XP Repair Pro Offers Loggless VPN service!

[Warlockz]

I couldn't believe my eyes when I read this on their site, Notice their Policy on the pic, I never read that from a VPN provider before!

207887

If you wish to pay monthly, the service is $7.81 USD (or 5.00 EUR) a Month or $78.50 USD or (50.00 EUR). a year, wich I think is a killer deal

More information is provided here

http://www.xprepairpro.com/vpn/

[SteveTX]

Looks can be deceiving. Everyone is trying to sell "anonymous" VPN service nowadays, but only two or three providers sell the real deal, the rest is all snakeoil. I'll show you with some simple examples using their own advertising on that one image:

1. No speed limits + unlimited transfer means they are going to oversubscribe their service. They won't need a "speed limit", there won't be enough resources when your traffic is competing with everyone elses, and your speed will get slower and slower.

Why is this true? Upstream bandwidth costs about $4-$10/megabit per month. If US citizens have an average of 2 megabits, that means their cost of service for them is at least $8/user under their claim. At a price of $7.8 per month, they are either in the business of giving away free money, or they aren't being truthful about what they are offering. There is no such thing as a free lunch. Considering the pricing structure, this may just be a reseller of Relakks.

2. They claim on the left they use 256-bit crypto, and on the right they are using 128-bit. Not that it really matters, but if you can't get your story straight in your ads, it makes me doubt the credibility and competence, and therefore how secure the service actually is.

3. They claim anonymity, but it is almost certainly a single-hop/single-country service (especially according to their diagram), which makes it very misleading in the least since they can't actually provide anonymity.

4. "No Logs" and "strongest privacy" is going to be wrong also, since they are US based. Well, at least until they get their first subpoena, then they don't have a choice. :D

5. Exactly what VPN technology are they using? Does it work by SSH, PPTP, IPSEC, OpenVPN, L2TP, or DLL Injection? Does it capture all your traffic, or just your web surfing? can it be bypassed? Can we see the source code?

6. They claim that nothing can be used to link you, which is an outright lie for anyone who knows the slightest thing about anonymity.

[geazer40]

{QUOTE-> Looks can be deceiving. Everyone is trying to sell "anonymous" VPN service nowadays, but only two or three providers sell the real deal, the rest is all snakeoil. I'll show you with some simple examples using their own advertising on that one image:

1. No speed limits + unlimited transfer means they are going to oversubscribe their service. They won't need a "speed limit", there won't be enough resources when your traffic is competing with everyone elses, and your speed will get slower and slower.

Why is this true? Upstream bandwidth costs about $4-$10/megabit per month. If US citizens have an average of 2 megabits, that means their cost of service for them is at least $8/user under their claim. At a price of $7.8 per month, they are either in the business of giving away free money, or they aren't being truthful about what they are offering. There is no such thing as a free lunch. Considering the pricing structure, this may just be a reseller of Relakks.

2. They claim on the left they use 256-bit crypto, and on the right they are using 128-bit. Not that it really matters, but if you can't get your story straight in your ads, it makes me doubt the credibility and competence, and therefore how secure the service actually is.

3. They claim anonymity, but it is almost certainly a single-hop/single-country service (especially according to their diagram), which makes it very misleading in the least since they can't actually provide anonymity.

4. "No Logs" and "strongest privacy" is going to be wrong also, since they are US based. Well, at least until they get their first subpoena, then they don't have a choice. :D

5. Exactly what VPN technology are they using? Does it work by SSH, PPTP, IPSEC, OpenVPN, L2TP, or DLL Injection? Does it capture all your traffic, or just your web surfing? can it be bypassed? Can we see the source code?

6. They claim that nothing can be used to link you, which is an outright lie for anyone who knows the slightest thing about anonymity. <-QUOTE}



get a life steve all you do is knock everyone else but your chosen three jeeze your posts are killing your service dont you relise that

[Sheldon7]

{QUOTE-> get a life steve all you do is knock everyone else but your chosen three jeeze your posts are killing your service dont you relise that <-QUOTE}

I just posted on another thread, in response to your negativity.. I actually find it pretty baseless and you write like a dejected incoherent teenager.

Steve commented in a concise manner what issues he saw with the service. His points make sense.

On topic: I find it amusing that in the one screen, XP Repair Pro advertise their 256-bit encryption, yet then refer to their use of 128-bit on the right.
Gives me the impression that this system is amateurish. Thus I would not feel comfortable with the chances of the rest of the service being robust either. :thumbd:

[geazer40]

here comes the 1st steve fanboy :)

[traxx75]

{QUOTE-> get a life steve all you do is knock everyone else but your chosen three jeeze your posts are killing your service dont you relise that <-QUOTE}At least he provided a basis for most of his arguments. All you're doing is acting the troll. If you think his arguments have no substance then the least you could do is counter him with arguments of your own.

Some of what Steve said may be just an "educated assumption" [eg. being a single-country solution] but the rest is pretty obvious [eg. "unlimited" speeds being unworkable unless membership numbers are capped to make it sustainable].

[3DFireStarteR]

{QUOTE-> here comes the 1st steve fanboy :) <-QUOTE}

Lol OMG its so true!

[Z32]

{QUOTE-> here comes the 1st steve fanboy :) <-QUOTE}

{QUOTE-> Lol OMG its so true! <-QUOTE}


Would you please post something of substance, refuting the legitimacy of SteveTX's examples... If not, why not Report his posts if you feel they're off-base.

All your posts are going to do is create a flame war and/or get a valuable thread closed or deleted.

[jonw]

{QUOTE-> Looks can be deceiving. Everyone is trying to sell "anonymous" VPN service nowadays, but only two or three providers sell the real deal, the rest is all snakeoil. I'll show you with some simple examples using their own advertising on that one image:

1. No speed limits + unlimited transfer means they are going to oversubscribe their service. They won't need a "speed limit", there won't be enough resources when your traffic is competing with everyone elses, and your speed will get slower and slower.

Why is this true? Upstream bandwidth costs about $4-$10/megabit per month. If US citizens have an average of 2 megabits, that means their cost of service for them is at least $8/user under their claim. At a price of $7.8 per month, they are either in the business of giving away free money, or they aren't being truthful about what they are offering. There is no such thing as a free lunch. Considering the pricing structure, this may just be a reseller of Relakks.

2. They claim on the left they use 256-bit crypto, and on the right they are using 128-bit. Not that it really matters, but if you can't get your story straight in your ads, it makes me doubt the credibility and competence, and therefore how secure the service actually is.

3. They claim anonymity, but it is almost certainly a single-hop/single-country service (especially according to their diagram), which makes it very misleading in the least since they can't actually provide anonymity.

4. "No Logs" and "strongest privacy" is going to be wrong also, since they are US based. Well, at least until they get their first subpoena, then they don't have a choice. :D

5. Exactly what VPN technology are they using? Does it work by SSH, PPTP, IPSEC, OpenVPN, L2TP, or DLL Injection? Does it capture all your traffic, or just your web surfing? can it be bypassed? Can we see the source code?

6. They claim that nothing can be used to link you, which is an outright lie for anyone who knows the slightest thing about anonymity. <-QUOTE}


Well not taking up for Steve or bashing him but he is kinda right, to me that's kinda weird to say 256bit encryption when it's really just 128bit encryption. If there server is in the US aren't you required by law to keep logs?

[caspian]

{QUOTE-> get a life steve all you do is knock everyone else but your chosen three jeeze your posts are killing your service dont you relise that <-QUOTE}

If it's true, it's true. And if it's a US company then nothing else really matters.

[Warlockz]

I made a request for a rep from Xp Repair Pro to come and reply to this post, we will just have to wait and see what they have to say in this matter, if anything at all?

{QUOTE-> # Request:
I made a post about your VPN service at WildersSecurityForum, and a rep from Xerobank had nothing but bad things to say about it, I would suggest that a Rep from Xp Repair Pro, Reply to the thread at the Wilders security forum in defense to the accusations of your VPN service, otherwise it would look bad for your company, therefore you may loose many customers, who may have well joined your service if not due to the accusations said about it!

Thread is located here

http://www.wilderssecurity.com/showthread.php?t=239261

Thank you for your Time and Cooperation in this matter!

Have a nice day! <-QUOTE}

[SteveTX]

Excellent! I look forward to their expert. :D

[caspian]

It's not gonna happen.:P

[LockBox]

My guess is they're simply reselling somebody else's service. Many of the VPN providers offer a reselling option. With as little information as they have for their service, for them to screw up and put two different things concernng the encryption, that's pretty bad.

[Hiker]

{QUOTE->

More information is provided here

http://www.xprepairpro.com/vpn/ <-QUOTE}

Flagged by WOT. :argh:

[jonw]

Dude it seems like companies everywhere are starting to sell crappy vpn's, trust me I could set one up and sell it if I wanted to the thing is I wouldn't really have the knowledge or time to take care of it. Oh man just thinking about all the legal crap dealing with a vpn or proxie hurts my head. Seriously though I can get a server from ovh for cheap and start selling a crappy service like so many companies do. The trick is finding a company that will be around not just trying to make quick money.

[fuzzylogic]

I had to laugh at the graphic, 'connect to the internet for you', hmmm no, you merely connecting to a server to pass the internet through. funny stuff, it doesn't seem to much more than a another vpn company for sure, the no logs part gets me too, you'll generate logs when you sign in, so there goes the no logs part.

[CRoz]

Steve can you please mention the name of providers except Xerobank who sell the real deal........

[jonw]

Well there is cryptohippie there also really good, there just as secure as xerobank from what I am told note this is not a first hand account of cryptohippie.

https://secure.cryptohippie.com

[SteveTX]

Sure: Zonice. Raytheon. Kryptohippie.

[caspian]

How about metropipe. Are they pretty cool? At least better than most?

[SteveTX]

Definitely better than most, as far as corporate structure.

[geazer40]

perfect privacy trackbuster cyberghost

[geazer40]

{QUOTE-> At least he provided a basis for most of his arguments. All you're doing is acting the troll. If you think his arguments have no substance then the least you could do is counter him with arguments of your own.

Some of what Steve said may be just an "educated assumption" [eg. being a single-country solution] but the rest is pretty obvious [eg. "unlimited" speeds being unworkable unless membership numbers are capped to make it sustainable]. <-QUOTE}


i think you will find it was mentioned before on this thread
http://www.wilderssecurity.com/showthread.php?t=224184&highlight=metropipe

and i think you are mentioned aswell buddy :)

[traxx75]

"It" was mentioned? That only relates to what you said about Steve's "chosen three" and has nothing to do with the fact you didn't actually address any of the points he made in this thread.

I was mentioned in that thread by another troll who mysteriously disappeared after making their allegations. They accused several people of being in cahoots with Steve [or _being_ Steve!] and yet when those people asked for proof, or otherwise provided a solid argument defending themselves, the person who started the thread had no rebuttal [or otherwise disappeared].

I guess there will always be the conspiracy nuts on forums like these so if you find yourself attracted to them and their baseless ramblings then I guess that's your problem :)

[Fontaine]

{QUOTE-> Looks can be deceiving. Everyone is trying to sell "anonymous" VPN service nowadays, but only two or three providers sell the real deal, the rest is all snakeoil. I'll show you with some simple examples using their own advertising on that one image:

1. No speed limits + unlimited transfer means they are going to oversubscribe their service. They won't need a "speed limit", there won't be enough resources when your traffic is competing with everyone elses, and your speed will get slower and slower.

Why is this true? Upstream bandwidth costs about $4-$10/megabit per month. If US citizens have an average of 2 megabits, that means their cost of service for them is at least $8/user under their claim. At a price of $7.8 per month, they are either in the business of giving away free money, or they aren't being truthful about what they are offering. There is no such thing as a free lunch. Considering the pricing structure, this may just be a reseller of Relakks.

2. They claim on the left they use 256-bit crypto, and on the right they are using 128-bit. Not that it really matters, but if you can't get your story straight in your ads, it makes me doubt the credibility and competence, and therefore how secure the service actually is.

3. They claim anonymity, but it is almost certainly a single-hop/single-country service (especially according to their diagram), which makes it very misleading in the least since they can't actually provide anonymity.

4. "No Logs" and "strongest privacy" is going to be wrong also, since they are US based. Well, at least until they get their first subpoena, then they don't have a choice. :D

5. Exactly what VPN technology are they using? Does it work by SSH, PPTP, IPSEC, OpenVPN, L2TP, or DLL Injection? Does it capture all your traffic, or just your web surfing? can it be bypassed? Can we see the source code?

6. They claim that nothing can be used to link you, which is an outright lie for anyone who knows the slightest thing about anonymity. <-QUOTE}

+1 for Steve's response. He may push Xerobank a lot, but his analysis is good...and when it comes to security, it's better to be skeptical and try to pick apart a product, rather than just accepting it for what the company says.