In the wake of the Proton controversy, I've been looking towards alternatives towards their services. Unfortunately, I can't seem to find a good alternative to ProtonVPN. I'm looking for the following in a VPN service:
- Port forwarding support
- Open source
- Android app and Firefox extension available
- Relatively cheap, around $3-4 month (okay with annual pricing)
The only options I found were Private Internet Access and Windscribe, but I found issues with them. If I'm cutting ties with Proton based on ideals I disagree with, I should be rejecting alternatives on the same basis.
Based on what I saw in the PIA subreddit, Private Internet Access seems to have some issues with service reliability and concerns about its ownership having ties to Israel, implying Zionist affiliation. Windscribe seems to have better service, but they have had a questionable social media history: edgy marketing including an AI-generated Hitler and a controversy where, according to them, they joked about a guy being mentally ill but their post easily looked like they were saying trans people are mentally ill.
Is there an option I missed? Should I try one of these options despite their faults? I'd like to know your thoughts.
I'm not sure how many proxies you are using here but let's just take the example we covered earlier. You -> Oracle VPS (ODoH) -> Cloudflare -> DNS Server
Oracle sells your data, so now Google knows you own that VPS. Cloudflare sells data too, so now Google knows that a ODoH request came from the VPS and requested the name resolution for xxx-website.com. Google connects the dots and knows that you tried to visit xxx-website.com.
Regardless of what you do, your ip packets have to start from your device and end at the destination server. You can try to make it go through multiple hops (using Tor, multi-hop VPNs, ODoH, etc), but if any single entity has data from every hop, then the entire path can be reconstructed and your device is linked to the destination server. With multi-hop VPNs, you just have to trust the VPN provider. With Tor, hops are picked at random and you just hope that the intermediate servers aren't colluding.
Oracle is not a privacy business, and they give away VPS for cheap or free. I wouldn't be surprised if they sold data of their customers.
And again, if you are the only one using your VPS proxy server, then all the traffic from that VPS becomes a "fingerprint" of its own that can eventually identify you. This is called pseudonymity. Everybody has their own tastes and preferences after all, and traffic patterns can reveal that. With a Tor or VPN, you can constantly switch proxies, and your traffic is mixed with thousands of others, so extracting a single person's traffic becomes much harder.
How does Google know the request is for example.com? It's encrypted. They only know my VPS requested some domain name from CF.
You're assuming Oracle goes inside my VPS and dumps the RAM?
Because CF has to know the DNS request to ask the name server to resolve it. And CF sells the data to google.
Oracle doesn't need to dump the ram. It can see the network packets coming from your device, to Cloudflare.
It's a two hop path to the destination: you -> Oracle -> CF -> nameserver. If both Oracle and CF sell data to Google, then it's the same as both hops colluding, which reveals the entire path.
It doesn't know it, it passes the encrypted content between the DNS resolver and the requester
The packets are encrypted! Oracle doesn't know the keys unless they read the RAM of the VPS
Doesnt matter if the packets are encrypted, they have a destination. It's like if you sent mail to a sketchy address, it doesn't matter if the envelope is never opened, the address is still on the envelope.
So in this case the envelope would be going to cloudflare. Both Oracle and Cloudflare tell google about the envelope, and Cloudflare opens the envelope and tells google that the envelope was asking about xxx-website.com.