Free VPN apps on Google Play turned Android phones into proxies : android

[–] Green13@lemmy.zip 51 points 7 months ago (1 children)

If you're using a free proxy, I have some RAM for you to download

[–] limerod@reddthat.com 11 points 7 months ago (1 children)

How much? I need unlimited ram!

[–] avidamoeba@lemmy.ca 5 points 7 months ago (1 children)

Free

[–] Vigilante@lemmy.today 3 points 7 months ago

And your the ram now

[–] redcalcium@lemmy.institute 37 points 7 months ago

Free "VPN" app: look at me. You're the VPN now.

[+] Mikufan@ani.social 13 points 7 months ago* (last edited 4 months ago) (10 children)

[deleted]

[–] viking@infosec.pub 24 points 7 months ago (4 children)

Proton is unfortunately using wireguard and openvpn protocols, both of which can be blocked with relative ease.

I used them before moving to China, and within 3 months of arriving, the service was permanently interrupted, and their support acknowledged the outage, said they can't do anything about it, and ghosted me on the refund request since I had an annual subscription.

Mullvad is generally considered the industry leader btw., though for China there's hardly anyone but Astrill that actually works.

[–] smeg@feddit.uk 10 points 7 months ago (2 children)

Does this cover Proton's new(ish) Stealth protocol too? They made a big deal about it being unblockable, and I (in my relatively light usage) haven't had any problems with it.

[–] viking@infosec.pub 7 points 7 months ago

I'm not sure, haven't read about that yet. But I'm testing it as we speak, since they make it available in the free version as well, which is nice.

Will report back after some more testing (Lemmy isn't blocked [yet]).

[–] viking@infosec.pub 5 points 7 months ago

So far so good, I have to say. I've got a subscription for Astrill until November, but will keep the free proton running in parallel as a long term test and then consider switching. Thanks a lot!

[–] hui@fedi.gang.st 3 points 7 months ago (2 children)

@viking@infosec.pub @Mikufan@ani.social
In China there are lot of home brewed solutions like openclash, passwall, vmess...etc. Traditional commercial VPNs are too expensive or suck in China.

[–] viking@infosec.pub 3 points 7 months ago (1 children)

Yeah the problem I have with those is that they are mostly run by Chinese, be it on- or offshore, and they can be compromised or extorted. And any service that accepts payment via alipay is sketchy in my books.

[–] hui@fedi.gang.st 2 points 7 months ago (1 children)

It's opensource, You can get a vps and run your own, very easy and the speed is enough to watch 4k youtube.

[–] viking@infosec.pub 1 points 7 months ago (1 children)

I had a shadowsocks server on a vps, was dead after a few weeks. Hosted on AWS Hong Kong (before China took over). They blacklist IPs very quickly.

[–] hui@fedi.gang.st 1 points 7 months ago (1 children)

@viking@infosec.pub
SS on AWS is easy to be found and blocked, try Trojan, Hysteria v2, V2Ray..., I had one of V2Ray on GCP hong kong, and it lasted for a very long time.
Usually GCP and Azure has the best connection to CN.

[–] viking@infosec.pub 1 points 7 months ago

Interesting, thanks! My astrill subscription is still running for a couple months, but will test it as a fallback.

[–] redcalcium@lemmy.institute 1 points 7 months ago

Unfortunately vpn (and vps) providers are very wary about providing service that specifically target customers in china because when their service inevitable got ip-blocked by the gfw, those customers would immediately issuing chargeback, which is much more expensive to process than refund. The only providers that are still in the market for circumventing gfw now price their service accordingly (i.e. much more expensive than the usual vpn marketrate) to absorb this risk.

[–] Summzashi@lemmy.one 2 points 7 months ago (1 children)

You dont know that much about VPNs then

[–] possiblylinux127@lemmy.zip 1 points 7 months ago (2 children)

And how do you know Proton VPN isn't exactly the same?

[–] Ilandar@aussie.zone 1 points 7 months ago (1 children)

https://protonvpn.com/features/trustworthy

[–] possiblylinux127@lemmy.zip 0 points 7 months ago (1 children)

Ah, they say they are trustworthy so it is totally fine

[–] Ilandar@aussie.zone 2 points 7 months ago

No...? Do you not understand the meaning of "open source" and "independently audited by third parties"? Or maybe you just didn't actually click through to the link I shared (what a surprise).

load more comments (7 replies)

[–] PoliticallyIncorrect@lemm.ee 11 points 7 months ago* (last edited 7 months ago) (2 children)

The only 3 good free unlimited options out there are ProtonVPN, RiseupVPN and BrightVPN(only for windows), limited ones Windscribe and PrivadoVPN(10GB per month).

These are the only good free options anything else it's a scam(you are the product) or you have to pay.

Another option maybe could be self-hosting in Oracle Cloud but it will not be anonymous at all, secure maybe but definitely not anonymous.

[–] Synnr@sopuli.xyz 5 points 7 months ago (2 children)

ProtonVPN, RiseupVPN and BrightVPN(only for windows), limited ones Windscribe and PrivadoVPN

Where did you get this idea?

Mullvad, IVPN, Perfect Privacy, and a few others have had independent audits of their no-log behavior and in some cases, law enforcement audits. They sure as hell don't proxy your traffic. They all accept Monero and cash. They all have multihop.

Edit: I see you said free. Yeah, I wouldn't trust a free VPN, regardless. If you're not paying for the product, you are the product.

[–] PoliticallyIncorrect@lemm.ee 2 points 7 months ago

Yeah I'm talking about free options. 👍👍

[–] trolololol@lemmy.world 1 points 7 months ago

I agree,

However I got to a point that I'm skeptical even with paid, well established products. I don't need VPN but if I did I'd try something based on onion routing.

[–] michael_palmer@lemmy.sdf.org 1 points 7 months ago (1 children)

I just entered fake name and paid with crypto for my VPS.

[–] PoliticallyIncorrect@lemm.ee 0 points 7 months ago

Then you will be OK 👍👍

[+] parpol@programming.dev 2 points 7 months ago* (last edited 7 months ago) (2 children)

[deleted]

[–] avidamoeba@lemmy.ca 7 points 7 months ago (1 children)

Yeah, I don't know how strong this defense would be when they put you on trial for CSAM.

[–] pivot_root@lemmy.world 3 points 7 months ago* (last edited 7 months ago)

"Your honor, I didn't distribute distribute CSAM. That was somebody else." and "Yes, your honor, I did sign that internet service contract agreeing that I am responsible for all activity that originates from my network."

[–] redcalcium@lemmy.institute 4 points 7 months ago

Only if they're stating this upfront, in a giant text. Those apps hide this capability and are thus categorized as malware. Turning the victim's computer into a residential proxy has always been a staple in botnet operations.

Android

Rules

Quick Links