Learning About VPN's and Choosing One!

Kraizer

Honorable
May 1, 2013
32
0
10,530
So, I recently took an interest in adding an extra layer of security while I'm browsing (the more you learn about the internet, the more gruesome it comes) and I want to setup a VPN for myself and the rest of my family (they use our wi-fi). I've been reading various websites for the last couple of hours or so and it seems like a lot to take in. Seeing as how Toms hardware hasn't let me down before, I figure this would be just the right place to gather more information.

From what I understand, VPN's encrypt your internet traffic from the leering virtual eyes. They are recommended due to the increasing restrictions ISP's are beginning to place on their customers and should always be used when dealing with sensitive information. E.g: using online banking, shopping, ect. So, would you guys mind answering a few questions?

1. What should I look for in a VPN service, aside from a public GPG public key?

2. How do I know they are reliable?

3. What are some recommended VPN services?


If you have anything else to add, that would be great. Thanks!

.
 
Solution
1) Security. You want them to have out-of-country servers, and preferably be based out of the US, so that they don't fall under much of US law. In addition to that, you want a VPN which keeps no records, period. Otherwise they aren't secure at all - those records could be seized or hacked.

2) Reliability mostly comes from user reviews. Make yourself a short list of providers and then research them, in some depth. Make sure to use a critical eye, so that you aren't fooled by $5/1000 comments posted from an Indonesian comment factory. Read reviews from the big tech sites - Tom's has one, but it's fairly old.

3) I personally use pia, and have never been let down by it. It handles an amazingly large amount of data throughput, has never...
1) Security. You want them to have out-of-country servers, and preferably be based out of the US, so that they don't fall under much of US law. In addition to that, you want a VPN which keeps no records, period. Otherwise they aren't secure at all - those records could be seized or hacked.

2) Reliability mostly comes from user reviews. Make yourself a short list of providers and then research them, in some depth. Make sure to use a critical eye, so that you aren't fooled by $5/1000 comments posted from an Indonesian comment factory. Read reviews from the big tech sites - Tom's has one, but it's fairly old.

3) I personally use pia, and have never been let down by it. It handles an amazingly large amount of data throughput, has never had an issue with dropped connections, doesn't keep records, and just generally does its job well.


One important thing to remember is that a VPN isn't going to be a totally secure shield if you're actually _targeted_ by, say, a hacker or the NSA. The data in transit is secure, but there are always going to be two weak points - at your end, at at the other side. If the website you're accessing is compromised, or your system is compromised, then all data security goes out the window.

However, that's unlikely. Look at using a VPN like investing in automatic lights and lowered shrubbery around your house - sure, it's not going to stop somebody that really wants to get in, but any sensible thief is going to look at your house and decide he'd rather rob the one two doors down that left their window open.

 
Solution
a vpn allows you to tunnel through to another network from a home network to a company network (if working from home for example). So for what you are using you are wanting to use it for you are placing absolute trust that the target network that intend to access the internet through is 100% clean and trustworthy, this is a foolish assumption in my mind, only the transport to the target of the vpn is secure, the browsing you do beyond that is as secure as you are now.

I think that your whole premise in your second paragraph is flawed.
 


Not necessarily. They do prevent your ISP from seeing anything other than encrypted traffic going to the end terminal, and they do prevent anyone outside your network from seeing what you're doing. Yes, they aren't the end all be all of security, but they aren't as useless as you seem to believe.
 
surely the usage mode here is home to another server protect by vpn and then from that other server to whatever you want to do with normal levels of encryption. That is still exposed. else you are relying on everything that you want to get to on the internet having a vpn connection, that'd limit you to a very small portion of the internet, I've never seen a bank (except as an employee) having a vpn connection? so where do you go? if you are that concerned, don't go on the internet.
 
It is still exposed, which is exactly what I was explaining in my post. However, it still gives more security for what the OP is looking for, and makes your activities less evident.

To clarify, it's not like the OP is saying using a VPN is going to protect him from web-based viruses, which nobody here believes would happen.
 

Kraizer

Honorable
May 1, 2013
32
0
10,530
Yes, I'm not looking for absolute security.. that would be absurd. I just want to be more protected than I am now. To me, it seems like if I'm going to use anti-virus to protect my computer from infections, it makes sense to protect my internet connections as well.

Monkey. If you're not going to assist me, then please don't comment. I'm here to learn something, not be belittled.
 
If you are running HTTPS encrypted traffic like most banks and many other sites use you really can't improve on the encryption. Many VPN actually use a form of https encryption but if they use pptp or ipsec they are basing it on preshared keys which are not as strong as a certificate based system.

Not sure double encryption buys you very much. I would be much more worried that a "free" vpn site maybe in a country with few consumer protection laws might be tempted to do man in the middle attacks against your encrypted banking sessions. They have much more incentive than a ISP.

Still if you have 2 cents of brains and do not ignore certificate errors nobody can do man in the middle against https anyway. Other than the heartbleed bug that has been fixed https is extremely secure.
 


How exactly did I belittle you? suggesting that your purpose here is wrong, not exactly belittling is it.
 

MilenPankov

Reputable
Oct 14, 2014
1
0
4,510


1. As DarkSable said, company should be registered in right country (Lithuania, Sweden), servers location also important (avoid US, UK). You want them to have their own infrastructure instead of renting servers from data centers all over the world.

2. Again DarkSable is right, also try to find out what big guys use (businessmen, politicians) in your country.

3. Sorry, I could not find any reliable. There is some serious providers like zeusvpn.com, but they are not public, no website, although their support email replied to me. As I know, you need recommendation from existing user to get account from them.