Tag Archives: NordVPN

NordVPN becoming more annoying and scammy.

NordVPN is becoming more annoying and scammy.

First of all, they’re based in Panama, which is not even near Europe, but that’s an aside.

Recently, I’ve noticed that they shift my VPN connection to Panama and the UAE. Those famous parts of America.

I noticed this at first because Facebook and Paypal change regions and language automatically, and then set cookies so it’s very difficult to change them back.

I noticed that NordVPN keeps shunting my connection to a “Cyber Assets Fzco” based in Dubai recently, it seems to do that more than the Panama ones that keep coming up.

On Reddit, there have also been discussions about NordVPN switching people to AutoPay if they try to switch credit cards, even if that’s not what they want, and NordVPN will continue billing their cards even if they try to cancel it. (NordVPN doesn’t have my card number because I subscribed through Google Play.)

Also, disturbingly, NordVPN has been gobbling up other VPNs which signed deals with the RIAA and MPAA to block BitTorrent or identify the VPN users (making the VPN worthless), which immediately folded up and sold their branding and subscribers to NordVPN since their business was ruined.

Around the same time, NordVPN updated their Privacy and ToS policies, they said it makes them easier to read.

I didn’t think so, but what I did notice is that it more prominently states that they can throw you off the service for infringing copyrights or breaking any law, however they continue to insist that they don’t log you, unless you have a dedicated VPN IP address, in which case all of your activities actually are logged, and linked to the email address you signed up for NordVPN with.

They also made it more obvious where to send abuse and law enforcement complaints/requests to.

What deals are they subject to with the RIAA/MPAA, directly or through their acquisitions. Are they really logging you? Are you comfortable with your Internet access being routed through the United Arab Emirates?

Are you concerned that it might be difficult to get them to quit billing you?

These are all good questions, but NordVPN doesn’t do much except promote itself, and they are pretty good at that.

I don’t think that VPNs are the ultimate answer. There will come a point where the jig is up and they’ll all have to shut down, and we’ll all need to move towards anonymity networks that have privacy built in and to the point where it is fast and easy to share files with others.

Richard Stallman has been adamant in opposing the copyright system that exists in the US. Using a VPN doesn’t get rid of all of the laws that Congress keeps passing, which were bought and paid for by an industry that mostly sits around on its ass and doesn’t create much.

At best, a VPN may not be logging you, but only they know if they are. At worst, you’re paying for a false sense of security.

Mozilla is being laughed at for getting in on the “VPN” scene. What they do is essentially take Mullvad, double the price, and have different software for accessing it, and a different privacy policy.

To sign up for Mozilla VPN, you also have to uniquely identify yourself when you go to pay for it and create an account.

I’m not sure, with the whole UAE thing going on, that I want to subscribe to NordVPN again. I might just let it time out and cancel through the Play store. The UAE is an extremely corrupt country. They allow Russian oligarchs to party there, while executing homosexuals.

Meanwhile, NordVPN talks about human rights. LOL

As Roy Schestowitz put it in TechRights IRC the other day, NordVPN pretends they are based in countries that treat people well, and they’re actually based in some of the biggest countries for human rights violations on the planet.

T-Mobile Google Play problems: Part 3

This evening I called T-Mobile support and eventually got fielded around to someone who knows what’s going on.

He confirmed that the Google Play problems are related to their tower upgrades and shutting down the last of the Sprint network.

Internally, T-Mobile uses a VPN to route certain traffic, including the Play Store, even if you’re not using one of their devices, and something in that setup got messed up. They said they are aware of it and it should eventually go away, but to “keep using the VPN app” to get Google Play to work until it’s fixed.

By using NordVPN, it forces it to tunnel over the internet instead of internally at T-Mobile, through NordVPN’s server, and reach the Google Play store over the Internet, through NordVPN.

While he had me on the phone, he found me a cheaper T-Mobile plan than my Sprint account which they don’t advertise. They have a plan for senior citizens and we agreed that I was over 55 šŸ˜‰ and now my bill for the month should go down by about 30% vs. what I was paying for my spouse and I on the legacy Sprint plans.

To save the $445 a year on the phone bill, I had to give up a Hulu with commercials plan I didn’t even use, and a AAA membership worth about $70. Sprint just made my latest payment, so there’s no AAA bill due until next year.

It’s nice to know that something’s going down, because it sure isn’t the groceries and gas.

Edit: Here’s a quote from a customer who said he finally found someone who knew how to fix it.

“I was having the same problem and spent hours on the phone with a 2 different tech support people at T-Mobile. The second guy I spoke to tonight seems to have fixed the issue. He used a program called Grand Central and said he ran through a process that ā€œcancelled my location and updated network featuresā€. I donā€™t know what that means exactly but it worked. If you talk to T-Mo tech support, ask them to do this same process. Good luck!”

Jack Monkey (T-Mobile Forume)

Google Play doesn’t work properly on T-Mobile lately, unless you’re using a VPN.

Recently, all my Android devices stopped updating apps from Google Play.

I checked Down Detector, and someone complained that it happened to them when they were connected to their T-Mobile Home Internet WiFi.

I have T-Mobile for Home Internet and for cell data, so I decided to try connecting to NordVPN, and the updates work again.

So something involving T-Mobile’s network is preventing Google Play from working. Apps either won’t download at all “Pending” or they’ll partially download and then stop, but connecting to a VPN allows it to work.

Edit: I went to the T-Mobile store and they confirmed that it has happened to several other customers. They said they tried three Motorola phones for one guy and it was still doing it, but when they put his phone on a VPN at their store, Play worked.

So that’s proof it’s happened to at least Motorola, Google Pixel, and some Samsung devices.

There’s a post on T-Mobile forums here with more people having the issue:

https://community.t-mobile.com/network-coverage-5/t-mobile-internet-cell-service-will-not-allow-google-play-store-apps-to-download-or-update-42053

NordVPN merges with SurfShark, breaks the “Linux” client again. Starts harassing Windows users to go on autopay.

NordVPN is acting super sketchy again.

While being investigated in California for a potential class action lawsuit for making it difficult to cancel, NordVPN merged with another VPN company, SurfShark, and now they’ve broken the “Linux” client again.

Version 3.12.4 for “Linux” causes the Internet Killswitch to stop working on Debian GNU/Linux 11, which means that if the VPN drops, your traffic can go out over the open Internet without warning.

I had to go into Synaptic Package Manager, find the NordVPN repo, and select Force Version to get back to 3.12.3. Disastrous upgrades that shift bugs around are quite common in NordVPN’s clients, but are particularly bad with the “Linux” version. And they won’t tell you how to just use Wireguard and connect directly, even though behind the scenes, that’s pretty much what their piece of crap client program is doing. That and some firewall rules to implement the Killswitch.

Moving on, Windows users claim there are now pop-ups, spamming them to agree to autopay, so that NordVPN can automatically charge their credit card while they aren’t thinking about it.

Said one user on Reddit,

They don’t even let me disable auto-renew. They straight up said if I disable auto-renew, I will immediately lose my service wtf. I’ve asked twice now.

VarenDerpsAround

Finally, and this happened a couple of weeks ago, NordVPN merged with SurfShark, and this is another problem with VPN companies in general.

We don’t know if any of them are really following their “no logs” policy, but if they aren’t, then eventually they get bought up and another company has access to all of the data as well.

This isn’t too reassuring, considering that NordVPN was so wishy-washy that last time they were directly asked if they would cooperate with search warrants or lawsuits against their customers.

They will “cooperate” according to “laws and regulations”.

Which laws and regulations? Those of a country I may not even be a citizen of? More frighteningly, maybe one I am a citizen of.

The US government is trying to outlaw encryption again, except for corrupt politicians who will continue using it, of course, and then throw a shredding party on their way out of office, like Trump did.

The EARN IT Act is basically Clipper Chip: The Next Generation, and would essentially force all Americans underground, to things like Tor Browser and Tox protocol messengers.

Another step towards living in some country with no human rights, like China.

This is important, as it was revealed a few days before the merger, that NordVPN and SurfShark had undisclosed ties, and that the common link, as well as SurfShark, were spread among several dangerous legal jurisdictions.

Surfshark had previously announced a reorganization and relocation from the British Virgin Islands to the Netherlands, but had not mentioned Lithuania as part of that announcement.

TechRadar

NordVPN itself was allegedly based in that famous Nordic country, Panama.

So now we have at least a few legal systems that NordVPN is involved with. Panama, The Netherlands (Holland, inside the jurisdiction of the European Union), and the British Virgin Islands (A British Overseas Territory, which makes it a Five Eyes Jurisdiction.).

NordVPN is certainly raising more questions than answers with the recent activities.

NordVPN under investigation in California for making it difficult to cancel.

NordVPN is under investigation in California for potentially violating the state’s laws regulating automatic renewal of subscriptions, and continuing to bill people even after they’ve decided to cancel.

I wonder how a federal court in California is going to go after a dodgy VPN company in Panama, even if they get the ruling.

If you subscribed to your VPN using the iOS or Google app stores, then you can cancel the subscription on the store and there’s really not much that NordVPN can do to keep billing you since they don’t know your credit card number.

NordVPN doesn’t really have enough bandwidth to handle BitTorrent, so they throttle it.

I’m just about fed up with NordVPN, and I’ve only used it for a few months.

Pretty much every software update makes the client software buggier than before, but they’ve really been stepping on the hose with BitTorrent traffic.

Much of the time, you can’t get any real bandwidth at all and you’re stuck downloading at 20-30 KB per second regardless of how fast everything else works. Direct downloads over HTTP(S) work just fine, but BitTorrent traffic is being throttled by some sort of QoS system.

It’s pretty frustrating, and I’m starting to think that VPNs have turned into a meme if they weren’t one already. The problem is that with so many trolls out there, what else do you do?

Why you shouldn’t use “Onion over VPN” servers that your VPN company provides.

Some VPN companies like NordVPN advertise “Onion over VPN”, but is it safe?

The short answer is, no. It’s not.

The long answer is, hell no…and this is why.

Tor isn’t just an anonymity network proxy system. It’s a special browser with special settings designed to resist fingerprinting attacks, isolate sites from each other, and forget everything you do.

If you use a normal Web browser with the Tor network, you don’t get any of these protections. It also means that if someone has compromised the VPN server you’re using, well, Tor is running on that server and not your computer.

Obviously, this is less private, and much less secure, than running Tor and the Tor Browser on your computer. There is no safe way to use onion domains on a normal Web browser, even if your VPN provider knows what they’re doing.

And NordVPN hasn’t given me any indication of that.

I never connect to their Onion over VPN servers.

Really, how hard is it to just run Tor Browser or a Brave Private Tab with Tor on my own computer, while on a normal VPN server? It’s not.

There’s a very small yet non-trivial chance that you could get a malicious entry and exit node with Tor all by itself, or that an attacker could be watching network traffic on both ends.

Assuming your VPN company really isn’t logging you, using Tor Browser or Brave Private Tabs with Tor on the VPN offers some advantages.

A malicious entry node won’t see your real IP address, and timing-based attacks should be neutered because it goes into and comes out of your VPN server, which many other people use. Your ISP won’t even know you’re using Tor because it gets encrypted by the VPN layer. All they see is that you’re doing….”something” in there, like any other traffic. Just junk that’s totally useless to them.

But the fact that NordVPN and some others even offer Onion over VPN servers is alarming. At least it should come with a disclaimer that you shouldn’t access any Tor Hidden Service site that could be trying to compromise your identity. Because it wouldn’t be hard to do.

In terms of safety, Tor Browser is still preferable to Brave Private Tabs with Tor, but Brave is still working on increasing privacy in Tor Mode.

The only remaining problem with it that I can see at the user experience level is it wants to use DuckDuckGo, and DuckDuckGo is still tracking Tor users, even on their Onion site, with “Improving DuckDuckGo”.

Fortunately, Brave Search also works on Tor, either over the Web or as a Hidden Service.

Tor Browser Launcher on Debian is broken. There’s other ways to get it. The SPLC censorship regime hates Tor and FOSS, and boosts Bill Gates.

The Tor Browser Launcher is pretty neat.

It downloads the Tor Browser, verifies that it’s properly signed, so you don’t get a fake one planted on your computer, which is a possibility if you went to the wrong Web site or were the victim of a MITM attack, somehow, and then puts launchers and a settings application in your menus.

However, Debian’s package doesn’t work properly on my computer, and when I open it, an invisible window the size of the browser that can’t be closed except from the task manager, or pkill, opens up.

Well, that’s not helpful.

Fortunately, it’s available as a Flatpak too, and that works!

If all else failed, it’s downloadable from the Tor Project directly.

You can verify the bundle’s archive with the .asc key that they provide and then unpack it and then start it with ./start-tor-browser of course, but meh.

I’m lazy.

Moving right along… The Southern Poverty Law Center is probably why you can’t access the Tor Browser’s Web site.

They apparently advise libraries and schools to filter it out as “terrorist”, according to multiple sources I’ve spoken with.

God, these people….

Anyhow… If you already have the Tor Browser on your computer before you get on their WiFi, they can’t do much about that. And after you’re on, you can just use Tor…

Oddly, the library where I live lets Tor function normally even though their firewall blocks the site. I won’t tell here which library because I don’t want to give these jackbooted library thugs(?) any ideas about how to screw around with me if they’re not smart enough to do that already and happen to find this post in Google or something.

The Supreme Court ruled on the issue of Free Speech that you have to be allowed access to the Internet without the firewall in effect, _if you specifically ask for it_.

(Oddly, in Chicago, the city itself, the library doesn’t even block porn. If people are watching it and you complain, they will help you move to another computer, but they won’t stop that other person unless they start playing with themselves or something. Life in a big liberal city is just disgusting everywhere you go. Disgusting, expensive, cramped, polluted, riots breaking out unpredictably. Did I mention expensive? Glad I’m not there anymore.)

However, Tor Browser has another mode, which is intended mostly to deal with situations like the Great Firewall of China, which essentially makes it look like you’re connecting to a Web site in the Microsoft Azure or Amazon Web Services “cloud”. Obviously, that has privacy issues of its own, but it can’t easily be blocked without a lot of collateral damage.

So hey, there’s something positive that came out of centralizing the Web into the hands of a couple of monopolists? That being said, I’d be careful to use this to evade censorship at the library, but be on guard because your traffic is being tunneled through companies that have affiliations with the intelligence agencies in the United States.

One easy thing you can try if you run into censors and use Brave is to just load a Private Tab with Tor and see if it’s good enough.

If you don’t need a lot of privacy and just need to obfuscate what you’re doing, you can leave it at this and just use a normal browser.

And if none of this works, you can try NordVPN’s obfuscated VPN servers or their browser plug-in, which is basically a proxy that looks like HTTPS instead of a VPN.

So there’s things you can do to avoid government spying at the library and your school and break through even the most pernicious censorship regime, unless they want to do extreme damage to their WiFi network’s usability.

It’s ridiculous that network administrators at a library are stifling free speech based on the SPLC, but suddenly the SPLC’s “naughty software list” makes much more sense.

It turns out that this software gives you most of the tools to bypass authoritarian censors (including those at a public library who try block selected Wikipedia articles so that you can’t read them, on their Windows PC terminals, which tells you that nothing you connect to over HTTPS there is actually secure even if there is no malware other than Windows) such as themselves and read and view whatever you want, and talk to whoever you want, on the Web.

Ironically, they give these tools free advertising by drawing attention to them.

There’s some on there that I don’t even use, even though I knew about them, because they’re proprietary. I don’t think they even mentioned Tox clients though. Those are pretty good if you need anonymous messaging.

Politicians that want to ban your privacy, such as British Prime Minister Boris Johnson, use Signal (proprietary), which is also on the list. I guess Borisinaro is a terrorist and needs to be moved to UltraMax immediately and fitted for a Hannibal Lecter mask. Tried and convicted by “The Southern Poverty Law Center said so.”.

Where does SPLC get their money, btw? There’s a lot of Hollywood Liberals and GAFAM money in there, but enough of it is in a web of slush funds that make it hard to figure out entirely.

They may well have started out with good intentions. I’m certainly not going to argue that fighting the actual Klan is bad (Because “I hate Illinois Nazis” as much as anyone.), but like most things liberal, they have to paint everything that’s not them as the Klan, including just normal every day decent folks who are trying to raise their kids with some morality and respect for others and for, well, what’s left of the law.

It is perhaps ironic that a lot of kids couldn’t use proprietary GAFAM software if they wanted to because it’s being blocked due to SPLC’s recommendations, and so Matrix is growing.

One told me one one chatroom that their school’s Great Firewall doesn’t know what all of the domains are on which you can use Matrix.

Oddly, Matrix has a lot of kids on it because the grown ups at the school blocked “Skype” and “Facebook” and that ought to be enough, right? It’s not like there is anything other than GAFAM.

An entire generation free of Monopolysoft?

No wonder Skype is dead.

The lying bastards at the SPLC also have to lie through their teeth and accuse platforms that are not GAFAM of being pedophile strongholds.

Just a few short years ago, Microsoft Bing was the preferred place for pedophiles to go.

In at least one case I recall reading about, the police in Texas arrested a man and asked where he got it all, and he said BING. It didn’t do anything at all to filter it. Bill Gates was on the plane with Epstein a lot, trying to buy himself a Nobel Prize. And there was Rick Allen Jones, a CP-hoarder that was literally arrested in the Gates Mansion.

Where’s the warning about Microsoft and Gates?

I don’t recall there ever being one, even though it was more than a little disturbing that the biggest platform for online child sexual abuse material was the default Windows search engine and the default Windows Web browser. For years. And the police did nothing.

It wouldn’t surprise me if the Gates Foundation is funding SPLC like they do to corrupt everything else.

Why else would they praise him as anything but some shyster who made good with a crap operating systems (like DOS, which was another incident, but mostly screwing Digital and IBM) called Windows NT which was actually, literally stolen from VMS (which Microsoft settled with Digital about, then betrayed shortly thereafter like they do anyone stupid enough to sign a business deal with them), while attacking his critics and lumping them all in with Alex Jones? It’s not even the first time.

Common Core is nothing more than an attack on public education by billionaires who should be in prison. One of the other promoters is Mark Zuckerberg.

Many, many parents are appalled at the dumbing down of their kids, and parents with a choice take their kids out of failing schools like the ones in Chicago which are a toxic hell stew of political correctness, gangs, drugs, guns, and fat cat public union bosses growing a big fat pension.

They demand school choice vouchers, which is the entire point, because then big business can just run those directly if you want your kids to have any hope at all.

A Chinese dissident who was hailed as a hero in Western media is now being given the silent treatment.

His mistake? Saying out loud that the US is starting to remind him of China (due to authoritarian wokeism), where if you say the wrong thing…..

Well, you don’t just get killed or disappeared….as such. Just professionally ruined.

Perhaps a better example is the concept of “dedma”, a word that Filipino people may be more familiar with, where society will “shun you” and ignore you if it becomes aware you have the wrong views.

Without going too far astray, the wrong opinions to have in America today read like something from bizarro world. If you just say criminals belong in prison and people should be entitled to keep what they earn and the government shouldn’t be throwing thousand dollar bills at people to keep the least productive the most reproductive and pretend it’s all okay for a couple more years until “Build Back Better” causes our country to collapse, and you’re in favor of the entire bill of rights, including the Second Amendment… That’s what happens to you.

They’ve gotten so good at disappearing us using GAFAM, disappearing people who are still in our right minds, that we have to stake out a new frontier and break our old habits and let companies like Facebook turn completely into an echo chamber full of crazy people with distorted thought patterns and advertising bullshit.

I’ve already started my divorce from GAFAM. I’m not replacing my Android phone when it fails, with another Android. I’ll be getting one that runs GNU/Linux.

I don’t care about “apps”. They’re dumb. They’re put there to control people and spy on them by companies who ruined the Web and yet still think its users have too much freedom.

Those companies, including Apple (which fundraises for SPLC), can pay off SPLC through slush funds and proxies to help their assault on your alternatives.

Did you know that there are 7 tracking libraries now in the text messaging app on a Samsung Galaxy phone. One of them even contacts Facebook. Even if you don’t use Facebook! That’s in addition to the Facebook stub apps and the Facebook system service whose only purpose is to wake up and tell Facebook which apps you’re signing into so their tracking libraries can associate them with you, even if “Facebook” isn’t on your phone.

Tracker Control neuters them and I pried out the stubs and disabled the “service”. But this has to be a stop gap solution.

The madness will not end until we shut them down and refuse to use their stinking products.

Oddly enough, Facebook was on SPLC’s list of platforms of concern, but I think it’s mostly to call for more censorship than there already is.

NordVPN follows up its GNU/Linux client breakage by also breaking their Windows client.

NordVPN outdoes its GNU/Linux client breakage by also breaking their Windows client.

Fresh off the “Linux” build of client 3.12.1, NordVPN has also released Windows build 6.41.2.0, which apparently deletes all of the icons for the program and no longer shows up in the search menu, or launches on system startup.

I’m just going to leave this here…

Roy Schestowitz asks why I paid for NordVPN with the Google Play Store.

Roy Schestowitz asks why I pay for VPNs with the Google Play Store.

My answer: It’s basically a payment condom.

People complain they give NordVPN their credit card and can’t stop them from billing them again every month after they cancel.

I don’t know if it’s true or not, but canceling a Play Store subscription is easy and they can’t stop me.

Try getting a refund from a company in Panama.