cryptostorm private network

cryptostorm private network

v4.04 Windows client: https://cryptostorm.is/windows#widgetThis updates the bundled OpenVPN to the v2.7.7 that was announced ~3 hours ago. The recent entries at the top of https://community.openvpn.net/Security%20Announcements have details on the security fixes included in this update.

No they don’t log??

cryptostorm private network

Other than copy-paste in a terminal I wouldn’t have a clue what else I should do to get this random wireguard connection going. See, that’s where dumping an openvpn config file is dead easy. It might be “old”, it does what it says out of the box. Anyway, back to topic, I would love to know which other vpn providers who provide openvpn are worthy in forum members expert experience? Little discussed ones who seem to be independent are ovpn, xeovo, cryptostorm. Are there any others?

I want to update my post but the website isn’t letting me for some reason so I’ll just add info here: When I said that Proton doesn’t have anonymous registration and requries email or phone number to sign up, the first part is true about anonymous registrations, but I misspoke about it requring either phone OR email, when in reality I just verified the only way to verify is via email. Just as a recap: This is unlike Mullvad and Cryptostorm, which have random alphanumeric addresses as accounts, and AirVPN, which allows “fake” emails (and even says to use one right on the login page) as it’s just a username effectively and isn’t required to be an email. But Proton requires you use your own email or make one (and temp emails are not a reasonable solution to this due to privacy concerns of those services _alone_), but even if you make your own, that’s still an extra factor of privacy that you’re giving up and you now have to place _additional trust_ on 1) the email service you chose itself and 2) any possible data traces that link you between the email and VPN provider. This is a headache that’s completely unnecessary with anonymous registration/login. Some extra info in favor of this: On Proton’s onion site when you register, it requires Javascript to be enabled. So even if you wanted to offset some of the privacy loss of using an email by anonymizing yourself with Tor when that email is 1) created, 2) accessed, and 3) inputted into Proton (that’s 3 points of potential data leak ingress), you lose out on a large majority of that benefit since you have to have Javascript enabled. Compare this to Cryptostorm, whose onion website requires _no Javascript whatsoever_ , and that’s on top of having truly anonymous registration, and AirVPN, whose onion site does require Javascript, but allows you to have anonymous registration anyway, meaning there’s no need to use Tor to create a fake email because _you don’t need an email in the first place_ , unlike with Proton.

I disagree with most of this post but, I do think there is some value in evaluating if audits are worthy as a minimum criteria for VPNs given the seemingly majority views that audits do not guarantee anything and, that most people cannot understand the audits findings (outside of reading the summary) and there is no criteria to evaluate the auditor (which also vary in quality).

If you narrow VPNs down by those that have the “bare minimum” of generally accepted security and anonymity principles which I define to be one that has no logs, no analytics, anonymous payments (meaning they accept at least one of either XMR or cash), anonymous registration/logins (i.e. email is not required and/or generates a random alphanumeric “account”), and is (relatively) well known such as showing up on Techlore’s list [VPN Comparison Tool | Techlore VPN Toolkit ] you have (non-exhaustively of course, but using that as a baseline): Mullvad VPN, IVPN, Windscribe, hide\\.me, AirVPN, Cryptostorm, AzireVPN, and ShockVPN. Now, comparing to what Privacy Guides recommends (Mullvad, Proton, and IVPN), this immediately eliminates Proton VPN, which doesn’t have anonymous registrations (requires email or phone number to sign up). According to Privacy Guides Criteria, https://www.privacyguides.org/en/vpn/, “We prefer our recommended providers to collect _as little data as possible_. Not collecting personal information on registration…” This I agree with; however, it also says, “ _No personal information_ required to register: Only username, password, and _email at most_ ,” which seems almost oxymoronic to the former criteria. An email is definitely not necessary when there exists random account number generation like with Mullvad, Cryptostorm, etc. Though I think there’s a strong argument that this should be grounds for removal, I think at the _very least_ it should be disclosed on the page under Proton that anonymous registrations are not fully supported since it requires an email. Even if the email is new/a throwaway, it’s still an extra factor by which you provide identification of yourself and constitutes an extra channel through which information could leak, which is certainly not “as little data as possible.” It seems weird to me that there’s other potential VPNs out there that have even higher standards of security than those on the guide with regard to the aforementioned criteria that aren’t listed on the guide when ones with lower standards are allowed. I don’t think Proton necessarily would have to be removed, but to have it but not some of the other options seems counterintuitive to providing solutions that maximize anonymity. If we go beyond what one might consider “bare minimum” criteria and include criteria I think should also be necessary for a proper VPN service (or at least having _some_ option with these criteria), I reckon supporting port forwarding be included (for various applications, including torrenting–note there are non-piracy based legal use cases for this for people circumventing oppressive regimes as well). This criterion alone brings up down to Windscribe (though it is limited to 7 days at a time, so could exclude this or put a disclosure…), AirVPN, Cryptostorm, AzireVPN, and ShockVPN. If we constrict the options to the larger of these providers (just to simplify the options and use age/time existing without security issues as a useful benchmark), that leaves AirVPN and Cryptostorm. Also, as another criteria, out of those five VPNs, these ones both support both OpenVPN and Wireguard to ensure maximum compatibility in places where one might be blocked and since neither seems to be particularly more secure than the other (also considering how new WireGuard is, it’s had less time to be analyzed and had vulnerabilities found). Of the two remaining VPNs recommended by Privacy Guides, if we consider the necessity for port forwarding and supporting both protocols, this leaves none (since neither Mullvad nor IVPN support port forwarding and Mullvad just dropped OpenVPN support). I think having one or two options that support both of these is critical (and which also satisfy the anonymous registration criterion that we discussed about Proton… and further, Proton’s port forwarding support by PG’s own account is limited). The last criterion worth discussion I believe (beyond the “obvious”/technical ones like high standards of encryption/RSA and other criteria that most/all of these VPNs meet anyway) is auditing. Privacy Guides requires this as a criteria, and this was used to shoot down AirVPN before AirVPN (VPN Services) - #4 by anon28734771 . But, as has been discussed in various circles online, auditing doesn’t guarantee anything because 1.) there’s nothing stopping a VPN service from violating its own logging policies as soon as an audit is over or before one begins; 2.) there’s LOTS of VPNs that have audits that you won’t find on any privacy list like NordVPN, SurfShark, etc. (not that these are _bad_ , but they don’t scream privacy and anonymity rights, either), meaning audits don’t add any sort of credibility that isn’t added by having good-faith security and anonymity criteria in the first place; Everything else equal, is a VPN with 100% anonymous registrations and payments more or less likely to have logs than one that doesn’t? I think that offers more credibility that one wouldn’t log because what would be the point vs. if you’re “audited” to have no logs but aren’t as privacy/anonymity focused like a Nord (or even a Proton VPN) compared to those on the extreme end of the security/anonymity spectrum like Cryptostorm (which is advertised for the security/anonymity “paranoid”) or AirVPN. So, my question is, why not consider adding options like AirVPN and Cryptostorm (or others) to the list given some of the security/prviacy/anonymity limitations discussed? Even if those limitations in your opinion don’t warrant the removal of some, certainly including ones with comparable, if not higher security/privacy/anonymity standards is warranted, no? In addition, this allows a wider range of features to be supported as well (port forwarding, protocols, etc., as discussed). I will quickly add a “bonus” criterion that I think like anonymous payments and registrations not only ensures an even higher standard of privacy/security/anonymity but also speaks volumes to how “good faith” a VPN might be. That is, having an onion website. Think about it. If you are worried about privacy from someone watching your network, be it a government, ISP, or countless other security threats/bad actors that might be tracking you, and want to stay as private/anonymous as possible on the clearnet, this ensures from the _beginning_ , before even registration or payment is collected, that you are truly anonymous/private using the VPN (barring just using Tor obviously, but just talking about VPNs in general, more factors of privacy/anonymity –> better). This ensures the _entire loop_ from pre-acquisition until you’re up and running is more secure. VPNs that offer this to my knowledge (not exhaustive, but just for argument’s sake) are Cryptostorm (bonus points for no JavaScript required) and AirVPN (and Proton too, bonus points for that). I think having a set of “bonus” criteria such as this could further enhance the detail and breadth of quality options on on Privacy Guides. And this adds more credibility to the privacy and anonymity features of Cryptostorm and AirVPN.

Hello, I want to use InvisiblePro or Rethinkdns, I see there are many servers, which of them are trusted DnsCrypt or ODoH servers? Is Ibkstrum/cryptostorm/crypto-sx(frank Denis)/quad9 safe to use? Most priority would be anonimity, no logs, doesn’t need filtering, however if it have it’s cool. Btw want to do this to use alongside with firewall and Tor, so I have more control over Android (can’t use graphene etc), I seen also disabling dnscrypt leaks isp DNS, so I would need to use this anyway if I want orbot and firewall

I see it in kycnot.me , it look like very good but someone said it have serious safe problem (someone say it have honeypot) How about now situation about cryptostorm ?