Showing posts with label Privacy. Show all posts
Showing posts with label Privacy. Show all posts

Monday, November 26, 2012

Internet Anonymity: 5 VPN Providers That Are And Aren't Serious About Privacy

Not all VPN providers are the same. Among the differences that are the most common worried about by the customer, (besides cost and reliability,) are logging, and who the provider answers to when information requests are made. But often this information is difficult to distinguish when it is contained in the complicated legalese and documentation that is called the "Terms of Service."

Because of this, many are looking through the terms, and asking VPN providers a lot of questions, so here is a simplistic outline of how serious 5 highly popular takes the Anonymity issue. The most common questions to be addressed here are:

Are any logs kept that would enable a 3rd party to match time stamps and IP addresses a particular user, and if so, what information is actually logged? What jurisdictions does the provider answer to in the event a query for data is made, and what are the requirements in which they will release the information requested.

1) BTGuard

Maintains absolutely no logs of any kind. According to their Administration they would have to maintain at least 4TB of information daily to store the logs. The company is in a Canadian jurisdiction, but because they maintain no logs, no information can be shared, either with 3rd parties or governments.

2) Private Internet Access

They also keep no logs of any kind, and instead of using Static, or Dynamic IPs, they use shared IP addresses. This makes it impossible to connect any user to any IP address or time stamp. On their website they also encourage their customers to use anonymous payment forms, like bitcoin, and anonymous emails, to help maintain the anonymity. They are in the US jurisdiction, but have gateways in Canada, the UK, Switzerland, and the Netherlands. Their choice of the US jurisdiction was intentional though, as the US requires no data retention. Information is never shared with third parties, unless there is a warrant or court order. In these cases though, there are no logs to surrender.

3) Torrent Privacy

Maintains connection logs, but doesn't keep the IP addresses in them. They only keep these logs for 7 days, and maintain that it's still impossible to find out who has been using their service. Seychelles is their jurisdiction, so a special lawsuit is required to force them to relinquish the logs, though they do have servers in the Netherlands, US, and Sweden.

4) TorGuard

TorGuard maintains logs that are deleted on a daily basis., and say that they can't keep them any longer due to storage capacities that would be required. Since no IPs or timestamps are kept, determining who used the connection at any given time would be impossible. Based in Panama, they have servers in the Netherlands, Ukraine, Panama, and Romania. Information is never shared with any third parties, unless court orders compel them to do so. Even with this requirement satisfied, the lack of logs would comprise a lack of data to satisfy the request.

5) iPredator

They maintain that no IPs are stored, and that few issues have occurred, and that accidental divulgence has never happened. The main jurisdiction is in Sweden, but they intentionally keep the organizational data mixed, which makes it virtually impossible to legally gain access to any kind of data they do not want to divulge.

All of the providers listed above are high quality personal VPN services and seem to take their customers privacy and anonymity very seriously. If there are ever doubts as to the security of data that could possibly be shared with outside sources, the "Terms of Service" should be read slowly and carefully, then reread. Legalese is a language all unto itself, and if not taken in a bit at a time can serve to confuse more than clarify.

Top 5 Reasons to Check Website Security   Why Ignoring IDS Could Lead to Substantial Damage for Businesses   

Protect Your Privacy With Reputation Management

Online privacy has been a major issue lately with recent news of high-profile websites losing sensitive information to hackers. At the beginning of June, a Russian hacker allegedly stole more than 6.5 million encrypted passwords from professional networking site LinkedIn, and another 1.5 million passwords from online dating site eHarmony. This news undermines the point that even if individuals are taking proper steps to protect their privacy by only giving private details to sites with an "https" at the beginning of their address, there is no guarantee that these websites are taking sufficient steps to protect an individual's privacy. Therefore, individuals are advised to stay vigilant online and to continually monitor their online reputation to prevent sensitive details from making their way online.

How to Monitor

The first thing to do is to search for your name in Google. Most people do not look beyond the first page of Google search results but one should do exactly that when monitoring their own reputations. Even if a detail like your address, phone number, or a picture of you that was supposed to be private finds its way to the 5th page of search results, all it can take is one update to Google's search algorithm to bring it to the front page.

If an individual has social media accounts on sites like Facebook, Twitter, or LinkedIn, they can set their account up to send them e-mail updates whenever someone posts new content onto their page (Facebook), mentions them in a Tweet (Twitter), or sends a message (LinkedIn). Setting up e-mail updates will allow one to be made aware of all content that is tied back to him as soon as it is posted. This way they will have time to take down the content or un-tag themselves before Google has a chance to index it.

What to do if Information is Compromised

Often in spite of one's best efforts, private details become compromised and make their way across the web. If extreme details like credit card numbers make their way online, it is best to cancel the cards immediately. Yet when other details like phone numbers or e-mail addresses show up on the Internet, people are often more reluctant to take action thinking that there is nothing they can do. Reputable reputation management companies, however, are adept at suppressing or removing compromising information. They are able to draw upon the assistance of on-hand legal professionals to get sites to remove private details. While this is taking place, they use social media, SEO, and other techniques to push this information down the search results. Any individual wondering what private details have already been leaked online should contact a reputation management firm.

Top 5 Reasons to Check Website Security   Why Ignoring IDS Could Lead to Substantial Damage for Businesses   

Twitter Facebook Flickr RSS



Français Deutsch Italiano Português
Español 日本語 한국의 中国简体。