Sunday 29 May 2016

Consider Using a VPN: More Privacy for All Your Traffic

One option for anonymous browsing and privacy for other types of network traffic is using the Tor network which has been covered in a few articles here before. But although traffic is encrypted within the network when bouncing between relays, plain text over Tor is still plain text. Other problems are the slow speed and connectivity issues users may be facing with a volunteer network, user-unfriendly configuring of exit nodes and switching them on demand, and the fact that Tor is not suited to stream large files and video content, if only not to abuse donated bandwidth.

If you're downloading or torrenting a lot or watching a lot of streaming movies and TV shows paying a small fee for a Virtual Private Network is well worth it. There are also a few gratis options available if you want to skimp or are somehow philosophically opposed to paying for services, but I would caution that some things are worth the small investment it takes to be able to use them, in particular if it saves a lot of hassle and/ or money in the long run. An annual subscription to a VPN provider can be had for cheaper than a DVD box set, so watching a season of one show for free would have already made up for it. 

Why should you do that? VPN's use high-grade encryption and same as Tor hide your requests among all the other traffic coming from or entering a particular server. In this way it acts like an anonymizer proxy. Although streaming movies is technically not illegal as they are not actually copied to the users storage for a significant amount of time (which means no copyright is infringed), in some countries law firms have specialised in sending desist letters to consumers, demanding hefty fines after identifying their IP addresses (an exercise which they are engaged in large-scale), same as with torrents and other P2P sharing software. Even if you're not doing anything illegal, you can save yourself a lot of hassle in the form of having to write letters, refuting allegations, or even having to hire your own lawyer. In addition, you get an extra layer of encryption around your emails and web searches. The good clients also have a kill switch to prevent data from leaking and giving away your location and ensure no unencrypted traffic gets out. A small problem remains for the paranoid: How can we be sure that the provider really keeps to their privacy policy and promises of no logging etc. Worse, how can we be sure it's not the security agencies, or the entertainment industry building a massive case, who are really behind our chosen provider and monitoring everything we are sending through their systems? It's a question of trust, I guess. A VPN also allows you to circumvent the blocking of major torrent sites that is done by most ISP's now and get around geo-blocking implemented by TV channels and providers of online content, even on Youtube, and to connect to another country or exit node with one click.

Here's my experiences with some of the providers used so far.

Browser plugins.
All the below also have clients for Android where due to this they function like a traditional VPN, encapsulating all traffic and not just the browser.

I've used Zenmate's free service since probably 2009 as a browser plugin with Google Chrome -before they had desktop clients- until recently on and off. The good thing about having a free plugin as well as a full VPN with another provider is that one can a) use this as an extra layer of security as an encrypted tunnel within a tunnel, b) it may provide additional exit points in countries your other provider is not covering. A browser plugin of course only encrypts browser traffic, but if you're only using webmail in a public wifi hotspot, or are even doing everything through your browser like with ChromeOS, this, theoretically and barring any inherent flaws and leakage, should still keep you safe.

Zenmate performed admirably for years here during its very long lasting free trial period. Predictably, it got worse once it had picked up more users and varied between bandwidth good enough to stream TV channels for hours and extreme slow, dropped connections on other days. Last year I also tried the Android client but found like other users it would sometimes not connect and become extremely slow after initially working well enough for streaming, as if a usage amount had been reached and usage capped although this is not announced. There are promotions and a free trial for the premium service but in my experience it did not perform any better. The free plan does not include the UK any more, presumably because of the popularity of TV programmes like BBC and ITV players. Last, Zenmate premium is quite expensive at $59.99/€59.99/£49.99 for the yearly plan and even after a hefty discount during one of their promotions still came in more expensive than my current first choice, but it does throw in added protection from trackers, adware and malware.

Zenmate also has desktop clients for Windows and OS X and can probably be set up with openvpn on Linux.



This one is part of the Opera Software Company, the people behind the Opera browser. They're also offering another VPN service on Android and for mobile devices (Opera Max) which cuts down on the traffic by filtering and compressing, using in part the same technology their various Opera browsers are using which used to be a boon in dial-up times and again in times of limited data plans and capped DSL bandwidth that is still afflicting countries like Australia. Problem is with this, if you're opting for compression and data saving, you cannot have a real VPN, as obviously one cannot have two VPN connections at the same time.

SurfEasy is a full VPN service. The free plan only offers a very limited bandwidth of I think around 700MB per month, renewing a month after activation. There are several ways of earning more data allowance which, once earned, also renews from month to month. Not a bad deal but still, hardly enough to watch online video or even Youtube. It's ok though if you're just looking to secure your connection for the odd browsing session, emailing and research, even reading one or the other book online. On the upside, SurfEasy offers plenty of locations and during my usage always has shown exceptionally good throughput. No stuttering or buffering here. The free plan is supposed to make money by aggregating anonymous usage data of its users browsing habits so bear that in mind. The paid plan also offers protection from ad-tracking and presumably will not analyse your browsing. However, a discounted rate of $77.88 for 12 months or $11.99 for one month does not exactly strike me as good value.

This is probably the most complete solution in terms of clients. SurfEasy has browser plugins for Chrome and Opera, desktop clients for Windows and Mac, Android, Iphone and Ipad and also a so-called SurfEasy Private Browser USB plugin solution to run from USB key "for private and secure browsing on any computer or network", which sounds a bit like the Tor Browser Bundle.

Despite the limitations of the free plan I was impressed by how well it worked. Both the browser plugin and the client on an Android tablet worked flawlessly within the allotted data allowance and new data earned added immediately. In the optimized setting the client randomly picks a location to aid privacy.



I must confess I haven't used this one much but when I have it did not seem capped and offered good speed for online video. Again, I ran it as a browser plugin on a Chrome book as well as the Android client on my Kodi/ Android Player box for a session of torrenting and some online streaming. It did not seem restricted and did not loose connection. If I recall correctly it's also the only one that does not require registering an email address to open an account.

On the free plan the app offers users to download other apps or watch videos from their sponsors, but to be honest I didn't see any of that, possibly due to an active ad-blocker. Their site states that this is how Betternet makes money to keep the servers running. A premium plan is available which offers more locations and a higher quality of service but in my opinion the free service with no evident data caps was fine. No pricing information on the website. They promise unlimited, free service for ever. This alone may make it the VPN of choice for many, or at least one to always be able to fall back on. If you go for the optimized setting the client will connect to the nearest server, meaning the one with the lowest latency. 

Betternet has plugins for Chrome and Firefox which is another point in its favour for all the users sticking to Mozilla's browser. Desktop clients are available for iOS, Android and Windows. It does not look like settings are available to set this up on Linux with openvpn.

Now there's also another service for mobile devices called Hexatech with clients for Android and iOS with a paid plan for $1 a month.

Traditional VPN's.


Cactus VPN are offering various products either for geo-unblocking/ proxying only or a full VPN service. Protocols supported are L2TP/IPsec, OpenVPN, SSTP, SoftEther and PPTP and they're offering high-grade encryption and no logging, with torrenting and P2P sharing allowed on Netherlands and Romanian servers. Cactus VPN as a business is apparently located in Moldova which is nicely out of reach for the more litigation minded industries that try to abuse state power for their own financial gain. Together with the policy of no logs this should go some way to safeguard your privacy.

I used this provider for a year's subscription and had a good experience. Occasionally servers would drop and be replaced which would necessitate some cleaning up on my devices, removing dead ones and adding new ones. Possibly their IP's were blacklisted by streaming sites as known VPN servers. In the end, so often not getting a connection was annoying although in all fairness, usually servers were up and when they worked they worked well and I had uptime for days. All servers are in either the US, the UK, Netherlands or Romania. In the end, the only reason I stopped using Cactus was that they do not offer a server in Germany which is sometimes needed to get around the geo-blocking German TV and media libraries are using. Not an issue for everybody and one can maintain another service for this location, as above.

CactusVPN is good value and they often run promotions on all sorts of occasions like Valentine's Day, Easter, or Christmas when they're even cheaper, up to 2/3s. Standard prices are either $38.99 per year for a choice of locations or $54.99 for all 16, but yes, you can get it for half of that or less. They have clients for Android, Mac, iOS and Windows and provide settings and instructions to set it up with Networkmanager on Linux, on Chromebooks, media players and routers if you want to cover the entire home.

A free 24-hour trial is also available and a range of ways to pay. Subscribers can have up to three devices connected at once. On Android this worked well using OpenVPN Connect.


I didn't particularly enjoy using Tor VPN. The free service is capped at 2 GB and one constantly needs to log in to the website again to reactivate. Several products are available but are either capped in usage (10 GB per month) or have a higher cap of 60 or 100 GB but are still let down by a lack of locations - between one and three depending on price plan. On the free plan only Hungary is available. With the custom plan one can get up to seven locations. There are better deals around and configuring was cumbersome. However, it may be for you if you're after a static IP address. Tor VPN does not offer any client software of its own but offers guides how to set up openvpn via generic connectivity software. PPTP is supported as alternative for when VPN is not an option as well as SSH tunnelling as a last resort.

Apparently this VPN is using the Tor network to bounce packets around, but whatever. If you're only after unblocking certain sites or adding an element of anonymity there's also a free proxy list curated by Tor VPN but the servers are not maintained by them. I have not used them and have no idea how fast these are. Tor VPN does not seem very popular. Their main server, which is physically located in Budapest, has around 40 users at any given time, it is also the only server people on the free plan are able to use. Between 10-19 users were connected to the other servers so they probably have between 20 and 30 paying subscribers altogether. 

Private Internet Access (PIA)

Huge choice of locations, intuitive and easy to use, well configured desktop clients, good throughput and no dropped connections or dead servers ever. Kill switch on the Android client to prevent data leaks and no logging policy. With this no traffic will be allowed to leave until the VPN is connected. Slight problem is they are in the United States so it depends on whether you want to trust if they are as good as they say about your privacy.

PIA is streaming all content on my Android Player box and so far has not disappointed. One can have three concurrent connections. A yearly package will set you back $39.95 at the moment (or $6.95 for one month) for 3339 servers in 25 countries, some of which appear to be redirected to get around the blacklisting and need to always add new IP's issue. For that you get OpenVPN support, Socks5 support, PPTP and L2TP/IPsec for devices like Chromebooks that do not allow installing additional software clients and do not have OpenVPN built in. One needs to log in and generate a new user name and password for this protocol but it all works painless and is easy to set up. There are plenty of instructions in the support section and the forum how to set this up with the manifold devices and protocols.
Supported are Windows, Mac OS since 10.4, iPhone/iPad, Android and most other devices via instructions provided, like Network manager for Linux and various routers and gateways to secure the entire home network in one go.

All in all my clear favourite with good bandwidth at all times and a wide range of ways to pay, for example anonymously via gift cards. This is also the only VPN I know of that offers a 7-day money back guarantee.

Several VPN's provide an IP check on their website and, if not connecting from one of their own addresses, advise that the user is "not protected". This is of course rubbish as you may be connecting from another VPN or the Tor network. A more differentiated check would be nice.

1 comment:

Please leave your comment here. Spam will be deleted.

Note: only a member of this blog may post a comment.

12.04 LTS (1) 1280x1024 (2) 14.1 (1) absolute (6) accessibility (6) ad-blocking (2) administration (2) afterstep (1) android (3) announcements (15) anonymity (5) anonymous (1) anonymous browsing (1) anti-malware (1) anti-virus (1) antiX (4) applications (1) arch (11) archbang (11) archone (1) artix (2) authentication (1) backports (1) base (1) bash (2) bittorrent (2) block-this (1) bluestar (1) bodhi (1) books (1) brave (1) brave-browser (1) browsers (8) browsing (1) bsd (4) bug (2) bugs (3) calculate (1) centos (1) certification (1) chakra (2) changelog (22) chat (1) chatzilla (1) chromebook (1) chromium (2) click (1) commodore 64 (1) ControlD (1) critique (1) crunchbang (5) crux (1) ctkarch (1) cyber war (1) debian (29) desktop (62) devuan (6) digital certificates (1) digital memories (1) distributions (75) DNS (1) documentaries (1) documentation (2) dr. web (1) drivers (1) duo (1) e17 (1) email (1) encryption (3) enlightenment (1) events (1) exit nodes (1) ext4 (1) fake (1) fallout (1) fallout 4 (1) fedora (6) file server (2) file systems (1) firefox (3) flash (1) flush (1) fluxbox (7) fluxflux (1) FPS (2) free software (3) frugalware (1) FSF (1) ftp (2) furybsd (1) fusion (1) fvwm (1) fvwm-crystal (1) games (11) gaming (10) gentoo (3) gnome (9) gnome shell (4) gnu/linux (4) google (2) google-chrome (3) graphics (1) grml (1) gtk+ (1) hangouts (1) hardcore punk (1) hardware (3) how-to (23) humor (2) i3 (1) icewm (6) init (3) init freedom (5) interview (1) introduction (1) jibbed (1) jwm (2) kanotix (4) kde (21) KDE neon (1) kde3 (2) kernel (6) knoppix (1) kodi (2) kongoni (2) kubuntu (3) LAS (1) libtorrent-rasterbar (1) linux (20) linux light (16) Linux Mint (6) live (50) live medium (28) live system (13) liveslak (3) LMDE 4 (3) localisation (1) LTS (1) lxde (12) lxqt (1) mageia (1) mandriva (2) manjaro (1) marine life (1) mate (1) media center (6) mepis (2) mint (5) mobile (2) mobile security (1) movies (6) mozilla (3) music (1) MX Linux (1) netbook (2) netrunner (1) networking (5) news (3) nvidia (1) open source (1) openbox (15) openSUSE (4) opinion (13) other (5) overclockix (1) packages (1) pclinuxos (4) perl (1) plasma (5) poll (2) porteus (3) privacy (5) privoxy (1) programming (1) proxy (2) puppy (3) qbittorrent (1) qt (1) quick look (10) ratpoison (1) red hat (7) redcore linux (1) relax (1) release (2) rescue (3) reviews (57) rhythmbox (1) rolling (1) RPG (2) rpm (1) sabayon (5) salix (15) scientific (7) screenshots (2) scripts (3) seamonkey (1) security (4) semplice (1) server (5) shell (1) shooter (4) siduction (1) slackel (1) slackware (68) slackware 14.2 (2) slackware 15.0 (8) slackware-current (34) slax (7) slitaz (1) smart phones (2) sms (1) south africa (2) specialist (1) spoof (1) ssh (1) surfing (1) systemd (2) table mountain (1) TDE (1) tegra k1 (1) The Walking Dead (1) themes (1) tinyme (2) tips (1) tor (3) torrenting (1) torrents (1) traffic analysis (2) trinity (2) trisquel (1) TV shows (2) TWD (1) ubuntu (6) unity (2) unity linux (4) unix (1) upgrade (6) vector (2) video (4) vinux (2) virtualbsd (1) visual impairment (5) voip (1) vpn (5) VSIDO (1) wallpapers (3) window maker (4) window managers (1) windscribe (1) wireless (10) xfce (16) youtube (1) zenwalk (3) zombies (1) zoo (1)