بایگانی دسته: Our Insights

Auto Added by WPeMatico

VyprVPN Android App Stands Tall in Latest VPN App Study

A recent paper, “An Analysis of the Privacy and Security Risks of Android VPN Permission-enabled Apps” takes an in-depth look at over 250 Android apps that use the Android VPN permission – including VyprVPN. The paper examines apps available in the Google Play store, and analyzes the actual privacy and security of these apps by looking at features such as “malware presence, third-party libraries embedding and traffic manipulation.” Several news outlets, including Ars Technica, ran reports on the study.
The paper makes valid points regarding the deceptive marketing and broken functionality of many VPN providers. We have previously explored these ideas in our “You Are the Product” feature. Additionally, the paper supports the idea that using third parties results in less security and more vulnerabilities for the end-user. This is great to read, as we have always asserted that third parties decrease security and prided ourselves on the fact that VyprVPN owns and runs 100% of our network without third parties.
While we agree with this and some aspects of the paper, the paper also makes some additional conclusions that we can clarify.
Free Applications 
When reviewing this study, many of the privacy apps listed are free applications, which are generally much less secure than paid applications. Oftentimes, free apps – including VPN apps – sell user data or compromise privacy in order to profit and enable the company to offer the app for free. With free applications, you should be aware of how your data is being handled and shared, as well as the trustworthiness of the provider. We delved into this topic in our content piece You Are the Product: The Price of Free in the Growing Privacy Industry. Golden Frog’s Privacy Policy provides a simple overview of what we do with customer data, and we never sell or release data except in specific legal circumstances.
Owning Your Own Infrastructure
The paper corroborates the belief that most providers don’t run their own secure equipment and network, and instead rely on cloud and dedicated hosting providers. In the paper, VyprVPN’s infrastructure looks completely different from other providers, and that’s because we own and operate our own servers and network. As a result, we have greater control over the privacy of our customer traffic.
The Definition of Android VPN
The paper assumes that anything that uses the Android VPN functionality is a VPN. While the functionality was originally intended for customer VPN implementations, it’s actually a generic packet analyzer. Android’s VPN permissions are required to implement malware filters, web proxies, or simple traffic monitors, none of which are VPNs.
Claims in the Arts Technica Article
The paper states that 18% of the apps “didn’t encrypt traffic at all,” leaving users vulnerable on Wi-Fi hotspots and unsecured network. VyprVPN’s Android app implements strong encryption using OpenVPN and our proprietary Chameleon technology, which defeats VPN blocking. When enabled, our app provides no option to send traffic without encryption. VyprVPN is highly-effective in protecting users on public Wi-Fi networks and all unsecured networks.
The study also mentions that 84% of the apps “leaked traffic based on the next-generation IPv6 internet protocol, and 66 percent don’t stop the spilling of domain name system-related data, again leaving that data vulnerable to monitoring or manipulation.” We develop our apps in-house so that we can deliver users with better control over security. Golden Frog’s apps take active efforts to prevent IPv6 leakage, something that is difficult for providers that merely provide simple configuration wrappers.
Two other claims in the article were that some apps injecting code into users’ web traffic, and several apps installing digital certificates causing apps to “intercept and decrypt transport layer security traffic.” VyprVPN does not inject code into web traffic, nor install digital certificates such as the ones mentioned.
Residential Network
The paper classifies Golden Frog’s networks as “residential” networks. The paper cites using residential networks as a concern because some VPN providers route their traffic through end-user home networks. In this case, random Internet users can view and manipulate the VPN user’s traffic. To classify a network as residential, the paper used networks that register themselves as end-user networks with Spamhaus, a listing of spam networks. As VyprVPN is an end-user service, Golden Frog registers its infrastructure with Spamhaus as an end-user network so that mail servers know not to expect our customers to act like mail servers. As a result, the paper’s concerns do not apply to VyprVPN.
Final Thoughts
In general, the paper confirms that VyprVPN offers exceptional online privacy. The concerns it raises about Android VPN apps mirror many of the VPN myths that we have debunked for years. This paper brings additional transparency to the VPN industry, and highlights why the choice of a VPN provider with a reputation for focusing on privacy, like VyprVPN, is important.

خرید وی پی ان آنتی فیلترآنتی فیلتر

Wi-Fi Not: The Dangers of Public Wi-Fi

We’re all familiar with Wi-Fi, and the convenience it affords. Technically, Wi-Fi refers to a technology that enables computers and other devices to connect to the Internet and communicate wirelessly. Wi-Fi is configured using a wireless adaptor to create a “hotspot.” Once a connection is established, users within range of the hotspot can connect to the Internet network.
Wireless networks are located either in the home, which is generally referred to as a “closed network,” or in public places, which can be open or closed depending on the security settings. Public Wi-Fi is often unsecured, posing security risks to users.
Where are Public Wi-Fi Networks Found?
Public Wi-Fi networks are not hard to find. They are prevalent in locations around the world and you encounter them in your day-to-day life and during travel. Some common locations where you may encounter these networks include:
Restaurants, bars, cafes and coffee shops
Airports and airplanes (in-flight Wi-Fi), trains, subways and transportation stations
Hotels and hostels
Public parks and other public locations that offer Internet
Malls and shopping centers
Tourist attractions, commercial hubs
Home networks, if left unsecured
There are over 100,000 unsecured public Wi-Fi hotspots around the world, with reports that one out of four are completely unsecured. Mumbai holds the title for the largest public Wi-Fi city, with over 500 active hotspots and another 700 promised by May of 2017. Other major metro areas have large public Wi-Fi presence, such as New York City where all subway stations will have Wi-Fi coverage by the end of this year. In Europe, there is an initiative called WIFIEU, which plans to extend free Wi-Fi all over the European Union in public places.
Why Are These Networks Insecure
An unsecured Wi-Fi network is any network that does not require you to enter a password or login credentials to use the network. These “open” networks also involve unencrypted connections, leaving users at great risk. These hotspots are an easy target for hackers and nefarious people trying to steal login passwords, credit card information, content of communications or other personal details. These also pose other threats, such as man-in-the-middle attacks, Wi-Fi sniffing and malware.
Hackers/Snoops: Hackers or snoops can infiltrate unsecured Wi-Fi networks and use them to collect personal details or sensitive login information. Think hacking is hard? Think again. Hacking is easier and easier these days, with the help of tools like packet analyzers.
Man-in-the-Middle Attacks: A man-in-the-middle attack occurs when a malicious actor intercepts communication between two people and inserts themselves into the conversation. The criminal can then access information being sent and intercept personal data – all without the senders or recipients knowing. This type of attack allows for eavesdropping, exploiting real-time transactions, conversations and data transfers allowing the hacker to steal personal information.
Malware: Unsecured Wi-Fi networks can be used to inject malware into devices connected to the network. Malware is very dangerous, as it could give an attacker access to everything on your device. This includes files or photos, and can go as far as microphone activation for eavesdropping.
Rogue Hotspots/Fake Networks: These are hotspots that are set up by criminals, using a name close to that of the actual, legitimate Wi-Fi hotspot. These hotspots are created to trick users into connecting, thinking they are using a legitimate network at a coffee shop, for example. When you connect to one of these networks you become vulnerable to hacking/snooping conducted by the owner of the fake network.
What Information is at Risk
Now that you know unsecured public Wi-Fi networks are an easy target for criminals or snoops trying to steal your personal details, it’s important to understand what exactly they can get their hands on – and how revealing this data can be. When using these networks, the following information may be at risk:
Your location
The websites you visit
Your personal communications, such as emails, chats and messages
Whom you are communicating with
Files you send, photos
Your passwords and other sensitive information
Login credentials for various websites, such as banking websites
All this isn’t just hype! There are reports of users connecting to unsecured Wi-Fi networks around the globe, often with devastating consequences for their users.
Tourist Attractions: Some of the most unsecured Wi-Fi networks can be found at popular tourist attractions and destinations around the world. These include popular places such as Times Square, Notre Dame and Disneyland Paris.
Onboard Airplanes: Last year, there was quite a stir when a journalist was hacked while using in-flight Wi-Fi onboard a plane. The hacker revealed details of what the journalist was working on, compromising the story as well as alarming all who heard about it. This incident proved just how quick and easy hacking in-flight Wi-Fi was.
Public Buses: The city of Sydney Australia recently announced plans to offer Wi-Fi onboard all public buses. But this Wi-Fi comes with a catch – it will collect and sell personal user information. While this risk doesn’t occur because the Wi-Fi is insecure, it’s another privacy violation that users need to be aware of on Wi-Fi.
Ignorance is Not Bliss
According to a study conducted by the Identity Theft Resource Center, about 40% of people were unconcerned about using public Wi-Fi. Of those who were worried, less than half took steps to secure their connection on these networks. This is very concerning, considering the activities that most frequently take place on public Wi-Fi:
Checking personal email accounts (including logging in)
Using social media (including logging in)
Accessing banking or financial information
What’s even more concerning is peoples’ willingness to use these networks, despite being aware of the risks. A McAfee poll revealed that a large percentage of people – 38% – still opt to use free unsecured Wi-Fi. Combine that with a statistic from the AARP’s Convenience Versus Security report that “A quarter of the adults who use the Internet access it via public Wi-Fi once a week or more,” and you get an idea of how common using unsecured networks is.
Protecting Yourself on Public Wi-Fi
All of this is very unsettling, especially for those who have never considered the risks of public Wi-Fi before. But you don’t have to avoid WI-Fi networks or accept the inevitability of privacy risks – there are things you can do!
While there are several ways to protect yourself when using a Wi-Fi network, one way beats the rest – using a VPN. The most important thing you can do every time you connect is to use a VPN. A VPN encrypts your Internet connection to secure it and protect your privacy. When connecting with a VPN, no one – not the Internet service provider, the business/network owner nor any third-party hacker or snoop – can see the information you send over the network. When using Wi-Fi with a VPN your privacy and security is protected at all times.
There are also several other precautions you can take, and the first step is really awareness – always “think before you connect.” It’s essential to realize that when you’re logging on to a Wi-Fi network in a public place, especially one labeled “free,” you’re at risk. It’s also important to understand what you’re agreeing to. When you accept the terms and conditions of a public Wi-Fi hotspot, it’s likely you’re giving the service permission to collect information about you or what you’re looking at. Once you’re aware, you can make better choices about when to connect (or not connect!) and actively take measures to protect your privacy.
Other things you can do to increase privacy:
Turn off sharing settings, so others on the network cannot access your information
Use a firewall
Always use HTTPS for websites you visit
Use 2-factor authentication for all login credentials on accounts
Turn off Wi-Fi whenever you aren’t using it – this prevents it from automatically connecting and putting you at risk
Update settings to forget networks so they are not saved on your phone
VyprVPN: A VPN You Can Trust
VyprVPN is a fast, highly-secure VPN that encrypts your Internet connection to protect your privacy. It will protect your connection every time you connect – including on public and unsecured Wi-Fi networks. As mentioned above, using a VPN is especially important, due to the automatic nature of public Wi-Fi. Often, these networks connect to your device automatically, meaning you could be putting your privacy at risk without even knowing it! VyprVPN’s Connect on Untrusted Wi-Fi feature automatically connects the VPN anytime you are on an untrusted network, ensuring you stay secure and protected…without having to think about it! VyprVPN’s Kill Switch feature is also helpful in preventing against threats on Wi-Fi. Kill Switch automatically kills, or disconnects, your Internet connection whenever you are not connected to VyprVPN, ensuring you are not at risk without being aware. It’s nearly impossible to avoid using Wi-Fi networks (not to mention inconvenient), so the best solution is to use a VPN. Then you can enjoy the Internet AND rest assured your privacy is protected.

خرید وی پی ان آنتی فیلترآنتی فیلتر

China Finally Asserts that VPNs are Illegal, but VyprVPN Remains Accessible

China Finally Asserts VPNs Are Illegal
The Chinese government has finally come out and said it: VPN services are not allowed without authorization. These updated Chinese regulations effectively outlaw VPNs within China after years of sporadic VPN blocking and degradation by the Great Firewall. The Ministry of Industry and Information Technology on Sunday announced a “clean-up” of Internet access services, including VPNs, which will take place over a period of 14 months. The new Chinese regulations appear to target ISPs and network providers that are operating from within China. It remains to be seen if China will enact any new blocking strategies against VPN services that operate outside of China, such as VyprVPN.
VyprVPN Remains Accessible from China
Currently, VyprVPN continues to operate normally for our customers in China. Amidst these claims, it’s business as usual for us here at Golden Frog – and for VyprVPN customers. Golden Frog is incorporated in Switzerland and does not operate any servers within China, so we are not subject to the harsh new regulations.  We will continue to provide our customers connecting from China and around the world unrestricted, uncensored Internet access via any of our 70+ worldwide VyprVPN server locations. We will also continue to offer our proprietary Chameleon technology, which defeats VPN blocking by scrambling OpenVPN packet metadata to ensure it’s not recognizable to the Great Firewall or other deep-packet inspection (DPI) technologies.
“China has targeted VPN providers in the past,” said Phil Molter, co-CTO at Golden Frog, “but VyprVPN has been able to quickly and effectively update our service to defeat these blocks, bringing our users back online more quickly than other providers. We are one of the biggest, and most successful, VPN providers in China – and despite implications of the new legislation we remain confident in offering VyprVPN as an effective solution around China’s harsh censorship. While we do not believe the new regulations affect VyprVPN users at this time, we will, of course, continue to follow Chinese developments.”
A Continued Fight for a Free and Open Internet
While this news out of China is highly concerning, it’s nothing new from a country who imparts some of the strictest Internet censorship in the world. We are unsurprised to see China tightening its already-strong grip on the Internet, which they have been controlling and censoring for the past two decades. It is alarming to see their control increase so greatly in recent months, but Golden Frog’s mission drives us to provide a way around this control.
“Golden Frog was founded to stand for a free and open Internet,” said Sunday Yokubaitis, President of Golden Frog. “We created VyprVPN to offer Internet users around the world with a tool to preserve their privacy and freedom, and to enable them to access the unrestricted Internet experience. VyprVPN is the portal to the free world for many Chinese users, so we take that responsibility very seriously and it drives us to continue our fight for the free and open Internet. Our Operations teams are prepared to implement the technical measures to defeat any new VPN crackdown.”
It appears China’s latest crackdown is politically-motivated, and may be in a response to a change in political power that happens only once per decade. The new rules aim to support a new “party congress” by further restricting Internet freedoms. We’ll provide more information on why the crackdown may be occurring in a follow-up piece later this week, so be sure to stay tuned. We will also offer additional information as we continue learning about the new legislation and understanding the implications. If you have questions, please reach out to us at [email protected] and we will be happy to discuss the news further.

خرید وی پی ان آنتی فیلترآنتی فیلتر

China Cracks Down on VPNs … But Why?

By now, you’ve probably heard that China is cracking down on VPNs within the country by asserting that VPNs are illegal. But why the sudden crackdown? Why is China expanding their already-pervasive censorship? And why now?
The 2017 Party Congress
The answer may be more obvious than you think – political. As referenced in a South China Morning Post article, the 19th National Congress of the Communist Party of China takes place in Beijing this year. The new Internet regulations coincide with this “once-in-a-decade power reshuffle,” when China’s top leadership changes and government power shifts significantly. China certainly has a history of cracking down on political dissent and critical reporting ahead of their national meetings. In March 2016, we saw a VPN crackdown in Beijing during the top political meetings that month. With the political stakes higher than ever this year, China may be taking an even harder line.
Control Beyond VPNs
China has been steadily ramping up Internet censorship and restrictions in recent months. Just last week, new legislation (to go into effect in June) was proposed to target domain names and mobile applications. The legislation requires websites operating in China to register to a Chinese domain name (.cn) – meaning the government can shut down the site if they want for any reason. It also targets mobile applications, greatly increasing censorship of content, requiring confirmation of users’ real identities, and calling for data retention and information sharing with the government. In November 2016, China passed another new cybersecurity law requiring collection of personally identifiable information on Internet users, with provisions for local storage in China. Like the VPN regulations, these laws only apply to companies registered within China, but the long-term effect of these laws may be that China residents can only use registered companies.
More on China’s Crackdown
As a company founded to support a free and open Internet, we are concerned to see China tightening it’s already-firm grip. Access to the Open Internet is an essential right that should be afforded to all Internet users around the world. With effective tools like VyprVPN, we will continue our fight against the Great Firewall and against censorship in general.
To learn more about China’s latest crackdown on VPNs, and how people inside the country use VyprVPN, please view our other pieces in this series.
China Finally Asserts that VPNs are Illegal, but VyprVPN Remains Accessible
 
Sources: South China Morning Post, V3, China Digital Times

خرید وی پی ان آنتی فیلترآنتی فیلتر

The Right to Privacy and Internet Freedom

We’ve long said that encryption is a right, describing it as the “second amendment for the Internet.” In addition to encryption we have other rights as Internet users, including the right to access a free and open Internet and to communicate with others online – or first amendment rights. It seems some of these rights may be at risk, so we’d like to review some fundamental rights of the Internet as prescribed by the United States constitution.
First Amendment Rights
The first amendment protects a variety of rights, including the freedom of speech and free press. These rights prevail in today’s digital age, with first amendment protections afforded to Internet users. As we explore in our Vision Paper, everyone has a right to a free and open Internet. This means an Internet devoid of restrictions or censorship, that offers equal access to all users regardless of location, carrier or income. The ability to communicate freely online – both in regards to the content of communicaitons and self-expression and in regards the ability to access the Internet, is another essential right. Many organizations promote human rights campaigns around Internet access, including Access Now’s Keep It On campaign.
Second Amendment Rights
The second amendment offers the right to protect oneself (literally, to bear arms) – and these protections can be extended to Internet users. As a company that stands for privacy, we believe that privacy is a fundamental right. Everyone has the right to protect themselves and their privacy online – and encryption is a great way to do so. In this sense, encryption is the second amendment for the Internet. Golden Frog offers tools to achieve this protection, and we are incorporated in Switzerland where privacy is respected under strong laws. These thoughts have been echoed by many others, including Open Democracy.
Fourth Amendment Rights
The fourth amendment provides protections for people and their property against unreasonable search/seizures, and includes requirement for appropriate warrants. These fourth amendment rights are also applicable in the digital age, in regards to the collection and viewing of electronic information of Internet and mobile users. People have a right to their privacy and personal information without the threat of intrusion or surveillance without a warrant. As a company we are in opposition to unwarranted mass surveillance practices, and we oppose legislation (the recently passed Rule 41, for example) which may threaten these rights. Everyone has a right to privacy without the threat of warrantless mass surveillance.
Conclusion
At Golden Frog we are pleased to offer a tool – VyprVPN – that enables people to access an unrestricted Internet and communicate in a free and private way. By utilizing encryption, we provide access to a private, secure free and open Internet, respecting the fundamental rights of Internet users in the United States and around the world.

خرید وی پی ان آنتی فیلترآنتی فیلتر

۲۰۱۶: The Year in Privacy & Security

As the year comes to a close, we take a look back at 2016. This year, the debates over privacy and security continued to rage on with victories and setbacks alike.
Encryption
By far, the biggest theme of 2016 was encryption – and the debates over privacy and security that came along with it. The Apple v. FBI case in early 2016 ignited a worldwide debate, calling attention to important issues about privacy, security and the right to protect yourself online. The debate hit the main stage when the FBI asked Apple to offer access into encrypted communications on an iPhone (iMessage) app, and Apple refused as they do not have access to the messages. This set off a huge debate about when – if ever – it is OK to break encryption. Most of the tech community and privacy companies took a strong stance against backdoor encryption, citing threats to innovation and technology as well as the danger of introducing vulnerabilities that can be exploited by bad actors.
Surveillance
Unfortunately, this year we saw a trend of surveillance practices increasing around the world. Some shocking revelations were made about massive spying projects in both the United Kingdom and the United States, as well as many other regions who increased their ability to spy or access personal communications. Legislation was also passed which granted more powers to mass surveillance in many areas, continuing the debate about what the appropriate balance is between personal privacy and national security.
Decline in Internet Freedom
As detailed in an annual report by Freedom on the Net, Internet freedom was on the decline for the 6th consecutive year in a row. This alarming trend illustrates increasing censorship around the world, both of websites and content. This year there was a trend of popular messaging apps (for example, WhatsApp) being blocked in various countries – sometimes due to the fact they employ unbreakable encryption, at other times to stymie communication or organizing during protests. These outages took place in a span of areas, but were strong in the Middle East and Africa, and other regions. Countries like China, Russia and others also tightened grips via mass censorship and the introduction or strengthening of “Great Firewalls.”
Data Sharing & Privacy
This year, we saw several regulations aimed at both protecting consumer privacy and restricting the amount of personally-identifiable data that can be viewed or shared by companies or across platforms. On the other side of this, the year brought legislation aimed at decreasing privacy and data protections for users, as well as measures for data retention. At Golden Frog, we delved into the topic “you are the product,” exploring ways that companies often exploit user data.
Some of the legislation that went into place this year included:
Google’s privacy policy updates to allow for tracking of personally identifiable data across platforms
New FCC regulations calling for explicit consumer consent before sharing or collecting any data about users
The Investigatory Powers Bill in the Uk, which is not only a surveillance bill but also allows for sharing of personal information
IoT and Insecurity
The Internet of Things (IoT) continues to be a big topic this year, with reports about the insecurity of connected devices appearing in the news. The IoT was a major focus at this year’s CES in early January, and continued to dominate the news throughout the year. Just recently, a study again highlighted how dangerous this network of items is and the inherent vulnerabilities that exist. There were some very large DDoS attacks at the end of the year, which employed botnets comprised of IoT devices to carry out attacks (a departure from the past when they employed computers). As more and more devices continue to be connected, it’s likely the buzz over the IoT will continue.
Other Topics
Some other themes this year included an increase in consumer awareness and concern over privacy, which is a positive step in that people are taking more ownership of their privacy and strides to improve it. We also saw a trend of people becoming concerned and more aware of unsecured Wi-Fi networks, and the risks associated with these.

خرید وی پی ان آنتی فیلترآنتی فیلتر