Hi privacy fans :) I’ve been a lurker in this lemmy-community for a while now and a “fan” of privacy for about 4 years now. Since 4 years, I’ve been on and of with VPNs. Sometimes I think I dont need one, sometimes I change my mind and start searching for one. The only one I tested (and used) so far, was Mullvad. But now reading about Surfshark, I was wondering, if there might be a better solution or if Mullvad is already the best solution for VPN. What I dont like about Surfshark is, that it is part of North Security and that it is not open-source (or at least I can find any info about that).
I hope you guy and gals have some suggestions or recommendation :)
Edit: wow… thanks for all of your fast replies. Coming from Reddit, I am used to only shitposting. Thanks for all your input. I will look into all the mentioned VPN hosters, thx 👍
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
- Don’t promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
- 0 users online
- 57 users / day
- 383 users / week
- 1.5K users / month
- 5.7K users / 6 months
- 1 subscriber
- 2.82K Posts
- 70.8K Comments
- Modlog
Tor.
And the correct term is anonymizing proxy. Having the term VPN overloaded to mean two completely distinct things is rather annoying and/or confusing.
A VPN is not for privacy. It simply put your front door to another location. There needs to be more done for being “private”. But Mullvad would be a good start.
Would you elaborate on this? Encrypting your traffic and not accessing sites from your actual IP address sounds pretty vital to privacy for me.
Yes, your traffic is encrypted through the VPN tunnel, to the other location, but than you need to get access to the internet again. SSL traffic is already private, so there you don’t need an VPN for. Yeah, you get another IP, but you browse on the internet (same fingerprint) your pc has access to the internet (same hardware ID) and so on. So you can be tracked still. There are multiple videos on YouTube telling you a VPN on its own is a private method to access the Internet. Look for it.
Ok, I think I misinterpreted yout comment to mean VPNs are not necessary. Thanks for the clarification.
Been using Mullvad for years. Love em, glad to see everyone else does too
Hijacking this thread with a related question: I’m stuck on Mullvad, any good ones that let you port forward from linux? I’d like to use slsk more effectively once again.
Protonvpn lets you port forward. I use docker and have a gluetun container that connects to protonvpn, all of my other docker containers for sailing the high seas (arr suite, qbittorrent, sabnzbd, soulseek client, etc) are routed through it and I have port forwarding setup to the ones that need it. For soulseek I use nicotine-plus-docker, all traffic is routed through the gluetun container, the port is forwarded, and a bit shy of 700 gb uploaded since March so I can confirm it works well.
I don’t think the protonvpn Linux client supports port forwarding yet so only docker things can do it right now afaik, but anything I want permanently through VPN runs in docker anyway
Thanks for the info!
On an extra note, I actually switched to slskd (since writing that comment earlier today)because the nicotine app bugs me sometimes (it’s just the app ran in a VM), so far I like it
I’d only recommend Proton if a) you’re already paying for their suite or b) you’re not using Linux. Otherwise, Mullvad is the way to go IMO.
The proton client for Linux has improved recently. I use it on PopOS. As to your first point I agree. I landed with Proton specifically because it was cheaper to do it and email rather than separate services.
IMHO I am not an expert but Mullvad seems the best (from what I read from others) and I would stick with it. I am using it and happy with it. I also appreciate that their monthly price do not change depending on how many months you subscribe and that there is no bullshit discount for the first x months.
You could also look at Proton VPN if you need port forwarding.
About SurfShark don’t have much opinion !
Mullvad until you are often in the PCR, there I had a much better experience with ExpressVPN compared to basically everyone else.
If you need a lot of exit nodes in different countries Proton or Pure, but I grow increasingly wary of Proton these days and Pure is getting more and more enshitified these days.
So I simply use Mullvad for privacy and my own WG service for security.
Another recommendation for Mullvad. Solid privacy options and no marketing snake oil
Try this one and support a podcast that I like.
https://privateinternetaccess.com/offer/GrumpyOldGeeks_771kvy1
I see the downvotes here but would anyone like to explain what’s wrong with PIA? I’ve been using it for many years.
He is advertising some podcast. Should be banned for spam
you need to define a threat model first
well I haven’t really thought of a threat model jet (but I will do so now :) ). But in general I want a VPN, for when I am on the wifi @work and also to route my traffic through from my DreamMachine.
also consider that almost any VPN service will have all of their IPs flagged for bot/abuse traffic and many sites will block you for it
I recommended to you Windscribe and ProtonVPN as free, Mullvad and iVPN as paid option
Surfshark has a lot of read flags imo, my threat model doesn’t require a VPN, but if I would have to choose one it would be probably Mullvad, IVPN or ProtonVPN
Mullvad, IVPN, and Proton are the top tier for privacy respecting VPNs.
Windscribe and AirVPN are also decent options but do not have the audit history to be in the same tier as the other 3.
Most other VPNs people mention either have a dubious history or no real proof of their claims to be privacy respecting.
Windsribe also has a big advantage for price with their “Build a plan” in that you can pick a few locations and only spend $3 a month without needing to deal with any coupons/sales or long term purchases.
Yeah. The 2$/month port forwarding option can also be a great deal as well especially if combined with the lifetime pro memberships they used to sell for $30 back in the 2010s.
+1 for proton. Been using them for years now.
Plus one to Proton. They recently moved to a not-for-profit model because they believe it will help them better protect their customers interests
They also lowered prices when their costs went down a year or so ago
And they’re continuing to put out more and more apps and features without increasing prices or any of that bullshit. They grandfathered my Proton Prime plan or whatever it was called without any interruption of service when they got rid of the plan. Basically, they just do a lot of great things
Same, I got grandfathered into the unlimited plan at only $5ish a month. I really can’t beat that.
AirVPN
Only if you need (cheap) port-forwarding.
What do you mean? Are they not good for privacy or security? They seem definitely more zealous about that on their FAQs and forum pages than, say, ProtonVPN, for sure.
As far as I know they don’t have audits done, so who knows about the logging. Both IVPN and Mullvad pass those. Could still be fine though, but I’d rather trust Mullvad or IVPN.
audits are invalid as soon as they finish, there’s absolutely no way to trust any of these companies.
So, I just looked it up and apparently their official stance is that auditing is questionably effective and thus unnecessary:
In other words, their reasoning seems to be:
Personally, I don’t agree with points #2 and #3, but point #1 is fair I suppose. In my opinion, it should not be up to the users to hold the company accountable; and there is a difference between penetration tests and log auditing, as the former I believe are merely to check the resilience against outside hacking.
My end impression is that judging from their other documentation and forum posts, the fact that their software is fully open-source, and their past behavior in accordance with their stated values, I think I’m inclined to believe them. However, it is somewhat worrying nevertheless that there isn’t log auditing involved regardless of their actions.
But what about server side logging? Even if the server is open source how can one that they are actually the code they publish without changing anything if there are no audits?
There’s a certain point where it just comes down to trust. And if you distrust a company enough that you think they aren’t posting the same code to the git repository that they say they are, then maybe that’s when you shouldn’t be doing business with them.
This is the case with all organizations, corporate or otherwise.
Mullvad for zealots, proton for normies
That’s kinda reductive… But okay ! I use mostly protonVPN because of their free tier and being able to route all my traffic through the same tunnel.