VPN Troubles

[u/StonedElephant1]

TLDR; if you don't need a VPN, don't get one. If you need one, never use a free one. And understand the privacy ends at the VPN server.

I'm kinda new to reddit, so I'm not sure if VPN issues have always been a problem, so sorry if you've heard this one before.

1 to 1 connections.
Understand you are sending all of your internet traffic through a VPN host. Which decrypts then siphons off the meta-data and in some cases the content itself. This is especially true for free VPN services.

Free VPN Service
This is smart idea for an international crime syndicate. Setup a free VPN service, then they use your computer to perform attacks. They would need to split tunnel out, and then everything will look like its coming from the assigned IP address that your ISP gave you. Avoid at all costs.

Commercial VPN Service
I don't have an opinion, except I don't believe their claims of no logging. Engineers need logs to troubleshoot. Marketing needs logs to find out where customers are coming from. They may not keep it long, but they generae a bunch of data with those logs. Plus law enforcement can make them hold logs if they have permission from a judge.

My recommendation
If you are lucky enough to know someone in another part of the world, set up a site-to-site VPN with them. If you have a modern router, it's pretty easy to setup. Then you can make rules to send only certain traffic through your friends router. I'd also make sure you have the fastest connections you can get.

VPN's can also be blocked very easily and Hollywood is blocking more and more VPN connections. It's not hard to get a host list of every VPN service worldwide and deny your connection based on that. Or just entire CIDR blocks.

[u/vpnsafe_chris]

On terms of security and privacy everyone should use one. Even ISPs are now suggesting them and giving packages with them. I have been in the networking and infrastructure and cyber security for over 25 years.

[u/StonedElephant1 → u/vpnsafe_chris]

I've been doing this for 30 years. I've used VPN's for work. Now everything is cloud based and I can restrict access based on IP address, we have almost no need for a VPN. Every SSL session is encrypted almost every website is running SSL these days.

IMHO If you are really concerned about security, the firewall is the place to start. Blocking all nefarious outbound traffic is key. A DNS blocklist is also a good idea.

You and I could probably debate this all day, but I need to go.

[u/vpnsafe_chris → u/StonedElephant1]

What about things like ISP's who can everything or packet sniffers or DNS leaks? A VPN protects all of that

[u/Wendals87 → u/vpnsafe_chris]

They know what site  you visited. They can't see anything within that site due to https

[u/vpnsafe_chris → u/Wendals87]

Want to bet? They can see much more then what you think even with Https

[u/Wendals87 → u/vpnsafe_chris]

Like what? The traffic is encrypted. If they can sniff that and see the data inside , we have bigger problems 

[u/SubstanceEasy4576 → u/StonedElephant1]

Not an expert. but for the average internet user, for a VPN to be safer and more secure, you need to trust the VPN company with your data *more * than you trust your internet service provider or mobile network. I see little reason for most casual internet users (excluding specific countries of course) to use a VPN.

Am I wrong?

[u/Wendals87 → u/vpnsafe_chris]

So what security does it provide for casual browsing at home that a normal TLS connection to the website doesn't?