Seven VPN firms claiming No Logs leaks 1.2TB of data and 20M user logs

upnorth

Level 68
Verified
Top Poster
Malware Hunter
Well-known
The VPN company in the discussion is a Hong Kong-based UFO VPN owned by Dreamfii HK Limited.

Perhaps, the most ironic moments in the cybersecurity world occur when those who promise to protect your online privacy cannot guard their own turf. We’ve seen this happen from time to time with security firms getting hacked themselves. Another similar case has emerged recently when the database of a Hong Kong-based VPN provider called UFO VPN was exposed with more than 20 million users logs. Discovered by researchers from Comparitech on July 1st, 2020; the exposure occurred due to the database hosted on an Elasticsearch cluster being left without any password.

Worth 894 GB, the data allegedly included plaintext passwords, IP addresses, timestamps of user connections, session tokens, information of the device, and OS being used along with geographical information in the form of tags. The implications of this are pretty dangerous in that not only user accounts are at risk of being taken over by malicious actors but users can also be tracked online. Furthermore, using the session tokens, any encrypted data that someone gains access to could also be decrypted rendering the entire concept of encryption useless in this scenario.
 
If you talk about privacy disconnect from internet, stop using phones and TVs.
You will never be anonymous on internet, no matter what you do.
Just accept that and stop thinking and looking for solutions
 
Though these VPN's have shown themselves to be untrustworthy, it don't mean that all VPN's also lie about there data retention - The issue is Free, Cheap & VPN cannot exist in the same sentence - There are many threads with i want a good free VPN, AV, whatever - People today want something esp in PC program for nothing & with a VPN server space & bandwidth are not cheap or free - There are some VPN's I trust to a degree, IVPN, ExpressVPN. Mullvad, Perfect Privacy for example.

The problem is none of these are anything like cheap - If you disdain VPN's & feel this latest revelation is amusing or even funny that's sad., your ISP could be less than trustworthy also? If you want a VPN be prepared to pay in excess of £100 a year minimum (I do)

@security123 - You obviously dislike any VPN & use every opportunity to point this out, I disagree with you totally - Pointless discussing it as it's been done 100s of times? You seem obsessed with attack surfaces, are you wanted by many governments? :p:p:p
 
Last edited:
@security123 - You obviously dislike any VPN & use every opportunity to point this out, I disagree with you totally - Pointless discussing it as it's been done 100s of times? You seem obsessed with attack surfaces, are you wanted by many governments? :p:p:p
dIS0skV.jpg
 

Recently browsing

Members who viewed this thread in the last 5 minutes

Back
Top