26
New Study Warns Several Free iOS and Android VPN Apps Leak Data (hackread.com)
submitted 1 year ago by to c/cybersecurity@sh.itjust.works
11 comments fedilink hide all child comments

top 10 comments

sorted by: hot top controversial new old
[–] 7 points 1 year ago (5 children)

Remember kids, if the service is free, you are the product.

  • permalink
  • fedilink
  • source
  • hideshow 5 child comments
    •
  • [–] 2 points 1 year ago* (4 children)

    Laughs in FOSS

    Related: I motion that we really should stop using that advice so blanketly, and instead say "If the product is free and run by capitist entities, you're the product."

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] -4 points 1 year ago (3 children)

    Don't be bringing your politics into this. Communist, socialist, anarchist, etc, entities are all capable of running a honeypot VPN service. Even if the motive isn't directly monetization, the user is still the product.

    Also, even in the FOSS world, you have to be wary of services with ongoing costs (thinking of things that have a server side component, not software that you can run purely locally) that are offered for free.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 1 year ago* (last edited 1 year ago) (2 children)

    I will start out by saying I was not the person who downvoted you, and while I also agree that anyone can run a honeypot obviously, that phrase IS inherently pro-corporation and capitalist. If you wrote out in it's entirely what it means, it's arguing that you can't trust anyone with your security unless they're a business you're paying. Which is objectively encouraging people to side with capitalism over the open source and community based internet. Which is really the only reason why I point out the flaw in that phrase. The phrase is as inherently political as privacy itself is.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 year ago (1 child)

    What I'm saying is one step more cynical that that. I'm saying is that you can't fully trust anyone with your privacy. The best you can do is try to determine who will treat you best based on the motivation involved. VPNs take resources to operate. In our current society that means money, but even in the absence of money, there's labour, hardware, and electricity costs that go into making it work. Expecting someone to just eat that cost in perpetuity is unreasonable. If the cost is being covered by the users, there is much less incentive for the operator to do anything shady with the data they have access to.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 1 year ago

    I fully agree with that and I think there's been a misunderstanding. I was simply critiquing the actual phrase. Not trying to claim that the free vpns are in any way reliable or should EVER be trusted. I really did just mean that the phrase itself in (imo), quite problematic overall because if the inherent messaging that the only trustworthy distributers and maintainers of software are for-profit and any other model must be predatory. It completely undermines any proposal of FOSS being valid and safe. Which I think we can all (on the fediverse) agree is something we shouldn't purpetuate as a genralization. That was all I was trying to say.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 6 points 1 year ago (1 child)

    Leak kind of implies accident. This is more "siphoning"

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
    load more comments (1 reply)
    [–] 4 points 1 year ago

    Who could have guessed. Free VPNs are just bullshit

  • permalink
  • fedilink
  • source
    •
    [–] 3 points 1 year ago

    Literally every service in our lives leaks data.

  • permalink
  • fedilink
  • source
    •
    [–] 1 point 1 year ago

    Something that was already known. It's one of the reasons the privacy community online are so against using any old VPN you can find, and urge known good paid options.

  • permalink
  • fedilink
  • source
    •