In the wake of the Proton controversy, I've been looking towards alternatives towards their services. Unfortunately, I can't seem to find a good alternative to ProtonVPN. I'm looking for the following in a VPN service:
- Port forwarding support
- Open source
- Android app and Firefox extension available
- Relatively cheap, around $3-4 month (okay with annual pricing)
The only options I found were Private Internet Access and Windscribe, but I found issues with them. If I'm cutting ties with Proton based on ideals I disagree with, I should be rejecting alternatives on the same basis.
Based on what I saw in the PIA subreddit, Private Internet Access seems to have some issues with service reliability and concerns about its ownership having ties to Israel, implying Zionist affiliation. Windscribe seems to have better service, but they have had a questionable social media history: edgy marketing including an AI-generated Hitler and a controversy where, according to them, they joked about a guy being mentally ill but their post easily looked like they were saying trans people are mentally ill.
Is there an option I missed? Should I try one of these options despite their faults? I'd like to know your thoughts.
I can't make those requests from my home IP because my ISP from home blocks certain websites. But the scheme I described is solid:
ISP - Oracle - WARP with frequently changing IPs
DNS with dnscrypt
The only thing that could make it better is if the VPS had memory encryption to protect me from memory snooping attacks
As mentioned in a sibling comment, afaik all WARP traffic would be associated with your Cloudflare account. So the Oracle VPS doesn't matter anymore.
And again, if both Cloudflare and Oracle are selling data to the same company (like Google), Google can reconstruct the entire path of your traffic, and your privacy is now reduced to the same as somebody who isn't using any proxies at all.
A VPN relies on trust. As of now there's no getting around that. So the question is, is ProtonVPN/Mullvad/iVPN more trustworthy than Cloudflare and Oracle? I'd bet most privacy experts would say yes.
From the beginning this was about privacy. That's what the readers of your first comment would expect. I am simply explaining why replacing ProtonVPN with an Oracle VPS is a downgrade.
I don't use my Cloudflare account for WARP, I use the free version
They have no data on the free version because the VPS IP keeps changing.
Also you were assuming Oracle knows that my VPS is a proxy. They can't assume that. They probably think I'm hosting a site (port 443 open)
What data do you think they are selling? They can only sell "this guy hosts sites" data
A free VPN is a huge red flag. If you seriously trust Cloudflare WARP so much, I dare you to make a post in the privacy subreddit recommending them as a VPN replacement.
And how do you still not understand that if you can't trust the VPN provider, they're useless. Let's say Oracle and Cloudflare sell data to Google, which is the assumption I brought up from the very beginning. Oracle tells Google that the VPS belongs to you. Oracle tells Google that a packet left the VPS to Cloudflare. Cloudflare tells Google that that packet had a final destination of xxx-website.com. Google puts the pieces together and knows that you tried to visit xxx-website.com. It's that simple.
They can't even assume I'm the user of it. They can only assume based on usage that I'm running a VPN service (since several IPs connect to it and the requests get proxied)
If I really cared I'd open Tor browser, of course
You really think your VPS traffic looks anything like that of a commercial VPN? Yes, they will assume it's your personal VPN. Seriously, your judgement throughout this whole thread has been horribly flawed. If you don't trust me, ask the community. Make a post in c/privacy recommending your setup, or asking about it's effectiveness.
It doesn't matter, if I use Tor browser they can't track me very well then. Tor bridges are banned here so I'm actually increasing my privacy by using Oracle
OK so just ignoring the entire discussion up until this point and pivoting to "it's for circumventing Tor restrictions". Brushing aside the fact that all the stuff you brought up earlier (DoH, ODoH, HTTPS, Cloudflare WARP) are completely irrelevant if you're using Tor browser. Man it's so hard for people to just admit when they're wrong nowadays.
But at least it's clear that you understand my point now. And please do research before giving advice to others. It takes 10 minutes to find many threads about why a self-hosted VPN is nowhere near as private as a commercial one.
Because I don't care enough to use Tor and the other shit is what I actually use