Hacker News Reader

Comment by bubblethink | Hacker News Reader

These rankings are going to be meaningless and littered with blog spam. VPNs as a category are mostly snake oil. The only real world use for vpns is circumventing censorship if you live in a place that censors. The only privacy you're gaining is that from your ISP.

View on HN

>The only privacy you're gaining is that from your ISP.

This alone can be worth it for many people. I trust Mullvad significantly more than I trust my ISP.

But you are giving very little to the ISP to begin with. You can use encrypted DNS and most web content has TLS. The only gap there is SNI, which we should be able to close with TLS ECH. I don't know why ECH has been so slow to roll out.

Encrypted DNS is certainly an improvement, but it's only as anonymous as the IP address you are connecting to.

I am not aware of any firewalls that enforce the rule 'only attempt to connect to massively-shared cloud IPs that can't be easily subject to a reverse DNS lookup'.

I don't think that's the only real world use for VPNs. For instance, you might be working remote from a foreign country and not want your employer to know that. It's not something that I would recommend, but you know it happens.

My employer blocks all known VPN endpoints (as well as TOR exit nodes) with ingress filtering. Because many attacks come from there...

Yup. I am in awe of what a great job VPN providers have done marketing this stuff to people, just how utter convinced they are they need them. It's next level marketing and it's amazing. Making an entire market almost overnight out of nothing.

How so? If Mullavad says about their no-loggind policy[0], they couldn't help any authorities that are asking about particular IP and particular timestamp. Obviously doesn't save you from Mossad spies under your bed, but it seems to be a big deal nevertheless. Isn't it so?

[0]: https://mullvad.net/en/help/no-logging-data-policy

Reply on news.ycombinator.com