Poll: Investigatory Powers Bill or "Snoopers' Charter" has been approved

Are you happy with the investigatory powers bill being passed?

  • Yes, I fully agree with it.

    Votes: 14 2.5%
  • Yes, but I am uncomfortable with certain aspects of it.

    Votes: 31 5.5%
  • I am undecided.

    Votes: 27 4.8%
  • No, but I do agree with parts of it.

    Votes: 103 18.2%
  • No, I fully disagree with it.

    Votes: 391 69.1%

  • Total voters
    566
Sure, but there are still risks inherent with VPNs.

It's just worth people realising/knowing that they're not entirely safe.

VPNs are an awful lot easier to Man-in-the-middle for example.
 
We need "Internet 2: A Brave New Cloud"

I can host some websites on my home server and I have an 8 port Netgear switch and some really long CAT5e cables. Anyone wanna get in on this?
 
VPNs are an awful lot easier to Man-in-the-middle for example.

Not really. Only if you're using weak encryption and a simple preshared key (or you're not protecting your certs and keys appropriately). A properly configured VPN will not be "easy" to compromise by any stretch of the imagination. Until Quantum computing comes of age, it's likely to stay that way.

Some technologies essentially do MITM SSL "attacks" these days to function properly like WAN accellerators, but again, you need the certs/keys to do this.
 
Last edited:
To a certain extent, but if you think you're completely safe or anonymous on a VPN; you're not.

A VPN is sufficient though for normal people to protect their privacy, ISP's will not have logs of users internet activity and any website that is compromised will not be able to trace access back to the users real ip address.
 
A VPN is sufficient though for normal people to protect their privacy, ISP's will not have logs of users internet activity and any website that is compromised will not be able to trace access back to the users real ip address.

I suppose if you're signing in to Gmail over a VPN, Google are still going to be able to tie your username and activity to the VPN IP. It depends if that bothers you or not.

There are always other search engines and mail services.
 
It's not hard to envisage the government requiring people to prove they need a VPN for, say, business purposes to be allowed to use one.
 
There's simply no way to enforce that practically, anyone can rent a vps and install a vpn server on it so it's not as if you can block vpn services.
 
Are we talking VPN, proxy, or P2P routing here? I think these terms get thrown around and not properly understood...

Using a secure tunnel to connect to a server in some data center would not give you any anonymity, given that the server could be proven to be owned by you, and thus any web traffic coming from that box would be provably your web traffic.

So what are you guys meaning when you say VPN? Tor? Something else?
 
Are we talking VPN, proxy, or P2P routing here? I think these terms get thrown around and not properly understood...

Using a secure tunnel to connect to a server in some data center would not give you any anonymity, given that the server could be proven to be owned by you, and thus any web traffic coming from that box would be provably your web traffic.

So what are you guys meaning when you say VPN? Tor? Something else?

We are primarily talking about commercial VPN services. You pay to be able to route your traffic through a selection of different servers over a VPN tunnel. This stops your ISP monitoring your web activity and prevents websites you access from tracing access back to you as hundreds of people use the same VPN server.
 
depends on the setup I imagine a lot of people are referring to shared VPNs i.e. The server all the outgoing requests come from will be many people utilising it. No way to tell who sent what in that situation afaik(assuming they're not logging).

Seems a bit overkill to set up your own server as unless you chose a country and company who won't play ball with the UK and actually know what they're doing security wise then it's pretty worthless. Guess you could always allow others to use it as well.
 
depends on the setup I imagine a lot of people are referring to shared VPNs i.e. The server all the outgoing requests come from will be many people utilising it. No way to tell who sent what in that situation afaik(assuming they're not logging).

Seems a bit overkill to set up your own server as unless you chose a country and company who won't play ball with the UK and actually know what they're doing security wise then it's pretty worthless. Guess you could always allow others to use it as well.

It's not worthless at all, even a dedicated server stops your ISP logging your traffic and gives you anonymity to the operators of the websites your accessing. Yes law enforcement can trace the IP back to you if you're the only one using it as you are the registered owner, but that doesn't make it worthless by any means. It completely depends what you want from a VPN solution. Private servers have the advantages of not being blocked by Netflix.

With a private or dedicated VPN server when the authorities ask, "has this person been on x website" the ISP's answer is going to be "don't know".
 
Last edited:
In all fairness, I don't see the EU stepping in and trying to stop it right now. If they were, it'd raise my opinion of them significantly.

Ironically having voted to Leave, I'd now like to know if there's any way the British public can push this over to the EU to stop it. I don't think they'd listen to us little people, though.

How the tables turn, eh? :D

Well, legally, General Data Protection Regulation is set to come in soonish (May 2018). If the government's manoeuvres are seen to be in breach, particularly when ISPs and other third parties get involved in this harvesting scheme, you can challenge them at the ECJ.

One of the main critiques of it was, according to the wiki, surprise, surprise, this:
The new regulation conflicts with other non-European laws and regulations and practices (e.g. surveillance by governments). Companies in such countries should no longer be considered acceptable for processing EU personal data. See EU-US Privacy Shield.

Mutti Merkel clearly did not take kindly to being snooped on. ;) Our defence will no doubt centre around the core principle of sovereign liberty of 'But terrorism and orgasming ladies, so must spy'!

However, even if you were to succeed, it could be overturned after 2019, depending on how hard our departure is and whether we do split from the ECJ's rulings on such matters. So I'd suggest to petition both at home and abroad, just in case.
 
Last edited:
It's not worthless at all, even a dedicated server stops your ISP logging your traffic and gives you anonymity to the operators of the websites your accessing. Yes law enforcement can trace the IP back to you if you're the only one using it as you are the registered owner, but that doesn't make it worthless by any means. It completely depends what you want from a VPN solution. Private servers have the advantages of not being blocked by Netflix.

With a private or dedicated VPN server when the authorities ask, "has this person been on x website" the ISP's answer is going to be "don't know".

Ahh in that regards then no it's not worthless sorry.
 
Who can view my internet history ?

A list of who will have the power to access your internet connection records is set out in Schedule 4 of the Act. It’s longer than you might imagine:


Fire and rescue authorities under the Fire and Rescue Services Act 2004


The world when your isp gets hacked.



Oh yeah! Show me your internets history! :D :D
 
It's not worthless at all, even a dedicated server stops your ISP logging your traffic and gives you anonymity to the operators of the websites your accessing. Yes law enforcement can trace the IP back to you if you're the only one using it as you are the registered owner, but that doesn't make it worthless by any means. It completely depends what you want from a VPN solution. Private servers have the advantages of not being blocked by Netflix.

With a private or dedicated VPN server when the authorities ask, "has this person been on x website" the ISP's answer is going to be "don't know".

Your ISP will say "don't know". The ISP being used by the server will see the traffice to those websites originating from that server.

Law enforcement pertinent to that ISP's country says, "Who owns this server?" If it's just one person (you), then you're royally boned. Only now you're wanted by law enforcement in the country hosing the server instead of your own.

Don't see how that helps.
 
Your ISP will say "don't know". The ISP being used by the server will see the traffice to those websites originating from that server.

Law enforcement pertinent to that ISP's country says, "Who owns this server?" If it's just one person (you), then you're royally boned. Only now you're wanted by law enforcement in the country hosing the server instead of your own.

Don't see how that helps.

A lot of what is illegal in the UK is not illegal in other countries. If you are doing something majorly and universally illegal that would attract the attention of the law enforcement agencies in the country your server is in then obviously it is not a solution that would be appropriate.

However if you are looking to be anonymous to the operators of the websites you visit, bypass ISP blocks, access foreign Netflix content and maintain privacy from Theresa May then it's a good solution.
 
Last edited:
Back
Top Bottom