Beware: Hola VPN turns your PC into an exit node and sells your traffic

Discussion in 'privacy technology' started by Dermot7, May 28, 2015.

  1. Dermot7

    Dermot7 Registered Member

    Joined:
    Dec 20, 2009
    Posts:
    3,430
    Location:
    Surrey, England.
    http://www.ghacks.net/2015/05/28/be...-pc-into-an-exit-node-and-sells-your-traffic/
     
  2. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    Thanks for posting about Hola :)

    It is truly evil :eek:
     
  3. NWOAbschaum

    NWOAbschaum Registered Member

    Joined:
    Feb 9, 2014
    Posts:
    222
    Location:
    Germany
    i never used a free vpn provider for reasons like this. only use high quality vpn,abit high in price but worth the money.
     
  4. krustytheclown2

    krustytheclown2 Registered Member

    Joined:
    Nov 18, 2014
    Posts:
    210
    How can they even call this a VPN, since it's obviously just a proxy service? Totally different.

    It's interesting how people try to maneuver the law in order to create something typically illegal, a botnet, through ostensibly "legal" means. I wonder what scheme is next, and I'm curious whether they'll ever get sued, shut down, or put in jail for this crap. This is reminiscent of the uTorrent bitcoin mining botnet scandal from a few weeks ago...
     
  5. quietman

    quietman Registered Member

    Joined:
    Dec 27, 2014
    Posts:
    511
    Location:
    Earth .... occasionally
    This is not the first we have heard about Hola.

    It looks like the OP , max2 was right to be suspicious .

    Free VPN sounds like a nice idea in theory , but it clearly comes at another type of cost .

    For me , that price is way too high !

    It's clear that using any VPN service involves a degree of trust , but if the provider is "weak" in the ethics department ,
    ( and I'm trying to be as polite as possible here ) we are back with "Throwing out the baby with the bathwater " .
     
    Last edited: May 28, 2015
  6. The Red Moon

    The Red Moon Registered Member

    Joined:
    May 17, 2012
    Posts:
    4,101
    The most trusted and reliable VPN provider would be........?
     
  7. quietman

    quietman Registered Member

    Joined:
    Dec 27, 2014
    Posts:
    511
    Location:
    Earth .... occasionally
    I really don't feel qualified to answer that question for you.

    If I were asking the question , I'd be looking for advice from mirimir , who is a top poster on here and has excellent advice on all things VPN.

    I would also be reading this very carefully ( a similar comparison is here ) .

    When it comes down to the nitty-gritty , it's not too different to buying a used vehicle ....
    "you pays your money and you makes your choice " .

    Or to put it in other terms , if it turns out to be rotten , then you found out the hard way :)
     
  8. deBoetie

    deBoetie Registered Member

    Joined:
    Aug 7, 2013
    Posts:
    1,832
    Location:
    UK
    One where you understood their business model and incorporation, and felt that their ability to make money would be severely compromised by cost of messing with customers, so that was prohibitive. Free will never cut this.

    Of course, that does not make paid-for reputable services fully secure, and they will pretty much always have to comply with LEA in their jurisdiction. For me, my objective is to ensure that that is individually warranted rather than done in bulk - which is the civilized deal that I will subscribe to. Mass surveillance - no.

    Of course, the reputable services will be under constant attack from the TLAs who will be trying to get the bulk flows using a variety of techniques.
     
  9. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    These six seem to be safe: AirVPN, BolehVPN, Cryptohippie, iVPN, Mullvad and PIA.

    But I've been saying that for years :)

    What should we add?
     
  10. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    Yes indeed. And I paid no attention. "So what?", I thought, another "browser VPN".

    But this was more than that!
    That is going too far, I think. Free VPN trials, or even free (albeit crippled) services, are not uncommon, as a marketing ploy. The free SecurityKISS service, for example, is well-designed and secure. But it does have a 300MB usage cap.
    There's no way to assess ethics. The key risk factor for Hola was the custom app. I don't believe that what it did is possible using plain OpenVPN.
     
  11. Dermot7

    Dermot7 Registered Member

    Joined:
    Dec 20, 2009
    Posts:
    3,430
    Location:
    Surrey, England.
    http://www.dailydot.com/technology/hola-vpn-security/
     
  12. oliverjia

    oliverjia Registered Member

    Joined:
    Jul 21, 2005
    Posts:
    1,926
  13. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    4,457
    Location:
    .
    Do you find Privacy violation https://hola.org/legal_privacy
    << [..] they don’t enforce rules that say people shouldn’t be engaging in illegal activity because the company has “no idea what you are doing on our platform.”>>
     
  14. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    Most people using Hola probably have no clue that they're providing exits for other users. So it's users who need to care about what other users are doing, because they will suffer the consequences.
     
  15. Tyrizian

    Tyrizian Registered Member

    Joined:
    Apr 26, 2012
    Posts:
    2,839
    CyberGhost is another good example.

    With it's limitations it's just as good, but not as limiting as SecurityKISS.
     
  16. Dermot7

    Dermot7 Registered Member

    Joined:
    Dec 20, 2009
    Posts:
    3,430
    Location:
    Surrey, England.
    Hola rocked by botnet accusations - BBC News

    Hola Prepares Bug Bounty Program, CEO Says - Softpedia
    @mods, maybe this thread should be linked/merged with this other one, as much of the content has now become relevant to both? I'm happy with whatever is decided best, thanks.
     
  17. Palancar

    Palancar Registered Member

    Joined:
    Oct 26, 2011
    Posts:
    2,402
    I like Mirimir's list above. In candor I use two of them so those I do feel like I know. Air and IVPN

    If price is a "thing" you might consider that Air is running a 5 yr birthday celebration with 25% off for a couple more days. Off the top of my head that is like 60 bucks US for unlimited use for a year. No - I am not an Air employee, just a user.
     
  18. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    http://www.bbc.co.uk/news/technology-32958624

    I'm guessing that, by paying the monthly fee, you get access to free users' IPs. Yes?
     
  19. Dermot7

    Dermot7 Registered Member

    Joined:
    Dec 20, 2009
    Posts:
    3,430
    Location:
    Surrey, England.
    https://torrentfreak.com/hola-vpn-already-exploited-by-bad-guys-security-firm-says-150602/
     
  20. Amanda

    Amanda Registered Member

    Joined:
    Aug 8, 2013
    Posts:
    2,115
    Location:
    Brasil
    No piece of software can be trusted unless the user or some people of a community have seen the SourceCode of both the programs that run on the user's machine and the source code running the servers. Untill then, even the paid providers who have a "good" reputation can't be trusted, and IMO the most reliable ones are the 'autistici.org' VPN and 'riseup.net' VPN.
     
  21. PRUHDG

    PRUHDG Registered Member

    Joined:
    Mar 4, 2010
    Posts:
    77
    Haha never trusted this company wanted me to intall its software on my computer in order to use extension that in itself is "phishy".
     
  22. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    Yes, and yet most all VPN services at least offer custom clients. But I do prefer to use stock open-source apps.
     
  23. Hola is garbage. I don't understand why people use that crap. Free VPN = garbage.

    I've used basically every VPN's custom built client out there and I do wonder sometimes if I'm not giving myself a trojan by installing them.

    The problem with the custom clients as I see it is that they all need root or admin priverlages to run your system. That includes OpenVPN's open source client.

    They will not run correctly if they don't have root or admin privelages.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.