Skip to content

Which is the safest VPN on the market? Who do I use for a VPN?

The reasons that I chose IVPN

www.ivpn.net

1.OpenVPN

IVPN don’t promote PPTP – they will arm wrestle you onto OpenVPN, with their own installer.  OpenVPN was designed to beat Russia and Chinese State surveillance, and is peer reviewed to ensure it’s safe.

ivpn openvpn

2. Multiple PREMIUM Routes

They use multiple routes.  So for the first 10 minutes I can connect to the UK, then for the next 10 minutes, connect via the Netherlands.  Then I can get really serious and connect via 2 hops from the UK to the Netherlands and then back to the UK.  If a court issued a court order, then they’d need to get court orders in both countries within 10 minutes – just about impossible to achieve.

IVPN menu

Filesharing may be allowed dependent on the route.  It’s not allowed on USA routes to protect you.  No US lawyer can accuse you of filesharing, as the protocol is rejected.  However filesharing is acceptable in many European Countries, so you’re allowed to follow the law of the “Exit Node”.

3. Logs deleted every 10 minutes (not daily as with other VPN providers)

They don’t have server logs.  They use non persistent or temporary logs – which are wiped every 10 minutes. Viola!  Evidence gone.  This, for me, was the game changer.

4. AES 256 Encryption

They use AES 256 encryption.  Most VPN’s offer AES 128 bit.

5. Shared IP’s

They use Shared IP’s.  Dedicated IP’s are very dangerous for tracking.

ivpn shared ip

6. FAST VPN Speed

ivpn speed

7. No Data Retention

They promise to relocate if any country demands data retention or that IVPN must start to keep server logs.

8. EFF Supporter

They are EFF supporters.  They are privacy focused, rather than a VPN provider.

9. Setup Guides

Set up guides on how to install IVPN across a range of products.  Your one account can be used on a wide range of devices and operating systems.

ivpn setup guides

10.  I don’t tell you what to do, but I will tell you what I do.

IVPN

www.ivpn.net

Will giving the internet eyes and ears mean the end of privacy? Bruce Scheiner

The internet has turned into a massive surveillance tool. We’re constantly monitored on the internet by hundreds of companies — both familiar and unfamiliar. Everything we do there is recorded, collected, and collated – sometimes by corporations wanting to sell us stuff and sometimes by governments wanting to keep an eye on us.

Ephemeral conversation is over. Wholesale surveillance is the norm. Maintaining privacy from these powerful entities is basically impossible, and any illusion of privacy we maintain is based either on ignorance or on our unwillingness to accept what’s really going on.

It’s about to get worse, though. Companies such as Google may know more about your personal interests than your spouse, but so far it’s been limited by the fact that these companies only see computer data. And even though your computer habits are increasingly being linked to your offline behaviour, it’s still only behaviour that involves computers.

The Internet of Things refers to a world where much more than our computers and cell phones is internet-enabled. Soon there will be internet-connected modules on our cars and home appliances. Internet-enabled medical devices will collect real-time health data about us. There’ll be internet-connected tags on our clothing. In its extreme, everything can be connected to the internet. It’s really just a matter of time, as these self-powered wireless-enabled computers become smaller and cheaper.

Skype with care – Microsoft is reading everything you write – and logging into your cloud accounts

http://www.h-online.com/security/news/item/Skype-with-care-Microsoft-is-reading-everything-you-write-1862870.html

Anyone who uses Skype has consented to the company reading everything they write. The H‘s associates in Germany at heise Security have now discovered that the Microsoft subsidiary does in fact make use of this privilege in practice. Shortly after sending HTTPS URLs over the instant messaging service, those URLs receive an unannounced visit from Microsoft HQ in Redmond.

A reader informed heise Security that he had observed some unusual network traffic following a Skype instant messaging conversation. The server indicated a potential replay attack. It turned out that an IP address which traced back to Microsoft had accessed the HTTPS URLs previously transmitted over Skype.

Heise Security then reproduced the events by sending two test HTTPS URLs, one containing login information and one pointing to a private cloud-based file-sharing service. A few hours after their Skype messages, they observed the following in the server log:

65.52.100.214 – - [30/Apr/2013:19:28:32 +0200] “HEAD /…

/login.html?user=tbtest&password=geheim HTTP/1.1″

Utrace map
Zoom The access is coming from systems which clearly belong to Microsoft.
Source: Utrace
They too had received visits to each of the HTTPS URLs transmitted over Skype from an IP address registered to Microsoft in Redmond. URLs pointing to encrypted web pages frequently contain unique session data or other confidential information. HTTP URLs, by contrast, were not accessed.

In visiting these pages, Microsoft made use of both the login information and the specially created URL for a private cloud-based file-sharing service.

In response to an enquiry from heise Security, Skype referred them to a passage from its data protection policy:

“Skype may use automated scanning within Instant Messages and SMS to (a) identify suspected spam and/or (b) identify URLs that have been previously flagged as spam, fraud, or phishing links.”

A spokesman for the company confirmed that it scans messages to filter out spam and phishing websites. This explanation does not appear to fit the facts, however. Spam and phishing sites are not usually found on HTTPS pages. By contrast, Skype leaves the more commonly affected HTTP URLs, containing no information on ownership, untouched. Skype also sends head requests which merely fetches administrative information relating to the server. To check a site for spam or phishing, Skype would need to examine its content.

Back in January, civil rights groups sent an open letter to Microsoft questioning the security of Skype communication since the takeover. The groups behind the letter, which included the Electronic Frontier Foundation and Reporters without Borders expressed concern that the restructuring resulting from the takeover meant that Skype would have to comply with US laws on eavesdropping and would therefore have to permit government agencies and secret services to access Skype communications.

In summary, The H and heise Security believe that, having consented to Microsoft using all data transmitted over the service pretty much however it likes, all Skype users should assume that this will actually happen and that the company is not going to reveal what exactly it gets up to with this data.

Skype with care – Microsoft is reading everything you write

http://www.h-online.com/security/news/item/Skype-with-care-Microsoft-is-reading-everything-you-write-1862870.html

Anyone who uses Skype has consented to the company reading everything they write. The H‘s associates in Germany at heise Security have now discovered that the Microsoft subsidiary does in fact make use of this privilege in practice. Shortly after sending HTTPS URLs over the instant messaging service, those URLs receive an unannounced visit from Microsoft HQ in Redmond.

A reader informed heise Security that he had observed some unusual network traffic following a Skype instant messaging conversation. The server indicated a potential replay attack. It turned out that an IP address which traced back to Microsoft had accessed the HTTPS URLs previously transmitted over Skype. Heise Security then reproduced the events by sending two test HTTPS URLs, one containing login information and one pointing to a private cloud-based file-sharing service. A few hours after their Skype messages, they observed the following in the server log:

65.52.100.214 - - [30/Apr/2013:19:28:32 +0200]
"HEAD /.../login.html?user=tbtest&password=geheim HTTP/1.1"

Utrace map
Zoom The access is coming from systems which clearly belong to Microsoft.
Source: Utrace
They too had received visits to each of the HTTPS URLs transmitted over Skype from an IP address registered to Microsoft in Redmond. URLs pointing to encrypted web pages frequently contain unique session data or other confidential information. HTTP URLs, by contrast, were not accessed. In visiting these pages, Microsoft made use of both the login information and the specially created URL for a private cloud-based file-sharing service.

In response to an enquiry from heise Security, Skype referred them to a passage from its data protection policy:

“Skype may use automated scanning within Instant Messages and SMS to (a) identify suspected spam and/or (b) identify URLs that have been previously flagged as spam, fraud, or phishing links.”

A spokesman for the company confirmed that it scans messages to filter out spam and phishing websites. This explanation does not appear to fit the facts, however. Spam and phishing sites are not usually found on HTTPS pages. By contrast, Skype leaves the more commonly affected HTTP URLs, containing no information on ownership, untouched. Skype also sends head requests which merely fetches administrative information relating to the server. To check a site for spam or phishing, Skype would need to examine its content.

Back in January, civil rights groups sent an open letter to Microsoft questioning the security of Skype communication since the takeover. The groups behind the letter, which included the Electronic Frontier Foundation and Reporters without Borders expressed concern that the restructuring resulting from the takeover meant that Skype would have to comply with US laws on eavesdropping and would therefore have to permit government agencies and secret services to access Skype communications.

In summary, The H and heise Security believe that, having consented to Microsoft using all data transmitted over the service pretty much however it likes, all Skype users should assume that this will actually happen and that the company is not going to reveal what exactly it gets up to with this data.

Harvard Professor Re-Identifies Anonymous Volunteers In DNA Study – Forbes

One of the major criticisms against the Article 29 working party, was that they did not anticipate how easy it was to identify the living person, with a mere handful of anonymous datasets.  Here is another warning.

Given a few datasets – they know who you are.  The answer is to anonymise your data, and prevent links to your living ID (ie using a mobile phone to answer security questions). Surveillance studies NEEDS to link datasets to your ID.

http://www.forbes.com/sites/adamtanner/2013/04/25/harvard-professor-re-identifies-anonymous-volunteers-in-dna-study/

A Harvard professor has re-identified the names of more than 40% of a sample of anonymous participants in a high-profile DNA study, highlighting the dangers that ever greater amounts of personal data available in the Internet era could unravel personal secrets.

From the onset, the Personal Genome Project, set up by Harvard Medical School Professor of Genetics George Church, has warned participants of the risk that someone someday could identify them, meaning anyone could look up the intimate medical histories that many have posted along with their genome data. That day arrived on Thursday.

Of the 1,130 volunteers Sweeney and her team reviewed, about 579 provided zip code, date of birth and gender, the three key pieces of information she needs to identify anonymous people combined with information from voter rolls or other public records. Of these, Sweeney succeeded in naming 241, or 42% of the total. The Personal Genome Project confirmed that 97% of the names matched those in its database if nicknames and first name variations were included. She describes her findings here.

Sweeney has also set up a web page for anyone to test how unique their birthdate, gender and zip are in combination. When I tried it, I was the only match in my zip code, suggesting that I, like so many others, would be easy to re-identify. “This allows us to show the vulnerabilities and to show that they can be identified by name,” she said. “Vulnerabilities exist but there are solutions too.”

Volunteer Lenore Snyder, however, said that she did not want to be identified and as a result did not provide her zip code and some other identifying characteristics in her profile. She said her genetic testing suggests she has an intellectual disability, even though she is a molecular biologist with a PhD. “People don’t know how to interpret this,” she said. “It’s dangerous. A little bit of information is dangerous.”

Sweeney’s latest findings build on a 1997 study she did that showed she could identify up to 87% of the U.S. population with just zip code, birthdate and gender.  She was also able to identify then Massachusetts Gov. William Weld from anonymous hospital discharge records.

Video

Crazy FBI Tactics to Bug Your Home | Big Brother Watch

10 weeks to plan the attack
10 men to plant the surveillance devices

Why is my internet so slow – How to understand ADSL Routers on BT telephone lines

The three most important aspects of your telephone line are, Attenuation, Noise Margin and Sync.

Attenuation (The lower the better!):

This figure in an indication of your lines length. Attenuation is all to do with quality of the signal passing through a conductor – copper or aluminium. The higher the lines attenuation the worse the sync speed will be.

Attenuation is measured in db’s (decibels)

NB. The maximum reported attenuation figure with the majority of routers is 63 or 63.5db.

As you can see – my router reports this maximum attenuation figure – which is VERY BAD.

SNR router
If your attenuation is displayed as 63/63.5db then it may in fact actually be higher.

You unfortunately have a very long line and/or poor copper/aluminium between you and the exchange.

BT can’t move your house… nearer the BT exchange.  So there’s nothing that can be done if you’re 6 or 7 miles from the exchange, UNTIL Fibre Optics are installed at your specific telephone exchange.  Copper is low quality compared to Fibre Optics (Optics means glass cables… the light bounces around the inside of the cable, and it can travel long distances without signal loss).

With luck, your BT Exchange can run “BT Infinity”, which is their posh term for Fibre Optic cables.  Upgrade if you are a long distance from the BT exchange – you’ll be delighted with the improvement.

BT Infinity Post Code Checker – Check with OpenReach about Fibre Optics at the Exchange

http://www.superfast-openreach.co.uk/where-and-when/

If not, the roll out schedule (by Month) for those “Coming Soon” 2013 Exchange upgrades

https://www.openreach.co.uk/orpg/home/products/super-fastfibreaccess/downloads/sffa_exchange_lists/coming_soon.pdf

SNR – Noise Margin (The target is 6db)

Noise Margin or Signal to Noise Ratio (SNR) initially has a ‘target’ of 6db. i.e. The BT kit will attempt to give you your best connection speed (sync) using 6db of SNR.

BT have achieved 6db of SNR on my line.. so I can’t complain.

Sync (The higher the better!)

To find out what your line is connecting at, you need to look at your Router or Modem Statistics.

What FREE DNS servers can I use on Windows 7?

If your web surfing is slow, you may want to test using a Free DNS provider, rather than your ISP’s DNS.

Step 1 – Select a FREE DNS PROVIDER

Comodo – are fast – ping times of around 35 ms

8.26.56.26

8.20.247.20

dns globaldns global 2

*********

Step 2 – ping the free DNS server, to measure how fast it responds.

Generally, look for under 40 ms.  If you get 35 ms, like I get from Comodo, then brilliant.

Start > All Programmes > Accessories > CMD Prompt

ping 8.26.56.26

Gives an average ping time of 35 ms – if you get under 40 ms – go with this option.

commodo 35ms

ping 193.33.179.203 – just to illustrate what a slow ping looks like…

The response time here is 63 miliseconds – pretty sluggish, so try another server instead.

dns ping 1

ping 176.58.117. 25

The Response time is 50 milliseconds – so much faster than 63 milliseconds – but nowhere near as good as 35 milliseconds.

dns ping 2

Ping a DNS server in Australia – 111.67.16.202

Here the response is slow (354 milliseconds) – as it’s traveling half way around the planet.  My Commodo response times are 10 times faster than an Australian DNS server – but that would be expected.  You won’t select a dentist in Australia now would you?

dns ping australia

Which is fastest?  Select that IP.  If you can get under 40 ms – go with that option.

Step 3 – Assign the DNS to a network adapter

Start > Control Panel > Networking and Sharing Centre

CHANGE ADAPTER SETTINGS  (Link)

dns change adapter

Select an Adapter

Yes, my network is called useless.  I have high hopes for it.

dns adapter

Right Click on the Adapter

Last option > Properties

dns properties

Select IP Version 4

Properties Button

dns ip props

Obtain IP Automatically

Use following DNS IP’s

OK

commodo

That’s it.

This individual adapter, will now use these two set DNS IP’s.

So if you wanted to watch BBC IPlayer, you could set a network adapter, that uses UK only DNS addresses.

******

Step 4 – Gateway locations – BBC IPlayer

For example if you’re in Australia, and want to watch BBC Iplayer, then you want to use a UK DNS server, not an Australian DNS Provider.

When selecting your DNS for services such as BBC IPlayer, be sure to choose your DNS based on the Gateway location, not based on where you are located.

https://www.witopia.net/support/vpn-dns-guide/

Reflection – Research over – the sun is shining again!!

The research has ended; the work is finished.  How do I feel?

Well, the first shock is the feeling of “anti climax” you get when all the work is completed.  It’s odd.  You’ve worked solid for a whole year, and you feel grief now that it’s stopped.

On the plus side, you experience the sunshine, the outside, swimming and all the simple pleasure of life, that had stopped for so long.  Undertaking a continued piece of research damages your social life, and your appreciation of the simple things.  Of course the sun must have shined at some point.. but I can’t remember that happening.  Research melts your brain, to the point that you fail to notice the obvious.  The brain gets “tunnel vision”, it becomes like a black hole of information.  Normal gossip, sunshine, happiness would only be distractions and the focus on research shuts down normal activity.  You become borg like.  You are one with the data.

Finally, you become “demob” happy.  Nothing really brings you down.  The plumbing could break, the TV could break, but who cares about stuff like that.  You’ve finished the research. Yay!!!!

Clearly, I’m now demob happy.  I feel like doing cart wheels.

Clearly, not one with the borg.  They failed to assimilate me.  Their loss. :)

The bad joke called ‘the FISA court’ shows how a ‘drone court’ would work

http://www.guardian.co.uk/commentisfree/2013/may/03/fisa-court-rubber-stamp-drones

Newly released data show that the government submitted 1,789 eavesdropping requests last year, and none was rejected

(Note: FISA affects every US Cloud provider, and every European Civilian).

From the start, the Fisa court was a radical perversion of the judicial process. It convened in total secrecy and its rulings were classified. The standard the government had to meet was not the traditional “probable cause” burden imposed by the Fourth Amendment but a significantly diluted standard. There was nothing adversarial about the proceeding: only the Justice Department (DOJ) was permitted to be present, but not any lawyers for the targets of the eavesdropping request, who were not notified. Reflecting its utter lack of real independence, the court itself was housed in the DOJ.

And, and was totally predictable, the court barely ever rejected a government request for eavesdropping. From its inception, it was the ultimate rubber-stamp court, having rejected a total of zero government applications – zero – in its first 24 years of existence, while approving many thousands. In its total 34 year history – from 1978 through 2012 – the Fisa court has rejected a grand total of 11 government applications, while approving more than 20,000.

 

 

Follow

Get every new post delivered to your Inbox.

Join 45 other followers