Showing posts with label Privacy. Show all posts
Showing posts with label Privacy. Show all posts

Monday, November 21, 2016

How to Choose a Good VPN?


Virtual Private Networks (VPNs) have been around since the late 1990s. They were created to help businesses share confidential information securely. Today, VPNs are a multi-purpose digital survival tool, and are offered by numerous companies for private and corporate use.

Given the vast range of VPN offerings, you might be wondering: How do I choose a quality VPN?
Here are four things to look for in a good VPN provider.

1. Numerous locations and unlimited server switches


The most popular use for VPNs these days is to unblock websites and access geo-restricted content. Whether you want to watch Hulu overseas or access Facebook in China, a VPN lets you enjoy your favorite websites wherever you go.

That said, it’s important to choose a VPN provider that has a wide range of server locations around the world. For example, if your media diet includes a healthy dose of Netflix, BBC iPlayer, and Rai TV, you’ll want a VPN provider that has servers in the U.S., UK, and Italy.


What’s more, you should expect your VPN provider to offer unlimited server switches. Some companies have servers all over the world, but limit the number of server switches allowed per day or month. The result? You could still be seeing those pesky “content is not available in your location” screens when you run out of server switches.

Morale of the story: Find a VPN service that not only covers the globe, but also gives you the flexibility to hop around it.

2. Long encryption keys and open standards



Unlimited server switches across dozens of countries may be great, but it means nothing if your VPN provider can’t keep you safe and anonymous online. A great measure of a VPN’s security capability is its encryption strength. Nowadays, the industry standard is 256-bit encryption, so named because it uses 256-bit keys.

With a key that is 2256 digits long, even if someone could use all the supercomputers in the world for a billion years to guess the key through brute-force hacking, they still wouldn’t crack the actual combination. Certificates, used to establish the authenticity of the connection, should be as long as 2048 or 4096 bit.

Furthermore, check that the provider offers leading VPN protocols like OpenVPN and IKEv2. OpenVPN is the current gold standard and offers the best combination of performance and security.

Don’t get tricked by VPN providers who simply claim to offer “military-grade encryption.” If they don’t provide 256-bit encryption or don’t use OpenVPN, move on.

3. No logs


The point of using 256-bit encryption is to prevent governments, internet service providers, and hackers from accessing your internet traffic. But while that may protect your personal information from external parties, it doesn’t prevent your VPN provider from gathering your data for themselves.

The solution? Look for a VPN provider that does not keep logs on you. In particular, make sure they won’t log your:
  • Browsing history
  • Traffic data
  • DNS queries


While virtually all VPN companies collect some user data (e.g. connection date and server location used) for maintenance purposes, you should make sure the information they collect cannot be used to identify you.

Also, check that the VPN provider runs their own DNS service—you don’t want your online requests to end up on someone else’s records. And if the VPN provider accepts Bitcoin payments, it’s another sign that they respect your anonymity.

4. VPN kill switch and split tunneling



Even if a VPN checks all of the boxes above, it could still suffer from an occasional dropped connection.

In the event that happens, make sure your VPN provider has a kill switch that cuts off internet traffic when the VPN connection fails. A VPN kill switch ensures no internet traffic can leave your device without encryption and is a necessary feature of any decent VPN.

For those looking for the whole package, check that your VPN has split tunneling.

Split tunneling lets you “split” your device traffic, sending some of it through the VPN and letting the rest access your local network. By using a VPN with split tunneling, you can secure all your internet traffic while retaining access to local network devices like your network printer.

Thursday, September 22, 2016

Edward Snowden criticises Google Allo due to lack of privacy


Ex- CIA employee and whistle-blower, Edward Snowden warned people about the lack of privacy on Google's recently launched messaging app Allo, and advised them not to use it.

Allo launched yesterday, as the first platform to be integrated with Google's new intelligent agent, Google Assistant. Google had announced at the I/O conference earlier this year that Allo would not be saving messages on its own servers, but that is not the case with the final application.

The reason for saving the communications in Google servers is apparently to improve Google Assistant, which is a win for machine learning, but a loss for privacy. However, upon request, Google can make the data available to law enforcement agencies. These concerns over security prompted Snowden to tweet out a warning against using the newly launched app.

He defined it as "A Google app that records every message you ever send and makes it available to police upon request." He further went ahead and suggested using apps such as Signal for communication purposes instead.



The danger that Snowden is trying to point out here is that while Google may be officially claiming to log the chats to improve its own Artificial Intelligence offerings, the choice was made knowing that the private communications would be made available to law enforcement agencies upon request. Allo works as a surrogate mass surveillance system, because Google simply hands over user data when enforcement agencies request it.

Snowden had previously asked for the boycott of Allo in May. He said that the decision taken by Google to disable end-to-end encryption by default in Allo was 'dangerous' and added "Avoid it for now."


It is worth noting that the app still has an incognito mode, which allows end-to-end encryption on messages sent through the app. The messages sent through incognito are not stored by the company. There is also a timer that allows destruction of sent messages in as little as five seconds. A messaging client such as WhatsApp that by default does not save messages in its own servers is a more secure option, as there is no data saved to comply with requests by law enforcement agencies.

Do Subscribe on YouTube!
Follow Me on Twitter>>> @iamBhavish
And like us on Facebook>>> The Gud1