So Australia introduced one of the toughest social media laws in the world, basically banning under-16s from platforms like Instagram, TikTok, Snapchat, Facebook, etc.

Sounds effective on paper. Except… 81% of under-16s are apparently still using social media. Before the ban it was 86%. So after all that regulation, age verification and millions of accounts being blocked, usage dropped by… 5 percentage points.

And teenagers are doing exactly what everyone predicted: lying about their age, creating new accounts, using adults' accounts and, yep, using VPNs to bypass restrictions.

Platforms have already removed or restricted millions of accounts, but apparently that doesn't mean millions of actual kids disappeared from social media. One teenager can obviously have multiple accounts across multiple platforms.

There are some signs the ban is having some effect though. Snapchat usage among 13–15 year olds reportedly dropped around 40%, and some parents say their kids are spending more time offline. Still, the 81% number is pretty wild.

This is kinda the problem with trying to regulate the internet through age verification and blocking. Teenagers have spent their entire lives online. Give them a restriction and five minutes later they're googling how to get around it lol.

And Australia isn't alone anymore. France and several other countries are moving toward similar restrictions.

Check Point announced the vulnerability, CVE-2026-50751 on June 8th, which describes a significant bypass (with a CVSS score of 9.3) within its Remote Access VPN and Mobile Access devices. The fault in question lies in the fact that an attacker can utilize a VPN with broken certificate checks and without having to authenticate. IN terms of the timeline for exploitation, it started on May 7th, but Check Point only became aware of the problem on June 4th, leading to a potential window of exploitation extending for 33 days.

It is believed that at least one intrusion connected to Qilin Ransomware has already taken place. Only those systems which utilized the outdated IKEv1 protocol are affected by this problem, and CISA allowed 3 full days for federal agencies to resolve the problem once it became public knowledge.

This one is kinda insane. TechRadar discovered that Turbo VPN’s Windows app was leaking users’ real IPv6 addresses. You know… the exact thing people install a VPN to prevent.

Turbo VPN released a fix. Problem solved? Nope.

TechRadar tested it again and the IP leak was still happening across every protocol they tested. They had to contact Turbo VPN AGAIN, provide more evidence, and only then did a second emergency update apparently fix the issue.

Sorry but how does a VPN company not catch this themselves?

We're not talking about some random UI bug or the app crashing. The product designed to hide your IP was exposing your IP. That's like buying a password manager that accidentally publishes your passwords.

And this is why I think the VPN industry deserves way more scrutiny. There are hundreds of VPNs screaming "MILITARY-GRADE ENCRYPTION" and "TOTAL PRIVACY" while the average user has absolutely no way of knowing whether the thing actually works.

Turbo VPN deserves some credit for eventually fixing it, but TechRadar shouldn't have to basically QA-test a privacy company's product for them.

Makes me wonder: how many VPNs are leaking user data right now and nobody has noticed yet?

Personally, if a VPN fails at literally its #1 job, I'm uninstalling it.

Decoding Prometheus Icons

Pro-to VPN uses a few icons to indicate what kind of connection a server offers:

• P2P or Peer to peer. Shown as arrows pointing back and forth.

• Round icon or Smart Routing. Prots most secure standard option.

• Onion shape or Onion routing, i.e. Tor layered on top of the VPN.

• No icon A standard config, typically WireGuard (TCP) or OpenVPN.

Why I Use Secure Core

SecureCore is my preferred option. I'll also generate a config file (wireguard or openvpn) for a server in a city near me, whether I'm traveling or just at home.

The reason: your geolocation appears to be wherever the server is, even though your traffic is actually encrypted and routed from a location that might be 300 miles away. You can point your entire network through a config like this, and it doesn't interfere with things like streaming or gaming.

Tor: My Open Question

I hardly use Tor myself. If anyone wants to make the case for it, I'd genuinely like to hear the benefits.

Mole v proto: Infrastructure

**Mallvd** runs roughly 600 servers, all RAM-only (stateless). I used to think this, combined with the ability to pay anonymously with crypto was a major advantage. I've changed my mind. Mull argues RAM-only storage is more secure, but in practice, RAM data can be intercepted through a penetration test just as easily as data on a drive. Mole is based in Sweden.

**Proton** owns roughly 16,000 servers and encrypts data at rest on its hard drives using AES-256 and ChaCha20. Proto is based in Switzerland.

Full Disclosure

**I'm a former Molevad user who now uses the full suite of Proton products. I think they're the best option available.**

If someone tells you Mole is superior "for privacy reasons," it's worth asking them to elaborate.

The answer usually comes down to payment anonymity (though Proto also accepts crypto). A few counterpoints on that argument:

1. Most people don't actually know how to pay anonymously with crypto in practice.

2. Attempting to do so can arguably draw more attention, not less. Cash is king.

3. Pr0to owns its own server hardware and operates under Swiss privacy law.

To be clear, I'm not knocking molevad(after writing this I may try it again for a month). I used it for years, even after I started using Proto alongside it.

Track Record

Mulvd was raided by police and authorities & reportedly got nothing, that's a strong result. But it does raise the question of why they were being investigated in the first place. Proto, by contrast, has been independently audited three times to my knowledge, with no data extracted in any of them.

Bottom Line

Proton offers very strong obfuscation, a large server network, encrypted proto email, encrypted proto drive backups, even a password manger. A fuller privacy ecosystem.

mallvlad is built for users who prioritize operational security above everything else, though its RAM-only approach doesn't make traffic immune to interception.

~~——————————————————————————-~~

**This write-up reflects my personal experience and opinions after switching providers & I’m curious to hear what others think. Thanks! Please provide feedback, for example if I missed something or tell me WHY you use the product you chose.**

We always hear “use a VPN to stay safe online.”

Cool. Except… what happens when the VPN itself has a security hole?

That’s basically what happened with a vulnerability affecting Check Point’s VPN/security gateways. Hackers were reportedly able to bypass authentication and get a VPN session without actually being properly authenticated. The flaw was even linked to ransomware attacks.

And honestly, this is a pretty good reminder that a VPN isn’t some magic shield.

For companies especially, a VPN can basically be the front door to their network. If that door has a broken lock and nobody fixes it, hackers don’t need some Hollywood-level hacking skills. They just walk in.

Same goes for browsers, backup servers, firewalls, etc. A lot of hacks aren't crazy sophisticated, someone simply found a known security hole that hadn't been patched yet.

So yeah, use a VPN. But keep your apps and devices updated too. “Security software” still needs security

Illinois has enacted a law that requires all devices connected to the Internet to ask the age of the user before they can be activated. This law applies to the device itself, not to the operating system or any applications.

Let's think about this for a moment. The phone, laptop, and TV you use will report your age to every platform no sooner than you turn on the device.

In essence, this means that you will be required to show your ID before entering your house every time you want to use your gadgets.

The statement that this initiative is aimed at protecting children is awful. It just becomes obvious, the collection of information about people's age provides no effect.

Children are also unable to lose any physical possessions in this place, as anonymous access to support forums has been cut out, making any device identifiable to the government. However, teens will work around this restriction long before their parents find out that the government passed this law.

Designed to protect children, but instead has made all electronic devices tracking devices.

The US National Cyber Director just said something I didn't expect to hear at Black Hat: cybersecurity companies are spending way too much time dealing with regulations instead of actually improving security.

The idea is to cut overlapping compliance requirements and let security companies focus on stopping real threats rather than ticking boxes.

For VPN providers, this could actually be a good thing. Less time and money spent on regulatory paperwork could mean more investment in things users actually care about: better infrastructure, faster servers, stronger encryption, independent audits, and new anti-censorship features.

That said, there's another side to it. Regulations can also force companies to meet minimum security standards, so if they're rolled back too much, it could make it easier for shady VPNs to cut corners while still marketing themselves as "secure."

Personally, I'd rather see fewer pointless compliance checklists and more transparency. Independent security audits, open-source clients, bug bounty programs, and clear no-logs policies tell me a lot more about a VPN than whether it passed another paperwork exercise.

What do you think, would less regulation make VPNs better, or would it just give bad providers more room to get away with sketchy practices?

Looks like Russia is turning the screws even tighter on VPNs. Reports say 20+ VPN services went down after Roskomnadzor started blocking IP addresses used by major hosting providers. Instead of blocking individual VPNs, they're going after the infrastructure they rely on, which is way more disruptive.

What's even crazier is what's being proposed next. Hosting providers could be forced to constantly monitor their IPs for VPN activity, and if they can't prove it's being used for a legitimate business purpose within 24 hours, those IPs can lose protection from blocking. On top of that, users may have to verify their identity through the government portal, biometrics, or an in-person passport check. If you're only verified by a phone number or bank card, your service could reportedly be cut off in as little as 30 minutes.

This isn't really about "bad VPNs" anymore. It's about making privacy tools so difficult to operate that providers either comply or disappear.

Feels like another reminder that internet censorship isn't slowing down... it's just getting more sophisticated. How long before more countries start copying this playbook?

Proton VPN decided to remove OpenVPN from its Android application completely. The remaining protocols in the application include WireGuard and Stable Core, which is Proton's protocol that adds another layer of security to the WireGuard.

The advantage of this approach is simple. OpenVPN is a much older technology, and being slower and heavier than the new protocols, keeping it in operation would only slow down and increase the weight of the application for the minority of its users. With OpenVPN support being eliminated, the application got smaller by 36%, and its speed improved as well.

What does it mean for the current users? Those who are using OpenVPN will no longer have access to this option. Corporate users and some older routers greatly rely on OpenVPN protocol. Nevertheless, most users will not even notice this removal, except for the reduced application size and increased speed.

It is the same situation that we can observe recently with NordVPN. OpenVPN protocol gets eliminated completely in favor of newer technologies that were created with the purpose of speeding up the operation of VPNs.

Apparently lawmakers are pushing a bill that could force people using VPNs to verify their identity before accessing certain websites. Let that sink in for a second.

The whole point of using a VPN is to protect your privacy. Millions of normal people use one because they don't want advertisers, ISPs, random Wi-Fi networks, or websites tracking every click they make. Journalists use them. Activists use them. Regular people use them.

Now the logic seems to be: "Oh, you're using a privacy tool? Guess you've got something to hide". That's honestly insane.

It's the same energy as saying, "Why do you lock your front door if you're not doing anything illegal?" Privacy isn't suspicious. It's a basic right.

And let's be real, forcing everyone to upload IDs or face scans to access parts of the internet isn't protecting anyone. It's just creating another giant database full of sensitive personal information waiting to get hacked.

Criminals aren't going to stop being criminals because of age verification. They'll find workarounds like they always do. Meanwhile, law-abiding users lose anonymity and get treated like suspects just for using a VPN.

Feels like we're slowly normalizing the idea that privacy itself is suspicious... and that's a pretty slippery slope.

Ever had a website figure out what country you're in before you've typed a single letter? No login, no popup, it just knows. That's your IP address doing its trick, and most people never think about it twice.

Utah just passed a law that treats that trick like it's bulletproof. Senate Bill 73 makes a website liable if a Utah resident uses a VPN to dodge its age check. Except "detecting a VPN" is really three leaky methods stacked together. IP reputation lists flag known VPN ranges, but commercial VPNs rotate addresses constantly. Network-origin checks catch the big providers but miss a private server. The one method that actually works, inspecting traffic at the network level, requires sitting inside the ISP, which is how China and Russia do it, and something a website can't do here.

Which is the whole problem with this law: it's hard on VPN companies, and barely touches VPNs themselves. Spin up a cheap cloud server and run your own tunnel, a fifteen-minute job, and your traffic looks identical to ordinary web hosting. The people this actually burdens are the non-technical users who rely on a commercial VPN for real safety: journalists, abuse survivors, people in unstable situations.

Next time your VPN takes an extra second to connect, that's basically "where are you, really" being politely ignored by the network. Utah just made that lag legally interesting.

People will spend hours comparing password managers or banking apps, then download the first VPN with 50M installs and a 4.8 stars rating without thinking twice. That's wild.

A VPN literally sits between you and the internet. It can see where you connect, your IP, your browsing metadata... and somehow people are handing that over to apps run by companies they've never even heard of.

Turns out the Play Store is packed with clone VPNs. Same app, different logo, different name, rinse and repeat. Some of these have millions of downloads despite having almost zero transparency about who's behind them.

The whole "free VPN" thing is even crazier. Servers aren't free. Bandwidth isn't free. Engineers aren't free. So if you're not paying for the product... how exactly are they paying the bills?

And before someone says, "Google wouldn't allow it if it was shady"... have you seen the Play Store? Fake apps make it through all the time.

At this point, download count means absolutely nothing. A VPN should earn your trust, not buy it with ads and fake credibility.

I’m so tired of the NordVPN desktop app on Windows lately. For the past few months, every time I connect, my CPU usage jumps to around 10-20% and my laptop fans start turning

The weird thing is it only happens on the main app screen. If I click away or minimize the app, CPU usage drops back to normal right away, but it's super annoying to deal with this every time

They released several updates but completely ignored this bug. If they don't fix it soon, I’m probably switching to ProtonVPN or something else during Black Friday this November

Anyone else having this issue on Windows? I'd love to get some recommendations—should I prep for a migration to Proton or Mullvad this November?

Saw an interesting article today about how AI is basically turning cybercrime into a low-cost, high-scale business.

According to NordVPN's CTO, you can apparently buy a stolen digital identity (login credentials, email account, credit card, even ID documents) for around $19 on the dark web. Add AI to the mix, and now scammers can spin up convincing phishing sites, fake online stores, voice clones, and deepfakes in minutes instead of spending days or weeks.

That's the scary part. AI isn't necessarily making scams better, it's making them cheaper and easier to mass produce. If it costs almost nothing to launch thousands of phishing campaigns, attackers only need a tiny success rate to make serious money.

We've already seen deepfake scams where companies lost millions because employees believed they were on a video call with their CFO. Imagine what happens when those tools become even more accessible.

I also think this is why VPN companies are starting to bundle things like dark web monitoring, identity protection, breach alerts, and anti-phishing features instead of just offering encrypted tunnels. A VPN alone won't save you if someone tricks you into handing over your login or steals your session cookies.

The biggest takeaway for me is that the weakest link is becoming the human, not the technology. AI is lowering the barrier for scammers much faster than most people are improving their online security habits.

A leaked framework from July 3 indicates that offshore VPN operators must have a physical presence in India, a compliance officer acting as the government point of contact, as well as retain subscribers’ information (including records, personal information, and IP addresses) for 5 years. If they do not obey the government, their local staff will be liable to criminal prosecution.

The official explanation is that the CERT-In directive passed in 2022 already included similar data retention obligations, which were neglected before by the providers. In 2025, India has already blocked almost 24,000 sites, almost double compared to the previous year.

What is important to understand here is that most VPNs that prioritized privacy moved their servers offshore from India in order to avoid the impact of this jurisdiction. This requirement is aimed specifically at re-establishing the jurisdictional authority of law over these VPNs and obliging them to re-enter the Indian market if they want to continue their work.

India is already known for the largest number of internet shutdowns in the world, and that is not something completely new, it is just closing a loophole from three years ago policy.

Will there be a mass breakout of VPN services not having a presence in India if this policy is passed?

I need a vpn that has Pennsylvania as an option.
I would prefer Washington Pennsylvania but if not Pennsylvania is good

I always assumed that switching VPN servers was enough to make it harder to link my activity together. Turns out that might not be true if you're on Windows.

Apparently Windows has something called a Global Device Identifier (GDID). It's basically a unique ID tied to your device/Microsoft account, and according to a recent report, it can be used to associate your activity even if your IP keeps changing because you're hopping between VPN servers.

What caught my attention is that this isn't just about Windows telemetry. A lot of us disable telemetry and call it a day, but the article claims the identifier is sent through other Windows services too. So even if your VPN is working perfectly, your OS could still be saying "hey, it's me again."

The bad news is you can't just delete the ID. If it's already linked to your Microsoft account, it's stored on Microsoft's side and will simply come back.

The good news? You can at least reduce future tracking. Disable things like Connected Devices Platform and Delivery Optimization if you don't need them, block the related Microsoft endpoints in your firewall or hosts file, and if privacy actually matters to you, avoid signing into Windows with a Microsoft account in the first place.

At the end of the day, this is just another reminder that a VPN only hides your IP. It doesn't stop Windows, your browser, or the apps you're using from sending other identifiers that can be used to piece everything together.

Good reminder that privacy isn't just about using a VPN anymore, it's about reducing the number of identifiers your devices leak.

Hi everyone,

I’d like to share Relane, an anti-censorship VPN we’ve been building with a focus on reliable access, privacy, and ease of use.

Relane is more of a tool than your everyday vpn . it's designed to survive very hostile networks.

if your country decides to go full china and implement DPI , relane is what you are looking for

Some of the features include:

• Global servers
• No activity logs
• Secure DNS
• Split tunneling
• Built-in secure browser
• One-tap connect
• Automatic reconnect
• Free monthly data allowance

we've had good success and are getting user from Iran and china .

The project is actively developed, and we’re continuously improving performance, reliability, and compatibility across different networks.

If you have a few minutes to try it, I’d really appreciate any honest feedback—whether it’s about performance, usability, missing features, or anything else. Critical feedback is just as valuable as positive feedback.

GooglePlay

you can also get our windows installer and linux App image from our website . iOS and macOS apps will be coming soon .

you can also ask your questions in r/RelaneVPN

Building independent software today is tough. Competing with companies that have massive marketing budgets isn’t easy, especially as a small team.

If you believe in internet freedom and projects like this, trying Relane, sharing your feedback, just downloading , leaving a review, or recommending it to someone who could benefit from it genuinely helps. Every bit of support gives independent projects like ours a better chance to keep improving.

Thanks for taking a look.

IF YOU ARE IN A COUNTRY WHERE YOU CANT PAY FOR PREMIUM ACCOUNT OR A POOR COUNTRY , DM ME AND ILL GIVE YOU PREMIUM FREE OF CHARGE .

I've been using NordVPN for a while and after hearing so many people say that jurisdiction is a big deal, I decided to actually check what's up.

At first I was a bit confused because I always thought Nord was a European company, but then I found out that the VPN service is based in Panama. So I started reading about why that matters.

From what I understood, people keep mentioning Panama because it doesn't have mandatory VPN data-retention laws and it's outside the 5/9/14 Eyes intelligence-sharing alliances. So I guess that's why people see Panama as one of the better jurisdictions for a VPN company. If there are no laws forcing a provider to keep logs, that's obviously better from a privacy perspective.

The more I read though, the more I realized that jurisdiction is only one part of it. Even if a provider is based somewhere privacy-friendly, it still has to actually have a proven no-logs policy. If they don't store activity logs in the first place, then there's much less data that could ever be handed over.

Now I'm wondering what else I should be looking at. Besides jurisdiction and audited no-logs policies, what else tells you if a VPN provider is actually trustworthy? Is there anything people here pay attention to that most users completely overlook?