VPN
The latest news and reviews of VPNs.
Latest
Here's how the NSA spied on Cisco firewalls for years
Edward Snowden leaks revealed that the NSA had the ability to spy on Cisco firewall traffic for years, but just how did the agency do it? We now have a clearer idea. An analysis of data from the Equation Group hack shows that the NSA used a specialized tool, BenignCertain, that uses an exploit in Cisco's Internet Key Exchange implementation to extract encryption keys and read otherwise secure virtual private network data. Cisco has confirmed that the attack can compromise multiple versions of its old PIX firewalls, which were last supported in 2009.
Jon Fingas08.22.2016
Opera's free VPN for iOS offers more control over your browsing (updated)
Opera's fondness for virtual private networks isn't limited to the desktop. The browser maker is releasing a free VPN app for iOS that should give you more control over how you surf the internet. It's helpful for usual VPN tasks like dodging corporate site blocks and regional content restrictions (shh, don't tell Netflix), but Opera sees it as particularly handy for the privacy-conscious -- it gets rid of advertisers' tracking cookies and makes you that much more anonymous. You can only pick from one of five simulated locations for the VPN (Germany, the Netherlands, Singapore, the UK and the US), but hey, it's the first free VPN app for iOS from a well-known tech company. Right now, just having that option is a big deal. Update 5/11: SurfEasy, which Opera acquired last year, says that the VPN app will "likely" include ads (albeit ones that can't identify you) in the future. That's the cost of going free, apparently. If you like the technology but don't want sales pitches, SurfEasy's paid VPN service is sticking around.
Jon Fingas05.09.2016
Opera is the first big web browser with a built-in VPN
If you've wanted to use a virtual private network to improve your web privacy or (let's be honest) dodge content restrictions, you've usually had to either install a third-party client or use a relatively niche browser with the feature built-in. As of today, though, you have a more mainstream option: Opera has released a developer version of its desktop web browser with native VPN support. You only have to flick a virtual switch to get a 256-bit encrypted connection that hides your connection details and prevents sites or governments from blocking content they don't want you to see.
Jon Fingas04.21.2016
Netflix steps up proxy blocking to celebrate Oscars weekend
What else gets you in the inclusionary spirit of the Oscars like your favorite streaming service blocking you from accessing it? That's the reality many woke to this weekend when Netflix stepped up its efforts to block those using VPNs and other region unlocks from viewing shows and movies.
Aaron Souppouris02.29.2016
PayPal shoots self in foot while 'white knighting' for Netflix
With the recent rollout of Netflix Everywhere, the company has been on a tear trying to track down and lock out users who rely on VPNs to bypass its regional restrictions and access the US programming list -- or any other country's local selection of shows. Doing so hasn't been as easy as Netflix initially anticipated so it called in PayPal for backup.
Andrew Tarantola02.10.2016
Congress to investigate US involvement in Juniper's backdoor
Congress announced plans on Friday to investigate the backdoor recently found in Juniper Networks software and whether it was intentionally placed there for the National Security Agency's benefit. The investigation is being led by the House Committee on Oversight and Government Reform, which has already sent more than two dozen letters to various agencies asking for documentation regarding their use of Juniper's ScreenOS software. The company announced in December that ScreenOS had been compromised using a technique that has widely been attributed to the NSA.
Andrew Tarantola01.30.2016
Why the war on VPNs is one Netflix can't win
Netflix has started blocking users who try to bypass country-based content restrictions by using a VPN, beginning its enforcement last week with Australian subscribers. The problem is, by forcing customers to turn off their VPN, Netflix is putting them at risk of being maliciously hacked.
Violet Blue01.30.2016Netflix is blocking Australian users who access US content
Last week, Netflix said it would be bringing down the hammer on people who use VPNs (or other similar means) to access geo-restricted content. And, by the looks of it, the streaming titan isn't wasting any time. According to uFlix, a paid service that lets anyone in Australia change their IP address and DNS settings for entertainment purposes, Netflix has started blocking users from viewing its US-only videos. "You seem to be using an unblocker or proxy. Please turn off any of these services and try again," Netflix reportedly told some Australian customers.
Edgar Alvarez01.22.2016
Netflix is cracking down on proxy users
The practice of using VPNs to spoof one's location to the Netflix servers has long allowed those outside the US to watch American content that was not available locally. But in the wake of the launch of Netflix Everywhere, the company's new global service initiative, that practice is kaput. Netflix announced on Thursday that it is cracking down on users that use VPNs to get around the company's geographic content restrictions.
Andrew Tarantola01.15.2016
Juniper will release another patch for its backdoored firewalls
A couple of weeks after announcing it found "unauthorized code" in firewalls that could've let someone spy on secure VPN traffic, Juniper Networks has another update on the issue. Despite the release of a patch that it says makes the firewalls secure, Juniper will go a step further with another update that swaps out the flawed Dual_EC random number generator in the affected ScreenOS software for newer technology, which will arrive in the first half of 2016. It has also completed an investigation of the source code for that product, and its newer Junos OS-powered devices, and have not found any evidence of similar code.
Richard Lawler01.09.2016
CNN: FBI is investigating the Juniper Networks security hole
Yesterday's news of "unauthorized code" that could enable untraceable backdoor access to VPN traffic on certain Juniper Networks firewalls is now being investigated by the FBI. That news comes from CNN, which said that a US government official described the vulnerability as "stealing a master key to get into any government building." There's no word yet on which government agencies or private companies may have been using the specific ScreenOS-powered devices affected, but that's what the Department of Homeland Security is now trying to find out.
Richard Lawler12.19.2015
Juniper Networks finds backdoor code in its firewalls
One of the reasons corporate users and the privacy-minded rely on VPNs is to control access to their networks and (hopefully) not expose secrets over insecure connections. Today Juniper Networks revealed that some of its products may not have been living up to that standard, after discovering "unauthorized code" in the software that runs on its NetScreen firewalls during a code review. Pointed out by security researcher "The Grugq," the backdoor has been present since late 2012 and can only be fixed by upgrading to a new version of software just released today.
Richard Lawler12.18.2015
Your VPN may be worthless
You may have heard that VPN provider Perfect Privacy found a massive security hole in most services -- one can de-anonymizes users, thus rendering it useless.Two weeks have passed and most affected providers still haven't fixed the problem, called "Port Fail."Perfect Privacy told Engadget via email, "We have not tested this again after the fact so we can make no definite statement on the current number of affected VPN providers." This means that the majority of VPN users may as well not be using one, which is bad news for people whose safety and security rely on keeping their IP address private -- or those who just want to safely use public wi-fi.Perfect Privacy urges "anyone using a VPN service to ask their support desk whether this issue has been fixed."
Violet Blue12.12.2015
VPNs may not protect your information as well as you think
VPNs (virtual private networks) are a popular choice for sidestepping censorship and geographic restrictions on services like Netflix with more than 20 percent of Europeans using them. However, researchers at the Queen Mary, University of London recently examined 14 of the region's most popular VPN providers and found nearly all of them leaked information about their users to some degree. These leaks ranged from minor, ie what site you visited, to major infractions including the actual content of your communications.
Andrew Tarantola07.01.2015
Opera Max for Android starts saving data when you're on WiFi
Opera's data compression was originally meant to get the most out of thimble-sized cellular plans, but you'd probably agree that WiFi matters, too. After all, you've likely had that moment when you were struggling to visit websites on a lousy public hotspot. Mercifully, relief is in sight: an updated version of Opera Max for Android now squeezes app data even when you're on WiFi, helping you save bandwidth no matter what connection you're using. You can manage cellular and WiFi data separately, and there's an equally new blocking option if you need to put a particularly greedy app on ice for a while. Snag the upgrade today if you find that fast, unfettered internet access is sometimes hard to come by.
Jon Fingas05.26.2015
The latest version of Android could keep your data safe on public WiFi
Android 5.1 has been available to Nexus devices for a little while now, and it looks like one of its neatest features - sorry HD Voice and Device Protection - isn't quite ready for public consumption yet. Thanks to a little bit of sleuthing by Pocketables editor-in-chief John Freml, it looks like you'll eventually be able to log into a Google VPN when you connect to one of those potentially sketchy open WiFI networks out there.
Chris Velazco03.14.2015
Google fights rule that would let the US hack devices worldwide
The US is already snooping on computers around the world, but Google is worried that it might be sneaking in a rule change that would sanction more nosy behavior. The search firm has filed comments protesting an advisory committee proposal that would let the government get warrants for "remote access" to phones and PCs when their locations are hidden "through technological means." While the change is ostensibly targeted at American suspects masking their connections or running botnets, Google is worried that the proposal is worded such that it would allow law enforcement to hack into devices worldwide without any real political debate on the subject. After all, someone on a virtual private network could easily be in another country -- you might not know until you've broken in.
Jon Fingas02.19.2015
Netflix clamps down on attempts to dodge its regional restrictions (updated)
Netflix can only stream the videos that studios make available in a given country, which has led to a booming business in workarounds (such as proxies and virtual private networks) that let you see the company's catalogs in other nations. Heck, one New Zealand internet provider practically built a service around it. However, you might not get to count on that unofficial solution for much longer. VPN operators claim to TorrentFreak that Netflix recently started blocking some users who use these technological loopholes to watch videos that would normally be verboten. The effort isn't widespread and mostly appears to focus on connections with many simultaneous Netflix sign-ins (that is, they're obviously being used for circumvention), but it's a surprise to viewers who were used to having unfettered access.
Jon Fingas01.04.2015
Canadian internet providers now have to forward warnings to pirates
Watch out, Canada: you now have to deal with anti-piracy notices, much like your American friends. The country has just implemented a copyright law provision that requires internet providers to forward copyright violation warnings to customers caught downloading allegedly pirated material. The networks aren't obliged to punish you, so accusations shouldn't lead to disconnections or throttling. However, there's nothing dictating what those messages are allowed to say. There's a concern that the law lets copyright settlement firms run rampant, like they have in the US -- they may try to scare you into making an expensive payment rather than defending yourself in court. Also, virtual private network hosts will have to keep six months' worth of activity logs on hand, so your privacy is at greater risk even if you're squeaky clean. It'll be a while before Canucks know the full effect of this measure, but there is a chance that it'll create more problems than it solves. [Image credit: Samuel Chambaud/AFP/Getty Images]
Jon Fingas01.04.2015
Opera Max can now save Android mobile data in 16 more regions
Over the last few months, Opera's been slowly rolling out Max across the world to save mobile data -- apparently by up to 50 percent, including images and videos -- on Android devices, and its recent collaboration with MediaTek is no doubt a big boost to the service's street cred. But the Norwegian company isn't done yet. While Opera Max is already available to users based in most parts of the Americas, all European Union countries, Russia and others, today Opera added 16 more regions to the list. Just to name a few, these include Australia, Cambodia, Hong Kong, Japan, Myanmar, New Zealand, Singapore, South Korea and Taiwan. You can see Opera's full list after the break, and then head to Google's Play Store to grab the Android Lollipop-ready data compression app.
Richard Lai11.19.2014