So I’m pretty recent to the high seas but I’ve seen a few posts now about “stop relying on your VPN” and “people that think VPNs will protect them are naive” and so on.
So since I believe knowledge is our greatest weapon/tool/super-power, can we get some answers regarding what exactly the doomsayers are getting at? ELI5 why VPNs wouldn’t protect your anonymity.
Is it about logging? The country your end-point is in? Something more technical?
Ultimately I’d like to be fully armed in order to keep making the best choices for my fledgling ship as it navigates the vast, stormy seas.
Using a VPN and HOW you use it all depends on your operational security (OPSEC).
If you’re a pirate consumer, then basically you need to keep your ISP from knowing what you’re doing, to prevent copyright strikes or shit-letters from Disney etm. A good VPN is fine.
If you’re a torrent creator, you need to raise your security a bit, depending on the “hotness” of the content. Rare anime torrent? Eh who cares. But you’re hosting HDCams from a movie released yesterday, or games that will be released officially in a week? You need to use a VPN in a country that does not have good relations to your country of origin. Yes, that means if you’re in the USA, get a Russian or Chinese VPN.
If you’re leaking state secrets, Snowden talked about what he did. He cracked wifi within a 2h drive distance, used a 12dBi yagi antenna, with a burner laptop loaded with Tails (Tor linux distro), and only used 1 cracked wifi per use. Never went back to the same place. Then again, he didn’t exactly fare well eventually.
In addition to this, boost your anonymity by buying second hand equipment off local marketplace apps. And make a mobile jumpbox that you can plug into random USB ports and leave there, connected to public wifi.
Tbh, I’m hesitant to ever suggest a Chinese VPN. That’s a great way to paint yourself with a target. 90% of good tradecraft is never giving anyone a reason to look at you.