[{"data":1,"prerenderedAt":452},["ShallowReactive",2],{"project-5913839":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":9,"maker":10,"posted_at":11,"year":12,"points":13,"comments":14,"rank_in_year":15,"shown_in_year":16,"top":17,"tier":18,"category":19,"subcategory":20,"format":21,"keywords":22,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":35,"aspects":36,"strip":47,"post_text":50,"what":51,"said":96,"maker_in_thread":222,"shape":234,"grid":238,"attempts":415,"same_week":416,"maker_shows":38,"maker_hidden":443,"reader_version":444,"card":445},"5913839","CryptoSeal","Responding to NSA spying with a simple consumer VPN service","title","Show HN: Responding to NSA spying with a simple consumer VPN service",null,"rdl",1371752475,2013,65,74,392,1739,23,"notable","security_privacy","consumer vpn","web_app",[23,24,25,26,27],"vpn","privacy","nsa surveillance","openvpn","mobile vpn","curious",-0.055,{"positive":31,"neutral":32,"mixed":33,"critical":34},7,22,0,9,38,{"performance":37,"privacy":40,"execution":42,"idea":43,"pricing":44,"design":45,"docs":46},{"positive":38,"critical":39},1,2,{"positive":38,"critical":41},4,{"positive":38,"critical":33},{"positive":38,"critical":33},{"positive":38,"critical":39},{"positive":33,"critical":38},{"positive":33,"critical":33},[38,48,48,38,48,48,33,33,48,33,38,33,49,38,48,48,48,49,33,38,38,38,48,49,38,48,49,48,49,48,48,33,48,48,48,48,38,48,49,49],3,5,"The NSA metadata gathering and passive monitoring is quite upsetting, and we don't have much confidence in legal changes happening quickly, so we put together a really simple consumer VPN service. We're still cleaning up the UI and making the install process easier, but it should work for people now.\n\nYes, it's based in the US, but there's a big difference between \"will turn over data proactively\" and \"will push back on requests to the fullest extent of the law\". Since we don't fall under CALEA, there's no requirement for us to have any monitoring infrastructure.\n\nWe're focusing on the mobile ",{"problem":52,"audience":58,"pricing":65,"motivation":74,"time_to_build":9,"stack":78,"openness":93,"stage":94,"team_size":95},{"value":53,"source":54,"evidence":55},"Lack of confidence in legal reform; people want to protect traffic from NSA passive monitoring.","maker",[56],{"id":57},"post",{"value":59,"source":54,"evidence":60},"Consumers worried about NSA surveillance, especially mobile users.",[61,62],{"id":57},{"id":63,"by":10,"text":64},"5914535","There are ~hundreds (thousands?) of VPN providers worldwide. I've seen as low as $1-3\u002Fmo -- and some which are ad sponsored and free. I haven't used them all, so I'm not sure of…",{"value":66,"source":54,"evidence":67},"Around $5-10 per month, with HN coupon codes offering 50% off.",[68,71],{"id":69,"by":10,"text":70},"5914892","Our goal for the privacy service is to collect as little as possible. (the corp service is totally separate tech and infrastructure and has user-configurable logging). We're…",{"id":72,"by":10,"text":73},"5913874","Coupon codes: hn50hnaeS6SaeR is 50% off for HN.",{"value":75,"source":54,"evidence":76},"Upset by NSA metadata gathering and passive monitoring.",[77],{"id":57},[79,85,89],{"value":80,"source":54,"evidence":81},"OpenVPN",[82],{"id":83,"by":10,"text":84},"5913891","For the tech details: it's OpenVPN, PPTP, or L2TP, your choice. Yes, PPTP and L2TP have \"issues\", but they're currently the easiest way to get a VPN on iOS without a custom client.",{"value":86,"source":54,"evidence":87},"PPTP",[88],{"id":83,"by":10,"text":84},{"value":90,"source":54,"evidence":91},"L2TP",[92],{"id":83,"by":10,"text":84},"paid","beta","team",{"praise":97,"objections":117,"requests":150,"questions":183,"alternatives":200},[98,106,110],{"value":99,"source":100,"evidence":101},"Good timing given NSA revelations.","commenter",[102],{"id":103,"by":104,"text":105},"5913996","prayag","One thing the NSA fiasco has done is made people aware of the security and privacy issues on the internet and it's a great time to launch a service like this. Hopefully we will…",{"value":107,"source":100,"evidence":108},"Servers outside the US appeal to users.",[109],{"id":103,"by":104,"text":105},{"value":111,"source":100,"evidence":112},"Mobile focus makes setup accessible to non-experts.",[113],{"id":114,"by":115,"text":116},"5913971","kumarski","Thanks for making this viable for noobs like me.",[118,125,132,143],{"value":119,"source":100,"evidence":120},"Based in the US, so trust in jurisdiction is questioned.",[121],{"id":122,"by":123,"text":124},"5916060","thaumaturgy","I intend absolutely no offense here. I love seeing HN projects posted here. But... One of the major issues that has been raised recently is, essentially, trust. Especially in the…",{"value":126,"source":100,"evidence":127},"PPTP and L2TP are weak protocols.",[128],{"id":129,"by":130,"text":131},"5914010","lifeguard","These \"issues\" are critical in thwarting PRISM. More security snake oil.",{"value":133,"source":100,"evidence":134},"Bandwidth and performance concerns on routers.",[135,139],{"id":136,"by":137,"text":138},"5914402","47","The Biggest problem I have found with VPN providers is bandwidth. I just installed DD-WRT on my router to use OpenVPN client on the router, the bandwidth speed drops to a level…",{"id":140,"by":141,"text":142},"5914772","bifrost","> I just installed DD-WRT on my router to use OpenVPN client on the router, the bandwidth speed drops to a level that makes the setup totally useless. A fair amount of that has…",{"value":144,"source":100,"evidence":145},"VPN does not stop monitoring of content at services like Facebook or Google.",[146],{"id":147,"by":148,"text":149},"5913974","richardwhiuk","I'm not sure how this is at all relevant to the NSA spying - the NSA are gathering details from content providers (like Facebook, Google, Skype), so if you use the VPN to access…",[151,162,169,176],{"value":152,"source":100,"evidence":153},"Clear logging and retention policy.",[154,158],{"id":155,"by":156,"text":157},"5914546","B0Z","One of the items I'm going to be most interested in from your service (when the time comes for you guys to start working on it) will be the TOS and\u002For practices you put in place.…",{"id":159,"by":160,"text":161},"5914914","smegel","Do you do ANY kind of logging?",{"value":163,"source":100,"evidence":164},"Anonymous payment options such as Bitcoin.",[165],{"id":166,"by":167,"text":168},"5915038","buro9","Payment is by Stripe, how long are records of the transaction kept by yourselves? Are you associating a card transaction to an IP address in any way that could result in you ever…",{"value":170,"source":100,"evidence":171},"Differentiation from existing VPN providers.",[172],{"id":173,"by":174,"text":175},"5914739","epoxyhockey","I like the idea of more VPN providers coming online. One thing that may be helpful is to differentiate yourselves from the other VPN providers. For example, I have a VPN…",{"value":177,"source":100,"evidence":178},"Performance and latency test endpoints.",[179],{"id":180,"by":181,"text":182},"5914279","prg318","Where are the VPN servers located geographically? It might be wise to include where your servers are located - and perhaps even a test IP address that users can use for latency \u002F…",[184,189,193],{"value":185,"source":100,"evidence":186},"What data is logged and how long is it kept?",[187,188],{"id":159,"by":160,"text":161},{"id":166,"by":167,"text":168},{"value":190,"source":100,"evidence":191},"Where are the servers located?",[192],{"id":180,"by":181,"text":182},{"value":194,"source":100,"evidence":195},"Would running a self-hosted VPN on a VPS be better?",[196],{"id":197,"by":198,"text":199},"5914790","Spittie","I'm sure there are many legit VPN provider out of there, which really care about the user and provide some hardware\u002Fbandwidth, but most are oversold services (barely scam) with…",[201,207,211,218],{"value":202,"source":100,"evidence":203},"IVPN",[204],{"id":205,"by":167,"text":206},"5914940","Did you try IVPN? http:\u002F\u002Fwww.ivpn.net\u002F I've just purchased an Asus RT-N66U to run an OpenVPN client so that I can encrypt the traffic from all computers, and as I don't do…",{"value":208,"source":100,"evidence":209},"ViprVPN",[210],{"id":155,"by":156,"text":157},{"value":212,"source":100,"evidence":213},"GetCloak",[214],{"id":215,"by":216,"text":217},"5915570","davepeck","Howdy, CryptoSeal guys. It was great grabbing a beer with you in SFO earlier this year and talking about the VPN space. GetCloak.com continues to go well. I didn't realize you…",{"value":219,"source":100,"evidence":220},"Self-hosted OpenVPN on a VPS",[221],{"id":197,"by":198,"text":199},{"comments":32,"answered":223,"key":224},10,[225,228,231],{"id":226,"text":227},"5914470","What kind of performance are you looking for, and what traffic mix? Testing various consumer routers with VPN for performance is on my todo list. I know the WRT54GL is probably…",{"id":229,"text":230},"5914871","For \"roll your own\" with an embedded device, the Marvell Kirkwood is probably the best since it has AES acceleration in hardware. One of the Sheevaplugs has this. It's not really…",{"id":232,"text":233},"5915276","Is that just a driver limitation, or is there a problem with the hardware so the driver is written that way? It also doesn't do DMA, so I've heard bad things about performance…",{"commenters":235,"max_depth":236,"maker_replies":32,"first_comment_mins":49,"lifespan_hours":237},32,8,244,[239,241,243,246,247,248,251,252,254,256,259,262,264,268,271,273,276,278,280,282,284,286,290,294,296,297,300,303,305,307,309,311,313,315,317,319,323,324,325,327,329,331,333,334,336,339,340,342,344,347,349,352,355,358,360,362,364,366,368,371,373,376,378,380,384,386,388,390,395,398,403,405,408,411],[136,33,38,240,137,33],"project\u002Fcritical\u002Fperformance",[226,33,33,242,10,38],"maker\u002Fneutral\u002Fperformance",[244,33,48,245,137,33],"5922279","project\u002Fneutral\u002Fperformance",[140,33,48,245,141,33],[229,33,33,245,10,38],[249,33,38,240,250,33],"5915227","Wicher",[232,33,33,245,10,38],[253,33,48,245,250,33],"5916819",[255,33,48,245,141,33],"5920319",[257,33,33,258,10,38],"5921276","other\u002Fneutral\u002Fperformance",[260,33,48,245,261,33],"5915040","rufugee",[197,33,33,263,198,33],"other\u002Fcritical\u002Fpricing",[265,33,33,266,267,33],"5915058","other\u002Fneutral\u002Fnone","icelancer",[269,33,33,270,137,33],"5922236","commenter\u002Fneutral\u002Fprivacy",[205,33,48,272,167,33],"project\u002Fneutral\u002Fnone",[274,33,33,266,275,33],"5915374","a3n",[277,33,33,258,141,33],"5917079",[279,33,33,266,123,33],"5916046",[83,38,33,281,10,38],"project\u002Fneutral\u002Fexecution",[129,38,38,283,130,33],"project\u002Fcritical\u002Fprivacy",[285,38,33,281,10,38],"5914044",[287,38,33,288,289,33],"5914214","commenter\u002Fneutral\u002Fnone","mpyne",[291,38,49,292,293,33],"5914051","project\u002Fpositive\u002Fexecution","btgeekboy",[295,38,33,292,10,38],"5914089",[147,39,38,283,148,33],[298,39,33,299,10,38],"5914016","project\u002Fneutral\u002Fprivacy",[301,39,48,299,302,33],"5914083","tlrobinson",[304,39,33,299,10,38],"5914130",[306,39,48,299,302,33],"5914368",[308,39,48,299,141,33],"5914593",[310,39,48,299,141,33],"5914348",[312,39,33,288,104,33],"5914095",[103,48,49,314,104,33],"project\u002Fpositive\u002Fidea",[316,48,33,266,10,38],"5914070",[72,41,33,318,10,38],"project\u002Fneutral\u002Fpricing",[320,41,38,321,322,33],"5914480","project\u002Fcritical\u002Fpricing","jvandenbroeck",[63,41,33,318,10,38],[122,49,38,283,123,33],[326,49,33,288,156,33],"5916189",[328,49,38,283,123,33],"5916232",[330,49,33,299,10,38],"5937583",[155,332,48,299,156,33],6,[69,332,33,299,10,38],[114,31,49,335,115,33],"project\u002Fpositive\u002Fnone",[337,31,38,321,338,33],"5915256","Estragon",[215,236,33,266,216,33],[173,34,48,341,174,33],"project\u002Fneutral\u002Fidea",[343,34,33,341,10,38],"5915214",[345,223,49,346,156,33],"5914188","project\u002Fpositive\u002Fpricing",[348,223,33,245,10,38],"5914229",[350,223,48,245,351,33],"5914317","justizin",[353,223,49,354,156,33],"5914449","project\u002Fpositive\u002Fprivacy",[356,223,33,266,357,33],"5915217","tmzt",[159,359,48,299,160,33],11,[361,359,33,299,10,38],"5915028",[363,359,48,299,160,33],"5915738",[365,359,48,299,141,33],"5917096",[367,359,33,270,160,33],"5917341",[369,359,33,270,370,33],"5921418","dfc",[166,372,48,299,167,33],12,[374,372,33,375,10,38],"5915123","maker\u002Fneutral\u002Fpricing",[180,377,48,245,181,33],13,[379,377,33,245,10,38],"5914338",[381,377,48,382,383,33],"5914901","project\u002Fneutral\u002Fdesign","gridscomputing",[385,377,48,382,141,33],"5914919",[387,377,33,266,10,38],"5914943",[389,377,48,242,141,33],"5914548",[391,392,38,393,394,33],"5915286",14,"project\u002Fcritical\u002Fdesign","bliker",[396,392,33,397,10,38],"5915297","maker\u002Fneutral\u002Fdesign",[399,400,48,401,402,33],"5914204",15,"project\u002Fneutral\u002Fdocs","alex_doom",[404,400,33,242,10,38],"5914252",[406,400,49,407,402,33],"5914347","project\u002Fpositive\u002Fperformance",[409,400,33,266,410,33],"5944563","jogzden",[412,413,49,335,414,33],"5967486",16,"davenull",[],[417,422,427,431,436,439],{"id":418,"name":419,"points":420,"category":421},"5939939","Apptimize",126,"dev_tools",{"id":423,"name":424,"points":425,"category":426},"5923642","Blynde",118,"consumer_social",{"id":428,"name":429,"points":14,"category":430},"5916181","Upboat","web_saas",{"id":432,"name":433,"points":434,"category":435},"5926895","Ask the NSA",68,"other",{"id":437,"name":438,"points":434,"category":421},"5932209","Notanos",{"id":440,"name":441,"points":442,"category":421},"5946981","ngrok",66,false,"v2",{"id":446,"name":5,"line":6,"ai":443,"cat":19,"year":12,"points":13,"comments":14,"rec":28,"s":447,"top":17,"kw":448,"maker":10,"domain":449,"tier":18,"attempts":33,"strip":450,"url":-1,"mix":451,"praise":99,"objection":119,"sub":20},5913839,-0.05,[23,24,25,26,27],"","1331330030105133350111351353533033331355",[31,32,33,34],1793990895472]