Using a VPN

Starting a new thread, since this is likely to get very big very fast.

Continuing the discussion from Do You Use It? VPNs:

A VPN (virtual private network) is a system for connecting two computers over a large network (like the Internet) in a way that makes them appear to be sharing a single local network together.

You may already have experience with the concept. For instance, if you use (or once used) a broadband Internet service that requires you to connect with PPPoE, then you’ve been doing this all the time. In that situation, your router uses the PPP protocol to connect to some server in the service provider’s network. It then creates a virtual network interface corresponding to that PPP connection. All your Internet traffic is transmitted to that remote server via the PPP connection. Your service provider’s PPP server then forwards the traffic on to its final Internet destination.


A VPN is a similar concept. Let’s say you want to connect to your home network when you’re traveling and you don’t want to open it up to the Internet (which is normally going to be a very bad thing to do). You instead run a VPN server application on one of your computers and expose that server app (but nothing else) to the Internet.

Then when you’re traveling, you run a VPN client application on your (laptop?) computer. It connects to the server running on your home computer and creates a virtual network interface representing that connection. Now, your computer can access your home network using that virtual interface. Depending on how you have it configured, you may be able to access anything on your home network (file shares, printers, smart appliances, etc.).

Typically, the software will generate encryption keys as a part of establishing a connection, and all traffic sent over that VPN connection will be encrypted. This will help guard against third parties spying on and possibly tampering with your communication.

Businesses often set up something like this so employees can connect to the corporate network when out of the office.


The Internet privacy type of VPN is something very similar, but is designed to (try to) hide your Internet activity from prying eyes.

You still install a VPN client application on your computer. But instead of connecting to a server on your home network, it connects to a server on the VPN service provider’s network. It then changes your computer’s network configuration so all your network traffic is transmitted to the VPN provider’s server (via that connection). The VPN server then forwards your traffic (possibly modifying it for privacy reasons) to its final destination on the Internet.

The idea behind this is that if someone is spying on your network communication, all they will see is a lot of traffic to/from the VPN provider’s network. They won’t know what you’re really accessing, because all the data is encrypted.

Thanks so much.

This is exactly the kind of basic information everyone else takes for granted that I did NOT know.

TP

| David C. Shamino
May 20 |

  • | - |

Starting a new thread, since this is likely to get very big very fast.

Continuing the discussion from Do You Use It? VPNs:

Do You Use It? VPNs

Can anyone help me find any articles explaining what to use a VPN for, how to configure it after installing it, and how to verify it works? Will it create a connection to a home machine with sharing turned on over the internet? I’ve often wanted to do that.

A VPN (virtual private network is a system for connecting two computers over a large network (like the Internet) in a way that makes them appear to be sharing a single local network together.

You may already have experience with the concept. For instance, if you use (or once used) a broadband Internet service that requires you to connect with PPPoE, then you’ve been doing this all the time. In that situation, your router uses the PPP protocol to connect to some server in the service provider’s network. It then creates a virtual network interface corresponding to that PPP connection. All your Internet traffic is transmitted to that remote server via the PPP connection. Your service provider’s PPP server then forwards the traffic on to its final Internet destination.

1 Like

@kevin7 wrote about VPNs for TidBITS a long time ago. I’m sure plenty has changed, but the basics may still be useful.

1 Like

I think you have omitted a third use of VPN, which is to pretend that you’re in a particular country when in fact you’re in a different country. I use this feature, for example, to make it easier to view British versions of news web sites (BBC, Daily Telegraph etc) when I’m out of the UK.

I thought this post was very interesting – apps integrating in-app browsers (iOS and Android) apparently can accidentally (or intentionally) disable https validation in the browsers. The author describes it as devs making ‘mistakes’ but of course it can also be deliberate.

I recommend using a VPN for your phone. Not because the general user is at any risk from WiFi Machine-In-The-Middle hijacking attacks, but because the general user is at a fairly high risk of an app developer compromising their security and privacy to the extent that they are operating at a comparable level of security as could be expected in 1994, the year HTTPS was introduced.

Interesting, but I question the actual threat.

Yes, an in-app browser may have reduced security. This doesn’t surprise me, given that these are generally used for presenting ads and most ads these days are pretty obvious scams.

But how many times have you proceeded to visit other sites from that in-app browser? Even once? If you’re playing a video game or runnng some other app and an in-app browser screen pops up, will you completely forget the app and assume you’re in Safari (or whatever your favorite browser is) and go log on to something else? Or will you immediately close it in order to get back to your game and say a few choice four letter words about the developer wasting your time?

Once in a browser window, linking inside and outside a site is trivial. I’ve seen it, and done it. And some apps don’t permit you to open links in an outside browser. (Many social media apps only let you use a tracker-encoded link to copy, which makes me give the free iOS Clean Links app a workout.) So yes, it is a security risk, and one more reason to use a VPN.