{"id":17883,"date":"2020-03-17T20:28:48","date_gmt":"2020-03-18T04:28:48","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2020\/03\/17\/news-11616\/"},"modified":"2020-03-17T20:28:48","modified_gmt":"2020-03-18T04:28:48","slug":"news-11616","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2020\/03\/17\/news-11616\/","title":{"rendered":"Bring your own privacy: VPNs for consumers and orgs"},"content":{"rendered":"

Credit to Author: Malwarebytes Labs| Date: Fri, 06 Mar 2020 17:24:33 +0000<\/strong><\/p>\n

VPNs (virtual private networks<\/a>) have been popular for quite some time now<\/a>, and they\u2019re worth a huge amount of money<\/a> for the companies working in this area. They\u2019re also at the forefront<\/a> of combating potential repression and censorship around the world.<\/p>\n

It might all sound a bit esoteric and unrelated to your general day-to-day requirements, but VPNs are absolutely a mainstream topic whether at home or in the workplace. The question nowadays probably isn\u2019t so much \u201cDo we need a VPN<\/a>?\u201d as \u201cHow do we get the most from the VPN we just bought?\u201d<\/p>\n

With that in mind, let\u2019s cut right to the chase: We’re going to go over the pros and cons of jumping on the VPN bandwagon. With any luck, you\u2019ll have a better idea of some of the perks and pitfalls associated with this realm.<\/p>\n

It is, of course, worth mentioning the calculated risks taken when signing up to a VPN provider. If you\u2019re determined to keep your data safe and your anonymity preserved, that\u2019s great. However, that idea goes out the window if you simply sign up to the first service you come across.<\/p>\n

VPN cons: fakes, rogues, and the long arm of the law<\/h3>\n

Please don’t fall into the trap of thinking, “I have my VPN, and now I’m a digital immortal.” There’s nothing worse than overhyping theoretical protections from all things unpleasant.<\/p>\n

For example, 100 percent anonymity isn\u2019t a guarantee<\/a>\u2014how can you be sure that provider X doesn\u2019t keep logs? Is it true just because they said so? What happens if law enforcement turn up at their door with a warrant? They\u2019re not going to get into a tussle with the law if they can help it, so it’s likely that whatever they do have, is headed in the general direction of the powers that be<\/a>. This does rely heavily on where the VPN is located, so all cases are different<\/a>\u2014something to keep in mind when making a selection.<\/p>\n

Mobile considerations<\/h3>\n

Mobile apps<\/a> are incredibly popular for VPNs, with a significant chunk of younger users adopting the technology (some 70 percent of users are aged 35 or under<\/a>). There are even pronounced differences in usage in the same cohort<\/a>, so it\u2019s a bad idea to guesstimate who is doing what.<\/p>\n

Combine an unpredictable user base with countless mobile stores\u2014some of which inadvertently play host to rogue apps\u2014and this means unscrupulous individuals will move into the territory and try to scam people. Code injection for advertising, undisclosed data sharing, and VPNs used to attack or spam other services have all been in the news at some point, and you don’t necessarily have to be on a traditional desktop to run into these issues.<\/p>\n

Bad ads muddy the waters<\/h3>\n

We\u2019ve also seen examples where dubious scare tactic advertising<\/a> has sent device owners to install pages for \u201cfree\u201d VPN solutions, which themselves have some worrying statements in their terms of service. All of this before we get to the timeless scam where no VPN exists at all and they just want you to install some keyloggers<\/a>.<\/p>\n

As you can see, then, it\u2019s bad out there\u2014but VPNs are absolutely an advantage when it comes to keeping yourself a little more anonymous and secure online. They\u2019re not a magic bullet, but then nothing else is either. If you\u2019re of the mindset to explore and do a little homework before making the leap, it could be one of the stronger tools in your security\/privacy arsenal.<\/p>\n

You\u2019ve heard the warnings; now it\u2019s time for the measured response.<\/p>\n

VPN pros: Securing business, helping out at home<\/h3>\n

Long gone are the days where the view was anybody using VPNs has something to hide\/is up to no good. People simply want a little more privacy at home. And for businesses, it\u2019s one more layer they can wrap around their network. If you need to make use of a remote access, business-approved VPN to be able to get on the network in the first place, it\u2019s one more potential obstacle for attackers to get through.<\/p>\n

Given the path of least resistance for many attacks, it could be the additional step that makes them say \u201ctoo much hard work\u201d and move on to potentially less secure targets. It\u2019s unpleasant, but that\u2019s how a good chunk of criminals operate: Why jump through hoops when you can walk through someone else\u2019s front door to achieve the same result?<\/p>\n

You don\u2019t have to go too far back to see a steady churn of “Will my boss fire me?<\/a>” missives in relation to firing up a VPN on corporate networks. An odd thing to get hung up on, considering so many workplaces will happily offer up a business-approved VPN in the first place. (You really shouldn\u2019t be playing games on the network either way, regardless of VPN, but that\u2019s another discussion).<\/p>\n

Coffee shops and public Wi-Fi<\/h3>\n

Many offices are not just scattered across different regions, but also make use of decentralised employees working everywhere from living rooms to coffee shops. It stands to reason throwing a VPN into the mix is going to be beneficial in those circumstances, too. Employees on the VPN are also helping to reduce the visibility of their network traffic while out and about.<\/p>\n

A great way to attract unwanted attention is by sitting on public Wi-Fi uploading\/downloading sensitive workplace files and folders. Snoopers observing may well decide to take a more sustained interest in your business dealings, and you\u2019ve accidentally made the entire organisation a target.<\/p>\n

You could argue that you make yourself stand out more by overtly hiding what you\u2019re doing in a room full of people surfing in the clear, in much the same way people making their Wi-Fi routers invisible is a large red flag. Having said that, I\u2019d still rather lock things down while out and about versus the minuscule risk of a random person being so obsessed with you using a VPN that they make it\u00a0<\/span>their life\u2019s work to take you down, instead of shrugging and\u00a0 <\/span>buying another coffee.<\/p>\n

If anything, it\u2019s probably quite reassuring for employees to know they have an additional safety blanket out on the road. When every other horror story tells us never to use airport hotspots or web cafes because someone evil is definitely going to hack you and steal your briefcase, it\u2019s something you can give employees to even the odds.<\/p>\n

Going undercover<\/h3>\n

One of the most common benefits of a VPN is hiding your location. If you fire up the TOR browser, for example, you can appear as though you\u2019re in Mexico to the owner of the website you happen to be browsing, when you\u2019re actually in Italy. Researching scam websites that only respond to mobiles? Easy: change your user agent string so it thinks you\u2019re on an Android or iPhone.<\/p>\n

Want to watch that show from the streaming service you\u2019re signed up to, but it doesn\u2019t work outside your region while on holiday? How about MMORPG gamers who get better performance from a different region\u2019s server than their own but have no straightforward way to connect? That\u2019s where the VPN, and its path to gamer glory, begins.<\/p>\n

Regional reflections<\/h3>\n

Using a VPN has clear benefits for workplaces where employees travel a lot and security policies may insist on certain IP addresses\/regions connecting to the network. You can\u2019t get on the US network if you\u2019re sitting in France, on a French network, with a French IP.<\/p>\n

Depending on your role, you may need to access geo-locked third-party content excluding some regions but not others\u2014if you can\u2019t access the content, you may experience significant impact across the business. Whether people should be doing this is, of course, another discussion to be had, but there\u2019s no point pretending people don\u2019t<\/i> do it.\u00a0<\/span><\/p>\n

The humble VPN is here to stay<\/h3>\n

The verdict, to me, is very much in favour of VPN use. Whether you need it or not, VPNs can scale based on whether you want them for business or pleasure, and which essential tasks simply cannot be completed without one.<\/p>\n

Like most tech tools, researched well and used correctly, it\u2019ll be a great benefit to your day-to-day activities. Used poorly? You could end up running into one of several issues highlighted at the start of this post. The one situation you don\u2019t need is your VPN being the kind of compromising element you were hoping to avoid in the first place.<\/p>\n

The post Bring your own privacy: VPNs for consumers and orgs<\/a> appeared first on Malwarebytes Labs<\/a>.<\/p>\n

https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Credit to Author: Malwarebytes Labs| Date: Fri, 06 Mar 2020 17:24:33 +0000<\/strong><\/p>\n\n\n\n
<\/a><\/td>\n<\/tr>\n
VPNs are all the rage, but they’re not without their problems. Where do you stand on the great “Should we deploy a VPN” debate?<\/p>\n

Categories: <\/p>\n