Hacker News Reader

Comment by logicchains | Hacker News Reader

I'm not a network person, but couldn't this be relatively easily bypassed just by running the VPN on the router?

Yes, you can. However with average user, config router with VPN, proxy is a bit complicated. Bypass firewalls and VPNs on macOS is still terrible by the way.

You can't run the VPN on the router if you don't own the router, which means that you can't protect your device's traffic when you're on the go, using mobile hotspot, or connecting to an ISP-supplied gateway without additional hardware.

If I have a second phone (e.g. Android( running a hotspot, and I enable a VPN on that phone, will the hotspot / shared internet also go through the VPN, or will the hotspot bypass it?

With my device and mobile service provider, the hotspot traffic does not route through the VPN that is active on the Android handset.

Frankly, a fixed "Internet" Service Provider that doesn't provide you with a router (and leaves you the possibility to use your own) and a /48 IPv6 prefix should have no legal right to call that service "Internet" (in a similar way that Internet neutrality has to be legally respected) :

https://www.ripe.net/publications/docs/ripe-690

(Mobile cellular Internet seems to be harder, but is there any reason why user's cell-'modem' can't handle the routing of successive /64 connections ?)

Yes, but this isn’t an option that is readily available to everyone.

It only works at home. Or you need to always have and take your "router-in-the-middle" wherever you go, this is a way more complicated solution

In the future I think the tech savvy will be doing exactly that - pinefone as a wireless hotspot with wireguard to a anonymised proxy.

Reply on news.ycombinator.com