this post was submitted on 03 Apr 2026
323 points (99.4% liked)

Technology

83502 readers
2080 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 

...because VPNs obscure a user’s true location, and because intelligence agencies presume that communications of unknown origin are foreign, Americans may be inadvertently waiving the privacy protections they’re entitled to under the law...

...VPNs might protect you against garden-variety criminals, but the intentional commingling of origin/destination points by VPNs could turn purely domestic communications into “foreign” communications the NSA can legally intercept (and the FBI, somewhat less-legally can dip into at will)...

Certainly the NSA isn’t concerned about “incidental collection.” It’s never been too concerned about its consistent “incidental” collection of US persons’ communications and data in the past and this isn’t going to budge the needle, especially since it means the NSA would have to do more work to filter out domestic communications and the FBI would be less than thrilled with any efforts made to deny it access to communications it doesn’t have the legal right to obtain on its own.

Since the government won’t do this, it’s up to the general public, starting with everyone sharing the contents of this letter with others. VPNs can still offer considerable security benefits. But everyone needs to know that domestic surveillance is one of the possible side effects of utilizing this tech.

you are viewing a single comment's thread
view the rest of the comments
[–] rossman@lemmy.zip 4 points 3 days ago (6 children)

Is it safe enough to use vpns based out of the US? I'm using nord which is non us.

[–] obvs@lemmy.world 35 points 3 days ago* (last edited 3 days ago) (3 children)

Nord is owned by Tesonet, a data mining company which also owns SurfShark.

And Private Internet Access and ExpressVPN are owned by Kape, an Israeli firm.

ProtonVPN is owned by Proton, in Switzerland.

[–] 9point6@lemmy.world 27 points 3 days ago (1 children)

Mullvad is based in Sweden and is the main interest of its seemingly decent, also Swedish, parent company

[–] CmdrShepard49@sh.itjust.works 16 points 3 days ago (2 children)

Fan of Mullvad but just be aware its not what you want if you're using a VPN for torrenting. They had to remove their port forwarding feature due to some bad actors ruining it for the rest of us.

[–] leoj@piefed.zip 7 points 2 days ago (3 children)

What happens if you are torrenting via Mullvad?

[–] Pika@sh.itjust.works 8 points 2 days ago

they don't allow port forwarding which nerfs the effectiveness of seeding, seeding is still possible, just not as effective.

[–] CmdrShepard49@sh.itjust.works 5 points 2 days ago (1 children)

You'll only be able to connect to certain peers that do have port forwarding setup.

[–] BlackLaZoR@lemmy.world 2 points 2 days ago (1 children)

Only if you disable uTP protocol. Or if you have an ancient client that doesn't support it

[–] leoj@piefed.zip 1 points 2 days ago

Shit I rarely make it above 1:1 even if I seed 24/7 for a while, I wonder if I need to work on my settings.

[–] DisgruntledGorillaGang@reddthat.com 0 points 2 days ago (1 children)

I torrent on Mullvad, it works but its often slow and I don't connect to peers that say are available.

[–] leoj@piefed.zip 1 points 1 day ago

I run into that problem too on CyberGhost, I wonder if my settings are not fully optimized as I tried to go for security over openeness due to my limited knowledge... Sometimes a torrent will have up to 10 seeders but will still stall out / fail, I always thought that was due to those seeders having limited bandwidth and being queued up for hundreds of other downloads before they get to mine, but now I wonder if its my settings... Either way I would rather optimize for security, but I wish I could get some rare stuff sometimes that has few seeders.

[–] SeductiveTortoise@piefed.social 1 points 2 days ago (1 children)

If a friend was interested in that, what should I tell them to use instead? Asking for a friend, obviously.

[–] CmdrShepard49@sh.itjust.works 6 points 2 days ago (1 children)

I switched to AirVPN when Mullvad made the change. I think Proton, PIA, and Windscribe have it too.

Thanks. Sounds good

[–] leoj@piefed.zip 5 points 2 days ago

CyberGhost I believe is also owned by Kape or a subsidiary.

[–] rossman@lemmy.zip 4 points 3 days ago

Thanks for the extra digging, no true privacy but at least there's some transparency with the vpns.

[–] grue@lemmy.world 10 points 2 days ago* (last edited 2 days ago) (2 children)

Those are the ones that would cause them to surveil you.

The issue isn't necessarily "the government will target you for using a VPN;" the issue is "if your IP makes you look like you're outside the US because that's where your traffic exits the VPN, the laws against domestic spying won't protect you properly because you'll look like a foreigner."

Frankly, the headline is heavily spinning it to be anti-VPN fearmongering.

[–] wonderingwanderer@sopuli.xyz 1 points 2 days ago (1 children)

Privacy companies based outside the US can still have VPN servers within the US. That traffic would still look domestic. The company being owned and headquartered outside the US just gives them a bit more protection against the rogue US government.

Some VPNs also allow multi-hop, so that you can connect to one VPN server via another. That could make it harder for the spooks to see that your traffic is leaving the US. Of course it also means that they might suspect any traffic coming out of a VPN server even based in the US, which is basically the point of this article.

And some VPNs allow you to enable a feature that protects against AI-driven data traffic analysis. So that someone who's really committed can't just monitor the size and frequency of your outgoing encrypted packets, then find matching patterns in packets leaving the server you're connected to, tracing it to the destination. Instead, the VPN adds noise and sends uniform packets so that AI can't trace it from source to destination.

I don't know if Nord offers these features, cause I don't use Nord. But I've heard some issues about them, which other user's have already mentioned and offered alternatives for, so I'll leave it at that

[–] grue@lemmy.world 1 points 2 days ago (1 children)

Yeah, sorry, I wasn't as precise as I could've been. I was really just trying to convey the motivations (i.e. that it was due to being mistaken for foreign as opposed to being targeted for using a VPN), not go into the details of exactly which aspect of the VPN (the entrance IP geolocation, the exit IP geolocation, or the company HQ location) would actually trigger the "foreign-ness."

[–] wonderingwanderer@sopuli.xyz 1 points 2 days ago

I mean, even a US-based VPN company could look foreign if they have servers outside the US, or even if they just allow multi-hop to third-party servers to/from outside the US.

Except then they're even more vulnerable not only to subpoenas but also extrajudicial and unconstitutional raids, as some journalists have discovered, especially in deeply red states but not always...

[–] rossman@lemmy.zip 3 points 2 days ago

Yeah I reacted way too quickly. Then I realized half of X bot traffic spoofs everywhere. They're intentionally doing a shakeup of everything and this one got under my skin cause I'm a daily user.

But before this was that outside US router ban that was pretty real. The DJI ban. So these types of news cascade and its worrisome.

[–] Brkdncr@lemmy.world 7 points 3 days ago

No. They will see that you’re using a vpn.

They might decide to record your traffic and save it until it can be decrypted.

[–] XLE@piefed.social 3 points 3 days ago (1 children)

In theory, I think all VPN usage is grounds to get you put on a list, but Nord is considered a relatively "normie" company by privacy aficionados. Everybody and their mother has seen an ad for it by this point. (The privacy aficionados will probably tell you it's not good enough, but that's a can of worms I won't get into right now.)

[–] rossman@lemmy.zip 0 points 3 days ago (1 children)

Makes sense I should probably reframe it as is nord not going to sell their users out without a fight.

Only true privacy is like the tails stuff and some complicated routing stuff all the self hosting guys here probably know about.

[–] XLE@piefed.social 8 points 3 days ago

AFAIK the one company that has been battle-tested is Mullvad, everything else requires (more) crossing your fingers.

Nord has subpar standards when it comes to logging now, and if that's in line with recent Proton behavior, you might that interpret that as a potential willingness to cave to the US with minimal pushback

[–] artyom@piefed.social 1 points 2 days ago

Depends what you mean by "safe enough". Every country on the planet can subpoena your VPN for traffic data. That's why that data needs to be encrypted, regardless of what company.

[–] Pika@sh.itjust.works 2 points 2 days ago (1 children)

Is it safe enough to use vpns based out of the US?

yes, just be aware that the gov could require the company to log you without letting you know, even if they have a no log setup. For the everyday person this is a non-issue, but if you are doing shadey stuff or have ties that may make someone super interested in your activities, you may wanna choose elsewhere.

[–] rossman@lemmy.zip 7 points 2 days ago (2 children)

The everyday person has political views that can be categorized as extremist. Freedom is more costly.

The everyday person has political views that are classified as extremist by the actual extremists as a way of deflection.

[–] Pika@sh.itjust.works 1 points 2 days ago

Oh, I fully understand that. But the everyday person isn't going to affect the government to the extent where they want to not only issue a court order ordering a company to do this, but also issue a gag order to prevent the company from saying anything.

Political leaders, possibly. Terrorist organizers, definitely. But your typical protest, or right versus left debate, that's not going to be enough for them to bother, let alone a court order forcing it.