• Hey, guest user. Hope you're enjoying NeoGAF! Have you considered registering for an account? Come join us and add your take to the daily discourse.

“Zero logs” VPN exposes millions of logs including user passwords, claims data is anonymous

godhandiscen

There are millions of whiny 5-year olds on Earth, and I AM THEIR KING.
Last edited:

mickaus

Member
The only reason I would use a VPN is to watch streaming videos that are unavailable in my region. Is the risk of having your account leaked worth it though? Probably not.
 

Lrnex

Member

I don’t understand how VPNs became so popular that they were even mentioned in the movie “Spider-Man Far From Home”. Kids drank the kool-aid that VPNs keep them safe. However, routing all your traffic through these make-a-quick-buck companies with shoddy security practices is as smart as eating tide pods.
YouTube content creators I would imagine are how most people came aware of them. I feel like every other video is hawking either Nord or ExpressVPN
 
I heard that using that browser sets a red flag to the government agencies. Any truth?

hell if I know I saw it on a tech report once and wanted to find out what the deep web was not sure if I know anything about how to use it after all this time
The story is the US Goverment designed that space anyway for spies to get info out of bad places, the more people that uses it the less likely it is for someone to be tracked
they probably have something else by now not being shared

I doubt they need you to use TOR to flag you
 

Grinchy

Banned

I don’t understand how VPNs became so popular that they were even mentioned in the movie “Spider-Man Far From Home”. Kids drank the kool-aid that VPNs keep them safe. However, routing all your traffic through these make-a-quick-buck companies with shoddy security practices is as smart as eating tide pods.
One Chinese VPN has an issue and that's enough to write off every VPN and anyone using VPNs as drinking Kool-Aid?

In that case, the recent Twitter hack means we shouldn't even post on this forum.
 

godhandiscen

There are millions of whiny 5-year olds on Earth, and I AM THEIR KING.
One Chinese VPN has an issue and that's enough to write off every VPN and anyone using VPNs as drinking Kool-Aid?

In that case, the recent Twitter hack means we shouldn't even post on this forum.
NeoGAF doesn’t route all of your traffic.

VPNs keep a log of all of the data you send and receive through web requests. Whether that is a business decision or the result of insufficient architectural thought, there is often a weak link.
The risk is that as these services grow in users, they become juicier targets for your average hacking group. Often, conducting these attacks takes months or years of planning, trial and error, so the reward must be worth it.


I use VPNs to watch videos that I cannot watch, I never use them to sign into anything sensitive, I don't even trust the TOR browser lol

This is fine. Just don’t stay on them when you access your important information, such as banking and the like.
 
Last edited:
Hashing and salting is incredibly easy, there are so many great hashing algorithms out there it's still unbelieveable to me how companies still store passwords as plaintext.

A simple MD5 is the absolute least you can do.
 
Last edited:

M1chl

Currently Gif and Meme Champion
Hmm there HK based. Maybe not an accident but a request from the CCP?
Well since when you store this information in logs. Does not make sense.

I heard that using that browser sets a red flag to the government agencies. Any truth?

It's something else.
 
Last edited:

HoodWinked

Member
This shouldn't be that big of an issue right? Logs would only show traffic which is generally too obscure to be useful. And the passwords would only be for the VPN itself, so unless you were foolish enough to reuse that password elsewhere it shouldn't matter. A VPN wouldn't save passwords for sites you visit unless they were deliberately doing shady spying stuff.
 
Last edited:

keraj37

Contacted PSN to add his card back to his account
giphy.gif
 

Rathalos

Banned
Free Chinese VPN, NOPE! It's worth paying for one if you need one, and definitely don't get one based in fucking China. You need a VPN outside the jurisdiction of the 5/9/14 Eyes Alliance.

 

Kenpachii

Member
Everybody knows free VPN's sell your data to the highest bidders, because that's how they create their money.

That's why if u go the VPN route its important u pick a VPN that charges u for it. And if you want to get a good one u look at their court encounters and see if they provide logs.

Seems like OP is extremely out of the loop when it involves VPN solutions.

Sorry but VPN's are legit as hell and they are used for many reasons such as.

- View content not allowed in your country, this can be as little as news websites from other country's.
- Get access to all content on the web without them being able to identify you.
- Hide your Identity and IP towards not only your government but also everybody else. ( goverments in lots of country's are a real pain )
- Reroute connections to better connections when your route to the servers is having issue's, for example if you game online a lot.
- Download do whatever u want without people watching u do stuff or get hit by fines or be cut off by your goverment.
- Prevents attacks against u.
- Better deals online.

Internet in my country without a VPN in 2020, nope not even once.
 
Last edited:

godhandiscen

There are millions of whiny 5-year olds on Earth, and I AM THEIR KING.
Everybody knows free VPN's sell your data to the highest bidders, because that's how they create their money.

That's why if u go the VPN route its important u pick a VPN that charges u for it. And if you want to get a good one u look at their court encounters and see if they provide logs.

Seems like OP is extremely out of the loop when it involves VPN solutions.

Sorry but VPN's are legit as hell and they are used for many reasons such as.

- View content not allowed in your country, this can be as little as news websites from other country's.
- Get access to all content on the web without them being able to identify you.
- Hide your Identity and IP towards not only your government but also everybody else. ( goverments in lots of country's are a real pain )
- Reroute connections to better connections when your route to the servers is having issue's, for example if you game online a lot.
- Download do whatever u want without people watching u do stuff or get hit by fines or be cut off by your goverment.
- Prevents attacks against u.
- Better deals online.

Internet in my country without a VPN in 2020, nope not even once.
I use a VPN for half of my daily activities, one I contributed to setting up for the company I work for.

I am not out of the loop, I just don’t enjoy adding more middlemen between me and the data I send/request.

Also, while VPNs are good for accessing content with geo restrictions, they aren’t good for anonymizing your traffic. I work specifically on targeting & identification of individuals, and there are a dozen fingerprinting mechanisms that don’t require your IP Adress or cookies. Are they legal? No, but it still doesn’t stop the bad actors from using them.


This shouldn't be that big of an issue right? Logs would only show traffic which is generally too obscure to be useful. And the passwords would only be for the VPN itself, so unless you were foolish enough to reuse that password elsewhere it shouldn't matter. A VPN wouldn't save passwords for sites you visit unless they were deliberately doing shady spying stuff.

The logs contain your source IP, web request destination, and a timestamp.These logs can then be correlated with an identify graph and/or another dataset that has recorded traffic from your source IP during the specific timestamp.

For example, many bad actors will send emails to random emails addresses to capture the IP address associated with it. When the target individual opens the email, the email client renders an identification pixel, an HTTP request backed by a server that logs the IP along with the email address; no need to click any link. These datasets are sold on the black market to eventually build an identify graph around an individual. If you are a high value target, they'll use that dataset for the purposes of finding a weak point between your online identities, or perhaps social engineering.

Routing all of your traffic through a third party along with that of thousands other individuals is a recipe for disaster. VPNs are useful, but you need to understand the inner workings of them, and preferably set them up yourself. You cannot just subscribe to a random service and assume you are safe. In most cases, you are increasing your security risk
 
Last edited:

Great Hair

Banned
Read somewhere, that Firefox relies on google ads to finance parts of the searches done? In short, google pays the Firefox Foundation.

Also don´t all VPN log your data, logging etc. etc anyway? You are literally paying a sub of $10? per month on top of giving them all "the free data, we don´t share with anyone, we still like to collect for further improvement of our services"

 

Teslerum

Member
If I want privacy I use TOR. Use cases for VPN's are too specific to be of much use to me.
Don't get why they are pushed quite so hard.
 
Last edited:
Top Bottom