Would you like to inspect the original subtitles? These are the user uploaded subtitles that are being translated: 1 00:00:01,020 --> 00:00:08,460 The key point in choosing a VPN is to consider what is the threat that you are trying to protect yourself 2 00:00:08,460 --> 00:00:09,430 against. 3 00:00:09,450 --> 00:00:10,580 Is it censorship. 4 00:00:10,800 --> 00:00:21,860 Passive surveillance targeted attacks hackers hiding in IP preventing monitoring via ISP privacy anonymity 5 00:00:21,860 --> 00:00:22,170 . 6 00:00:22,290 --> 00:00:23,820 Or is it just all of them. 7 00:00:23,820 --> 00:00:28,340 This will determine what sort of features you need from your VPN provider. 8 00:00:28,350 --> 00:00:34,350 Hopefully by now you have an understanding of some of the features of the VPN so you can start to think 9 00:00:34,350 --> 00:00:36,690 about what it is that you need. 10 00:00:36,690 --> 00:00:38,000 Let me give you an example. 11 00:00:38,100 --> 00:00:44,110 If you need a VPN to get you through a firewall then you need to look for a VPN that provides services 12 00:00:44,280 --> 00:00:51,660 the upscale VPN service to look like normal traffic if you need protection over a Wi-Fi hot spot from 13 00:00:51,660 --> 00:00:57,260 a hacker than a VPN which is fast and local to your location its fine. 14 00:00:57,270 --> 00:01:03,210 So the obvious thing to do when looking for VPN provider is to Google Search around look at the reviews 15 00:01:03,210 --> 00:01:03,430 . 16 00:01:03,510 --> 00:01:09,200 But the problem is most VPM reviews online are simply just bullshit that just lies. 17 00:01:09,300 --> 00:01:11,640 They are based on people trying to make money. 18 00:01:11,650 --> 00:01:18,240 People trying to make money for that site through affiliate programs and other underhand practices. 19 00:01:18,600 --> 00:01:23,850 So forget about googling what are the good VPN ads and read in fake reviews. 20 00:01:23,990 --> 00:01:26,740 Thats only going to lead to lies and nonsense. 21 00:01:26,790 --> 00:01:31,140 If you want to know a little bit more about that there's a little blog post on it which talks about 22 00:01:31,140 --> 00:01:38,370 the VPN affiliate markets which means you really just can't trust the reviews at all. 23 00:01:38,790 --> 00:01:45,330 So with a zero trust model in mind we want to still try to pick the best provider that we can and have 24 00:01:45,330 --> 00:01:50,430 a list of general recommendations that I can give you and you may have to contact them to find out some 25 00:01:50,430 --> 00:01:56,300 of the answers and if is not responsive then just simply move on from a good provider. 26 00:01:56,310 --> 00:01:58,660 Good providers can be hard work. 27 00:01:58,890 --> 00:02:06,570 So as I've already Scotian need to choose a provider operating outside the USA the EU or the other five 28 00:02:06,570 --> 00:02:11,000 eyes or the jurisdiction of the nation state you're trying to avoid. 29 00:02:11,070 --> 00:02:18,930 No logs should be kept that records source and destination IP address and time in reference to a user 30 00:02:18,930 --> 00:02:19,200 . 31 00:02:19,200 --> 00:02:26,070 So if an adversary requests this information they are simply as a provider not able to give it to them 32 00:02:26,110 --> 00:02:26,390 . 33 00:02:26,400 --> 00:02:32,040 A lot of providers will say that they don't do any form of logging at all which is actually a little 34 00:02:32,040 --> 00:02:37,090 bit suspicious because you do need to do some amount of logging. 35 00:02:37,200 --> 00:02:43,530 For example if you want to limit the amount of traffic usage the amount of gigabytes used you do need 36 00:02:43,530 --> 00:02:44,530 to do some logging. 37 00:02:44,670 --> 00:02:49,680 If you want to limit the number of simultaneous connections if you want to prevent deid also attacks 38 00:02:49,680 --> 00:02:55,650 you do need to do some level of logging but you don't need to log the source and destination IP address 39 00:02:55,830 --> 00:02:59,500 and time stamps against users which is key. 40 00:02:59,550 --> 00:03:06,360 Next only use providers offer open VPN with the security settings and encryption we've discussed. 41 00:03:06,360 --> 00:03:11,940 You can't leave a money trail so they've got to accept bitcoin cash or other forms of anonymous payment 42 00:03:12,090 --> 00:03:12,930 when you sign up. 43 00:03:12,930 --> 00:03:19,300 They must only require username password and email or even less than that. 44 00:03:19,500 --> 00:03:24,820 Absolutely no personal information should be given to them or should be required or recorded. 45 00:03:24,960 --> 00:03:30,740 The VPN also needs to support simultaneously the number of devices that you wanted to use. 46 00:03:30,780 --> 00:03:37,740 At the same time you don't want them to be using external suppliers for things like email and for the 47 00:03:37,740 --> 00:03:42,120 support type activities they are not secure methods. 48 00:03:42,120 --> 00:03:47,430 If they send you a username and password via e-mail then you must be able to change it if you can't 49 00:03:47,430 --> 00:03:53,220 change it then forget that you need to ask them if they support a sort of traffic that you want to send 50 00:03:53,220 --> 00:03:53,700 . 51 00:03:53,700 --> 00:04:00,840 So for example if you want to VPN through to talk or you want to do file sharing or to pay they must 52 00:04:00,840 --> 00:04:01,620 support it. 53 00:04:01,620 --> 00:04:04,980 So check that they actually support what it is you want to do. 54 00:04:04,980 --> 00:04:14,040 You want client software that supports protection from DNS an IP V-6 leakin Plus as a kill switch if 55 00:04:14,040 --> 00:04:15,380 the VPN dies. 56 00:04:15,570 --> 00:04:19,840 I mean that's not absolutely necessary if you're going to cover that yourself. 57 00:04:19,980 --> 00:04:23,800 But I would say it's best to have it within a client if you can have it. 58 00:04:23,880 --> 00:04:29,380 So go with the one that does the provider has their own DNS servers so you can use them although it's 59 00:04:29,430 --> 00:04:36,750 not absolutely essential that they have physical control over their own servers a network dedicated 60 00:04:36,870 --> 00:04:43,750 servers in third party data centers is fine no shared virtual private servers or cloud servers that's 61 00:04:43,750 --> 00:04:46,520 no good at all because they're not secure. 62 00:04:46,720 --> 00:04:50,980 I would recommend you read their terms of service and privacy policy. 63 00:04:51,070 --> 00:04:55,680 And really it should being clear language and no legal nonsense. 64 00:04:55,690 --> 00:04:58,770 You should be able to read it and understand it. 65 00:04:58,780 --> 00:05:04,590 They should have their VPN gateways hardened and secured and you should find out what standard they're 66 00:05:04,600 --> 00:05:11,410 doing that to prevent them from being exploited by known and unknown vulnerabilities and zero days you'd 67 00:05:11,410 --> 00:05:20,740 want to make sure they don't ruin any of the services on these VPN gateways like web S-sh HTP HTP. 68 00:05:20,950 --> 00:05:24,740 If they do that means they have a heightened attack surface. 69 00:05:24,790 --> 00:05:31,810 So someone could potentially exploit that Haiti T.P. server or S-sh server to exploit the VPN. 70 00:05:31,810 --> 00:05:34,860 So the VPN should just be running VPN. 71 00:05:35,020 --> 00:05:40,360 Ask how they're storing user information they should be on some sort of in-house server that is securely 72 00:05:40,360 --> 00:05:41,120 hardened. 73 00:05:41,260 --> 00:05:46,350 No communication between it and the VPN gateway should be encrypted and secured. 74 00:05:46,540 --> 00:05:51,460 And does this service allow for port forwarding if you need to run a service that people are going to 75 00:05:51,460 --> 00:05:52,750 need to connect to. 76 00:05:52,900 --> 00:05:55,380 Then you may need to do port forwarding. 77 00:05:55,480 --> 00:05:59,800 And if you're not sure you need to research that to find out if you need it. 78 00:05:59,800 --> 00:06:05,920 Peter Pean networks can need it in order to speed up connections so you have to look into that you'll 79 00:06:05,920 --> 00:06:12,610 find the responses of some of these questions here on this site term freaks and they've renewed this 80 00:06:12,610 --> 00:06:14,540 page for the last few years. 81 00:06:14,710 --> 00:06:19,010 And the information is probably the best I've seen gathered in one place. 82 00:06:19,180 --> 00:06:25,150 And if you look down here what they've got is these 12 questions some of the ones I've mentioned and 83 00:06:25,150 --> 00:06:28,140 it's got each of the provider's responses. 84 00:06:28,240 --> 00:06:30,580 Some of the responses are better than others. 85 00:06:30,940 --> 00:06:36,130 And based on what you've learned from this course you can go through these to help you determine which 86 00:06:36,130 --> 00:06:38,600 VPN it is that you want to use. 87 00:06:38,890 --> 00:06:42,690 And there's actually you know quite a few of these have responded. 88 00:06:42,720 --> 00:06:50,530 And if you go down to the bottom is not just one page is multiple pages of these VPM providers so that's 89 00:06:50,530 --> 00:06:52,320 a good resource to go to. 90 00:06:52,360 --> 00:06:59,250 And like I said they updated it every year for a while so they should update it again. 91 00:06:59,290 --> 00:07:08,920 Another good read I think is this one here which is a miss about V-P ends and some good little bits 92 00:07:08,920 --> 00:07:10,160 of information in there. 93 00:07:10,240 --> 00:07:13,680 But a lot of that is already know now from going through this course. 94 00:07:13,810 --> 00:07:19,670 I know you're going to just simply want to know what do I recommend or who do I recommend. 95 00:07:19,870 --> 00:07:22,080 Well remember the zero trust model. 96 00:07:22,090 --> 00:07:24,270 I don't trust any of them. 97 00:07:24,310 --> 00:07:32,020 I can tell you who make generally good claims but I don't recommend them but they they generally make 98 00:07:32,080 --> 00:07:36,860 good claims for the average sort of usage of a VPN. 99 00:07:37,090 --> 00:07:43,320 And these are the ones that I would suggest look OK. 100 00:07:43,630 --> 00:07:50,800 The first one is a VPN which is based in Italy and I believe this is a bunch of security professionals 101 00:07:50,800 --> 00:07:53,880 that got together and developed this service. 102 00:07:53,890 --> 00:07:58,630 This one's got some nice features where you can use S-sh. 103 00:07:58,660 --> 00:08:03,260 SSL tunneling and open VPN over Tor. 104 00:08:04,260 --> 00:08:07,790 So K is VPN. 105 00:08:07,960 --> 00:08:10,500 They do a multi hop VPN. 106 00:08:10,500 --> 00:08:12,460 Those guys are based in Gibraltar. 107 00:08:12,460 --> 00:08:17,320 They were in the EU originally but moved out because of the EU data retention laws 108 00:08:20,170 --> 00:08:24,390 and move around more move however you say it. 109 00:08:24,610 --> 00:08:31,630 These guys are based in Sweden and Sweden have some reasonably good laws for preventing coercion and 110 00:08:31,630 --> 00:08:34,200 data retention. 111 00:08:34,720 --> 00:08:41,980 Black VPN these guys were in Hong Kong Hong Kong there are many data retention laws there are gag orders 112 00:08:41,980 --> 00:08:45,150 or anything like that in Hong Kong. 113 00:08:46,630 --> 00:08:52,540 And then theres no VPN these guys are based in Panama Panama or in a strong political position because 114 00:08:52,540 --> 00:08:57,700 they are in the Panama Canal and therefore few countries can lean on them because everybody needs to 115 00:08:57,700 --> 00:08:59,410 use the Panama Canal. 116 00:08:59,650 --> 00:09:04,830 And there are some free services as well VPN services and cyber ghost. 117 00:09:04,920 --> 00:09:10,120 Now I don't necessarily recommend these I'm just letting you know that there are free VPN services available 118 00:09:10,590 --> 00:09:18,130 cyber Ghost is one kiss Security is another free VPN but do your own research. 119 00:09:18,160 --> 00:09:19,810 That's the key point here. 120 00:09:19,840 --> 00:09:27,130 Learn then do your own research to know which VPN service to use resources. 121 00:09:27,160 --> 00:09:30,320 Definitely worth looking at all these. 122 00:09:30,430 --> 00:09:31,890 This is the VPN. 123 00:09:31,920 --> 00:09:38,980 So I've read it which I recommend you check out if you're looking for a VPN provider the latest information 124 00:09:38,980 --> 00:09:43,830 will be there and here you are RLM this rather long. 125 00:09:43,830 --> 00:09:52,000 You r l is the one prime cies VPN comparison chart which is in a Google spreadsheet which is really 126 00:09:52,000 --> 00:09:54,760 really Awesomes a lot of work that's gone into this. 127 00:09:54,880 --> 00:10:02,170 A lot of what we've discussed in terms of what you need to find out about the providers is actually 128 00:10:02,170 --> 00:10:08,860 in the spreadsheet which is really really great and it's only something that I've found relatively recently 129 00:10:08,860 --> 00:10:08,980 . 130 00:10:09,010 --> 00:10:11,050 Simple comparison it has here. 131 00:10:11,170 --> 00:10:15,250 So you can see all the providers and it's got a simple comparison. 132 00:10:15,580 --> 00:10:24,310 And then if you go further along you can really sort of see the technical detail of what the providers 133 00:10:24,640 --> 00:10:25,360 provide. 134 00:10:25,360 --> 00:10:32,110 You can see things out here the 14 the jurisdictions that we talked about what are their policies on 135 00:10:32,170 --> 00:10:37,610 logging activism PDP keys bitcoins. 136 00:10:37,690 --> 00:10:45,430 Do they have leak protection DNS protection IP V-6 protection kill switches all of which I've mentioned 137 00:10:45,430 --> 00:10:46,230 . 138 00:10:46,230 --> 00:10:48,660 Do they offer open VPN. 139 00:10:48,670 --> 00:10:57,280 Do they have of the station or censorship methods or anti-censorship methods AABs proxy SSL tunnel all 140 00:10:57,280 --> 00:11:00,320 of which we cover on this course. 141 00:11:00,370 --> 00:11:08,920 And then what does it use for its data encryption handshaking Krishan etc. it's all in their prices 142 00:11:09,310 --> 00:11:11,890 obviously can't guarantee that all this information is accurate. 143 00:11:11,950 --> 00:11:18,690 But it's a good place to look anyway and there we go. 144 00:11:18,730 --> 00:11:25,990 And another similar but not quite as much information is this Web site here and you can find a lot of 145 00:11:25,990 --> 00:11:32,590 the providers with the various details cost where it's located. 146 00:11:32,590 --> 00:11:36,400 The supporting encryption protocols cetera. 147 00:11:36,400 --> 00:11:38,850 So that's another one that you might want to check out. 148 00:11:39,010 --> 00:11:41,830 So that's choosing a VPN provider 16163