Hacker News Reader

Comment by rodrigogs | Hacker News Reader

Then make it better. It's opensource ;)

I already did. Here is how to createa a self-hosted VPN server at a cloud provider of your choice. Don't trust your network traffic to anyone but yourself:

https://blog.trailofbits.com/2016/12/12/meet-algo-the-vpn-th...

https://github.com/trailofbits/algo

> Don't trust your network traffic to anyone but yourself

You still trust the cloud providers' upstream. In case of UK providers, the GCHQ sniffs upstream and ingress, so they can correlate traffic. Same for DE (BND, MAD) and basically all countries.

Yes, and you also have to trust your home ISPs upstream, and the routers upstream from that, and so on and so forth. Are you trying to say that using a VPN is useless?

> Are you trying to say that using a VPN is useless?

No, but you're making your traffic stick out and yourself a target for dragnet surveillance. The constant flow "packet in, other packet out" is easy to pick up for snoops, compared to "just packets out" from your home ISP.

Do you have users in China? I'm curious whether IKEv2 works well through GFW. I use Shadowsocks (on my Asus router, and on my Android/iOS devices), and it works well.

What would I gain in ease-of-use, performance, or security by switching to Algo?

It won't work. Algo is not for censorship avoidance. It's right up top in the readme. Sorry!

That's a common refrain. It's just that I don't think there's a good idea on which to build/improve. I commend you for putting (presumably) your work out here for all to see, and good on you for making your project FOSS, but this is not a project I will support.

Reply on news.ycombinator.com