VPNs

Transcript

1. VPNs
   Luke Crouch
   

   View Slide

2. About Me
   • Privacy & Security Engineer, Mozilla
   
   • Board Member, Techlahoma
   

   View Slide

3. Disclaimer: I work for a VPN company
   • Mozilla VPN
   
   • We partner with Mullvad
   
   • (more details later)
   

   View Slide

4. What’s a VPN?
   

   View Slide

5. Virtual Private Network
   

   View Slide

6. restoreprivacy.com/vpn
   

   View Slide

7. How to pick a VPN?
   

   View Slide

8. Easy, right?
   

   View Slide

9. Oh wait
   

   View Slide

10. The dreaded question from
    tech support …
    

    View Slide

11. What are you trying to do?
    

    View Slide

12. What are you trying to protect?
    

    View Slide

13. What are you worried about?
    

    View Slide

14. Mozilla Research
    “Thinking about an average day in your life what risks or threats seem important
    to look out for in your world, whether online or not?”
    

    View Slide

15. Top 5 Answers
    • Malicious software (spyware, viruses, ransomware)
    
    • Someone getting my password and taking over my accounts
    
    • Scams that trick me into giving up personal data (online, email, or phone)
    
    • My personal data being stolen when it’s sent between my computer and
    the internet
    
    • Someone hacking a service that I use and stealing my personal data from
    the service
    

    View Slide

16. Top 5 Answers
    • Malicious software (spyware, viruses, ransomware)
    
    • Someone getting my password and taking over my accounts
    
    • Scams that trick me into giving up personal data (online, email, or phone)
    
    • My personal data being stolen when it’s sent between my computer and
    the internet
    
    • Someone hacking a service that I use and stealing my personal data from
    the service
    VPNs are designed for this one
    

    View Slide

17. restoreprivacy.com/vpn
    

    View Slide

18. Let’s dig into that a bit …
    

    View Slide

19. https://www.eff.org/pages/tor-and-https
    

    View Slide

20. View Slide

21. View Slide

22. View Slide

23. View Slide

24. View Slide

25. View Slide

26. protects user/pw & data
    

    View Slide

27. View Slide

28. View Slide

29. View Slide

30. View Slide

31. If you’re only worried about a
    hacker stealing your password
    over WiFi,
    https is probably enough*
    * attacks against https are possible, but harder than http
    

    View Slide

32. If you’re worried about …
    • A hacker on WiFi attacking https
    
    • A hacker on WiFi seeing which sites you visit
    
    • Your ISP seeing which sites you visit
    
    • Your government seeing which sites you visit
    

    View Slide

33. Then you want a VPN
    

    View Slide

34. So what does a VPN do?
    

    View Slide

35. View Slide

36. VPN connection
    VPN
    Provider
    

    View Slide

37. VPN
    

    View Slide

38. VPN
    VPN
    VPN
    

    View Slide

39. A VPN protects ~all the data from
    “local” hackers and your ISP
    

    View Slide

40. But … once your data leaves
    the VPN …
    

    View Slide

41. VPN
    VPN
    

    View Slide

42. The VPN is only hiding your
    location*
    * more on this later
    

    View Slide

43. VPN
    VPN
    VPN
    VPN
    

    View Slide

44. So what you really like is
    VPN
    AND
    https
    

    View Slide

45. VPN
    VPN
    

    View Slide

46. VPN
    VPN
    VPN
    VPN
    

    View Slide

47. Now, almost all VPNs solve the
    “local hacker” and ISP problems
    (or they’re not really a VPN)
    

    View Slide

48. When you use a VPN, you’re
    basically using a different ISP
    

    View Slide

49. VPN
    

    View Slide

50. But some VPNs are as bad or
    worse than your ISP
    

    View Slide

51. Again: how to pick a VPN?
    

    View Slide

52. You probably don’t
    want a free one
    

    View Slide

53. VPN
    > 💰
    

    View Slide

54. So, how to pick which VPN to
    pay for?
    

    View Slide

55. Well, if they all protect from local
    hackers and your ISP,
    what else are you trying to do?
    

    View Slide

56. What else are you trying to do?
    • Bypass geographic restrictions on websites or streaming services
    
    • Hide your true location
    
    • Bypass internet censorship
    
    • Avoid online tracking
    
    • Downloading media
    

    View Slide

57. Not everyone wants to know
    about everything, so …
    

    View Slide

58. let’s talk about 3 main features
    

    View Slide

59. 3 main features
    • How fast is the VPN?
    
    • Where is the VPN based, and where does it have servers?
    
    • Does the VPN log your data?
    

    View Slide

60. 3 main features
    • How fast is the VPN?
    
    • Where is the VPN based, and where does it have servers?
    
    • Does the VPN keep logs of its data?
    

    View Slide

61. How fast is the VPN?
    

    View Slide

62. Because if it’s great at privacy
    but terribly slow, you won’t use it
    

    View Slide

63. restoreprivacy.com/vpn/fastest
    

    View Slide

64. fast.com
    

    View Slide

65. show more info
    

    View Slide

66. What affects speed
    • Your physical connection: WiFi or wired Ethernet
    
    • note: wired Ethernet also most secure
    
    • The physical distance between your computer and your destination
    
    • The bandwidth of the network between your computer and your
    destination
    
    • The networking protocol used
    

    View Slide

67. 2 kinds of speed
    • Ping/Latency
    
    • Bandwidth/Speed
    

    View Slide

68. 2 kinds of speed
    • Ping/Latency
    
    • Lower is better
    
    • Important for fast web browsing, gaming
    
    • Bandwidth/Speed
    
    • Higher is better
    
    • Important for streaming, downloading
    

    View Slide

69. Ping/Latency has a lot to do
    with the 2nd main feature
    

    View Slide

70. 3 main features
    • How fast is the VPN?
    
    • Where is the VPN based, and where does it have servers?
    
    • Does the VPN log your data?
    

    View Slide

71. If there’s a server close to you,
    you’ll get better speed
    

    View Slide

72. Most VPNs show you where they have servers
    

    View Slide

73. If you care about security but not
    privacy, you might be able to stop
    paying attention now
    

    View Slide

74. Next, you might want to see
    where the VPN company is based
    

    View Slide

75. privacytools.io/providers
    

    View Slide

76. Basically, these countries may
    be sharing data with each other
    

    View Slide

77. And corporations in these 14
    countries may be sharing data with
    each others’ governments
    

    View Slide

78. So if you’re worried about hiding
    your traffic from your government
    …
    

    View Slide

79. You may want a VPN provider who
    is NOT based in one of
    “5 eyes” countries
    US, UK, Canada, Australia, New Zealand
    

    View Slide

80. privacytools.io/providers/vpn
    

    View Slide

81. 3 main features
    • How fast is the VPN?
    
    • Where is the VPN based, and where does it have servers?
    
    • Does the VPN keep logs of its data?
    

    View Slide

82. restoreprivacy.com/vpn-logs
    

    View Slide

83. Types of VPN logs
    • Usage logs - mostly free VPN apps, which are basically spyware
    
    • Connection logs - used to optimize and trouble-shoot the VPN network
    
    • Some VPNs do this while claiming to be …
    
    • No logs - don’t log anything
    
    • Makes it hard for the VPN operator to enforce some restrictions
    

    View Slide

84. 3 main features
    • Main Security Feature
    
    • How fast is the VPN?
    
    • Where does it have servers?
    
    • Privacy Features
    
    • Where is the VPN based, and where does it have servers?
    
    • Does the VPN keep logs of its data?
    

    View Slide

85. Here comes the shameless
    promo for Mozilla VPN …
    

    View Slide

86. privacytools.io/providers/vpn
    

    View Slide

87. privacytools.io has the highest
    standards for recommendations
    I’ve seen on the ‘net
    

    View Slide

88. and they recommend Mullvad
    

    View Slide

89. Mozilla VPN uses Mullvad!
    

    View Slide

90. We also use WireGuard for speed
    

    View Slide

91. We’re actually cheaper than Mullvad
    $5/mo vs. $5.50/mo
    

    View Slide

92. How?
    

    View Slide

93. Mullvad gives us a discount
    because we can help them reach
    so many Firefox users
    

    View Slide

94. Speaking of Firefox …
    

    View Slide

95. If you already have a
    Firefox Account (of course you do)
    …
    

    View Slide

96. Signing up is super easy!
    

    View Slide

97. vpn.mozilla.org
    

    View Slide

98. And speaking MORE of Firefox
    …
    

    View Slide

99. Live Demo!
    

    View Slide

100. Questions?
     • What is a VPN?
     
     • How a VPN works?
     
     • How to pick a VPN?
     
     • How is a VPN different from HTTPS?
     
     • How fast is a VPN?
     
     • Where does a VPN have servers?
     
     • Where is a VPN based?
     
     • How do I give you cash-money for this awesome Mozilla VPN?
     

     View Slide

101. Location?
     How?
     

     View Slide

102. IP Addresses
     

     View Slide

103. IP Numbers
     

     View Slide

104. kinda like Phone Numbers …
     

     View Slide

105. This is your IP address
     https://iplocation.com
     

     View Slide

106. This is your IP address on a VPN
     https://iplocation.com
     

     View Slide