+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: OpSec and OSINT (https://hackforums.net/forumdisplay.php?fid=322)
+---- Thread: The Complete Guide To Choosing The Right VPN Provider (/showthread.php?tid=5401563)
The Complete Guide To Choosing The Right VPN Provider - Max P™ - Sep 10, 2016
Hello, I have recently been hearing a lot of people wondering which VPN is the best for keeping your information safe.
I have personally compiled this list of necessities for when you're picking out which VPN you will trust with all of your sensitive data.
![[Image: fRNYIQd.png]](https://i.imgur.com/fRNYIQd.png)
So, a big part in choosing the right VPN is first deciding what you are attempting to hide from? Or what you are trying to bypass?
For Example: If you are simply trying to bypass your school's network restrictions, using a popular option such as "HideMyAss" or "GhostVPN" is more than adequate.
On the other hand, if you are in need of a VPN for OpSec when hacking (or doing any BlackHat activities), you may want to carefully read my list below for options that are absolutely necessary when choosing the safest VPN. All of the information listed below should be given out by the VPN provider, if not, contact them. If they don't respond within 24 hours, the service is most likely not worth your time.
1. Offshore Host
It is absolutely ESSENTIAL that your host is offshore. What I mean by offshore, is the servers MUST be outside "the five eyes". The five eyes are Australia, Canada, New Zealand, the United Kingdom, and the United States. Staying out of the FVEY is absolutely essential when it comes to being COMPLETELY anonymous online.
2. No Logs
Now, this is also EXTREMELY important when it comes to maintaining your online security. VPN providers logging what you do is very risky in the event they were compromised and because THEY will have your information. Many of the VPN's here advertise that they have "No Logs". Now, before people start to hate on me for thrashing their service, let's be completely real, that is B.S.. Without logs they would be unable to limit your traffic usage, limit the number of simultaneous connections, prevent DDOS attacks. For all those to be possible, some level of logging is necessary.
3. Updated Encryption
Using modern encryption methods is not as common as some people might think. For my standards of a VPN, the encryption must be at LEAST: OpenVPN with 2048 bit or (4096 RSA, DHE-RSA-AES256, SHA, AES256-CBC-SHA). If you have questions about any of that, just PM me.
4. Anonymous Payments
If the VPN you are considering does not accept anonymous payments, (BTC, ETH, etc.) Then move on to another one. Paying with PayPal would be VERY unsafe as the VPN provider would have your info and resultingly could end up with the FBI.
5. Sign Up
If the Provider even asks for your first or last name, just forget about it. There is no reason that is necessary and no reason for you to give it to them.
6.Supports YOUR traffic
This is not a measure of safety, just common sense that the VPN you buy, should support what you want to do. Example: If you want to watch Netflix, it should allow Netflix.
7. Prevents DNS leaks from IPv6
This is surprisingly not very common and when a VPN provider offers IPv6 for some reason users think it means its advanced in some way... IPv6 is extremely vulnerable and should even be disabled on your computer. It allows people to sniff your traffic and leaks your DNS to intruders. AVOID it at ALL costs.
8. READ the T.O.S.
Most people, including myself, overlook the T.O.S. and just click the little agree button. However, when purchasing the VPN that could prevent jail time, I would recommend actually reading it to make sure there are no "catches" that could compromise your security.
9. Hardened Servers
Just make sure the VPN servers are protected from known AND unknown vulnerabilities.
10. Port Forwarding
This is only if you need it for your particular activities. Otherwise, not necessary although common offered.
11. Fake Reviews
Find out for yourself, from the owner, if the service is trustworthy. Don't trust Little Jimmy saying, "Vouch for OP!! Amazing product that is best for your security! Keep IBF OUT!"
I hope you enjoyed this guide, be sure to tell me if there is anything you want me to add and PM me if you have any questions about any of the above.
- Max P
I have personally compiled this list of necessities for when you're picking out which VPN you will trust with all of your sensitive data.
So, a big part in choosing the right VPN is first deciding what you are attempting to hide from? Or what you are trying to bypass?
For Example: If you are simply trying to bypass your school's network restrictions, using a popular option such as "HideMyAss" or "GhostVPN" is more than adequate.
On the other hand, if you are in need of a VPN for OpSec when hacking (or doing any BlackHat activities), you may want to carefully read my list below for options that are absolutely necessary when choosing the safest VPN. All of the information listed below should be given out by the VPN provider, if not, contact them. If they don't respond within 24 hours, the service is most likely not worth your time.
1. Offshore Host
It is absolutely ESSENTIAL that your host is offshore. What I mean by offshore, is the servers MUST be outside "the five eyes". The five eyes are Australia, Canada, New Zealand, the United Kingdom, and the United States. Staying out of the FVEY is absolutely essential when it comes to being COMPLETELY anonymous online.
2. No Logs
Now, this is also EXTREMELY important when it comes to maintaining your online security. VPN providers logging what you do is very risky in the event they were compromised and because THEY will have your information. Many of the VPN's here advertise that they have "No Logs". Now, before people start to hate on me for thrashing their service, let's be completely real, that is B.S.. Without logs they would be unable to limit your traffic usage, limit the number of simultaneous connections, prevent DDOS attacks. For all those to be possible, some level of logging is necessary.
3. Updated Encryption
Using modern encryption methods is not as common as some people might think. For my standards of a VPN, the encryption must be at LEAST: OpenVPN with 2048 bit or (4096 RSA, DHE-RSA-AES256, SHA, AES256-CBC-SHA). If you have questions about any of that, just PM me.
4. Anonymous Payments
If the VPN you are considering does not accept anonymous payments, (BTC, ETH, etc.) Then move on to another one. Paying with PayPal would be VERY unsafe as the VPN provider would have your info and resultingly could end up with the FBI.
5. Sign Up
If the Provider even asks for your first or last name, just forget about it. There is no reason that is necessary and no reason for you to give it to them.
6.Supports YOUR traffic
This is not a measure of safety, just common sense that the VPN you buy, should support what you want to do. Example: If you want to watch Netflix, it should allow Netflix.
7. Prevents DNS leaks from IPv6
This is surprisingly not very common and when a VPN provider offers IPv6 for some reason users think it means its advanced in some way... IPv6 is extremely vulnerable and should even be disabled on your computer. It allows people to sniff your traffic and leaks your DNS to intruders. AVOID it at ALL costs.
8. READ the T.O.S.
Most people, including myself, overlook the T.O.S. and just click the little agree button. However, when purchasing the VPN that could prevent jail time, I would recommend actually reading it to make sure there are no "catches" that could compromise your security.
9. Hardened Servers
Just make sure the VPN servers are protected from known AND unknown vulnerabilities.
10. Port Forwarding
This is only if you need it for your particular activities. Otherwise, not necessary although common offered.
11. Fake Reviews
Find out for yourself, from the owner, if the service is trustworthy. Don't trust Little Jimmy saying, "Vouch for OP!! Amazing product that is best for your security! Keep IBF OUT!"
I hope you enjoyed this guide, be sure to tell me if there is anything you want me to add and PM me if you have any questions about any of the above.
- Max P
* - Exchange.Service - Sep 10, 2016
good shit max p, short and good info
* - TheWHO? - Sep 10, 2016
Thanks for this Guide it really helped me buddy.
* - Strictly - Sep 10, 2016
This is an exceptionally well done guide.
* - Sift - Sep 10, 2016
This thread gave me cancer.
* - Max P™ - Sep 10, 2016
(Sep 10, 2016 10:56 AM)Sift Wrote: This thread gave me cancer.
Why is that?
* - John F. Kennedy - Sep 10, 2016
I recommend using www.proxy.sh for a VPN. They're offshore, keep no logs, and I believe you can use it on all of your devices.
* - Rezy - Sep 11, 2016
(Sep 10, 2016 11:50 AM)John F. Kennedy Wrote: I recommend using www.proxy.sh for a VPN. They're offshore, keep no logs, and I believe you can use it on all of your devices.
Never heard of it, going to check it out now.
Thanks.
* - ThisIsCyn - Sep 11, 2016
I would like to add that op should quote this
https://hackerseducation.org/?p=164
* - Hamekaze - Sep 11, 2016
Vouch for the P, well done on the thread.
* - Hastur - Sep 11, 2016
I've got a question about this, please answer on skype.
* - The Silenced - Sep 11, 2016
Very good guide OP..Thanks for all this info. Def very important things to look for when trying to stay anonymous.
* - Max P™ - Sep 13, 2016
(Sep 11, 2016 10:06 AM)ThisIsCyn Wrote: I would like to add that op should quote this
https://hackerseducation.org/?p=164
Are you suggesting that I plagiarized this tutorial?
* - ♡ Quick ♡ - Sep 13, 2016
Nice guide, helped me out a lot. Thanks again. :)
* - Light. - Sep 13, 2016
maybe suggest some providers lol?