RE: [gentoo-user] About to have fiber internet and need VPN info

[Laurence Perkins]

> -----Original Message-----
> From: Dale <rdalek1967@×××××.com>
> Sent: Thursday, August 4, 2022 3:32 PM
> To: gentoo-user@l.g.o
> Subject: Re: [gentoo-user] About to have fiber internet and need VPN info
>
> Dale wrote:
> > Howdy,
> >
> > Fiber internet is right around the corner.  Some neighbors are already
> > connected and they working their way to my area.  Once I get
> > connected, I also want to use a VPN but only for some programs.
> > Example, I want Ktorrent and a couple Firefox profiles to use VPNs but
> > at least one Firefox profile I want to remain outside of VPN.  I
> > watched a few videos but want to be sure I understand this right.  If
> > I want software to use a VPN, I put the IP address of the VPN into the
> > proxy settings of the program and that makes it use the VPN.  If I
> > want it to not use the VPN, I leave the settings as they are now.  Am I understanding this correctly?
> >
> > Also, the package I'm getting is 500Mbs/sec.  What speeds should I
> > really expect?  If memory serves me right, that is about 50MBs/sec,
> > note the size of the B.  By the way, that is about 50 times faster
> > than what I have now.  Also, up and down is the same.  Current up
> > stream is a lot smaller.  Basically, I can upload files as fast as I
> > download them.  Now I can upload videos or something.
> >
> > I'm looking at Surfshark and NordVPN.  Both seem to be good and at a
> > decent price.  Anyone used one or both of these?
> >
> > Just trying to make sure I'm on the right path.
> >
> > Thanks.
> >
> > Dale
> >
> > :-)  :-)
> >
> > P. S.  Seamonkey is still not fetching emails automatically, I'm
> > waiting on a upgrade to see if it gets fixed then.  If not, revive old
> > thread and bring out the hammer.  ;-)
> >
>
>
> I now have fiber internet.  It was installed on Tuesday morning.  Speed test shows it is awesome.  I downloaded a Knoppix iso file, about 4.4GBs worth, in just about 5 minutes.  It would have taken about 9 hours on old DSL internet.  I'm perfectly happy with that.
>
> I also ordered a router that has openvpn installed on it.  I watched some videos and think I can set it up to keep my traffic out of public view.  After I learned more about it, there's no reason to not use the VPN for all traffic really.  That way I'm protected a little bit even if a website is not secure.  May not help much but it may be enough.
>
> This is as big a difference as when I went from dial-up to DSL.  I can update my OS in minutes as far as downloading goes.  Now it will be compiling that I have to wait on.  Again.  ;-)
>
> Now I know what some of you guys have been enjoying, and why. :-D
>
> Dale
>
> :-)  :-)
>
> P. S.  Seamonkey still doesn't do email fetch automatically.  I may dig out my mini sledge hammer.  :/
>
>


Most commercial VPN services are of limited value privacy-wise unless you use forged credentials to sign up and chain a couple of them together.



Otherwise you have only their word that they're not collecting exactly the same information your ISP would, and if you're worried about government spying you may as well paste a big sign saying "look here, this guy thinks he's being sneaky" all over your traffic.



The main place they're useful is if you want somebody a little bit more trustworthy than random open wifi hotspots to be the ones handling your data, or if you can get a VPN service provider in a country known not to cooperate with whoever the malicious actors are in your country.



With a full on fiber connection, as long as it doesn't violate your ISPs terms of use, if you want to hide what you're actually doing, proper configuration of tor and/or i2p will likely serve you better, and help other people in oppressive countries do the same.



That said, openvpn is still useful for point-to-point links between friends.  



Oh, and note that if your ISP works the same way as mine, they have a backdoor into whatever equipment they happen to have provided.  So definitely put it in bridge mode or whatever and use your own gear if you don't want them spying on the doings of your internal network.  One of the local ISPs here even calls it a "feature" and will ping the mobile app they require you to install to use their service every time they detect "suspicious" traffic on your internal net...



LMP