• @myersguyA
        link
        English
        122 months ago

        If you are worried about VPN’s, why are you not worried about seedbox providers?

        • @liveinthisworld@lemmy.dbzer0.com
          link
          fedilink
          English
          12 months ago

          As he said, paid with crypto and managed with his own keys. I don’t see how the seedbox provider can trace you if you do that, so there’s not that much to worry about

          • @myersguyA
            link
            English
            22 months ago

            You’re going to connect to the seedbox at some point, which ties your IP to the traffic. If you are worried about a VPN attaching your IP to traffic, this is no different, no?

            • @liveinthisworld@lemmy.dbzer0.com
              link
              fedilink
              English
              0
              edit-2
              2 months ago

              SFTP over TOR. This should be a requirement at this point.

              If you’re not doing that, then yes you’re technically right in that seedbox companies can be subpoenaed too. I usually use TOR to copy over what little I torrent.

      • @Telorand@reddthat.com
        link
        fedilink
        English
        52 months ago

        What evidence do you have that no-log VPNs are compromised by the NSA? What about VPNs based in other countries like Canada?

        • KillingTimeItself
          link
          fedilink
          English
          3
          edit-2
          2 months ago

          the US has so much geopolitical reach that companies in canada or elsewhere would just hand over the question if it was high enough profile.

          • @Telorand@reddthat.com
            link
            fedilink
            English
            42 months ago

            That’s an interesting point, but I think the “if it’s high profile enough” is key. People torrenting files is probably low on their priorities. On the other hand, somebody organizing a terrorist cell is probably much higher.

            Companies might have an interest in finding pirates, but it would not be as easy for them to get other companies to comply with their subpoenas.

            • KillingTimeItself
              link
              fedilink
              English
              42 months ago

              yeah if ur just a dude pirating, it probably doesn’t matter, but if they find you’ve done a large crime, you can bet your ass that shits getting yoinked from you.

              companies might, but that’s almost entirely through legal processes. ceast and desists, required reporting, etc…

          • @Telorand@reddthat.com
            link
            fedilink
            English
            132 months ago

            The existence of the NSA and their activities is not proof that they have backdoors in VPNs. That’s bogeyman conspiracy theory shit—“they could be anywhere, therefore they’re everywhere!”

            You still haven’t answered the question, and I’m beginning to think you are making shit up based on paranoia.

              • @Syntha@sh.itjust.works
                link
                fedilink
                English
                72 months ago

                Is there literally any evidence that the US government managed to extract useful information from no-log vpn providers in the US?

                • SaltySalamander
                  link
                  fedilink
                  22 months ago

                  I have (anecdotal) evidence that they, in fact, can’t extract useful information from one particular no-log vpn provider in the US, PIA. They showed up to seize data, but walked away empty-handed when they found out that they are, truly, no-log and their servers run entirely from RAM, so no drives to extract data from.

          • @psud@aussie.zone
            link
            fedilink
            English
            22 months ago

            Is your home machine, your phone, better protected than the VPN servers? I bet you’re not as good at IT security as the IT security staff VPN companies hire

            If your threat model includes nation state actors, you’re best off not using networked computers

            • sunzu2
              link
              fedilink
              02 months ago

              I am all about good tinfoil but some of these people acting as if they are SNOWDEN lol

              Yes if feds wanted to catch you shitposting, watching big titied asian porn and downloading coldplay… I think there raised ways than compromising a VPN provider.

              Unless it is a honey pot, then use a different VPN provider. Gonna need trust at the end of the day.

      • socsa
        link
        fedilink
        English
        4
        edit-2
        2 months ago

        Everyone knows it’s impossible for the NSA to buy rack space in Bulgaria, where they literally don’t have to deal with any US legal process.

        It’s also impossible for the NSA to market such a service via pop-privacy blogs and social media profiles.

        The funny part about this is that the Snowden leaks showed that the NSA actually put a lot of effort into doing shit like this specifically to avoid all the paperwork which came with accidentally collecting data from US citizens. Keeping the data and analysis off shore means no pesky FISA paperwork.

        • @winkerjadams@lemmy.dbzer0.com
          link
          fedilink
          English
          72 months ago

          Because if the government wants that data then they are gonna get it. If it’s in another country its a lot more work than just serving them a warrant like it is if they are USbased

          • @Telorand@reddthat.com
            link
            fedilink
            English
            62 months ago

            At least that’s a more reasonable answer than trying to imply the NSA has backdoors everywhere.

            My position is that it all depends on your threat model. The government isn’t likely to go after someone who torrents files and is hidden by a VPN. The government might go after someone running a streaming site, on the other hand.

            And even that might wind up with a dead end. AirVPN (for example) is Canada-based, has no logs, and accepts both crypto and anonymous cash payments.

        • @liveinthisworld@lemmy.dbzer0.com
          link
          fedilink
          English
          3
          edit-2
          2 months ago

          Technically speaking, VPN logs tend to include the IP address of clients connecting to them, after which the good VPN providers like Mullvad, IVPN and maybe PIA tend to purge them somewhere in their process. Now, if the VPN is running in a RAM-only node, then these logs probably don’t touch storage, which means there’s not much need to shred information from hard drives for the VPN provider.

          With that said, an ISP can technically log your traffic and see that you’re connecting to the IP range associated with a VPN. That and perhaps some more covert side-channel/correlation attacks can, in theory, compromise your identity.

          Of course, this is going deep into OPSEC and forensics, and I don’t think the NSA is that interested in the average Billy torrenting “The Office” to go through that many logs, even if the studios sue in court. Hence, technically your privacy is somewhat maintained with the good VPN providers, but you’re definitely not anonymous

          • @Telorand@reddthat.com
            link
            fedilink
            English
            32 months ago

            That’s kind of my thought as well. It’s certainly possible someone might go through the effort to find a single pirate downloading The Lion King, but that’s a lot of effort (read: money) to find just one person.

            There’s certainly the possibility that an ISP could note that you connected to a VPN, but given that it’s not a remarkable event, since people connect to VPNs for all kinds of legal reasons, they aren’t likely to track your particular IP’s connection to a VPN apart from a court ordering them to care. They get paid their monthly internet plan price whether someone pirates or checks their email.

            If someone was running the Pirate Bay from their home servers, however, more parties would likely be interested in finding that person, and that person’s threat model probably exceeds just using a logless VPN.