Well, Mullvad's fall from grace was certainly fast. And I seem to recall that Proton had a moment too, a while back.

What's the current go-to recommendation for VPNs/proxies, for people who don't want to run their own?

@neil annoyingly, until today I'd have said Mullvad...
@ahnlak @neil Me too. Absolute stupid step from the founder of a privacy focused company. Totally undermines Mullvad's credibility.

@neil In Mullvad's case it was actual big money spending on fascists from an active owner & founder of the company. In Proton's case it was not - just a lot of people who felt like screaming a bit.

I'm still a very happy Proton user.

@troed @neil I hadnt heard any issues with Proton. Whats the story?

@Noneeeed Their process for vetting people who signed up for affiliate links didn't catch a known French holocaust denier. Proton took the blame and changed their processes, but they also admitted that they can't do 100% pre-vetting on self signups and appreciate when the community notifies them if they screw up.

Apparently that was bad.

@neil

@troed @neil ah thanks. That sounds like a reasonable slip. Just read a bit more and it all sounds pretty reasonable. Definitely not pitchfork worthy.

@Noneeeed

That wasn't what I had in mind (I'm not sure that I'd even seen it)!

I think it was this:

https://techstory.in/proton-mail-faces-backlash-over-claims-of-political-neutrality-amid-ceos-praise-for-republican-party/

Proton Mail Faces Backlash Over Claims of Political Neutrality - TechStory

Proton Mail is in the center of controversy after its CEO, made statements on social media that appeared to favor the Republican Party,

TechStory

@neil @Noneeeed i remember this one, yeah.

proton also caught a bunch of shit somewhat recently for unnecessarily pivoting to AI, though i suppose (unfortunately) not everyone would consider that a betrayal of values

@Noneeeed @troed @neil These days, there are no accidents, only unmaskings. People latch onto anything to scream about just to feel like they have some agency in the world.
@Noneeeed @troed @neil
Thought they leaked someone's IP to the swiss gov

@spycrab

If the government in their jurisdiction comes with a valid legal request for metadata they will obey the law. That's something all companies have to do.

In the case you're thinking of the user could've paid using cash in an envelope but decided to use their credit card so identifyable metadata existed.

@Noneeeed @neil

@troed @Noneeeed @neil not really an excuse

@spycrab

Yes, it is. If you run a company you have to abide by the laws of the country you're incorporated in.

If you disagree - please try not doing it and report back with the results.

@Noneeeed @neil

@troed @Noneeeed @neil are they incorporated in Sweden? (If so than that posses security issue and you shouldn't use them)Really they shouldn't store the data so they are incapable of giving it to the 5O

@spycrab @Noneeeed @troed

IIRC, it was less about the fact that they did it, and more that Proton makes claims like

> With Proton, your data belongs to you, not tech companies, governments, or hackers.

on the front page of the site, without saying "but of course we will comply with disclosure obligations".

I think that there was also a question as to whether Proton attempted to push back against the request, but there may not have been scope to do so.

@spycrab @Noneeeed @troed

And, of course, Proton launched an AI chatbot, which is reason enough for me not to recommend it :)

@neil

This is linked from the front page - and has been since 2014:

https://proton.me/blog/switzerland

Proton has never claimed they won't cooperate with the Swiss judicial system. They have (the link above) explained in detail how being incorporated and headquartered in Switzerland makes is much harder for governments to get access to user data than in the EU and the US, for example.

@spycrab @Noneeeed

Why is Proton based in Switzerland? An analysis of Swiss privacy laws | Proton

Switzerland has a strong reputation for privacy, dating back over 100 years, but is this reputation actually backed up by strong laws?

Proton

@troed @spycrab @Noneeeed

A link on the front page is far less "in your face" than a front page claim, so I can see how users may expect more, based on Proton's front page, than Proton is actually offering.

But that aside, I was looking for alternatives to Mullvad and Proton, in case someone asks.

@neil @troed @spycrab @Noneeeed Yeah, it's misleading on Proton's part. They also only encrypt the email contents, not the email metadata, so the metadata (including the IP addresses) could be subject to subpoena, and the email participants might want or expect that to be encrypted. Proton says that you could keep your real IP address out of the metadata if you use their ProtonVPN (or any reputable VPN) service. This seems more like a marketing ploy for tiered privacy services, which is pretty deceptive / manipulative.

To maximize privacy in email, I'd only recommend Tuta as of this time. Sadly I don't know of any VPN services to replace Mullvad.

@troed @neil @Noneeeed oh I see you answered my question before I asked, nice. Lol

Sorry about asking it. Hadn't seen this yet

@troed @Noneeeed @neil It's not just that, a couple of years ago the Proton CEO made a post somewhat ambiguously supportive of Trump and that blew way up in communities like this one. So there's been more than one thing out of Proton that's given real cause for concern about their politics (and it was enough to hasten me leaving them), but nothing as unambiguously damning as 'literally funds Nazis'.
Does Proton really support Trump? A deeper analysis (and surprising findings)

Recently, allegations surfaced on Reddit that Proton (or at least Proton’s CEO) supports Trump. Hillary Keverenge from Tech-Issues Today…

Medium
@Noneeeed someone from Proton (CEO?) also refused to change his Reddit username from having a number associated with neoNazis in it. Now it seems he really was born in 1988 but the fact that they didn’t change it when the association was pointed out didn’t seem great. Sill not in my view quite as actively a problem as this with Mullvad.
@neil I'm also looking for a new provider. I was recommended https://www.ivpn.net/en/ and I'm trying it now for a month. But I'm not sure if they can be trusted. They claim a lot on they website but who knows what is real and what they will do when something happens.
https://www.ivpn.net/en/

@spacebug @neil IVPN works for me. I've not heard anything bad about them.
@spacebug @neil also been using ivpn for a few years now.
I appreciate the ability to generate config files and shove them into whatever, like my router.
@M0YNG @neil
I tried the generate config thing earlier today but when I did I saw nothing about PSK or any other thing that could mean post quantum safe. So I guess for that you need to use their app.
I'm using the app now in a VM but I'm not that keen on installing a randsom app from someone I may not fully trust on my host system.
@neil personally. I like https://privatevpn.com/why-privatevpn/about-us/ and have used them for years without any trouble.
About PrivateVPN - Secure VPN Services | PrivateVPN

Discover PrivateVPN, the top choice for security, privacy, and customer support in VPN services. Enjoy stable connections worldwide!

@ivor @neil The owner of that company lives in Dubai and has been convicted of share price manipulation. Make of that what you will.

@neil I've seen AirVPN mentioned in a few threads and the web site looks promising but...

Can you trust anything nowadays?

@RootMoose @neil i use airvpn. Paid up front with a prepaid card

Linux using openvpn config; ditto for the windows clients. No need for their software.

openvpn or wireguard on phones.

Using it for accessing iplayer abroad was OK but now is not; so i have alternative for that.

@neil there are NO GOOD ONES!
- There never were any to begin with!
https://web.archive.org/web/20220112020000/https://twitter.com/thegrugq/status/1085614812581715968

AFAIK @monocles scrapped the Idea of doing a #VPN because of the way most just lazily rebrand some other corpo's white-label thing.
- Use @torproject / #TorBrowser instead…

Personally, I use @freifunk instead…

thaddeus e. grugq on Twitter

“I’m gonna tell you a secret about “logless VPNs” — they don’t exist. Noone is going to risk jail for your $5/mo https://t.co/Q2aOQJkG4g”

Twitter

@neil maybe give @airvpn a shot if you merely want a #VPN for #NetNeutrality & #Geoblocking-override reasons…

- They accept #Monero!
https://airvpn.org

AirVPN

AirVPN

AirVPN

@kkarhan @neil @airvpn > They accept Monero!

Well, that's one reason to avoid them.

@mansr @neil @airvpn nope, it's a reason to choose them!

Name another globally available payment Method that is as anonymous as #Monero.

- The closest to it I know is #PaySafeCard, but that isn't even global. At least you can buy those for cash and don't have to give any details, but that's merely pseudonymous and unless you wait >72 hours, tgere's likely still CCTV footage that allows putting a face together with said purchase.

It's called #OpSec and I'd recommend to take it more serious…

@kkarhan @neil yes there are, windscribe and calyx!
calyx institute is pretty well trusted
and windscribe has a pretty good record too
you wouldn't know either ofc, because neither advertises themselves, lol

@6 @neil I heard of @calyxinstitute

I remembered #AirVPN for allowing #OpenVPN over @torproject / #Tor, which helps working around sites that block Tor...

Otherwise I don't recommend usong a #VPN *UNLESS YOU ABSOLUTELY CANNOT USE ANYTHIBG ELSE!*

https://mastodon.social/@kkarhan/116822779443436437

#DontBlockTor

@neil I’m using tunnelbear - they are US based, but very open about the legal and practical limits of VPN use. Unfortunately internet privacy is a space that intersects with the internet wild west and attracts some very unsavoury types, so you have to go with a VPN provider whose values fit with your own…
@neil
I have a subscription with McAfee which has a VPN. It seems to work well enough.
I expect someone with a beard and a strange computer is about to tell me I'm an idiot....

@Jaimieserotica

> I expect someone with a beard and a strange computer is about to tell me I'm an idiot....

I have always been restrained in my conversations with you!

@neil 😂
To be fair, you're always the perfect gentleman and I appreciate you for it. For once, I'm not being ironic/sarcastic. X

@Jaimieserotica

My secret is that I see you as an actual person, deserving of respect and humanity.

But don't tell anyone my cunning trick.

It wouldn't catch on anyway.

@neil
In the times we live in, I think it certainly won't catch on. It's appreciated by this person, in any case.
@Jaimieserotica @neil I don't know you at all aside from the few interactions we've swapped here but I'm in the camp of respect someone first.

@Jaimieserotica @neil I, uh, don't have a beard because it's not safe to get HRT and my computer is normal these days, BUT John McAfee was the OG problematic tech mogul.

https://en.wikipedia.org/wiki/John_McAfee

@neil I don’t think it’s a good idea to have a monster in the middle service. You’re better off using Tor Browser.
@neil I am looking into Njalla, from one of the many long threads I’ve read: https://njal.la/vpn/
Njalla — VPN

@neil I'm using tailscale, pretty happy with them.
@Glenlivet @neil that Tailscale feature is sadly a Mullvad reseller
@taavi @neil please, what?
@taavi @neil do you have a source for that?
Surf the Web Privately with Mullvad's Global Network + Tailscale

Understand how to securely and privately browse the web with Tailscale and Mullvad. Tailscale has partnered with Mullvad to make its global network of VPN servers available for users.

@taavi @neil you should read what they write. They are partnering with Mullvad to use their endpoints as exit nodes, that's all.

@Glenlivet @taavi

Does that make it better, or worse?!

@neil @taavi much better
@neil @taavi it's an optional feature you don't need to use.

@Glenlivet @taavi

Hmm... it sounds like they are using Mullvad funded / operated infrastructure?

@neil @taavi not for their normal operation, they are completely independent