Not sure if I can ask this on this forum

[cvkemp]

do not have to take it by the year. I just use it when on vacation or trips.

[nrubenstein]

Originally Posted by kyteflyer

The VPN I use (and most of the others) have a kill switch which, when active, means that if connection is lost, it will simply stop working, so no updates would occur. That said... I don't do updates when out and about and on public wifi (which is pretty pathetic in Australia so I don't actually use it much at all). I have a mobile wifi router, a ZTE something, which is my preferred option.

Last I checked (which was this summer), iOS has no support for kill switches. That only works on a Mac/PC. It's a huge security flaw, IMHO.

[romero5532]

Originally Posted by nrubenstein

A VPN service provides some protection. But the reality is that you basically should never use any wifi that you don't either control or trust.

I would like to know a good vpn service. I am still trying to find out better one. Which one will you recommend? Really interested to know.

[49Kat]

Originally Posted by kyteflyer

Cloak... $159USD for a year? *FAINT*. I don't think I have ever seen a VPN as expensive as that

https://www.getcloak.com/plans-pricing/

We just use it when we're traveling outside Canada and we have to have our iPhone data plans turned off.

We used Cloak on a Panama Canal cruise we took nearly two years ago. We just took iPads and iPhones with us. We used the 30 day free trial of Cloak. It worked great. It does need good wifi to function well, though. Some of the public wifi spots in the U.S. were slow, and then Cloak had trouble connecting. This winter we're probably going to unlock one of our old iPhones, put in a Verizon or AT&T SIM card, and use it as a hotspot when we're traveling in the U.S. Smart phone data can be expensive, though, so it's not a perfect solution. (I dream of a high speed network, awesome coverage, and unlimited bandwidth. All for a flat rate fee.).

[kyteflyer]

Originally Posted by nrubenstein

Last I checked (which was this summer), iOS has no support for kill switches. That only works on a Mac/PC. It's a huge security flaw, IMHO.

Damn, didnt think of that. Guess I should take a laptop if I am going to do anything serious whilst out.

[kyteflyer]

Originally Posted by 49Kat

https://www.getcloak.com/plans-pricing/

You know, I didnt register that there were data limitations on the lesser plans. That alone turns me off. The price is still too steep, but in Australia, it costs vastly more.

Here's a list of vpns which take your privacy seriously. NordVPN is based in Panama.
https://torrentfreak.com/anonymous-v...w-2015-150228/

Nobody can be truly anonymous on the net because you *have* to have an IP address. Its whether logs are kept of where to go and what you do online, that matters. If you are doing things you should not be, that is. Otherwise, basic protection from hacking your device/computer is adequate, IMO. You are wanting to eliminate sniffers on the network you are planning to connect to.

For myself, I will be reverting to the free version of Tunnelbear when my subscription expires. It will be a backup for when I am out. However at this point I have no plans to drop Nord, its iOS apps arent fabulous but it does give you the option to use its server addresses with OpenVPN, or on your computer, Tunnelblick and both has been excellent. The Nord app does drop the connection at times, but OpenVPN doesnt. Well, it hasnt for me, so far. Havent really tested Tunnelblick to the fullest, because the Nord computer app is great. Ugly, but great.

[end rambling post]

[kyteflyer]

Originally Posted by tinysnook

- This person has been banned as a spammer. Link deleted. /URL]

I note that this link leads to a website which advertises VPNs which pay for affiliates. I'd like to see a site which does comparisons whether they pay or not.

[sbaylor]

Originally Posted by cvkemp

But here I go when you are out and about, on vacation or just around town, what kind of protection do you us on you IOS devices to pretect yourself when using hot spots.

If you are comfortable with the level of security of the Internet access from your home, you may consider using OpenVPN to leverage it. On iOS, I use the app OpenVPN, which was free (at least at the time I downloaded it). With a VPN connection active between my iPhone and the VPN server at my home, the connection is secure even when my iPhone is surfing on a public hotspot. Moreover, when I login to my bank, it thinks that the IP connection originates from my home, and will not otherwise reject my access due to suspicious IP address, whether your phone is on Wifi or LTE/4G/3G.

Originally Posted by cvkemp

I have been playing with and working on and troubeshooting computers, and computer devices since the late 1970s. And I stayed away from Apple for all of that time because I did not like the fact that they controled the hardware and software. But I have come to realize that Apple was smarter than everyone else.
So when I retired I decided that I was going to make a real change in my life and that meant that I no longer wanted to troubleshoot computers or software, so I have moved to Apple devices and I believe that I have made the correct shoice. So far with a year of using the IPhone with no issues, I decided to get the IPad. I have no plans of getting a Mac I no longer need that type of computer. So am a Apple fanboy maybe I am becoming one. But I will be using a Kindle e-ink reader for my ebook reading.

The catch is that you have to set up an OpenVPN server (perhaps with some help from a friend). But it sounds like that you like to play with technical stuff. Suppose you're already running a (Ubuntu) Linux server at home, then the additional step to set up an OpenVPN server is relatively straightforward. With about an hour of work, this OpenVPN service will go a long way. It has run quite reliably for me for several years.

See https://www.digitalocean.com/communi...n-ubuntu-14-04 for such a tutorial.

[kyteflyer]

Originally Posted by romero5532

I got few site through the internet while searching. I checked every site one by one so that I can select the best one. But the following one has amazed me about it's service and reviews. You can check and let me know I am right [Link deleted]

Will wait for your further reply.

Another affiliate advertising site.

[pdurrant]

Originally Posted by kyteflyer

Another affiliate advertising site.

Thanks. Spamming spammer banned and posts deleted.

[mobman16]

I use NordVPN currently but if I'm accessing any kind of public network, much like others here, then I refrain from using online banking etc as I can't wholly trust the network I'm using.

[kyteflyer]

Originally Posted by mobman16

I use NordVPN currently but if I'm accessing any kind of public network, much like others here, then I refrain from using online banking etc as I can't wholly trust the network I'm using.

Likewise. I do all my banking stuff from home and if I can't, it just has to wait until I can.

[HarryT]

Originally Posted by kyteflyer

Likewise. I do all my banking stuff from home and if I can't, it just has to wait until I can.

Please correct me if I'm wrong, but if you access a site using a secure protocol (ie an "https" URL), isn't all the traffic that flows between your browser and the server encrypted?

[pdurrant]

Originally Posted by HarryT

Please correct me if I'm wrong, but if you access a site using a secure protocol (ie an "https" URL), isn't all the traffic that flows between your browser and the server encrypted?

In theory. In practise you're vulnerable to man-in-the-middle* attacks, especially relevant when accessing over someone else's wifi.

Using a VPN should avoid this problem, but security is hard.

*That is, a computer in between you and the server pretends to be the server (to you) and pretends to be you (to the server), decrypting and re-encrypting all traffic, and so seeing everything that passes.

[ApK]

Originally Posted by pdurrant

In theory. In practice you're vulnerable to man-in-the-middle* attacks, especially relevant when accessing over someone else's wifi.

One of the reason PUBLIC wifi is especially vulnerable is that, while hackers probably are not focusing a tremendous amount of attention on YOUR home network in particular, they ARE paying attention to public wifi hotspots, because they know lots of less-than-security-conscious people sit there and do potentially interesting and valuable stuff. It's a target rich environment.
And they also know that, as trustworthy as your local cafe owner may be, he doesn't have the IT security resources to constantly monitor and defend against the latest threats, like, say, your bank, or Amazon, does (and even they get hacked).

BTW, does anyone know: Can a MitM attack be successfully executed, in the real world, if you check that the server shows a properly issued SSL cert? That is, assuming your browser is not compromised, if you actually check that the cert is issued to the correct domain from a trusted root, is there a legitimate chance of there being a MitM? I'm seriously asking because I'm not that versed in the implementation details of SSL or proxies.