Are VPN good for privacy today, should we used them to protect our privacy?

Not free, none have all advantages and wouldn’t let my ISP only know my traffic so these times I’m really overwhelmed by all of this

Used Tor for a bit but it’s not practically useful, slow (okay but not the main problem) and blocked by a lot of websites…

Maybe a chain of VPN could be good? I really don’t know, can you help me?

Basically I don’t want to have no protection but don’t think VPNs are really the solution…

PS: maybe a rented machine with self hosted like VPN could be good?

  • bad_news@lemmy.billiam.net
    link
    fedilink
    arrow-up
    3
    ·
    11 hours ago

    This all kind of depends on your threat model… a VPN hides traffic from your ISP, and puts your traffic in with a lot of other traffic, but domestic IPs generally rotate fairly frequently, so only your ISP really knows when that happens, but they also probably sell that data because we live in an over-financialized, under-regulated hellscape, but your VPN also exists in that hellscape, and knows who you are just as much unless you buy Mulvad with perfectly laundered monero and is as likely to be selling that data if not more so than your ISP. There’s a reason why people use tor…

  • Hiro8811@lemmy.world
    link
    fedilink
    arrow-up
    5
    ·
    17 hours ago

    As some have stated depends on treat model. I personally use Mullvad for both pirating and accesing restricted sites in my country and evading shity laws. 5€ 5 devices with no bottleneck it’s pretty good. Sometime I use tor when I try to reach a site that the WiFi provider has blocked

    • foremanguy@lemmy.mlOP
      link
      fedilink
      arrow-up
      3
      arrow-down
      1
      ·
      17 hours ago

      The problem with Mullvad is that there is not port forwarding for seeding stuff

        • kusivittula
          link
          fedilink
          arrow-up
          2
          ·
          11 hours ago

          not working quite that well on my end. no matter how popular torrent, mine won’t seed at all. and i can’t download some rare ones where there’s like less than 50 seeds.

          • Hiro8811@lemmy.world
            link
            fedilink
            arrow-up
            1
            ·
            edit-2
            10 hours ago

            What OS are you using? App? If you’re using qbittorent make sure you have selected tun in advanced -> network interface

  • Kualk@lemm.ee
    link
    fedilink
    arrow-up
    5
    ·
    edit-2
    18 hours ago

    If you are really concerned, buy VPC from large cloud provider, install HTTPS server proxy, configure your web browser to use it. 512MB RAM server will be sufficient as long as it is given enough CPU. Free google instance is suffering from low CPU, not memory.

    This way your link between you and internet provider is obscured. Your IP will be shared with others by cloud provider, so you get some obfuscation on that end.

    If you use your own certificate authority, then you will get 100% man in the middle protection for link between internet provider and your home. If you use let’s encrypt, then we don’t know that status.

    Advantage of this model is speed.

    Your browser is still finger-printable, as always.

    Securing DNS is its own topic.

    You shifted your identity to cloud provider, so it is never 100% safe.

    Forget about we keep no logs VPN statements. Judge order and you are logged by VPN provider and don’t know it. So what are you paying for? Slow speed and obfuscation of IP?

  • Leraje@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    9
    ·
    21 hours ago

    Depends on your threat model - mine is to make it as annoying and difficult for data sellers and advertisers to profile me as possible so in that scenario a reputable VPN service makes perfect sense.

    There’s no such thing as total privacy and each service/software is simply a piece of the puzzle. If my government really wanted my data I’m sure they could find a way but making it as difficult as possible for techno-fascists is fine by me.

  • a14o@feddit.org
    link
    fedilink
    arrow-up
    11
    arrow-down
    1
    ·
    22 hours ago

    Privacy is a trade-off against convenience, and there is no perfect privacy.

    VPNs are a mediocre privacy tool, because they presuppose trust in the VPN provider. Tor is flawed because it is open to correlation attacks.

    There are low-hanging fruit that everybody should be using like sensible cookie policies, HTTPS-only mode, and DNS over HTTPS.

    If you are looking for a solution on the far end of privacy/inconvenience you could look into I2P and use that situationally.

    • CedarA64@lemm.ee
      link
      fedilink
      English
      arrow-up
      2
      ·
      11 hours ago

      I would rather put my trust in a good VPN provider than the big CAs. And HTTPS only and DoH is not going to protect you from fingerprinting using your IP address.

      • a14o@feddit.org
        link
        fedilink
        arrow-up
        7
        ·
        edit-2
        21 hours ago

        That depends on your threat model. It’s a useful strategy to hide your traffic from your local network admin (e.g. at the workplace) and your ISP, but it’s a bad strategy for hiding your identity from the sites you’re visiting.

  • land@lemmy.ml
    link
    fedilink
    arrow-up
    7
    ·
    21 hours ago

    In my opinion, a VPN is a must-have, especially if you’re self-hosting, especially for a media server.

    • Kualk@lemm.ee
      link
      fedilink
      arrow-up
      1
      ·
      18 hours ago

      What does VPN hide that HTTPS can’t hide for media server?

      I am looking at the scenario of listening to my music collection on self-hosted Jellyfin server.

      IP address of my phone? That’s irrelevant.

      HTTPS is way faster than VPN.

      • mipadaitu@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        16 hours ago

        VPN into your home lab isn’t about privacy, it’s more about reducing your exposed services to the public internet.

        If you have only the ports needed to VPN back into your network, then the rest is hidden behind your router. You only need to fully secure one thing, instead of having to ensure that everything is 100% patched.

        It’s not the only thing you should be doing, but it does help reduce the probability of a breach.

      • Grippler@feddit.dk
        link
        fedilink
        arrow-up
        4
        ·
        18 hours ago

        What does VPN hide that HTTPS can’t hide for media server?

        HTTPS Doesn’t hide where the traffic is going, so your ISP will track you going to piracy sites. It also doesn’t protect you against identification when torrenting.

  • Matt@lemmy.ml
    link
    fedilink
    arrow-up
    4
    arrow-down
    1
    ·
    edit-2
    21 hours ago

    Maybe Orbot for phones and Carburetor for the desktop. But Proton VPN is pretty good if you ignore the drama around the company.

  • tyrant@lemmy.world
    link
    fedilink
    arrow-up
    2
    ·
    19 hours ago

    I use a VPN but you might look into portmaster and their spn. Its a little slow but even using portmaster without the spn you can filter your traffic and simply deny most apps access to the internet