Anonymous Services - Can We Get A List Going And Feedback?

[pcdoctor36]

My suggestion is to evaluate IVPN.NET. Bitcoin is a payment option so is secure from the payment source. IVPN uses L2TP over open VPN. They are a bit more pricey then some, but from my eval are the best out there. You will have to do your own evaluation. I think the service is superior. There is too much to describe here.

Originally Posted by DasFox

I dug a little looking here on Wilders and didn't notice anything, at least not current and I wanted to ask that we make a list here and give some feedback and discuss the different anonymous services out there.

The last service I used was Relakks. It seemed to work nice, but I've heard some bad about it, keeping logs, etc., so I'm not to sure about them, but I'm considering using another anonymous vpn service and I'd really like to know what's going on out there over these types of services if anyone really stands out as one of the top services to use?


BTGuard (Known of them, never used the service)
http://btguard.com/

Relakks ( I used them in the past, they seemed good, but I've heard mixed things...)
https://www.relakks.com/index.php

Ipredator (Suppose to have something to do with Piratebay?)
https://www.ipredator.se/?lang=en

Anonymizer (Heard bad things in the past, wouldn't trust using them)
http://www.anonymizer.com/

HideMyNet: (Can't say I know anything)
http://www.hidemynet.com/

Xerobank (I actually used the service as a tester given to me by Steve when it began, so back then it was nice, now I don't know, haven't used it since it first started)
https://xerobank.com/

As far as Relakks and Ipredator are concerned since they are in Sweden I don't know if this is still a problem for using a Swedish service;

In June the Swedish parliament passed a controversial surveillance law that gives authorities a mandate to read all email and listen in on all phone calls without warrant or court order. In response to the law, The Pirate Party organized rallies, bloggers and journalists turned into activists, and even Google decided to relocate their servers.

http://torrentfreak.com/swedes-massi...ap-law-080707/

Random sites I found while surfing, I have no information or knowledge about them.

Linkideo
http://www.linkideo.com/

Perfect Privacy
http://www.perfect-privacy.com/


Found an online review section: (Some very interesting reviews, but how credible?)
http://bestvpnreviews.com/

Something interesting I read on the Review site;

PPTP has seen a decline in use. Our recommendation is to switch to OpenVPN.

So please share what you know and let's get a nice list with some nice input...

THANKS


*** P.S. ATTENTION SPECIAL NOTICE SINCE POSTING IN NOVEMBER 1st, 2010! ***

When I first made this post back in November 1st, 2010, this was not only a personal quest I was on to enrich my own knowledge of these various types of services, but I realized there was a need to increase this knowledge for everyone, since it seems that trying to learn many things as it relates especially to VPNs and all the various providers online, difficult to say the least.

After all if you've spent any time on Wilders you'll notice the mass amounts of VPN questions because it's just not easy to tell who is worth investing time in trying, let alone worrying about your personal safety.

So after all this time I have finally realized when approaching a VPN provider for OpenVPN, there is only one question you need to ask this provider to see if they know what they are doing and if they give you back any other answer then leave them and move on to the next one until you find the correct reply.

Why is this so important above every other question? Because this is the ultimate question and one in which OpenVPN themselves have told me is the recommended way in which to do this and anything less is not good.

A OpenVPN provider should be providing you 4 files, regardless if they are saying their services are for Windows, Linux, or Apple, every OS is the same when it comes to OpenVPN, they all require the same thing, it doesn't matter.

You should be getting 4 files;

Client Cert - (client.crt)
Ca Cert - (ca.crt)
Private Client Key - (client.key)
TLS Auth Key - (ta.key)

A lot of VPN providers will tell you they only give you a client cert and ca cert with a username and password, forget it, it's not good enough!

So here's the question you need to ask them;

1. Does your service provide the client cert, ca cert, private key and tls auth key?

Do not pick a VPN provider until you find one that says they give you all 4 files, then when you find one, you can consider asking them other questions you might have any concerns for.

Remember, OpenVPN told me this is what you want, so don't believe anything else a VPN provider might tell you, because I certainly don't, I place my trust in what OpenVPN has told me and so should you!

Also remember, just because they know what they are doing as far as this question is concerned, it still doesn't mean they are good at everything, or anything, it just means they have this very important part right that you need to know before going any further with them. But the fact that they offer all 4 files, they are probably doing a decent job...

This is the all important starting pointing from which to judge that service and then take from there!

[Snowden]

I noticed that w/ privateinternetaccess I'm not getting my personal user.crt and user.key

=\ which SUCKS because so far I haven't found a service that gives me those speeds.

so...ditch them?

[mirimir]

Originally Posted by Snowden

I noticed that w/ privateinternetaccess I'm not getting my personal user.crt and user.key

=\ which SUCKS because so far I haven't found a service that gives me those speeds.

so...ditch them?

What distinguishes Private Internet Access is price (low) and speed (high). Service costs just $40 per year. And they accept Bitcoins. And they have many exit nodes, some in unusual places.

But they just use ca.crt (which guarantees that you're connecting to one of their servers) and username/password (which restricts access to paying customers).

Without user.crt/user.key authentication, it is easier for an attacker to connect using your account. They'd need to know your username, and then hack your password. If this were an OpenVPN connection to your private network, that would be a serious vulnerability. But this is just an OpenVPN proxy service.

Private Internet Access does allow multiple simultaneous connections. At their price, that's an amazing deal. However, an attacker could be using your account at the same time that you are. But that still wouldn't compromise your connection, because the OpenVPN tunnels are distinct entities, with no common network except the Internet.

Being paranoid, I wouldn't use Private Internet Access as my primary VPN. But I also wouldn't reject them entirely, especially if you need many exit nodes.

AirVPN costs twice as much per year, and does use user.crt/user.key authentication. They also accept Bitcoins, and are at least as fast. From their status page (-https://airvpn.org/status/-) someone's been connected to one of their Amsterdam servers for six days at 62Mbps.

Edit: AirVPN offers two-hop routes, but Private Internet Access only has one-hop routes. And I see that AirVPN has added more exit nodes.

[PaulyDefran]

Originally Posted by mirimir

Edit: AirVPN offers two-hop routes, but Private Internet Access only has one-hop routes. And I see that AirVPN has added more exit nodes.

What did I miss? Where do you see two-hop? I see something about internal servers for geo-ip blocking work arounds, but that's it. I just looked at all the pages, but not seeing it. Thanks mate.

PD

[mirimir]

On that AirVPN status page, it says under Routing:

"Internal servers, used for double-hop to avoid geolocation censorship. Not available for direct connections."

I don't have a current account, and apparently didn't save the old config files.

Maybe I'm wrong, and that's just misleading language.

[PaulyDefran]

Yeah, that's what I saw as well.

PD

[mirimir]

Maybe happyyarou666 can tell us

[happyyarou666]

hell id say wait till i get my setup going or youd have to zap the admin a quick pm over at the support forums , theyre pretty quick , btw i cant do nothing except talk on wilders currently , without using my vpn ,i feel naked as hell , and no im not gona connect to tor with my real ip , paranoid, perhaps


update> ok ive just contacted the admin , lets see what he got to say , had to reactivate my host machine vpn again , now back getting this thing working


ill let you guys know as soon as i get a reply

update>

ok this just in from the air admin , here goes|



@Hello!

Double-hop is performed ONLY to bypass geographical location based discrimination. For example, to access BBC iPlayer from any server in the world, even a non-UK one.

Anyway, all our VPN servers have different entry and exit-IP addresses to prevent some types of correlation attacks and you can perform multi-hopping (if you need that additional anonymity layer at the price of a performance hit) with OpenVPN over OpenVPN (you'll need two accounts if you wish to perform double-hop with two Air servers) or OpenVPN over TOR, or TOR over OpenVPN airvpn.org/tor@

[PaulyDefran]

Originally Posted by happyyarou666

...you can perform multi-hopping (if you need that additional anonymity layer at the price of a performance hit) with OpenVPN over OpenVPN (you'll need two accounts if you wish to perform double-hop with two Air servers)

I need to try this again. I tried adding a second TAP adapter and using Air and another provider, but I couldn't get it to work. A VM would no doubt be easier, but I wanted to get it to work on the same host. I can connect to both VPNs, but doing a traceroute just shows one being used, even though both are connected.

PD

[mirimir]

Originally Posted by happyyarou666

ok this just in from the air admin , here goes ...

I'm becoming very impressed with AirVPN. Maybe I'll get another account. Are they really as fast as the speeds reported on their status page? What about reliability? Do we know anything about who's running it?

[mirimir]

Originally Posted by PaulyDefran

I need to try this again. I tried adding a second TAP adapter and using Air and another provider, but I couldn't get it to work. A VM would no doubt be easier, but I wanted to get it to work on the same host. I can connect to both VPNs, but doing a traceroute just shows one being used, even though both are connected.

It may be possible to chain two VPNs on one machine, with proper routing. I don't know how doable that is in Windows.

Why do you want it on the same host? You could use VBox with the outer-VPN VM bridged to host, and a host-only adaptor on the inner-VPN VM. That's what I'm attempting with happyyarou666.

[PaulyDefran]

Just to make it work

I'm boring, one hop direct is fine for me, or TOR>VPN. I just want to get the darn thing to work!

I need to play with Virtual box, darn it.

PD

[happyyarou666]

Originally Posted by mirimir

It may be possible to chain two VPNs on one machine, with proper routing. I don't know how doable that is in Windows.

Why do you want it on the same host? You could use VBox with the outer-VPN VM bridged to host, and a host-only adaptor on the inner-VPN VM. That's what I'm attempting with happyyarou666.

shhhh thats our little secret , lols

anyhow bout airvpn and info on them , well


first off , yes the speeds are exactly as reported rock solid and stable , i get my full bandwidth with them , no faking , no cheats, pure professional vpn service that knows its subject and has excellent support , should there ever be questions about anything , or perhaps connection problems etc , theyll hook you right up

and about the subject

reliability? Do we know anything about who's running it


well sure we do , heres the info , btw mullvad is excellent as well and specialized in swedish servers , or should i say server , lols, not too many servers , as far as i know they got 3, netherlands, sweden and germany , since i only care for sweden it dont matter that much , as its rock solid as well and never had a problem , just recently renewed my subscription with them, the few ones they have, are blastin speed and they know theyre swedish laws best , if you want info on them its on theyre website under the about link , and this info is from airvpn , just abit hidden , but there , stop being lazy guys just visit the site, lols

btw for all thats offered by both providers compared to subscription cost , the cost is peanuts , perhaps once one of them , most likely mullvad since i trust airvpn more , theyre just abit more sophisticated , runs out , ill go and do a longer test run on boleh , since they seem to have been doin well , and now including bitcoin as well , not sure about the amount of swedish servers thou since i complained about that in my vpn test thread a while back


Air di Paolo Brini
c.a. Paolo Brini
info@airvpn.org
c/o Studio Papa
Via Vecchi 53
I-06100 PERUGIA
ITALY


anything else? just hola at da boy

[mirimir]

Originally Posted by happyyarou666

Paolo Brini

-http://ipowerproject.com/profile/PaoloBrini

Very cool

[bolehvpn]

Originally Posted by happyyarou666

btw for all thats offered by both providers compared to subscription cost , the cost is peanuts , perhaps once one of them , most likely mullvad since i trust airvpn more , theyre just abit more sophisticated , runs out , ill go and do a longer test run on boleh , since they seem to have been doin well , and now including bitcoin as well , not sure about the amount of swedish servers thou since i complained about that in my vpn test thread a while back

Yes we just started accepted BitCoins today as a trial run and will see how it goes

We're upgrading our Swedish server and we'll see how it performs before committing to more

[happyyarou666]

great to hear that, keep it up

[Taliscicero]

Originally Posted by mirimir

I'm becoming very impressed with AirVPN. Maybe I'll get another account. Are they really as fast as the speeds reported on their status page? What about reliability? Do we know anything about who's running it?

I tried them recently, slower then BolehVPN & Mullvad for me. Everything's connected on my end the right way, It is just slower.

[hogndog]

SSL Certificate, this may be way off base as i haven't tried installing it, come to find out its built into Windows XP..

http://www.somacon.com/p42.php

Create a self-signed SSL certificate with IIS 6.0 Resource Kit SelfSSL

The IIS 6.0 Resource Kit version 1.0 was released 5/30/2003. It contains a utility called SelfSSL.exe for instantly creating and installing a self-signed testing certificate into IIS. The resource kit is freely downloadable from the Microsoft website. Although the tool is intended for IIS 6.0, it works just as well on IIS 5.1. It is so simple to use that no instructions are required beyond the pointer to the download.

Its legal isn't it?
Hogndog