this post was submitted on 12 Apr 2024
181 points (97.9% liked)

Technology

34904 readers
294 users here now

This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.


Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.


Rules:

1: All Lemmy rules apply

2: Do not post low effort posts

3: NEVER post naziped*gore stuff

4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.

5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)

6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist

7: crypto related posts, unless essential, are disallowed

founded 5 years ago
MODERATORS
all 44 comments
sorted by: hot top controversial new old
[–] peereboominc@lemm.ee 88 points 7 months ago (3 children)

I have this vpn because it comes for free with my Google Drive subscription. I have never used it because it does not do what I expect it to do

  • privacy, it's Google.
  • pretend to be in a different country is not available
[–] Smc87@lemmy.sdf.org 26 points 7 months ago* (last edited 7 months ago)

But it’s included…. Ples give your data

[–] Vilian@lemmy.ca 22 points 7 months ago (2 children)

what's the utility of the vpn then???

[–] chiisana@lemmy.chiisana.net 31 points 7 months ago (2 children)

Security when you’re on untrusted network. I can trust Google to snoop my banking data and update the spending power info on my ad profile, I can’t trust the random dude in trench coat also using the public wifi when I am traveling out of my roaming coverage.

I joke of course, but the security aspect is still valid.

[–] PortugalSpaceMoon@infosec.pub 15 points 7 months ago (2 children)

What is it that you're doing that is still not using some form of authenticated encryption? Almost everything is https, ssh, almost all mailservers have tls support, irc does have tls support.. What's left that needs to be encrypted by a VPN?

[–] Vash63@lemmy.world 5 points 7 months ago (2 children)

The addresses themselves that you're connecting to as one example. Also often DNS.

[–] chiisana@lemmy.chiisana.net 6 points 7 months ago (1 children)

Strictly speaking, Encrypted Client Hello (ECH) paired with DNS Over HTTPS (DOH) can resolve this. But not many people have their systems setup this way, so it is still pretty niche.

[–] Vash63@lemmy.world 4 points 7 months ago

That also doesn't resolve the carrier seeing which IPs you're connecting to, which can often be traced back to services or sites.

[–] PortugalSpaceMoon@infosec.pub 3 points 7 months ago (1 children)

What's the threat model here? I can think of no DNS shennanigans that would not be detectable through the authentication mechainsms in TLS (chain-of-trust). Not having to trust network infrastructure is exactly what TLS is for.

[–] chiisana@lemmy.chiisana.net 5 points 7 months ago* (last edited 7 months ago)

Most DNS requests are clear text, which is why DOH was introduced to secure it such that no one can snoop on you looking up something-embarrassing.com. Also, the initial request, before you get the SSL certificate from the web server, you must tell the server at 169.169.169.169 that you’re looking for the certificate for something-embarrassing.com before they can get you the correct certificate. This is why ECH was introduced. Neither of which have became mainstream yet, and so there are still some basic leakage going on.

[–] Dymonika@beehaw.org 3 points 7 months ago (1 children)

So this is a question I've been wondering: is public WiFi safe to treat like a private one if you're using HTTPS everywhere?

[–] skuzz@discuss.tchncs.de 5 points 7 months ago

You only use HTTPS everywhere until you don't. It's kinda like a security blanket to use a VPN in those situations. Someone could be running a MITM proxy and you're dumb enough/in a rush/etc. and click accept on the expired cert. Or some new 0day vulnerability allows badness to happen without your knowledge. Even without being able to see your traffic, a bad actor could still see your DNS requests and narrow down what services you use for further targeting, especially if you frequent a place.

[–] Electricblush@lemmy.world 2 points 7 months ago

It's not the guy in the trenchcoat next to you you need to worry about.

It's the fact that some unknown entity owns/has set up the WiFi.

Anyone working with complex network setup and admin will tell you how much you can abuse owning the network a user is connected to.

The network guys at work never use public WiFi, not hotels or anything. Neither do I, even with my much more limited knowledge of network administration.

[–] CosmicTurtle0@lemmy.dbzer0.com 2 points 7 months ago (2 children)

The biggest thing was being able to switch it on and off from the notifications menu. It is/was super convenient.

Not surprised this is being shut down because it lacked many of the features that most major vpns had.

But that feature was unique.

[–] ripcord@lemmy.world 4 points 7 months ago

Is it that unique? I can connect/disconnect my Wireguard from the notification bar / utility tiles

[–] mustbe3to20signs@feddit.de 1 points 7 months ago (1 children)

Any VPN app can be turned on from the notification short cuts or atleast WireGuard and Windscribe can.

[–] CosmicTurtle0@lemmy.dbzer0.com 1 points 7 months ago

Huh. I didn't know that. I only have two vpns, mostly because they come with a product I subscribe to.

Good to know

[–] blackluster117@possumpat.io 69 points 7 months ago (1 children)

Another service to add to the pile of things Google barely supported then killed.

[–] Fisch@discuss.tchncs.de 63 points 7 months ago

Google shutting down a service?! That's a new one. I would have never expected that.

[–] cosmicrookie@lemmy.world 53 points 7 months ago (1 children)

Imagine buying a VPN off google...

[–] 7heo@lemmy.ml 5 points 7 months ago (1 children)

I feel cucked having google only get most of my traffic. I am an alpha male, I want them to get all of my traffic.

[–] mondoman712@lemmy.ml 2 points 7 months ago (1 children)

Instead of being spied on by google and other companies, just make sure google is the one and only

[–] 7heo@lemmy.ml -1 points 7 months ago

How about blackholing google to limit the damage instead? And you could limit it further by not using services that you know feed data to google.

[–] independantiste@sh.itjust.works 46 points 7 months ago (2 children)

Why would I use a Google VPN anyways

[–] Salvo@aussie.zone 16 points 7 months ago (1 children)

Some people think that Google is trustworthy. They still believe that the motto “Do No Evil” was ever relevant.

[–] kandoh@reddthat.com 1 points 7 months ago (1 children)

The power of branding is never to be overstated.

[–] Chozo@fedia.io 2 points 7 months ago* (last edited 7 months ago)

I use it because it comes free with a service I already pay for.

[–] SpaceNoodle@lemmy.world 35 points 7 months ago

TIL they had a VPN

[–] AFC1886VCC@reddthat.com 29 points 7 months ago

Google killed something off? Nah that can't be right

[–] FrostyCaveman@lemm.ee 28 points 7 months ago* (last edited 7 months ago)

> VPN

> by Google

> Gets shut down

You literally can’t make this stuff up folks

[–] guy@lemmy.world 27 points 7 months ago

This is why I rarely get on board with new Google products nowadays. I know they'll get half assed support and then be killed off really quickly.

[–] octopus_ink@lemmy.ml 16 points 7 months ago (1 children)

Google, Meta, Microsoft.

Three companies I would never trust as a VPN provider. Not necessarily in that order.

[–] cmnybo@discuss.tchncs.de 10 points 7 months ago (1 children)

Good, Google has enough access to everyone's data already. Nobody needs to willingly give them even more access by routing all of their traffic through a Google server.

[–] linearchaos@lemmy.world 1 points 7 months ago

Yeah that's the same conclusion they reached.

[–] paraphrand@lemmy.world 9 points 7 months ago (1 children)

Google One is a huge disappointment.

[–] pineapplelover@lemm.ee 1 points 7 months ago

I hear the big sell is the drive storage

[–] mudle@lemmy.ml 5 points 7 months ago

Google can go to hell.

[–] pineapplelover@lemm.ee 5 points 7 months ago

No doubt, they used this to scrape network traffic.

[–] Swarfega@lemm.ee 4 points 7 months ago

Another one for the grave yard