• About Us
  • Who Are We
  • Work With Us
Thursday, March 23, 2023
No Result
View All Result
NEWSLETTER
The Globe Post
39 °f
New York
44 ° Fri
46 ° Sat
40 ° Sun
41 ° Mon
No Result
View All Result
The Globe Post
No Result
View All Result
Home Opinion

VPNs are Powerful but Risky. Get an App You Can Trust and Forget the Free Ones

Dorothy Denning by Dorothy Denning
12/04/18
in Opinion
A men looking at his computer screen saying 'voyeurs are watching you'

VPNs are powerful tools. Photo: Mark Ralston, AFP

Share on FacebookShare on Twitter

Many organizations use Virtual Private Networks (VPNs) to connect their remote users and facilities to their internal networks. The VPN encrypts the traffic so that spies can’t read it as it traverses the Internet. At the Naval Postgraduate School, where I work, students and faculty can install VPN software on their personal devices that let them access files and services on the school’s internal network.

In addition to their role in network security, VPNs are powerful tools for individual privacy and freedom on the Internet, my focus here. They let you visit sites anonymously, as the sites see only the source address of your VPN provider. To an outside observer, such as a government monitoring the Internet, the only site you access is that of your provider.

VPNs also let you skirt around blockades installed by countries that censor what their users can access. For this reason, VPNs are banned or regulated in several countries that restrict freedom of speech. China, for example, has banned VPNs that let individuals access international sites blocked by China’s Great Firewall. Only government-approved VPNs can be used in Iran.

VPNs and Users’ Data

Unfortunately, these VPNs also pose a huge risk. A VPN provider could track your Internet activity and then release, sell or misuse that data. It can log which sites you visit and record the contents of communications that are not end-to-end encrypted. It is likely that government-approved VPNs in countries such as Iran log user data and turn it over to their governments when asked.

Even if a VPN provider has a strong privacy policy, the government of the country with jurisdiction over the provider can demand access to your data. While the provider could attempt to thwart this by not keeping long-term records, governments can require that providers retain user data for a specified period. Further, even if there are no past logs, a government can demand that your future accesses be logged and given to the government.

A malicious VPN provider could also send you to a fake site posing as the one you thought you were visiting. The fraudulent site might then acquire your login credentials and other sensitive data, or deliver malicious code to your computer or phone.

Harvesting Information

The VPN software running on your device could also contain malicious code. One study found that 38 percent of VPN apps for Android devices were infected with some kind of malware or spyware. This malicious code might be used to blast you with unwanted ads. Or, it might harvest passwords, credit card data, and other sensitive information that can be sold on black markets. It might track all your activity, not just VPN usage, and exploit the data for profit.

A men surfing the internet on his laptop
It is important to select a VPN provider that is trustworthy. Photo: AFP

The VPN app provider might not even intend to put malicious code in its app. In 2015, FireEye found over 4,000 apps in Apple’s App Store with malware. The app developers had unwittingly used a rogue version of Apple’s Xcode development kit that had been uploaded to a server in China used by Chinese app developers. The kit contained malware, which was transferred to the apps during development.

Because of these risks, it is important to select a VPN provider that is trustworthy. As a general rule, free apps are likely to be the riskiest, as the providers might seek to profit by selling or otherwise exploiting data they acquire by tracking their users. The security research firm Restore Privacy found that 75 percent of the 283 free VPN services they analyzed contained tracking possibilities.

Another study, by Metric Labs’ Top10VPN, examined 30 of the most popular free VPN apps in Apples App Store and Google Play. They found that 86 percent of the VPN providers had unacceptable privacy policies. Some had no policy at all, while others had insufficient data regarding tracking and sharing user data.

Although it was difficult to determine where most of the providers were located, the study found that 59 percent of them were either based in or backed by China. Some even admitted to sharing user data with China! And 83 percent of the providers failed to respond to customer support requests.

Choose Wisely

VPNs are worthwhile if you need to browse the Internet anonymously or circumvent censors – but only if you can find one that can be trusted to protect your privacy and keep you safe. Using a free app is dangerous and not advised.

The Electronic Frontier Foundation (EEF) offers several factors to consider when selecting a VPN provider, including whether it has a history of being trustworthy and an explicit privacy policy to not log user traffic. The EFF also provides links to two sources that might be useful.

The first, That One Privacy Site, provides guidance for selecting a VPN provider as well as a comparison of 185 VPNs regarding privacy, technical, and business factors. The second, Torrent Freak, offers a list of questions to ask a potential VPN provider. It then gives the responses they received to these questions from various providers.

I cannot attest to the quality of the data offered by either of these, but they seem like a good place to start.

Disclaimer: The views and opinions expressed here are those of the author and do not necessarily reflect the editorial position of The Globe Post.
Share3Tweet
Dorothy Denning

Dorothy Denning

Emeritus Distinguished Professor of Defense Analysis at the Naval Postgraduate School. Her teaching and research have focused on cybersecurity and cyber conflict

Related Posts

A woman checks her phone as she shelters under an umbrella in the rain on Oxford Street in London on June 18, 2020, as some non-essential retailers reopen from their coronavirus shutdown.
Opinion

Tech’s Dominant Power Undermines Our Human Right to Privacy

by Michael Kleinman
July 28, 2020
A man gets an error message while attempting to access the internet on his phone at an office in Iran's capital Tehran, November 17.
Opinion

Iran’s Insoluble Paradox of Cutting Off the Internet

by Hamid Enayat
January 14, 2020
a Rohingya refugee camp in Bangladesh
Featured

Bangladesh Cuts Mobile Internet Access in Rohingya Camps

by Staff Writer
September 10, 2019
Indonesia's President Joko "Jikowi" Widodo
Featured

Indonesia Blocks Internet in Papua Amid Major Unrest, Rioting

by Staff Writer
August 22, 2019
People in front of a screen displaying Microsoft
Opinion

Microsoft and Privacy Policies: Never-Ending Tale?

by Osama Tahir
August 19, 2019
Desktop showing a world wide web internet page
Opinion

The Rise of Internet Sovereignty and the End of the World Wide Web?

by Samuel Woodhams
April 23, 2019
Next Post
Venezuelans carrying groceries cross a bridge from Colombia back to Venezuela

Time is Now: Venezuela's Migrant Crisis Needs Drastic Response

US Capitol building

US Republicans Vote to Curb Power of Newly-Elected Democrat Governor

Recommended

Transgender Army veteran Tanya Walker speaks to protesters in Times Square near a military recruitment centre

Tennessee Is A Drag on the First Amendment

March 21, 2023
participants of an artificial intelligence conference

How AI Could Upend the World Even More Than Electricity or the Internet

March 19, 2023
Chinese President Xi Jinping

China’s Path to Economic Dominance

March 15, 2023
Heavily armed police inspect the area near a Jehovah's Witness church where several people have been killed in a shooting in Hamburg, northern Germany

Eight Dead in Shooting at Jehovah’s Witness Hall in Germany

March 10, 2023
Myanmar Rohingya refugees look on in a refugee camp in Teknaf, in Bangladesh's Cox's Bazar, on November 26, 2016

US Announces $26M in New Aid for Rohingya

March 8, 2023
A flooded road in Batu Berendam in Malaysia's southern coastal state of Malacca

At Least Four Dead, Tens of Thousands Evacuated in Malaysia Floods

March 6, 2023

Opinion

Transgender Army veteran Tanya Walker speaks to protesters in Times Square near a military recruitment centre

Tennessee Is A Drag on the First Amendment

March 21, 2023
Chinese President Xi Jinping

China’s Path to Economic Dominance

March 15, 2023
An earthquake survivor reacts as rescuers look for victims and other survivors in Hatay, a Turkish province where hundreds of buildings were destroyed by the earthquake

Heed the Call of Our Broken World

March 1, 2023
Top view of the US House of Representatives

‘Cringy Awards:’ Who Is the Most Embarrassing US House Representative?

February 13, 2023
Protesters rally against the fatal police assault of Tyre Nichols, outside of the Coleman A. Young Municipal Center in Detroit, Michigan, on January 27, 2023

How Do Violent ‘Monsters’ Take Root?

February 3, 2023
George Santos from the 3rd Congressional district of New York

George Santos for Speaker!

January 16, 2023
Facebook Twitter

Newsletter

Do you like our reporting?
SUBSCRIBE

About Us

The Globe Post

The Globe Post is part of Globe Post Media, a U.S. digital news organization that is publishing the world's best targeted news sites.

submit oped

© 2018 The Globe Post

No Result
View All Result
  • National
  • World
  • Business
  • Interviews
  • Lifestyle
  • Democracy at Risk
    • Media Freedom
  • Opinion
    • Editorials
    • Columns
    • Book Reviews
    • Stage
  • Submit Op-ed

© 2018 The Globe Post