...because VPNs obscure a user’s true location, and because intelligence agencies presume that communications of unknown origin are foreign, Americans may be inadvertently waiving the privacy protections they’re entitled to under the law...

...VPNs might protect you against garden-variety criminals, but the intentional commingling of origin/destination points by VPNs could turn purely domestic communications into “foreign” communications the NSA can legally intercept (and the FBI, somewhat less-legally can dip into at will)...

Certainly the NSA isn’t concerned about “incidental collection.” It’s never been too concerned about its consistent “incidental” collection of US persons’ communications and data in the past and this isn’t going to budge the needle, especially since it means the NSA would have to do more work to filter out domestic communications and the FBI would be less than thrilled with any efforts made to deny it access to communications it doesn’t have the legal right to obtain on its own.

Since the government won’t do this, it’s up to the general public, starting with everyone sharing the contents of this letter with others. VPNs can still offer considerable security benefits. But everyone needs to know that domestic surveillance is one of the possible side effects of utilizing this tech.

top 97 comments

sorted by: hot top controversial new old
[–] 65 points 7 months ago

Whereas not using a VPN will subject one to... domestic surveillance.

  • source
  • [–] 113 points 7 months ago (4 children)

    Oh nooo, we won't be protected by the law they can't be arsed to follow anyway? Whatever will I do when they surveil my encrypted VPN traffic?

  • source
  • hideshow 4 child comments
  • [–] 21 points 7 months ago* (3 children)

    Store now, decrypt later. Make sure your VPN is using quantum-safe encryption algorithms with perfect forward secrecy. They are storing ALL traffic that goes outside the country (probably domestic traffic too, realistically).

  • source
  • parent
  • hideshow 3 child comments
  • [–] 10 points 7 months ago (2 children)

    Don't you think that would take too much storage space?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 10 points 7 months ago (1 child)

    They can probably use heuristics to keep the 0.1% most interesting traffic (eg traffic that flows towards servers that isn’t too large, that’d catch everything you send to your bank without breaking the budget to store)

  • source
  • parent
  • hideshow 1 child comment
  • [–] 51 points 7 months ago (7 children)

    Americans may be inadvertently waiving the privacy protections they’re entitled to under the law…

    LOL what privacy protections? The NSA has proven time and time again that they don't give a single shit about the law, certainly now more than ever.

  • source
  • hideshow 7 child comments
  • [–] 16 points 7 months ago (6 children)

    What do I trust more: Legal protections nobody cares to enforce and could be a multi year battle in court, or well verified strong cryptography.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 6 points 7 months ago (5 children)

    It's not the cryptography you have to trust. It's the other end of the tunnel. A free VPN most probably sells your data. Nobody offers free services for actually free.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 2 points 7 months ago (1 child)

    Respectfully, this is a bit more nuanced than that. There are free VPNs ran by non profits supported fully by donations. Yes somebody is paying for it but it's people donating to the services.

    For example there is an open source application called Bitmask that has 2 VPN providers by default, Riseup VPN and the Calyx Institute.

    You can download the Bitmask app itself or download the RiseupVPN app which is based on Bitmask but just pre configured to only use that single Riseup provider.

    https://bitmask.net/

    https://riseup.net/en/vpn

  • source
  • parent
  • hideshow 1 child comment
  • [–] 2 points 7 months ago

    You have to trust them though. That's my point.They may say they are funded only by donations and still sell your data.

    In fact the first link says the same as I do as the first phrase. When using a VPN, you are moving your trust from your ISP to your VPN provider.

    Of course there may be exceptions that are actually free and don't sell your data. But the ones that sell your data will rarely state so.

  • source
  • parent
  • [–] 1 point 7 months ago (1 child)

    Is this another good reason to switch to HeadScale or Netbird?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 0 points 7 months ago

    Idk what either of those are. I don't endorse any VPN. All I'm saying is that it doesn't matter how strong the encryption algorithm is, you still have to trust your provider.

    VPNs have the exact same power over you as ISPs. Using a VPN to avoid your ISP is just kicking the can down the road. That's why you better choose a VPN that you trust.

  • source
  • parent
  • [–] 49 points 7 months ago (7 children)

    So, I am a remote worker in Healthcare. Obviously, I need to use a VPN to connect to work to ensure that communication is secure. But because I have a job that requires secure access, I am a suspected domestic terrorist?

  • source
  • hideshow 7 child comments
  • [–] 27 points 7 months ago (4 children)

    No, because there are different types of vpn connectivity.

    A point to point vpn is what employees use to connect to the office. The intention is to encrypt the connection so a 3rd party can’t access ithe data going through it. The FBI/NSA won’t care about this type of vpn because your work knows who you are and logs all traffic generated by you which could be subpoenaed by the government.

    Connecting to a vpn server in another country to then access the internet hides your original ip address, gets around geo-location blocks and the traffic is typically not logged by the vpn provider. This is the type of vpn governments don’t like.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 9 points 7 months ago (3 children)

    I think it's somewhat naive to assume anything isn't being spied on by the NSA. They don't have a history of being picky.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 5 points 7 months ago

    Of course. I’m sure they are making use of plenty of bugs found in firewall software to access and monitor business traffic, but they can subpoena those logs at any time. It’s the private vpn clients where logs aren’t kept that they are most concerned about, hence why I was outlining the difference.

  • source
  • parent
  • [–] 1 point 7 months ago

    Yeah, I think people are making some pretty naive assumptions about all the new datacenters popping up for AI.

    What the fuck do you think the government is asking AI to do for them? Shitty cartoon artwork? Photoshopping vacation photos? Or, maaaaaaybe...I dunno....something like data collection and analysis on every byte of information sent across the tubes of the interwebs?

  • source
  • parent
  • [–] 0 points 7 months ago* (last edited 7 months ago)

    What are you doing on your work VPN that you care if the government illegally looked at? I work in an industry that legally requires security like a VPN and I don't care if the government broke the rules. It's above my paygrade.

  • source
  • parent
  • [–] 72 points 7 months ago (7 children)

    Time to spread the free word of Tor to everyone.

  • source
  • hideshow 7 child comments
  • [–] 30 points 7 months ago (4 children)

    They have been surveiling us for years. They just to maximize what they can collect.

  • source
  • hideshow 4 child comments
  • [–] 12 points 7 months ago (2 children)

    They've already collected your modal verb!

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 7 months ago

    Correct, and the FBI inadvertently admitted it publicly by releasing video in the Guthrie abduction case that shouldn't exist.

    Every device with a wireless connection and a GPS, camera, or microphone is surveilling you.

  • source
  • parent
  • [–] 24 points 7 months ago (2 children)

    I was under them impression that just using the internet in America might subject you to domestic surveillance.

  • source
  • hideshow 2 child comments
  • [–] 2 points 7 months ago

    Yes, but with hundreds of millions of people online, they still need ways to cut and sift the data as they identify... well the "demographics" they want. So using a VPN might make you stand out as more technologically included, or more likely to be hiding something. Either way things they might like to know as they build profiles on all Americans.

    I'm surprised they're not just buying the data but it's nice that our taxpayers are footing the bill either way for this little service.

  • source
  • parent
  • [–] 23 points 7 months ago (4 children)

    I don't get it.

    Why should a Russian spy have to tell Americans anything?

  • source
  • hideshow 4 child comments
  • [+] -14 points 7 months ago (3 children)

    lol please tell me more. I've heard kooks like you are roaming around unmedicated?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 11 points 7 months ago (2 children)
  • [–] -1 points 7 months ago (1 child)

    Oh yes, fact-free drivel from a reliable source!

    Oh my god I thought today wouldn't be fun with all the rain. Thanks!

    Here, print this out and keep it in your wallet.

    RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA

    Don't forget, Russians can take the form of socks or freezer-burned ground beef, check your dryer and your freezer tonight!

    😂

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 7 months ago

    There's dozens of sources, I linked the first one. The things they mention actually happened and have been corroborated by other sources.

    She basically always agrees with Putin's propaganda. Either she's an asset or a useful idiot.

  • source
  • parent
  • [–] 22 points 7 months ago (1 child)

    They spy on domestic communications too, with the 5 eyes arrangement, they have their allies scoop up the information and share it back with them, even as it's just the US doing the entire thing with a couple of foreign names on the masthead. Fucking lawyers.

  • source
  • hideshow 1 child comment
  • [–] 21 points 7 months ago

    In contrast to not using a VPN, which subjects them to illegal surveillance already?

  • source
  • [–] 21 points 7 months ago

    VPNs could turn purely domestic communications into “foreign” communications the NSA can legally intercept

    Lol. Then they go and immediately say:

    and the FBI, somewhat less-legally can dip into at will

    In other words, they don't gaf about your sovereignty, and will monitor communications in any way they want, legally or otherwise.

    They've been illegally digging into domestic communications for decades. Stallman and Snowden (to name a couple) exposed that a long time ago. Hell, the USA government exposes themselves all the time, the USA people just choose to ignore it.

  • source
  • [–] 12 points 7 months ago*

    lol, what a bunch of liars. Americans don't have any privacy protections to waive

  • source
  • [–] 10 points 7 months ago

    Hey, just so you know. Trying to hide from us "totally not spying on you" might force us to totally spy on you.

  • source
  • [–] 7 points 7 months ago

    Technically true, you should choose your VPN provider carefully and not opt for the cheapest one right on.

    In practice however, it's safer than whatever surveillance US is trying to implement by forcing down US made routers.

  • source
  • [–] 7 points 7 months ago* (1 child)

    In a letter sent Thursday to Director of National Intelligence Tulsi Gabbard, the lawmakers say that because VPNs obscure a user’s true location, and because intelligence agencies presume that communications of unknown origin are foreign, Americans may be inadvertently waiving the privacy protections they’re entitled to under the law.

    Several federal agencies, including the FBI, the National Security Agency, and the Federal Trade Commission, have recommended that consumers use VPNs to protect their privacy. But following that advice may inadvertently cost Americans the very protections they’re seeking.

    The letter was signed by members of the Democratic Party’s progressive flank: Senators Ron Wyden, Elizabeth Warren, Edward Markey, and Alex Padilla, along with Representatives Pramila Jayapal and Sara Jacobs.

    There's a saying in Poland: "Robić kurwę z logiki" Which simultaneously can be translated as "To make a whore out of logic" Or "To turn the logic into a whore"

  • source
  • hideshow 1 child comment
  • load more comments (1 reply)
    [–] 12 points 7 months ago (1 child)

    Are they retards or did they forget the NSA already does this illegally?

  • source
  • hideshow 1 child comment
  • [–] 12 points 7 months ago (18 children)

    Is it safe enough to use vpns based out of the US? I'm using nord which is non us.

  • source
  • hideshow 18 child comments
  • [–] 54 points 7 months ago* (3 children)

    Nord is owned by Tesonet, a data mining company which also owns SurfShark.

    And Private Internet Access and ExpressVPN are owned by Kape, an Israeli firm.

    ProtonVPN is owned by Proton, in Switzerland.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 15 points 7 months ago* (4 children)

    Those are the ones that would cause them to surveil you.

    The issue isn't necessarily "the government will target you for using a VPN;" the issue is "if your IP makes you look like you're outside the US because that's where your traffic exits the VPN, the laws against domestic spying won't protect you properly because you'll look like a foreigner."

    Frankly, the headline is heavily spinning it to be anti-VPN fearmongering.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 7 points 7 months ago

    Yeah I reacted way too quickly. Then I realized half of X bot traffic spoofs everywhere. They're intentionally doing a shakeup of everything and this one got under my skin cause I'm a daily user.

    But before this was that outside US router ban that was pretty real. The DJI ban. So these types of news cascade and its worrisome.

  • source
  • parent
  • [–] 1 point 7 months ago (2 children)

    Privacy companies based outside the US can still have VPN servers within the US. That traffic would still look domestic. The company being owned and headquartered outside the US just gives them a bit more protection against the rogue US government.

    Some VPNs also allow multi-hop, so that you can connect to one VPN server via another. That could make it harder for the spooks to see that your traffic is leaving the US. Of course it also means that they might suspect any traffic coming out of a VPN server even based in the US, which is basically the point of this article.

    And some VPNs allow you to enable a feature that protects against AI-driven data traffic analysis. So that someone who's really committed can't just monitor the size and frequency of your outgoing encrypted packets, then find matching patterns in packets leaving the server you're connected to, tracing it to the destination. Instead, the VPN adds noise and sends uniform packets so that AI can't trace it from source to destination.

    I don't know if Nord offers these features, cause I don't use Nord. But I've heard some issues about them, which other user's have already mentioned and offered alternatives for, so I'll leave it at that

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 7 months ago (1 child)

    Yeah, sorry, I wasn't as precise as I could've been. I was really just trying to convey the motivations (i.e. that it was due to being mistaken for foreign as opposed to being targeted for using a VPN), not go into the details of exactly which aspect of the VPN (the entrance IP geolocation, the exit IP geolocation, or the company HQ location) would actually trigger the "foreign-ness."

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 7 months ago

    I mean, even a US-based VPN company could look foreign if they have servers outside the US, or even if they just allow multi-hop to third-party servers to/from outside the US.

    Except then they're even more vulnerable not only to subpoenas but also extrajudicial and unconstitutional raids, as some journalists have discovered, especially in deeply red states but not always...

  • source
  • parent
  • [–] 3 points 7 months ago (3 children)

    Is it safe enough to use vpns based out of the US?

    yes, just be aware that the gov could require the company to log you without letting you know, even if they have a no log setup. For the everyday person this is a non-issue, but if you are doing shadey stuff or have ties that may make someone super interested in your activities, you may wanna choose elsewhere.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 9 points 7 months ago (2 children)

    The everyday person has political views that can be categorized as extremist. Freedom is more costly.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 7 months ago

    Oh, I fully understand that. But the everyday person isn't going to affect the government to the extent where they want to not only issue a court order ordering a company to do this, but also issue a gag order to prevent the company from saying anything.

    Political leaders, possibly. Terrorist organizers, definitely. But your typical protest, or right versus left debate, that's not going to be enough for them to bother, let alone a court order forcing it.

  • source
  • parent
  • [–] 4 points 7 months ago (2 children)

    In theory, I think all VPN usage is grounds to get you put on a list, but Nord is considered a relatively "normie" company by privacy aficionados. Everybody and their mother has seen an ad for it by this point. (The privacy aficionados will probably tell you it's not good enough, but that's a can of worms I won't get into right now.)

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 7 months ago (1 child)

    Makes sense I should probably reframe it as is nord not going to sell their users out without a fight.

    Only true privacy is like the tails stuff and some complicated routing stuff all the self hosting guys here probably know about.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 7 points 7 months ago* (last edited 7 months ago) (15 children)

    I use VPN because it actually speeds up my connection on cellular. My theory is the DNS servers that Verizon uses in my area are inefficient, to the point where I’ll get 1 Mbit down on Verizon, but 100 Mbit down connected to Proton VPN.

    It has nothing to do with security, unless I’m in a coffee shop on WiFi.

    Edit: here are my speeds on cellular, first without VPN, second while connected to a server in Los Angeles.

  • source
  • hideshow 15 child comments
  • [–] 7 points 7 months ago* (3 children)

    Bro fast isn't measuring your internet speed, it's measuring how fast you're connected to Netflix. Phone carriers like Verizon generally throttle video streaming if you're on a cheaper plan but everything else is uneffected. A VPN just bypasses the video streaming throttle because then Verizon can't see what you're connected to. Use a real speed test app.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 4 points 7 months ago (2 children)

    Used Ookla. Got 40 Mbit down off VPN, 2.25 on VPN.

    Will continue using this in future tests. I don’t watch Netflix on my phone. I usually am browsing Lemmy, YouTube, or listening to Apple Music. Fast.com has been my indicator of why my speed is so slow off of VPN when using these services on cellular. While it might not be an ideal speed test, its results track with my connections performance with these services.

    That is to say, at times I’ll find myself not on VPN, find that my videos are chugging, turn VPN on, and problem solved. I usually only turn it off if I’m on home WiFi.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 7 months ago (1 child)

    I'm a fan of testmy.net. Ookla never seemed to give me actual results while I was on spectrum. Several times I'd just get a printout of what my speeds were supposed to be, but then no download would come close, and 480p videos could barely buffer.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 7 months ago

    I've been using Wifiman lately. I find it pretty reliable and informative. I somewhat manage a wifi mesh network at my work so I use test apps frequently and have found it to be pretty good. I believe it is Ubiquity branded, who make a lot of wifi stuffs.

  • source
  • parent
  • [–] 3 points 7 months ago (10 children)

    Tell me you don’t know how dns works without telling me.

  • source
  • parent
  • hideshow 10 child comments
  • [–] 4 points 7 months ago* (9 children)

    As somebody who knows how DNS works, there are certainly cases where DNS servers causing a delayed response to requests will slow down the initial loading of sites. This would result in a layman thinking their wireless speed is “slow”

  • source
  • parent
  • hideshow 9 child comments
  • [–] 0 points 7 months ago (8 children)

    And how does this affect bandwidth, again?

  • source
  • parent
  • hideshow 8 child comments
  • [–] 7 points 7 months ago (2 children)

    Net Neutrality was repealed in the U.S. in 2017. ISPs including your mobile phone carrier are allowed to throttle your bandwidth based on the sites you visit. When you use a VPN an tunnel your DNS through it to servers not operated by your ISP, they don’t know which sites you’re visiting, so any automated throttling would not happen.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 7 months ago (4 children)

    Routing. Back in the day, Charter customers experienced horrible download speeds using Charter’s DNS servers.

    Switching to Google’s would result in far more reliable network speeds.

    Tell me you’re a dickhead without telling me you’re a dickhead.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 0 points 7 months ago* (last edited 7 months ago) (3 children)

    Charter customers experienced horrible download speeds using Charter’s DNS servers.

    How did that work? Are you saying that charters dns servers were sending traffic to completely different places?

    Tried to google for this but found nothing so hard to understand the problem.

    Why not just switch dns servers instead of getting a vpn?

    Tell me you’re a dickhead without telling me you’re a dickhead.

    Yeah fair. Got me there.

    EDIT: other guy mentioned throttling, which is interesting. But changing dns servers doesn’t fix that.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 7 months ago (2 children)

    Dunno about where Charter was routing. Just knew it was a common best practice for users in my town to manually set their DNS to Google.

    Charter became Spectrum and since then this hasn’t been a need.

    So far as cellular goes, I don’t think I can manage my IP settings on the phone as one would on Windows. I already use VPN if I travel or use public WiFi, and learned that, holy shit, my speeds are far better while connected than not. So I stay connected almost all the time. It’s counter intuitive, but I can’t argue with the results.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 7 months ago (1 child)

    As a long time Charter/Spectrum customer (yay local monopolies) who’s toyed with my network a bit, I have heard about some of their network shenanigans, but they don’t seem to have hit my area. Guess I’m surprised it’d be defeated by something a simple as dns servers, and the MITM of it all if they’re redirecting traffic is terrifying, what with https and all.

    I don’t think I can manage my IP settings on the phone as one would on Windows.

    Certainly you can change your dns server on nearly any phone.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 7 months ago

    This is utter BS.

    A foreign national on US soil doesn't get the same protections as a US citizen would overseas.

    What they're saying is "fuck 'em all, let God sort 'em out!" for warrantless data searches and collection. And then waiting for the lawsuit 20 years from now about clear violation of the law to bother thinking about this.

  • source
  • [–] 3 points 7 months ago

    I trust my billion-dollar a year law firm’s VPN to block out this nonsense; we've got clients who are way more worried about our security than the government sniffing around.

  • source
  • [–] 4 points 7 months ago

    I don't give a shit.

  • source
  • [–] 2 points 7 months ago

    Come at me. I'm behind 7 firewalls.

  • source
  • [–] 2 points 7 months ago (2 children)

    Those Senators can gargle some uncooked nuts.

  • source
  • hideshow 2 child comments
  • [–] 26 points 7 months ago (1 child)

    Giving you the benefit of the doubt, I think you misunderstood who is at fault here.

    The senators aren't asking the government to spy on Americans. They're only asking the DNI to make it clear to the public that the US government already might be spying on them.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 7 months ago*

    I think they're being disingenuous, because the government has been spying on all of us via end runs around the rules like "five eyes" for decades. If they want to go all CIA on you they just ask an ally to do it, then return the favor and spy on the people of other governments for them. All legal and above board, it's just "intelligence sharing".

    And the NSA isn't even barred from monitoring you in the fist place.

  • source
  • parent
  • [–] 1 point 7 months ago

    Listen I'm just torrenting movies and music and you don't need to know about. Idgaf if Canada knows.

  • source
  • [–] 1 point 7 months ago*

    I'd say a large part of my day is looking for interesting links for the officers and agents in Bothell, WA that have my IP locale originate, so that they can have stuff to their show their spouses/prostitute that they are extorting/your mom after their shift.

  • source
  • 19 comments in c/technology@lemmy.zip view that post
    7 comments in c/privacy@lemmy.ca view that post
    3 comments in c/privacy@lemmy.dbzer0.com view that post
    3 comments in c/hackernews@lemmy.bestiver.se view that post