Virtual Private Network's

Virtual Private Network's

VPN's

• Some things you will want to know when complete:

• No logs

• Best protocol

• Block DNS Leaks

• How many devices does it support

• Price

• How much does it slow connection

• Do they have links near you? Not sure how import this is

• Now Internet Service Providers (ISPs) can sell your Web activity (everything you do online).

• VPNs are one of the best means of protection

• So if a VPN is recommended somewhere, do a little homework before you fork over your data (and your cash). Names that come up as trusted include Perfect Privacy, Freedome, TorGuard, Tunnelbear, Black VPN, and others.

On iOS devices, avoid using any public Internet access options (i.e. sitting in Starbucks or using free airport Wi-Fi) and doing things like banking and email. If you must use a public Wi-Fi hotspot, use a VPN (see Cloak as a paid option, or Onavo Protect as a free option), don't send personal or private information if you can avoid it, and never accept any software updates.

• Remember it is suggested not to use free VPNs as it costs a lot of money to establish a VPN Network and they need to get their money somehow and may well be selling your information.

• I am only going to cover VPNs for iOS Devices

VPN Protocols For the Whole story use this Link

https://www.bestvpnz.com/comparison-of-vpn-protocols-pptp-l2tp-ipsec-sstp-openvpn/

• When it comes to VPNs there are two broad types of Protocols

• 1: A Tunneling Protocol

• 2: An Encryption Protocol

• Most Apps include both type Protocols

• Some Apps have both but allow you to import a different encryption protocol. It looks like the OpenVPN App allows you to import a different encryption protocol

PPTPPPTP stands for the “Point-to-Point Tunneling Protocol”.

PPTP

Pros• Built-in support on most platforms• Easy to use and setup• FastCons• Insecure• Easy to block

PPTP

ConclusionYou really should not use PPTP unless you are not concerned about security and privacy and need a fast connection.

L2TP/IPsecLayer 2 Tunneling Protocol (L2TP)  is a tunneling protocol and offers no encryption. But when paired with Internet Protocol Security (IPsec) for encryption and authentication it creates a popular VPN protocol. Although developed mainly by commercial and governmental interests, the protocols are an open standard

L2TP/IPsecPros• Supported on many platforms• Easy to setupCons• Easy to block• Possibly compromised by the NSA• Inefficient

L2TP/IPSec ConclusionL2TP/IPsec is a fairly widely supported VPN protocol and despite the Snowden revelation, it is still generally considered secure. If security is your primary concern then you should look to another protocol. If you are located in a highly restrictive environment such as China, this protocol is easily blocked and you should choose another. This is a better choice than PPTP, and is almost as widely supported, but most users would be better served by a different standard.

SSTPSecure Socket Tunneling Protocol (SSTP) is a proprietary protocol that was designed by Microsoft as a replacement for the insecure PPTP protocol. It has been available on Microsoft operating systems since Windows Vista. As a proprietary protocol it is not subject to public inspection. Therefore it could contain back-doors and unpublished vulnerabilities

SSTP Pros• Hard to block, uses TCP port 443 (HTTPS)• Secure• Excellent Microsoft supportCons• Not as widely supported as other protocols• Poor or no support on non-Microsoft platforms

(no Apple support)• Susceptible to “TCP meltdown”• Proprietary protocol

SSTP suffers from the same performance limitations as any other IP-over-TCP tunnel. In general, performance will be acceptable only as long as there is sufficient excess bandwidth on the un-tunneled network link to guarantee that the tunneled TCP timers do not expire. If this becomes untrue, performance falls off dramatically. This is known as the "TCP meltdown problem"

SSTPConclusion

If you are using a Microsoft platform since Windows Vista and your VPN provider supports it, SSTP might be a good choice. It is well supported by Microsoft and as easy to setup as PPTP or L2TP/IPsec. It is also a secure protocol. Like all TCP over TCP protocols, it can be susceptible to “TCP Meltdown”. This would be a better choice than PPTP or L2TP/IPsec.

IKEv2 VPNThere is yet another VPN protocol that is confusingly named. I have often seen it called simply “IKEv2”, which I find very confusing as IKEv2 stands for “Internet Key Exchange version 2” and is part of IPsec and described in RFC 7296. The IKEv2 VPN has been built-in to Microsoft Windows 7 and later. I have seen the Microsoft version called “Agile VPN”, “Microsoft VPN Reconnect”, “Mobile VPN”, and simply “IKEv2”. It is one of the four supported VPN types built-in to Windows 7

IKEv2Pros• Fast• Great stability, maintains connections even when

switching networks• Very secure when using AES-CBC/SHA-256• Easy to setup• Supported on BlackberryCons• Support still rolling out on many platforms such as iOS• Server setup can be difficult• Limited VPN provider support

IKEv2 VPNConclusionIf you have a platform and a VPN provider that supports an IKEv2 VPN, it might very well be worth trying it out. If you have a Blackberry, it probably your only choice. This is a VPN protocol to keep your eyes on, and it may very well become the new standard in a few more years.

A Microsoft TechNet article describes it thusly;IKEv2 is a tunneling protocol that uses the IPsec Tunnel Mode protocol over UDP port 500. An IKEv2 VPN provides resilience to the VPN client when the client moves from one wireless hotspot to another or when it switches from a wireless to a wired connection. The use of IKEv2 and IPsec allows support for strong authentication and encryption methods.IKEv2 VPN supports the AES-CBC cipher and the SHA-256 digest and these should be used over the DES and MD5 algorithms.

OpenVPN

• OpenVPN is both an App and Protocol I am covering the Protocol right now

OpenVPNIn 2001, James Yonan released OpenVPN under the open source GPL license. Since then, OpenVPN has become one of the most widely used VPN protocols.

OpenVPNPros• Open Source software and protocol• OpenSSL libraries for encryption (can easily use other

libraries)• Very flexible• Supported on almost any platform• Generally fast (higher encryption levels can slow it down)• Very difficult to block• Can use UDP, avoiding “TCP meltdown”Cons• No native support, requires external software• Can be more difficult to setup• Can be insecure if not properly setup

OpenVPNConclusion

For most users OpenVPN is the protocol of choice. If setup correctly, it is fast, secure, and very reliable. It can be more complicated to setup, requiring the installation and configuration of client software, but many VPN providers have addressed this with custom client software. Of all the protocols, a competent VPN provider is a must.

Over the last several weeks I have researched & tested several VPNs, it really started a few years

ago

VPN Express

VPN Express• This is an early VPN for iOS that allowed a small

amount of free usage each month and did not slow my connection down much at all.

• After free usage you can buy lump amounts of usage and keep them until they run out. I still have 2.4gb after several years. You can use on several devices.

• It uses L2TP & IPSec

• They have several places around the World

Hide My Ass

Hide My Ass• This is the largest with the most locations around

the World

• It is expensive & only allows you to use it on one device

• It uses the L2TP/IPSec Protocol

• It keeps logs

SurfEasy

SurfEasy• I have used SurfEasy for about a year now & I like it

• It costs $30 per year for up to 5 iOS devices & unlimited usage

• It uses L2TP/IPSec Protocols

• It does not slow your connection very much at all

• It blocks Tracking Cookies & keeps score for you

SurfEasy

• One thing that happened early on with VPNs for iOS devices is some only worked on WiFi & not Cellular. SurfEasy & VPN Express work on both.

• SurfEasy does not block DNS Leaks???

• They may use Google for DNS but they do not say so on their WebSite

TunnelBear

TunnelBear • I saved what I believe to be the best for last

• You get 500mb each month to test. You can earn credit if you Tweet to TunnelBear

• You can have unlimited usage for 5 iOS devices for $30 per year.

• TunnelBear uses IKEv2 Protocol. They did test OpenVPN and I hope we will see that later.

TunnelBear

• TunnelBear has one of the very best help section I have seen anywhere

• http://help.tunnelbear.com

• TunnelBear has lots of servers

• Speed is right up there

Before TunnelBear

Also notice TunnelBear moved

me to NewYork City

With TunnelBear

TunnelBear • TunnelBear works on WiFi & Cellular

• It also blocks Tracking Cookies but does not keep score for you

• It also has Domain Name Server (DNS) Protection for more information click the Link below

• https://help.tunnelbear.com/customer/en/portal/articles/2420008-does-tunnelbear-protect-against-dns-leaks-

TunnelBear • Just released CIA documents say they can hack

IKEv2 Protocol

• Use anyway, make it expensive as possible or they may even be lying

• I just downloaded TunnelBear for Android & it slows internet connection by a large amount. It does use the OpenVPN Protocol & I am using Android 5.1.1 considered older

ProtonVPN.com

• ProtonMail.com has started Beta testing a VPN service and I for one am looking forward to test and using this Service as I really Love their end-to-end encrypted eMail Service.

• One of the creators of ProtonMail is now working for Apple.

ProtonVPN

• I just started testing ProtonVPN and will update this presentation soon

• I still have a few months left on my SurfEasy account and when that is up I will start using TunnelBear

• SurfEasy is an excellent service but does not have DNS Leak protection

• Why do you think VPN is more effective on your iPad than on your iPhone?

• System Signaling 7 (SS7) used on all Cellular service can very easily be hacked, knowing where you are, what you say, what you text (SMS). Not what goes over the Data Channel as I understand it.

• If anyone has hacked your cellphone or the person you are communicating with, they are sitting before any VPN, or encrypted services you may have.

• I believe you should use these services anyway to make it as difficult as possible for anyone wanting to gain access to your private life and you private right.

What can I do to protect myself from snooping via SS7?

• Given that the vulnerabilities and the possibilities of spying on users relies on systems outside of user control, there is very little you can do to protect yourself beyond not using the services.

• For text messages, avoiding SMS and instead using encrypted messaging services such as Apple’s iMessage, Facebook’s WhatsApp or the many others available will allow you to send and receive instant messages without having to go through the SMS network, protecting them from surveillance

• For calls, using a service that carries voice over data rather than through the voice call network will help prevent your calls from being snooped on. Messaging services including WhatsApp permit calls. Silent Circle’s end-to-end encrypted Phone service or the open-source Signal app also allow secure voice communications

• Your location could be being tracked at any stage when you have your mobile phone on. The only way to avoid it is to turn off your phone or turn off its connection to the mobile phone network and rely on Wi-Fi instead.

• I for a very long time used my cellphone without a cellular network or cellphone number. I used VoIP numbers over WiFi

• On my iPads I use VoIP numbers to setup Signal.

• Signal requires validation and you may have to have Signal call your VoIP number instead of texting

• You could even use a number from a different persons phone. Say a spouse.

• An interesting thing you can do is after setting up Signal using the VoIP is delete your VoIP number making it very close to impossible to track any Signal messages

• The down side is if someone else gets the same VoIP number and uses it for Signal you may loose that number

• The other downside is if for some reason you have to delete & reinstall Signal you will loose that number and have to start over with a new number.

• P.S. every once in a while I find my SureEasy VPN flashes off then back on again. Not sure why yet unless it is testing me to see if I have gone to sleep or not. This may only be on iOS 9 and not related to SurfEasy? Still working on.

• P.P.S. there is some debate as to how far VPNs can hide you. Some say your ISP can track you up to the VPN and others say up to the Website you visit but not what you look at after you go to that Website.

• This may be because of DNS Leaks.

• TunnelBear & ProtonVPN Block DNS Leaks

• The next two slides shows before using ProtonVPN through the App OpenVPN and after. This is preforming what is called a DNS Leak Test

• Using the website dnsleaktest.com

Brfore

After

• For an even more interesting look see. See this Link. This is the kind of information that all the sites you visit, as well as their advertisers and any embedded widget, can see and collect about you

• https://ipleak.net

• Test With Safari use https://ipleak.net

• Using ProtonVPN (not available to everyone yet)

• Using SurfEasy

• Using TunnelBear

• The Websites for testing are too long to use Screenshots

• ProtonVPN uses the best VPN Protocol: OpenVPN

• TunnelBear uses the next best Protocol: IKEv2

• The best VPN Service also protects against DNS Leaks

• TunnelBear & ProtonVPN protect against DNS Leaks

• ProtonVPN does not block Tracking Cookies???

• If you find other VPNs that provide DNS Leak protection please let me know. Thank You very much.

• http://macmost.com/what-is-a-vpn.html

• https://protonmail.com/blog/private-browsing-history/

• https://protonmail.com/blog/best-vpn-service/

• Remember things to look for?

• No logs

• Best protocol

• Block DNS Leaks

• How many devices does it support

• Price

• How much does it slow connection

• Do they have links near you? Not sure how import this is

• Some like using the TOR Browser and VPN together

• I just got the Red Onion Tor App

• End