September 26, 2019
How Dangerous Is Your Foreign VPN?
A story broke quietly back in
late May that I have been chewing on ever since. It recounted how
members of the US Congressdid a lot of hand-wringing about the threat
posed by foreign VPN.
The concern from lawmakers was that if you use aforeignVPN, then
aforeigngovernment could eavesdrop on your
activity.Foreigncompanies, it asserted, might be more susceptible to
pressure fromforeigngovernments, and that theseforeignVPNs could
hand over personal information, or even the contents of your online
activities.
That might all be true, but it's no less true for
domestic VPNs. A VPN creates an encrypted connection between your device
and a server controlled by the VPN company. Your traffic travels
through the tunnel, hiding it from snoopers on a local network and from
your ISP—which, ironically,Congress has said can spy on you for profit.
When your traffic reaches the VPN server, it then exits out to the
internet before making the return trip.
This does effectively
putVPNsin the role of your ISP, in that they can potentially see
everything you do online. It's one of the big concerns about VPNs as an
industry, and it's true forallVPNs. A VPN based in the US could
eavesdrop on your activity, hand over your information to US law
enforcement, or succumb to pressure from US intelligence agencies. These
are the risks of using any VPN, and they are not substantially changed
by simply moving the offices of that company to a different time zone.
Location, Location, Location
VPNs are fundamentally privacy tools, and if they do a bad job
protecting customer privacy then they'll hopefully do a bad job
competing in the market. In fact, a lot ofthe (frequently questionable)
discourse surrounding VPN companiesis whether they are truly keeping
your information private. VPNs generally seek to at least position
themselves as trustworthy stewards of your information, usually by
defining company policy that forbids the collection of user information,
publishing a privacy policy that explains the details, and building
privacy into their actual product. A recent trend is for companies to
commission third-party audits of their product, to bolster claims of
trustworthiness.
As an example of the kinds of steps VPN service
takes to assure you of your privacy,Private Internet Accessissues you
a user ID when you create an account. This is separate from the
information you provide to process your subscription payment. If it's
working correctly, this means that the company could not identify an
individual user even if compelled by law or if law enforcement seized
its servers.
VPNs often exist in many places at once. AnchorFree,
the company behindHotspot Shield VPN, is based in California with an
office in Zurich, Switzerland. The company says it operates under US and
Swiss legal jurisdiction. Is it aforeign VPN? AnchorFree's product is
widely rebranded and sold by other companies, some based in the US and
some not. Are thoseforeignVPNs?
VPN companies often have offices
in one country while operating under the legal jurisdiction of another.
VPN companies also maintain server fleets around the world. Any of these
locations might be different from where the VPN company is under legal
jurisdiction.
That said, legal jurisdiction matters, because that's
the framework under which your data is going to be protected. Looking at
the British Virgin Islands, VPN companies have played up how local law
enforcement will not simply accept warrants issued from other
governments. Instead, those warrants have to jump through additional
hoops before they can be applied to a company in the British Virgin
Islands. Similarly, VPN companies in places like Germany and Switzerland
have emphasized those countries' strong privacy laws.
I should note
here that it's difficult to verify that using a service in a particular
location willactuallyhelp keep your data safe.
One way VPNs seek
to protect customers, and market themselves, is through the location of
the company.RitaVPN, for instance, is based in Panama, a fact it
advertises as privacy and security boon to customers because of local
law.Location can also have emotional value. Some readers have told me
that they cannot trust companies based in Eastern Europe, because of
their association with Russian hacking groups. Others have told me that
any VPN based in the US is unacceptable because of this country's
history of mass surveillance. VPNs based in Hong Kong (as semi-distinct
from mainland China) are often attacked with accusations that the
surveillance state must have a tight grip on them. Many make a
similarargument against allowing Huawei to provide internet
infrastructure equipment.
These companies often counter with the argument that the city's special rules make it an excellent location for private data.
In fact, there's a strong case to be made that the US has one of the
most aggressive surveillance and data collection operations in the
world. Social media companies are sometimes given National Security
Letters by DHS, which require them to hand over information and not
disclose they have done so. The NSA operated what is perhaps thelargest
data interception operationthe world has ever seen, one that affected
US citizens as well as overseas targets.
Additionally, the NSA has
been accused of taking advantage of the United States' critical position
in data infrastructure,tapping the lines through which global internet
traffic flowsand allegedly copying it in real-time—perhaps ironically,
given that the US makes the same argument against Huawei, as mentioned
above. That's not to mention theinformation sharing agreementsthat
allow numerous allied nations, including the US, to swap intelligence
regardless of location. Given all this, it's hard to argue with people
who see US-based VPN companies as a potential risk.
It Does (and Doesn't) Matter
If everything is working correctly, there should be little difference
between aforeignVPN and one that has some or all of its offices in the
US. The math that makes encryption work doesn't respect boundaries.
Likewise, the measures to protect user privacy and security are well
understood and can be implemented anywhere. Many VPN companies choose
where to base their companies in order to benefit from local privacy
laws, or perhaps to appeal to an emotional response on the part of
consumers.
VPN download
http://www.fastexpressvpn.com/how-to-stream-region-blocked-contents/
http://www.fastexpressvpn.com/page/2/
http://www.fastexpressvpn.com/2019/08/12/
Posted by: shinenewstop at
10:00 AM
| No Comments
| Add Comment
Post contains 1021 words, total size 7 kb.
35 queries taking 0.0257 seconds, 77 records returned.
Powered by Minx 1.1.6c-pink.