• @peereboominc@lemm.ee
    link
    fedilink
    English
    881 month ago

    I have this vpn because it comes for free with my Google Drive subscription. I have never used it because it does not do what I expect it to do

    • privacy, it’s Google.
    • pretend to be in a different country is not available
      • chiisana
        link
        fedilink
        311 month ago

        Security when you’re on untrusted network. I can trust Google to snoop my banking data and update the spending power info on my ad profile, I can’t trust the random dude in trench coat also using the public wifi when I am traveling out of my roaming coverage.

        I joke of course, but the security aspect is still valid.

        • @PortugalSpaceMoon@infosec.pub
          link
          fedilink
          151 month ago

          What is it that you’re doing that is still not using some form of authenticated encryption? Almost everything is https, ssh, almost all mailservers have tls support, irc does have tls support… What’s left that needs to be encrypted by a VPN?

            • chiisana
              link
              fedilink
              61 month ago

              Strictly speaking, Encrypted Client Hello (ECH) paired with DNS Over HTTPS (DOH) can resolve this. But not many people have their systems setup this way, so it is still pretty niche.

              • @Vash63@lemmy.world
                link
                fedilink
                41 month ago

                That also doesn’t resolve the carrier seeing which IPs you’re connecting to, which can often be traced back to services or sites.

            • What’s the threat model here? I can think of no DNS shennanigans that would not be detectable through the authentication mechainsms in TLS (chain-of-trust). Not having to trust network infrastructure is exactly what TLS is for.

              • chiisana
                link
                fedilink
                5
                edit-2
                1 month ago

                Most DNS requests are clear text, which is why DOH was introduced to secure it such that no one can snoop on you looking up something-embarrassing.com. Also, the initial request, before you get the SSL certificate from the web server, you must tell the server at 169.169.169.169 that you’re looking for the certificate for something-embarrassing.com before they can get you the correct certificate. This is why ECH was introduced. Neither of which have became mainstream yet, and so there are still some basic leakage going on.

          • @Dymonika@beehaw.org
            link
            fedilink
            31 month ago

            So this is a question I’ve been wondering: is public WiFi safe to treat like a private one if you’re using HTTPS everywhere?

            • @skuzz@discuss.tchncs.de
              link
              fedilink
              51 month ago

              You only use HTTPS everywhere until you don’t. It’s kinda like a security blanket to use a VPN in those situations. Someone could be running a MITM proxy and you’re dumb enough/in a rush/etc. and click accept on the expired cert. Or some new 0day vulnerability allows badness to happen without your knowledge. Even without being able to see your traffic, a bad actor could still see your DNS requests and narrow down what services you use for further targeting, especially if you frequent a place.

        • @Electricblush@lemmy.world
          link
          fedilink
          21 month ago

          It’s not the guy in the trenchcoat next to you you need to worry about.

          It’s the fact that some unknown entity owns/has set up the WiFi.

          Anyone working with complex network setup and admin will tell you how much you can abuse owning the network a user is connected to.

          The network guys at work never use public WiFi, not hotels or anything. Neither do I, even with my much more limited knowledge of network administration.

      • @CosmicTurtle0@lemmy.dbzer0.com
        link
        fedilink
        English
        21 month ago

        The biggest thing was being able to switch it on and off from the notifications menu. It is/was super convenient.

        Not surprised this is being shut down because it lacked many of the features that most major vpns had.

        But that feature was unique.

    • @helenslunch
      link
      41 month ago

      Right, it’s probably the same as every other “free” VPN. It’s free because it gives them access to 100% of your internet traffic. Basically completely antithetical to the entire concept of a VPN.

    • 7heo
      link
      fedilink
      51 month ago

      I feel cucked having google only get most of my traffic. I am an alpha male, I want them to get all of my traffic.

        • 7heo
          link
          fedilink
          -11 month ago

          How about blackholing google to limit the damage instead? And you could limit it further by not using services that you know feed data to google.

  • Bob
    link
    fedilink
    461 month ago

    Why would I use a Google VPN anyways

    • @Salvo@aussie.zone
      link
      fedilink
      English
      161 month ago

      Some people think that Google is trustworthy. They still believe that the motto “Do No Evil” was ever relevant.

    • Chozo
      link
      fedilink
      2
      edit-2
      1 month ago

      I use it because it comes free with a service I already pay for.

  • @guy@lemmy.world
    link
    fedilink
    281 month ago

    This is why I rarely get on board with new Google products nowadays. I know they’ll get half assed support and then be killed off really quickly.

  • @octopus_ink@lemmy.ml
    link
    fedilink
    English
    171 month ago

    Google, Meta, Microsoft.

    Three companies I would never trust as a VPN provider. Not necessarily in that order.

  • @cmnybo@discuss.tchncs.de
    link
    fedilink
    English
    101 month ago

    Good, Google has enough access to everyone’s data already. Nobody needs to willingly give them even more access by routing all of their traffic through a Google server.