Malwarebytes Releases New VPN Service For Windows (bleepingcomputer.com) 24
The popular anti-malware software MalwareBytes is releasing a new Windows VPN service called Malwarebytes Privacy. The company says it plans on offering Mac, iOS, Android, and ChromeOS versions in the future. Bleeping Computer reports: During our tests yesterday, you could select from 10 states in the USA and 30 countries around the world. [...] Malwarebytes told BleepingComputer that this is not a white-label service, but rather one they developed themselves. A trusted-third party built the network infrastructure, and Malwarebytes developers created the app and other components. Malwarebytes Privacy is using the modern WireGuard VPN implementation that was recently integrated into the Linux kernel.
Unfortunately, not much is known about Malwarebytes Privacy's logging and data retention policies. According to Malwarebytes' product page, "Malwarebytes Privacy does not log your online activities, whether it's browsing or accessing any websites." This is what most people want, but it would be good to get more specific language in a dedicated data retention policy or language in their privacy policy.
Unfortunately, not much is known about Malwarebytes Privacy's logging and data retention policies. According to Malwarebytes' product page, "Malwarebytes Privacy does not log your online activities, whether it's browsing or accessing any websites." This is what most people want, but it would be good to get more specific language in a dedicated data retention policy or language in their privacy policy.
all your VPN is belong to us (Score:1)
Re: all your VPN is belong to us (Score:2)
Re: (Score:2)
It's already failed the privacy test. The only ways to pay for it are credit card or PayPal.
I use Mullvad. Pay in cash mailed in.
Re: (Score:2)
It's already failed the privacy test. The only ways to pay for it are credit card or PayPal.
Buy pre-paid credit card with cash. Use pre-paid credit card to pay.
Re: (Score:2)
It's already failed the privacy test. The only ways to pay for it are credit card or PayPal.
While that's imperfect, it's not a big deal if they don't have logs showing when you were connected and to whom.
The other big thing is where are they incorporated? Are they vulnerable to secret court orders from the five-eyes (or nine-eyes or fourteen-eyes) countries?
Re: (Score:2)
http://www.youtube.com/watch?v... [youtube.com]
developed themselves hmmm (Score:2)
Re: (Score:3)
It's not re-inventing. It's implementing Wireguard, a dramatic simplification of VPNs precisely because doing anything the old way was providing everyone more than enough rope to repeatedly hang themselves.
Developing themselves is positive too. I'd prefer not all my apps to be a pretty skin on the same base, like browsers on an iOS device.
The art of the overly specific disclaimer (Score:1)
"does not log your online activities, whether it's browsing or accessing any websites"
So, does it log online activities that aren't "browsing or accessing any websites"?
i have a question about VPN (Score:2)
https://i.postimg.cc/2zzqZKg1/... [postimg.cc]
Re: (Score:2)
They would still know where you went, and a general sense of how much activity.
Actually I wonder if they could tell that, too, given they may not be able to decode things, but could tell which pages because each encoded to roughly the same unique size.
Re:i have a question about VPN (Score:4, Informative)
The domain name of the website you are visiting is submitted in the clear. It used to not be the case, but quite a while ago they created SNI (Server Name Indication) which would allow for SSL/TLS and certificates to be used for many domains that shared a single IP. Because the domain name is transmitted in the clear, your ISP, or others listening on unencrypted coffee shop/airport style WiFI can see which sites you are visiting. It doesn't transmit the full url, or any other information in the clear, but the domain name can be enough information to track what you are doing.
Re: (Score:2)
We need to get ESNI adopted as quickly as possible. It encrypts the domain name.
Re:i have a question about VPN (Score:5, Insightful)
You're assuming people use VPNs because they want traffic between domains to be encrypted. The largest use cases are:
- hiding or faking the origin of the connection (i.e. break Geoblocks)
- hiding the domains themselves (i.e. it doesn't matter if the video you're watching is called "An educational analysis of internet sensations" if it's being served from www.2girls1cup.com
- accessing private networks. (i.e. control network access)
This is like that thing... (Score:2)
"It's only a secret until the cops come to the door."
To track is to be human is to be shit (Score:2)
Infiltration (Score:2)
Seems as if a service of this type would be ripe for infiltration by Three Letter Agencies (TLA), or just flat out be a front organization for such.
Re: (Score:1)
Seems as if a service of this type would be ripe for infiltration by Three Letter Agencies (TLA), or just flat out be a front organization for such.
I'm sure they are. However, keep in mind that once they go and bust someone using some VPN service that supposedly doesn't keep records for something innocuous like torrenting a movie the cover and potential intelligence use of the service is blown. So unless you're doing Snowden-level stuff or organizing terrorist attacks and are stupid enough to rely on commercial VPN services you're still better off.
Re: (Score:3)
Parallel construction takes care of that.
Excellent (Score:2)
My only concern is that I think it can be too simple f