[a / b / c / d / e / f / g / gif / h / hr / k / m / o / p / s / t / u / v / vg / vm / vmg / vr / vrpg / vst / w / wg] [i / ic] [r9k / s4s / vip] [cm / hm / lgbt / y] [3 / aco / adv / an / bant / biz / cgl / ck / co / diy / fa / fit / gd / hc / his / int / jp / lit / mlp / mu / n / news / out / po / pol / pw / qst / sci / soc / sp / tg / toy / trv / tv / vp / vt / wsg / wsr / x / xs] [Settings] [Search] [Mobile] [Home]
Board
Settings Mobile Home
/g/ - Technology

Name
Options
Comment
Verification
4chan Pass users can bypass this verification. [Learn More] [Login]
File
  • Please read the Rules and FAQ before posting.
  • You may highlight syntax and preserve whitespace by using [code] tags.

08/21/20New boards added: /vrpg/, /vmg/, /vst/ and /vm/
05/04/17New trial board added: /bant/ - International/Random
10/04/16New board for 4chan Pass users: /vip/ - Very Important Posts
[Hide] [Show All]


Janitor acceptance emails will be sent out over the coming weeks. Make sure to check your spam folder!


[Advertise on 4chan]


File: images(21).jpg (13 KB, 500x500)
13 KB JPG
Is proton vpn enough to safely use airpoir/hotel WiFi and login to my bank account, in case anything happens?
>>
No, the Swiss government will intercept your monies and use them to make more watches and cheese.
>>
>>109390591
you don't need a VPN because everything you type in is already protected by HTTPS
needing VPN on public wi-fi is just shilling and marketing by VPN companies
>>
>>109390591
I wish the lazy Swiss fucks would finally implement the "disconnect for x minutes option". How hard is a timer to code?
>>
>>109390591
Proton = bullshit
>>
>>109390974
Why?
>>
>>109390591
yes, but every solid site has https anyway.
>>
>>109390985
https://freedom.press/digisec/blog/proton-mail-is-not-for-anonymity/
>>
I use proton and pay for it. My ISP cuts my internet off if I download movies/music (fuck you SPectrum) and 9 bucks a month is cheaper than any streaming platform.
another plus is I live in a red state the Jews have restricted many porn sites in, so I can also use it for jacking off.
I chose proton vpn over the myriad of others because I already used their email.
>>
>>109390591
mullvad?
proton?
IVPN?
>>
File: 1785188498135.jpg (100 KB, 723x613)
100 KB JPG
>>
>>109390591
Just use mullvad, they were raided twice and each time they were asked to hand over customer data they had none to give because they actually store temp logs in ram (volatile)

>>109391129
Free VPNs profit by selling your data you retard
>>
>>109390927
Hi, as employed net admin: I actually see your "https secret with doh" traffic, at the corporate network at work. So, I assume airport will have similar level of network security.
>>
I manage a hotel and many years ago we had a guy who set up a duplicate network with the same network name (no pw required) from his room to try to steal info. Cops got him. He was black too.
>>
File: IMG_1254.jpg (517 KB, 2048x1559)
517 KB JPG
>>109390591
Yes, but you don't need a VPN for that.
>>109390995
Privacy, security and anonymity are different things.
Also, they never gave any information to the Feds from their VPN
>>109391004
>Jews have restricted many porn sites in
The Jews own the porn sites. Banning porn is good, actually.
>>109391149
>Free VPNs profit by selling your data you retard
The free Firefox VPN is just a trial for their paid Mozilla VPN, which uses Mullvads servers.
>>109391361
>He was black too.
I'm surprised he was intelligent enough to do all that
>>
>>109391480
he was weird black, not ghetto but 5'5 110 pounds, bulbhead maybe a somalian. had no accent though, talked like a white guy
>>
>>109390591
In theory https is safe enough. Small time criminals are unlikely to forge a https cert. Breaking https without you noticing is something governments do. But who knows how well the theory works in practice.

>>109391361
Same for this case, shouldn't be possible happen anymore these days. In theory.
>>
I remember a time when most websites, including Facebook, were still http. I was living in a building with public wifi and decided to see who's around me. Literally stalked some guys Facebook account (even logged in as him) and greeted him in the elevator by name. That really freaked him out at first. These were the times to shill VPN, not so long time ago, around 2011 I think. Crazy how you'd think in 2011 Facebook would use https, but no.
>>
>>109391480
>Yes, but you don't need a VPN for that.
What do you propose for security?
>>
>>109391004
>>109391480
>jews ban porn!
>no, jews own the porn business!
Which is it, you schizo retards? Banning porn is bad simply because it bans hentai too and forces even more westoid moralfaggotry on anime.
>>
>>109391853
You need to define security. Being on public wifi won't get your credentials stolen, because these days everything is https secure connection. Worst thing that could happen is they identify your device with your MAC address (VPN doesnt help here, but you can usually change your MAC in device settings or ask the system to rotate it) and then wifi admin can see websites you visit (just the domain names and IP addresses), but they won't know what you're looking at on those websites or what is it that you're posting there. VPN helps with the latter in that WiFi admins would no longer be able to see which websites you visit, but I don't know how valuable that really is to you, probably not very.
>>
>>109390591
I use free proton vpn to upload scanlations/unofficially translated mange. The free version is more than enough for me. Bonus is that I can get access to american and japanese servers as well, but it's kind of a hassle using their random server selection.
>>
>>109390591
yes, it's enough
>>
Most banking apps here work only when using cellular data.
>>
>>109391338
That's because your corporate network is almost certainly setup with hardware to do SSL/TLS inspection and certificate replacement via device managed certificate stores. You are braindead if you think a random hotel is taking the time to do the same. At best your hotel is doing any filtering or inspection purely based off DNS or the SNI
>>
>>109391480
>>109391361
nigger-obsessed faggots
>>
>>109391493
OBSESSED
>>
>>109391883
>make product
>make you addicted
>make guvment """""ban it""""" aka put it behind a paywall
>now you have to pay extra for your addiction
>>
>>109393406
>>109393401
ywnbaw
>>
>>109393923
kek nigger-obsessed faggot folding his girly arms and responding scornfully
>>
>>109391004
>and 9 bucks a month is cheaper than any streaming platform.
I got two years of Proton for like 75 bucks around Black Friday last year and its been great so far. I chose it over Mullvad partially because pricing is a bit better but also for access to p2p servers. Otherwise it and Mullvad are probably two of the better options depending on your use case.
>>
>>109391338
As anon says >>109392802, this requires the browser to trust the man-in-the-middle certificate. But browsers have been hardening against those kinds of attacks, especially if it has visited the website recently and has cached the previous SSL certificate.
If it's a corporate network, you probably have the tools to deploy your man-in-the-middle certificates as trusted to the devices. But non-organizational devices using modern web browsers aren't going to give you the benefit of the doubt.
>>
>>109391704
In the dorms people had file and print sharing enabled and I would install back orifice . I would just open notepad and type to them. God I was and am lonely.
>>
>>109391338
>>109392802
How does this work?
>>
>>109390591
For vpn only I would pick something else. The android app often loose connexion and blocks all traffic for no reason. Proton is nice for the whole package the aliases system and password manager are great, the rest is nice.
>>
>>109400384
Your browser goes to retrieve the SSL certificate for the website from the internet.
A device between you and the server intercepts your request for the SSL certificate.
That device asks the website server for the SSL certificate, but holds onto it.
Instead of the real certificate, that device passes your web browser a different SSL certificate, created by the device.
This certificate is not issued by a "trusted" certificate authority by your web browser, so in most cases the browser rejects it or throws a warning to the user that the connection has been intercepted.
But if your browser is configured (e.g. by the same IT department that installed the device, e.g. by a government agency that forces all web browsers to trust government-issued certificates) to consider the device a "trusted" certificate authority, then your browser will start an encrypted connection to the device instead of to the server for the website, and it communicates with the device as if it were talking to the server.
Since the device is the "endpoint" of your encrypted connection, it has access to the decrypted content.
The device then uses the intercepted SSL certificate, from the real server, to open an encrypted connection on your behalf, "replays" the communication it received from your device, getting the actual reply from the server.
Because the device is the "endpoint" of the encrypted connection to the server, it has access to the decrypted content.
The device "replays" the communication it received from the server over its encrypted connection to your browser, so your browser receives the response it "expected" from the server.
The device can do whatever it wants with your communications to the server (e.g. logging them) or the communications from the server to you (e.g. editing the content being served to you).

Let me emphasize again that web browser developers know about this security risk, and have provided mechanisms to make a best effort to protect against it.
>>
Mullvad is the only VPN you need.
>>
>>109390591
yeah why not you retard
>>
>>109400704
>But if your browser is configured (e.g. by the same IT department that installed the device, e.g. by a government agency that forces all web browsers to trust government-issued certificates) to consider the device a "trusted" certificate authority, then your browser will start an encrypted connection to the device instead of to the server for the website, and it communicates with the device as if it were talking to the server.
Ah, that is the central point. So HTTPS is still secure if you trust your OS install.



[Advertise on 4chan]

Delete Post: [File Only] Style:
[Disable Mobile View / Use Desktop Site]

[Enable Mobile View / Use Mobile Site]

All trademarks and copyrights on this page are owned by their respective parties. Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.