Global_Hi_Flyer

I'm not sure the details of Tor either. What I think happens is that the GF looks for certain SSL certificates, other indicators, or addresses of Tor nodes. It then probes those addresses to determine what the hosts are. I also think there's some DNS stuff going on (to determine the hosts). It can then block or disrupt them. It's Tor, it's Facebook, it's other social media sites deemed by the country to be risky or objectionable (Facebook and Twitter are subject to disruption, too).

I believe there's less disruption of regular SSL connections (unless their address points to FB, Twiitter, etc). Which is why regular SSL VPNs tend to work. Self-signed certificates cannot be verified at a certificate authority.... but self-signing presents some risk especially if the setup of a self-signed certificate occurs through the GF. Self-signing eliminates the need to access a CA (meaning that it's harder for the GF to tell what the certificate association is), but if it's done across the GF could open the certificate to spoofing.

lewinr

I dont believe the DNS-based services offer any less security than you would have (or not) normally.

I mean if you are are accessing sites using https, you will have the same security with the DNS-based services. Nobody, including the DNS service provider, can see "inside" your traffic point to point (between your browser and the web server you have the https connection with).

If you are not using https, then you have the same lack of security with or without the DNS-based service. Anybody can see your traffic.

And keep in mind that if you are not using HTTPS, even the VPN offers you very little protection. Your traffic is encrypted between you and the VPN server. But beyond that VPN server (meaning between the VPN server you use and the website that is the final destination) your traffic is unencrypted and can be seen by anybody. The only thing that is masked is your original IP address. (And I believe that you get the same result with the DNS based service).

Global_Hi_Flyer

And that may or may not be a concern.

If your concern is accessing websites or content that have been "banned" by a country while sitting in a hotel in that country, you probably don't have much of a concern about encryption after the VPN gateway/server.

If your concern is email security and your email is behind the VPN firewall, again, no issue. If the email host is outside the firewall, turn on the encryption/privacy feature on the email system (most email systems allow a secure connection on various protocols).

OTOH, if you don't want anyone to see that you're accessing YouPorn (for example), then yes, you have little protection beyond the VPN endpoint.... and if it's a 3rd party VPN you have no protection from them seeing your traffic.

slodki

Awesome thread...I'm going to make use of some of the suggestions here. Cheers

Tiki

Is anyone else having trouble using Hotspot Shield (the free one) to stream Netflix? I only got an account to use my UA# before it merges/converts to the CO OnePass # but it would be nice to get a couple movies before I cancel it.

joshwex90

Hotspot Shield lets me use Netflix and Hulu from outside the USA? It looks weird - I can't seem to get a handle on it

johnkim1989

Better go for DNS service rather than VPN because in VPN you are at the mercy of the VPN server you are using. One best DNS service I can recommend is www.unotelly.com .Their subscription rate is $4 only and the quality is quite good. Alternatively if you are too frugal you can use their free service which lets you watch some basic channels(CBS, fox, spotify, turntable) for free !!! Hope this helps. Please comment back. Cheers ^

joshwex90

And now for the frugal ones who want Netflix and Hulu also! (And other sites like YouTube and ESPN who occasionally block content for outside the US)

wco81

How about HBO Go?

redondo-beach

if you go to www.unotelly.com it has a great set of links to all the sites,

I am saving it for when I am stuck somewhere in the USA,

Is there something like this so you can watch British TV if you are not in the UK ?

thanks

RB

PTravel

Is there some reason people don't like the idea of setting up a VPN router at home? Routers are as cheap as $30, and dd-wrt, which has excellent VPN capability, is free. I've been running dd-wrt on my home routers for a couple of years, now, and find VPN stable and completely reliable.

gfunkdave

It takes a certain level of comfort with technology, as well as a fast upstream internet connection.

But yeah, I don't understand either why more people don't do it.

redondo-beach

Since you have done this before can you find a link that will tell us how we can do it too , I have Fios at home so it has the bandwith

Thanks

RB

gfunkdave

Go to DD-WRT.com or tomatousb.org to determine if your router is compatible. If it is, download and install the relevant firmware build. If you want a PPTP VPN server, you will probably need to use DD-WRT since Tomato builds tend not to have PPTP servers (they have OpenVPN servers, which are far more secure but harder to configure).

My personal experience is that Tomato is easier to use and more forgiving of a bad firmware flash (less likely to brick your router) but DD-WRT supports a wider range of devices.

PTravel

http://dd-wrt.com/site/index

That's the dd-wrt home page. There you can look up compatible routers and get full instructions for installing dd-wrt on them.