Are You Safe with a No Log VPN? - Chris Titus Tech
video description
Date: 2022-03-21
Related videos
Comments and reviews: 10
Dingo
I wouldn't bother with SSH over VPN. I have my SSH server set up to only respond to known public keys - no passwords. I use different keys for different connection locations. That way I can kill a key at the server and know that it's not a problem for the future. I.e. I create a key on my machine at work and e-mail the public key to myself so I can install it on the server. Then I can connect from work and when the contract there is up, I comment out the key on my server and even if the sysadmins at my old work get a hold of my private key, it's not valid to sign in to the server. I have another key on my smart phone ssh client so I can administer my server from the phone if I need to though it's fiddley. Each key is secured by a password.
So far, according to my logs, I've fended off the best that the US, Russia, Ukraine, China, the Netherlands, etc. can offer.
Something I'm exploring now is 2FA on SSH using Google Authenticator or FreeOTP. It's very easy to set up in Linux with PAM - I'm no guru - and that would mean that I could connect securely from anything that provides an SSH connection provided I have my mobile phone with me and not leave forensic evidence such as SSH keys. Got it working beautifully in a VM with no internet exposure for now.
Once you have an SSH connection back to a trusted server - who can I trust if not myself - you can tunnel other traffic over that. Probably even easier than setting up a VPN server on the home machine.
reply
I wouldn't bother with SSH over VPN. I have my SSH server set up to only respond to known public keys - no passwords. I use different keys for different connection locations. That way I can kill a key at the server and know that it's not a problem for the future. I.e. I create a key on my machine at work and e-mail the public key to myself so I can install it on the server. Then I can connect from work and when the contract there is up, I comment out the key on my server and even if the sysadmins at my old work get a hold of my private key, it's not valid to sign in to the server. I have another key on my smart phone ssh client so I can administer my server from the phone if I need to though it's fiddley. Each key is secured by a password.
So far, according to my logs, I've fended off the best that the US, Russia, Ukraine, China, the Netherlands, etc. can offer.
Something I'm exploring now is 2FA on SSH using Google Authenticator or FreeOTP. It's very easy to set up in Linux with PAM - I'm no guru - and that would mean that I could connect securely from anything that provides an SSH connection provided I have my mobile phone with me and not leave forensic evidence such as SSH keys. Got it working beautifully in a VM with no internet exposure for now.
Once you have an SSH connection back to a trusted server - who can I trust if not myself - you can tunnel other traffic over that. Probably even easier than setting up a VPN server on the home machine.
reply
Mikael
Depends what you mean by safe. Being invented and used by the military for decades before we got it I wouldn't trust one to keep the mans' eyes off my stuff. On the contrary, it's actually a flag. (Cover your face and walk down the street. Cops will be stopping you within minutes asking what you're hiding.) They'll help against a bitter ex or a bored Russian kid, but not much else in my opinion.
Edit: A VPN being investigated won't tell you anything. Apple is a good example. The FBI asked for access and they said no in front of the cameras, but then went back and gave them everything they asked for. It's called plausible deniability. If they came right out and reminded everybody that the government technically controls and filters through every bit of data that enters or exits the country people would flip. Kinda hard to have a private conversation in somebody else's house on somebody else's phone. All they have to do is pick up a receiver and listen. Not trying to be a Debby downer, but there's no such thing as secure connections, no matter how much you pay.
reply
Depends what you mean by safe. Being invented and used by the military for decades before we got it I wouldn't trust one to keep the mans' eyes off my stuff. On the contrary, it's actually a flag. (Cover your face and walk down the street. Cops will be stopping you within minutes asking what you're hiding.) They'll help against a bitter ex or a bored Russian kid, but not much else in my opinion.
Edit: A VPN being investigated won't tell you anything. Apple is a good example. The FBI asked for access and they said no in front of the cameras, but then went back and gave them everything they asked for. It's called plausible deniability. If they came right out and reminded everybody that the government technically controls and filters through every bit of data that enters or exits the country people would flip. Kinda hard to have a private conversation in somebody else's house on somebody else's phone. All they have to do is pick up a receiver and listen. Not trying to be a Debby downer, but there's no such thing as secure connections, no matter how much you pay.
reply
mikkj1
As someone who's worked in Intelligence, I'd like to say this:
Unless you're accessing the new version of Silk Road, or visiting terrorist websites, or large kiddie porn sites, or human trafficking, the government doesn't give a shit about you. It takes a lot of man-hours and money to track an individual, and it takes a massive amount of storage to hold the data. They're not going to do this because you're downloading music or movies or watching porn. The vast majority of people who have been busted for relatively minor on-line crimes have been caught because they were doing so in the clear, or they logged into a site under their real credentials, and they were caught by media companies, etc. In other words, unless you're committing a crime that has national security implications, or child porn/human trafficking, you can stop being worried about the government monitoring your every move. You're not that important. This paranoia drives me crazy.
reply
As someone who's worked in Intelligence, I'd like to say this:
Unless you're accessing the new version of Silk Road, or visiting terrorist websites, or large kiddie porn sites, or human trafficking, the government doesn't give a shit about you. It takes a lot of man-hours and money to track an individual, and it takes a massive amount of storage to hold the data. They're not going to do this because you're downloading music or movies or watching porn. The vast majority of people who have been busted for relatively minor on-line crimes have been caught because they were doing so in the clear, or they logged into a site under their real credentials, and they were caught by media companies, etc. In other words, unless you're committing a crime that has national security implications, or child porn/human trafficking, you can stop being worried about the government monitoring your every move. You're not that important. This paranoia drives me crazy.
reply
Aitch
Good information, Chris. Thanks for sharing!
Good reasons to use a VPN: Privacy concerns, security when using publc wifi, to get around blocks put in place by ISPs, to access servers in your home country when travelling abroad.
Bad reasons to use a VPN: To hide your crimes (you will be caught eventually), to access something you are not legally allowed to access (again, chances are good that you'll be caught).
Of course, if you are a resident of a country with an oppressive regime or which has laws restricting personal freedom or blocks information that contradicts your government's propaganda, you might be morally obliged to do something which your country deems to be criminal, so there are always shades of grey in these apparently black-and-white issues.
reply
Good information, Chris. Thanks for sharing!
Good reasons to use a VPN: Privacy concerns, security when using publc wifi, to get around blocks put in place by ISPs, to access servers in your home country when travelling abroad.
Bad reasons to use a VPN: To hide your crimes (you will be caught eventually), to access something you are not legally allowed to access (again, chances are good that you'll be caught).
Of course, if you are a resident of a country with an oppressive regime or which has laws restricting personal freedom or blocks information that contradicts your government's propaganda, you might be morally obliged to do something which your country deems to be criminal, so there are always shades of grey in these apparently black-and-white issues.
reply
John
Never used one before just don't trust them and I have no desire to connect to some obscure place far away and slow down my connection. I get your point about cafe's and hotels etc.. however, I never go to those places and if I did I would never use their internet because I do not trust them. I refuse to give somebody 80 dollars a year to slow down my connection. I will pay them 80 bucks if they could speed it up. Hmm, I dont want anyone to know I am watching Chris Titus Tech I live in Fl. so I will connect to Norway have buffering issues get pissed off and curse my internet provider for it. No thanks, Lol
reply
Never used one before just don't trust them and I have no desire to connect to some obscure place far away and slow down my connection. I get your point about cafe's and hotels etc.. however, I never go to those places and if I did I would never use their internet because I do not trust them. I refuse to give somebody 80 dollars a year to slow down my connection. I will pay them 80 bucks if they could speed it up. Hmm, I dont want anyone to know I am watching Chris Titus Tech I live in Fl. so I will connect to Norway have buffering issues get pissed off and curse my internet provider for it. No thanks, Lol
reply
HRSCR
Great video, again Chris. You never be safe in terms of FBI or whatever, but you can stay more protected of another stuff. It works fine in many ways like point to point and for avoid that your ISP tracking you, but like any other IP, it can be tracked for whatever at the end of the line. Understanding when the encryption starts and when ends is important. Of course, all this tools works fine to normal people and normal use. Maybe in the future you can talk about the that -hide DNS- services. Thank you!
reply
Great video, again Chris. You never be safe in terms of FBI or whatever, but you can stay more protected of another stuff. It works fine in many ways like point to point and for avoid that your ISP tracking you, but like any other IP, it can be tracked for whatever at the end of the line. Understanding when the encryption starts and when ends is important. Of course, all this tools works fine to normal people and normal use. Maybe in the future you can talk about the that -hide DNS- services. Thank you!
reply
Richard
Used VPN services for over 18 months now, of which the first 2 were worthless, even though I was paying for them. My third provider has been super, in providing me with updates, and if anything is not right, in a couple minutes, I have help, not hours or days waiting for help. In the last month IP address is now -HIDDEN-, which ads a more secure connection by far. In today's world you must take all steps to protect yourself.
Be safe when computing !
reply
Used VPN services for over 18 months now, of which the first 2 were worthless, even though I was paying for them. My third provider has been super, in providing me with updates, and if anything is not right, in a couple minutes, I have help, not hours or days waiting for help. In the last month IP address is now -HIDDEN-, which ads a more secure connection by far. In today's world you must take all steps to protect yourself.
Be safe when computing !
reply
Хамза
all vpn services keep logs bro and they use them even they say they don't keep logs lol
and when security services need to know any things about someone vpn company give the logs of any one use their vpn server to the security services but ther is some jobs to change some things about you and your adress etc etc etc before you connect to vpn stay cool stay safe and say to security services go to hell
reply
all vpn services keep logs bro and they use them even they say they don't keep logs lol
and when security services need to know any things about someone vpn company give the logs of any one use their vpn server to the security services but ther is some jobs to change some things about you and your adress etc etc etc before you connect to vpn stay cool stay safe and say to security services go to hell
reply
FindLiberty
Hyped up VPN does not work like you thought? lol Mistakes can happen. It's not the
end of the world; this book's available on Amazon; order before your assets are frozen.
-Federal Prison & Federal Prison Camp a Beginner's Guidebook for First Time Inmates-
reply
Hyped up VPN does not work like you thought? lol Mistakes can happen. It's not the
end of the world; this book's available on Amazon; order before your assets are frozen.
-Federal Prison & Federal Prison Camp a Beginner's Guidebook for First Time Inmates-
reply
Ted
Speaking of VPN's and browsers...I see Opera comes preloaded with a VPN but Everytime I use it and try to log into one of my normal accounts, I get warning that -suspicious activity- has occurred and I have to prove who I am before I can get back into my accounts.
reply
Speaking of VPN's and browsers...I see Opera comes preloaded with a VPN but Everytime I use it and try to log into one of my normal accounts, I get warning that -suspicious activity- has occurred and I have to prove who I am before I can get back into my accounts.
reply
Add a review, comment
Other channel videos
