Why you shouldn't use a fully free VPN

Status
Not open for further replies.
5

509322

The problem is that the vpn does offer almost only 10% of anonymity, 80% is obtained on your own own knowledge.
people have a false understanding trusting what they offer in their newsletters characteristics, which is a silly trap for idiots.

Most knowledgeable VPN users already know that they cannot expect anonymity. The only thing they can expect to a reasonably high level is decent data encryption.

The trap is a user thinking that they can build that "impenetrable privacy fortress" using a VPN. It takes a whole lot more than simply selecting a VPN with, what appears to be, solid privacy policies that protect their users, non-"Eyes" geographical location, etc. That stuff really is meaningless. Like you said, most of it is marketing gimmicks - because the VPN primary goal - just like most any company - is to grow its subscriber\user base.

To achieve the level of privacy that I see a lot of users wanting or expecting, requires a substantial knowledge and resource overhead. Using a VPN is only a fraction of what is required - and using something other than Windows.
 
Last edited by a moderator:

MeltdownEnemy

Level 7
Verified
Well-known
Jan 25, 2018
300
The vpn's makes you believe a lot of placebo things, but it's just marketing,They would have to offer you a bunch of things at all in one package (ownVM- own.hardy.navigator-ownhardy adblocker-). You can do it by yourself too. To prevent slightly over spionage on your websurf, you need a large list to do it, first thing's to take care from the perverse tracking if you're tring to protected by yourself with the best technics then you need. for example:
canvas & font fingerprint "totally disabled" or getting a random spoofed filter
Ramdom user agent. "Enabled"
webgl & webrtc totally "disabled"
flashplayer totally "uninstalled or disabled"
English Language enabled above all things.
same timezone coinciding with the country tunel "enabled"
dont you use vpn with proxy technics "doesn't work for concealment"
not to use your host pc, only op-out on VM "enabled"
harden config on navigator "enabled" TOR or any firefox clone.
VPN with Killswitch to forcing close Internet connection when the vpn crash.
as basic protection dnscrypt "enabled"
All disabled entire APIS.
Your own apps or extensions (adblockers and spoofers)
do not acept Cookies and disabling permanet javascript from any website, just have it enable in those Websites in who you trust, an clean always your VM by precaution.
And Take care from the metadata Changing your mores, schedules of internet use amount of pages, Do not make the same online activities as always, because they create a pattern of behavior that are indispensable sources to know who you are. those are some of the tips, almost impossible to improve privacy and anonymity online. The more techniques you have the better protection you have to confuse or prevent them from finding out who you are by making things more difficult. more time invested by them LOL..
 
5

509322

The vpn's makes you believe a lot of placebo things, but it's just marketing,They would have to offer you a bunch of things at all in one package (ownVM- own.hardy.navigator-ownhardy adblocker-). You can do it by yourself too. To prevent slightly over spionage on your websurf, you need a large list to do it, first thing's to take care from the perverse tracking if you're tring to protected by yourself with the best technics then you need. for example:
canvas & font fingerprint "totally disabled" or getting a random spoofed filter
Ramdom user agent. "Enabled"
webgl & webrtc totally "disabled"
flashplayer totally "uninstalled or disabled"
English Language enabled above all things.
same timezone coinciding with the country tunel "enabled"
dont you use vpn with proxy technics "doesn't work for concealment"
not to use your host pc, only op-out on VM "enabled"
harden config on navigator "enabled" TOR or any firefox clone.
VPN with Killswitch to forcing close Internet connection when the vpn crash.
as basic protection dnscrypt "enabled"
All disabled entire APIS.
Your own apps or extensions (adblockers and spoofers)
do not acept Cookies and disabling permanet javascript from any website, just have it enable in those Websites in who you trust, an clean always your VM by precaution.
And Take care from the metadata Changing your mores, schedules of internet use amount of pages, Do not make the same online activities as always, because they create a pattern of behavior that are indispensable sources to know who you are. those are some of the tips, almost impossible to improve privacy and anonymity online. The more techniques you have the better protection you have to confuse or prevent them from finding out who you are by making things more difficult. more time invested by them LOL..

The problem is that the vast majority of users find that they cannot cope with a system that has been hardened for high-level privacy. They find that too much is disabled or that they cannot use stuff that they want to use, it is too much of a hassle to configure, it takes more than a few clicks to enable a lot of stuff when you need it, etc.

A high-level privacy rig is a pain. It really is. That is why the number of users that actually use one is infinitesimal.
 

MeltdownEnemy

Level 7
Verified
Well-known
Jan 25, 2018
300
The problem is that the vast majority of users find that they cannot cope with a system that has been hardened for high-level privacy. They find that too much is disabled or that they cannot use stuff that they want to use, it is too much of a hassle to configure, it takes more than a few clicks to enable a lot of stuff when you need it, etc.

A high-level privacy rig is a pain. It really is. That is why the number of users that actually use one is infinitesimal.

My browsers was hardened with those techniques, and has not lost capabilities, would be another story if I with it playing online games with vulkan or directx library or using oculus 3d experience and other functions that come at default. normally I can see youtube, i can participate in forums and pages with several apis, and there is no interference. only some functions, experience, notifications being sacrificed, but everything else remains the same, It is much better this way with this customization, since many vulnerabilities are cut and the performance itself is improved.
 
  • Like
Reactions: oldschool
5

509322

My browsers was hardened with those techniques, and has not lost capabilities, would be another story if I with it playing online games with vulkan or directx library or using oculus 3d experience and other functions that come at default. normally I can see youtube, i can participate in forums and pages with several apis, and there is no interference. only some functions, experience, notifications being sacrificed, but everything else remains the same, It is much better this way with this customization, since many vulnerabilities are cut and the performance itself is improved.

Browser tweaks are only a part of it. There is a whole lot more to it.
 

Arequire

Level 29
Verified
Top Poster
Content Creator
Feb 10, 2017
1,822

Atlas147

Level 30
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Jul 28, 2014
1,990
I used Cyberghost when they had a free tier, basically a lot of restrictions as to how long it took to connect because there was "limited bandwidth" on their free servers and you basically had to wait roughly 2-3 mins before being connected to their servers. Also they didn't support torrenting for their free tier (basically to save themselves the trouble of fighting DMCA takedown notifications I'd imagine).

I ended up purchasing their premium services because I thought their services were really good and have never looked back since.

I think the main goal of VPN services having free tiers is to ultimately bring the customer on to one of their paying tiers and not necessarily to spy on users and farm their data.
 

uninfected1

Level 11
Verified
Top Poster
Well-known
Jan 28, 2016
529
I used Cyberghost when they had a free tier, basically a lot of restrictions as to how long it took to connect because there was "limited bandwidth" on their free servers and you basically had to wait roughly 2-3 mins before being connected to their servers. Also they didn't support torrenting for their free tier (basically to save themselves the trouble of fighting DMCA takedown notifications I'd imagine).

I ended up purchasing their premium services because I thought their services were really good and have never looked back since.

So you're not too bothered about them sharing customer data with Facebook then?
 
  • Like
Reactions: oldschool
5

509322

Windscribe's argument against being located in a 5-eyes country:
It doesn’t matter how many eyes you have – Windscribe

Basically, this would only matter to me if I was doing something that would draw the heat of "Eyes" intelligence agencies. "Eyes" is really all about terrorism and other really serious crimes against the member states - such as treason, espionage, sabotage, etc.

If you are on U.S. soil and are suspected of committing a crime under federal jurisdiction - basically, whether or not use of an electronic device was a part of the crime - then the agencies may hack your devices. Period.

Post-Patriot and all the pertinent laws and federal court decisions that came post-Patriot... guess what ? All they need is suspicion.

Research all of it.
 
Last edited by a moderator:

uninfected1

Level 11
Verified
Top Poster
Well-known
Jan 28, 2016
529
Basically, this would only matter to me if I was doing something that would draw the heat of "Eyes" intelligence agencies. "Eyes" is really all about terrorism and other really serious crimes against the member states - such as treason, espionage, sabotage, etc.
I think that's correct. Regarding the article @Arequire linked, obviously Yegor is going to defend Windscribe being based in a five eyes country because it's his company, but he does make some reasonable points. And not that I would condone such things of course, but I think it is highly unlikely the authorities of five eyes countries are going to come after someone for downloading the odd bit of copyrighted material. As you say, their concerns relate to the serious crimes you mention.
 

Atlas147

Level 30
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Jul 28, 2014
1,990
So you're not too bothered about them sharing customer data with Facebook then?

When you google "VPN" and click on any links google already knows and targets ads to you so no I'm not bothered that facebook knows my interest in VPNs, what's important is that the data that is tunneled through theri VPN servers are safe and protected. Should any VPN provider release that information to facebook or anyone for that matter, that should be a concern.
 
5

509322

I think that's correct. Regarding the article @Arequire linked, obviously Yegor is going to defend Windscribe being based in a five eyes country because it's his company, but he does make some reasonable points. And not that I would condone such things of course, but I think it is highly unlikely the authorities of five eyes countries are going to come after someone for downloading the odd bit of copyrighted material. As you say, their concerns relate to the serious crimes you mention.

Here in the U.S., the police just need reasonable suspicion. That's it. And if they have that, then they can pursue you via numerous means - of which only one is to hack your systems. They don't need a judges authorization, they don't need a court order, they don't need a letter from the national security mechanism, etc. That's how it works. So in the end the VPN policies are meaningless. The only thing that matters is the police's resolve and determination to hack you. If they have the time and resources, then they will almost certainly succeed.

None of that has anything to do with your anonymity.

And no VPN is going down in flames on behalf of users who expect\want 100 % anonymity. It doesn't work that way. Way too many people on these forums pursue that "VPN that will guarantee 100 % privacy." You can try it, but without doing a whole lot of other things it is a waste of time.
 
Last edited by a moderator:

zzz00m

Level 6
Verified
Well-known
Jun 10, 2017
248
I use a VPN for the data encryption primarily, and secondarily, for preventing my ISP from collecting and selling my web browsing history.

So I guess that my main concerns are security and privacy. I get that anonymity is a whole other issue, beyond my requirements, but my preference is for a paid VPN to do what I need. I did test the waters with a few free services, but the bandwidth that I need for full time coverage is only available with a paid, unlimited service. There are a few good options available.
 

zzz00m

Level 6
Verified
Well-known
Jun 10, 2017
248
I don't currently use a free VPN. A paid plan was the only solution that meets my needs for unlimited monthly bandwidth. But I tested a free version before I bought into the paid version. There are companies that offer both, a couple of examples would be Windscribe and Avira Phantom.

But with that said, I believe that there is probably a difference between VPN companies that operate on a free-VPN-only business model, and those that choose to offer two tiers. By offering a free version in addition to paid, they hopefully would expose their service to a broader paid audience, and at the same time provide a time unlimited demo. So in that case, they would have a different way to monetize than simply selling your data.

At any rate, I would rather have any VPN try selling my data than my ISP, because thay have significantly less personally identifiable info about me to correlate with than my ISP. For example your ISP knows exactly where you live, your phone numbers, what you watch on TV, your video on demand rental history, credit history, access to your email (clear text) if you use their servers, and your financial info related to your payment methods. Yup!

A free VPN service will know your IP address, and maybe an email address that you verified with. If you use HTTPS, they can only see the domains you connect with, and the related DNS lookups you make through their servers. I think the release of that info would be potentially much less damaging than a data breach, or outright sale of your data via your ISP.

Plus the cynic in me wonders if the media reports of untrustworthy free VPNs is just an attempt to pump paid VPN services... :geek:
 

Hi Brothers

Level 2
Verified
Apr 19, 2018
71
Reviving this topic, Nord VPN has a free 3 day trial, no restrictions (which is why it's only for 3 days, but you can make a new account afterwards, available here) You can download TBs of data, use any of their multiple thousands of servers, P2P etc. and according to this Which VPN Services Keep You Anonymous in 2017? - TorrentFreak they do not store absolutely anything, more info there. And the download/upload speed is almost as high as my ISP's (100 mbps download and 50 upload)
 

Atlas147

Level 30
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Jul 28, 2014
1,990
Reviving this topic, Nord VPN has a free 3 day trial, no restrictions (which is why it's only for 3 days, but you can make a new account afterwards, available here) You can download TBs of data, use any of their multiple thousands of servers, P2P etc. and according to this Which VPN Services Keep You Anonymous in 2017? - TorrentFreak they do not store absolutely anything, more info there. And the download/upload speed is almost as high as my ISP's (100 mbps download and 50 upload)

Some trial accounts have restrictions like no P2P on their network or a limited amount of bandwidth. Usually signing up for a trial account would also require you to input a credit card into your account and would charge you when you start your 3 day trial or something like that.
 
  • Like
Reactions: Weebarra
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top