Doing the VPN leap

Well its a networking forum.... #"@! Atheros drivers...

Moderators: b1o, jkerr82508

User avatar
viking60
Über-Berserk
Posts: 9284
Joined: 14 Mar 2010, 16:34

Doing the VPN leap

Postby viking60 » 31 May 2016, 00:37

ImageI have been using DNSCrypt for some time now and among the servers offering is cryptstorm gaining lots of ground.
I use their German server for DNSCrypt and they are clearly privacy minded,

So they also offer free VPN and they use a new and pretty untraceable technology.

You need to install OpenVPN and networkmanager-openvpn and download two files (certificates) that you use in your network setup.

But before I go into that a fair warning:

It is hard to say who is behind Cryptstorm.
CryptoStorm is a reincarnation of VPN service CryptoCloud, a subsidiary (or possibly close working partner) of Baneki Privacy Computing, the CTO of which was a certain Douglas Spink (it has been widely reported that Mr Spink was the owner of both CryptoCloud and Baneki Privacy Computing, but a current spokesperson for CryptoStorm maintains that ‘Baneki Privacy Labs is not “owned” by anyone. It’s a collective of security researchers, as it has been for many years.


Now this could be a good thing but that Douglas Spink guy has quite a history:
Spink, a once successful American entrepreneur and adrenaline junkie who lost his millions and filed for bankruptcy in 2002, was convicted of smuggling 375 pounds of cocaine (valued at $34 million) in 2005, and arrested for running a bestiality farm in Canada in 2010


He was released surprisingly early which indicates that he has been cooperating with the authorities in catching even wors guys...

His involvement in Cryptstorm is only a rumor and is in fact denied by the cryptstorm community. The cryptstorm top level domain is "is" as in Iceland - that does not indicate US intervention. Regarding VPN the general recommendation is to stay away from US based services due to the US surveillance program.Image So now you know.

The upside is that nobody seems to take your privacy more serious than cryptstorm check out this review
And their files are all open source and on github.

You need two files for setting up your vpn so I pulled cryptofree_linux-tcp.ovpn from github,
If you cannot use github just open the file there and copy the content and save it to the filename,

Next you need to download the CA certificate:
:A
ca2.crt
Here is the content:
:A

Code: Select all

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


Now we are ready to go:
Here are the instructions for Ubuntu

Just don't use that config file - use the one from github (as described above).
Image
To activate it just click on the nm in your panel and you will se that VPN is one of the options. Leave whatever connection you have and simply pick VPN.
Image
It Works!

I set it up on my laptop that was running wireless and then picked the vpn from the network menu - and it worked right away :B

The beauty of picking whatever userid and password I want is even better - you can set what you want just not leave the fields empty. No hassle remembering anything!

And it was fairly fast too; this is written on the free vpn connection and I did not notice any delay.
If you are a gamer or heavy downloader you can pay for more speed or simply shut VPN off when you do that.
Cryptofree's private networking service is identical to full cryptostorm service in all regards - cryptographic suites deployed, server-side configuration, source code edits, logging disablement, and so on - with only one exception: connection speeds per-session are capped at 256kb downstream & 128kb upstream.


At least it is a good test before you buy.

To test it check here
You are now in the cryptstorm darknet if you have done everything right.,

There is a list at Privacytools over VPN services that give you that little extra,
They only recommend solutions outside the US and the Five eyes countries

Many of the site claim that you will be surfing completely invisible to your ISP but that is not the case.

Your ISP can identify IP's via the plain text DNS in some cases, so to make that true you need to run Dnscrypt in addition to VPN.
Image
Manjaro 64bit on the main box -Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz and nVidia Corporation GT200b [GeForce GTX 275] (rev a1. + Centos on the server - Arch on the laptop.
"There are no stupid questions - Only stupid answers!"

netEmma
Posts: 19
Joined: 07 May 2019, 14:19

Re: Doing the VPN leap

Postby netEmma » 22 May 2019, 16:39

VPN always using on pc hacks my some sites and virus issue occurs also


Return to “Networking”