux browser, have never had problems with it.

This is a good site to check out the top VPNs
and a good site to find out about privacy issues,

https://torrentfreak.com/vpn-anonymous-review-160220/

[Ilsa]

10. Thank you. NT

[dixiegrrrrl]

11. If you use Microsoft, THEY can tell where you go,

People like Opera browsser ( you can use it even if your computer is running Microsoft)
but
just found out that Opera has been sold to the Chinese.
http://www.democraticunderground.com/10028868100

You need a VPN.
each computer in your house needs to have one installed ( via download)
The one I use keeps NO records at all.
we use the 6.00 a month version, no problems. We have 4 computers, all covered by the same monthly fee.

Start here:
https://www.privateinternetaccess.com/pages/how-it-works/

[eniwetok]

12. WATCH OUT FOR MAIL PROBLEMS WITH VPN!

I have Thunderbird hooked up to 6-8 email accounts... and it checks in every 10-15 minutes or so. If the mail service is used to seeing you log in from a certain IP or location... and all of a sudden you're logging in from halfway across the country or from Europe... the mail server might flag the log in as suspicious and ask you to provide more info... or a phone verification. It can be a pain in the ass... so just be careful checking mail from other than your original IP or location.

As for my VPN, I use CyberGhost. They had a great XMas deal that I could not pass up... $25 for a year. The regular price is around $65

[Miles Archer]

13. I have no email issues with AirVPN, and didn't have one with ExpressVPN either.

In terms of privacy and every other aspect, the two are comparable. I am using AirVPN right now because it's $8 per month rather than $12 for ExpressVPN.

I get "I am not a robot" verifications often from Google, though, saying they have detected suspicious traffic from my network. Yeah, it's a pain, but not as big of a pain as my ISP recording my every keystroke.

[eniwetok]

15. keystrokes....

I can't think of any way a ISP can capture keystrokes without some sort of spyware... but since all of our posting here is in the clear... they could capture whatever we post... not to mention login info. I DO wish DU would get its act together to implement HTTPS.

[Miles Archer]

17. Carrier IQ, reportedly installed on over 140 million devices

Privacy concerns surrounding Carrier IQ were initially brought to light by Trevor Eckhart, a security researcher who became alarmed by the extent of information accessible by the analytic software. In the following video, Trevor presents much of his findings, which seemingly demonstrate Carrier IQ's keystroke logging, location tracking and ability to intercept text messages. Even information that should be transferred only within encrypted sessions is captured in plain text by Carrier IQ. During the entire demonstration, Trevor's phone was in airplane mode, operating only over WiFi. Although his actions were outside the scope of his wireless carrier (Sprint), the software continued to monitor his every key press. On his Android device, it's evident that Carrier IQ is running, even though it does not appear in the list of active processes. Further, the application doesn't respond to "Force Quit" commands, and it's set to startup when Android launches.

Carrier IQ has recently found itself swimming in controversy. The analytics company and its eponymous software have come under fire from security researchers, privacy advocates and legal critics not only for the data it gathers, but also for its lack of transparency regarding the use of said information. Carrier IQ claims its software is installed on over 140 million devices with partners including Sprint, HTC and allegedly, Apple and Samsung. Nokia, RIM and Verizon Wireless have been alleged as partners, too, although each company denies such claims. Ostensibly, the software's meant to improve the customer experience, though in nearly every case, Carrier IQ users are unaware of the software's existence, as it runs hidden in the background and doesn't require authorized consent to function. From a permissions standpoint -- with respect to Android -- the software is capable of logging user keystrokes, recording telephone calls, storing text messages, tracking location and more. It is often difficult or impossible to disable.

The company's newly appointed CEO, Larry Lenhart -- who remains part of Mohr Davidow Ventures -- recently published a video to YouTube explaining the firm's stance on privacy, in which he outright denies that Carrier IQ records keystrokes or provides tracking tools. Perhaps the company is truthful in its assertion, although the statement seems to contradict the design and capabilities of its software.

[eniwetok]

19. I was referring to PCs

Ya, who the hell knows what's going on unrooted android devices.

[Miles Archer]

20. I understand, but if the technology exists for androids...

...who's to say what can be tracked on a PC?

One of the favorite tools in a hacker's tool kit is keyloggers. And how many people actually read every single word of their ISP's privacy policy?

[eniwetok]

22. PCs have more malware detectors...

Getting back to my original point... I don't see how an ISP can log keystrokes without some spyware. Carrier IQ may be such spyware on Android devices... but my ISP doesn't ask me to install anything.

I don't trust any corporation not to see our private info as an asset they can sell. I remember back in 99ish when Doubleclick changed its policy from just wanting anonymous info to being free to sell even personal info. And even if the corporation has in its TOS an assurance of confidentially... it doesn't mean it can't change its policies... OR in the case of bankruptcy... creditors won't see that private info as an asset. This happened in a case about 15 years ago... I can't remember the site... maybe etoys.com.

Smart phones are scary devices because of their ability to work in ways the user doesn't understand or approve of.

[NightWatcher]

14. Don't use free VPN's. If the "product" is free for you, YOU are the product.

[Miles Archer]

18. Many "free" VPNs are honeypots.

And for anyone who is reading this and not familiar with honeypots, you install a "free" VPN, and everything you do online gets sent in a nice, tidy little report to either the FBI, attorneys for the The DMCA (Digital Millennium Copyright Act, or both).

Now, obviously, if you're not illegally downloading movies, music, etc, or engaging inn any other illegal activities, no one's coming after you.

BUT, 100% of what you think is being shielded by using a VPN is getting reported to whoever set up the "honeypot."

As stated in my OP, this article reviews every current VPN for 2017 that you can trust with your privacy: https://torrentfreak.com/vpn-services-anonymous-review-2017-170304/

[Blazesweetie]

21. Question about the paid VPNs mentioned

Regarding the VPNs mentioned above that have monthly or annual fees, hypothetically, is it still possible to use sites like Bit torrent and U torrent? Thanks.

[Miles Archer]

23. Depends on the VPN.

That's why it is important to go to the link I shared and read the reviews...one of the questions asked is "Do you allow torrents?" AirVPN and ExpressVPN DO, at one point, Private Internet Access did NOT.