Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Shells Virtual Desktop
BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
Shells Virtual Desktop
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

WireGuard VPN @ $10/Year - Privacy Focused, No logs policy - HostCram LLC

2»

Comments

  • VoidVoid Member
    edited April 12

    Do you allow port forwarding ?

    Premium Bandwidth

    What makes it premium ?

    Encrypted Traffic

    Default WireGuard encryption or something else ?
    Do you allow public torrents ?

    Thanked by 1Shakib
  • @Shakib said:

    @zed said:
    is that correct, the difference between $10/yr and $50/yr is support?

    Way more bandwidth allowance.

    Unlimited vs unlimited?

  • LeviLevi Member

    @gbzret4d said:

    @Shakib said:

    @zed said:
    is that correct, the difference between $10/yr and $50/yr is support?

    Way more bandwidth allowance.

    Unlimited vs unlimited?

    The best limited is unlimited.

    Thanked by 2Shakib Frameworks
  • yoursunnyyoursunny Member, IPv6 Advocate

    @Shakib said:

    @yoursunny said:

    @Shakib said:
    No KYC/ID Verification Required.

    I'm not collecting any network data

    Nevertheless, HostCram Terms of Service:

    • 3/ Providing false contact information of any kind may result in the termination of your account.
    • 5/ IV. We monitor all traffic to and from our servers.

    We just require valid contact info. Verification isn't required.

    Not really. Basic bandwidth usage and speed only.

    I don't even look into those unless I observe high network I/O on a node.

    Please update your ToS to reflect such.
    Maybe change billing template so that everyone is named “Incognet HostCram Customer Privacy” and only accepting an email address?

    Thanked by 1Shakib
  • ShakibShakib Member, Patron Provider

    @Void said:
    Do you allow port forwarding ?

    Premium Bandwidth

    What makes it premium ?

    Encrypted Traffic

    Default WireGuard encryption or something else ?
    Do you allow public torrents ?

    Not allowed at the moment.

    It's basically the same bandwidth we have for VPS servers going through a dedicated NIC and our Juniper switch.

    Default WireGuard encryption.

    We aren't blocking anything at the moment.

    Thanked by 1Void
  • ShakibShakib Member, Patron Provider

    @gbzret4d said:

    @Shakib said:

    @zed said:
    is that correct, the difference between $10/yr and $50/yr is support?

    Way more bandwidth allowance.

    Unlimited vs unlimited?

    Fast vs Faster

  • lilyelalilyela Member

    Is the 5x premium on premium bandwidth worth it over the priority bandwidth option. How does this compare to premier or ultra offerings from other services 🤔

    Thanked by 1Shakib
  • matze00matze00 Member

    What is the advantage of you over other established VPN providers?

    For example Airvpn offers over 250 servers in more than 20 countries and 5 Simultaneous connections. 50$ per year (32$ on black friday)

    You offer one Server and one connection.

    So whats the deal?

  • ShakibShakib Member, Patron Provider

    @lilyela said:
    Is the 5x premium on premium bandwidth worth it over the priority bandwidth option. How does this compare to premier or ultra offerings from other services 🤔

    You should just buy the $10/Year Basic plan, the Pro plan is for those who wants priority data transfer and more bandwidth.

  • KyzKyz Member
    edited April 13

    @Shakib said:

    @lilyela said:
    Is the 5x premium on premium bandwidth worth it over the priority bandwidth option. How does this compare to premier or ultra offerings from other services 🤔

    You should just buy the $10/Year Basic plan, the Pro plan is for those who wants priority data transfer and more bandwidth.

    what's the advantage of the $50 plan one, if it's priorty and more bandwidth, vs other providers who do the same but cheaper?

    Thanked by 1Shakib
  • laythelaythe Member

    @Shakib said:

    @emperor said:
    GLWS, dedicated ip per plan or?

    Dedicated private IP, Shared public IP

    I genuinely laughed when I saw "dedicated private IP"

    Who would have thought

    Thanked by 1Shakib
  • forestforest Member
    edited April 13

    To everyone wondering if the VPN or its upstream is keeping logs: https://security.stackexchange.com/a/175186/106285

    Even if it doesn't keep logs, you'd need to be sure that none of the hops that you see in a traceroute keep logs. It's not enough just to trust the VPN provider or their direct upstreams. Do you trust the upstreams of the destination websites you're visiting over your VPN? Or networks on the dynamically-changing routes between the VPN and them? Surely not.

    VPNs are fine for casual anonymity (protecting against the MPAA/RIAA) and for protecting your internet connection when you're on an unsecured network like public Wi-Fi, but you should never rely on any VPN for real anonymity. VPNs are still fine though, don't get me wrong, but if your threat model includes NetFlow-level monitoring, a VPN is not going to be particularly bulletproof unless you use something like Tor (and even Tor is not completely flawless in every threat model).

    Thanked by 1Shakib
  • laythelaythe Member

    @forest said:
    To everyone wondering if the VPN or its upstream is keeping logs: https://security.stackexchange.com/a/175186/106285

    Even if it doesn't keep logs, you'd need to be sure that none of the hops that you see in a traceroute keep logs. It's not enough just to trust the VPN provider or their direct upstreams. Do you trust the upstreams of the destination websites you're visiting over your VPN? Or networks on the dynamically-changing routes between the VPN and them? Surely not.

    VPNs are fine for casual anonymity (protecting against the MPAA/RIAA) and for protecting your internet connection when you're on an unsecured network like public Wi-Fi, but you should never rely on any VPN for real anonymity. VPNs are still fine though, don't get me wrong, but if your threat model includes NetFlow-level monitoring, a VPN is not going to be particularly bulletproof unless you use something like Tor.

    If your VPN provider actually doesn't keep logs, then there is no way of mapping the logs from other hops to you as an individual no?

    Thanked by 1Shakib
  • forestforest Member
    edited April 13

    @laythe said:

    @forest said:
    To everyone wondering if the VPN or its upstream is keeping logs: https://security.stackexchange.com/a/175186/106285

    Even if it doesn't keep logs, you'd need to be sure that none of the hops that you see in a traceroute keep logs. It's not enough just to trust the VPN provider or their direct upstreams. Do you trust the upstreams of the destination websites you're visiting over your VPN? Or networks on the dynamically-changing routes between the VPN and them? Surely not.

    VPNs are fine for casual anonymity (protecting against the MPAA/RIAA) and for protecting your internet connection when you're on an unsecured network like public Wi-Fi, but you should never rely on any VPN for real anonymity. VPNs are still fine though, don't get me wrong, but if your threat model includes NetFlow-level monitoring, a VPN is not going to be particularly bulletproof unless you use something like Tor.

    If your VPN provider actually doesn't keep logs, then there is no way of mapping the logs from other hops to you as an individual no?

    There is, because each other hop is only forwarding your data. If your home ISP is not trusted (which is taken as a given if you are looking for a VPN), then all it takes is one network logging the connection between the VPN and your destination website and, along with your home ISP's logs, it'll be able to reliably correlate the activity to you.

    Imagine:

    1. Home ISP sees you send 253 bytes of data at t+0 to your VPN.
    2. Intermediate ISP sees the VPN send a 253 byte request to lowendtalk.com at t+1.
    3. Intermediate ISP sees lowendtalk.com send a 90146 byte reply at t+2.
    4. Home ISP sees you receive a 90146 byte reply at t+3.

    Here, the intermediate ISP is any ISP between the VPN and LET (whether it's near your VPN or is literally LET's own upstream). If the intermediate ISP is logging, then it, with the help of your home ISP, can conclude that you visited lowendtalk.com despite you using your VPN and despite the VPN and its immediate upstreams not keeping logs.

    Of course, the real world will have potentially thousands of other requests mixed in with those 4 steps, but there are only so many possible combinations and it doesn't take many page loads before it's possible to exclude connections that can't possibly have been yours until only your own connections remain. Quite a few efficient algorithms have been developed to do just that and they work quite well given enough logs.

    That's not to say VPNs are shit. It'll still prevent the average website from knowing who is behind the VPN IP that connected to it, but it's not going to be effective all of the time against an adversary with access to network timing information. Tor is much better because it pads "cells" up to 514 bytes, and because the higher jitter makes it more difficult to correlate timing information. Additionally, there are far more possible exiting IPs to keep track of. Tor also sends periodic keepalives that "collapse" NetFlow records in their default configuration. But even Tor has some vulnerability to this general type of attack (a traffic correlation attack), especially due to the fact that many high-capacity relays are concentrated on just a few providers.

    Thanked by 3Shakib RIYAD darkmaster
  • laythelaythe Member

    @forest said:

    @laythe said:

    @forest said:
    To everyone wondering if the VPN or its upstream is keeping logs: https://security.stackexchange.com/a/175186/106285

    Even if it doesn't keep logs, you'd need to be sure that none of the hops that you see in a traceroute keep logs. It's not enough just to trust the VPN provider or their direct upstreams. Do you trust the upstreams of the destination websites you're visiting over your VPN? Or networks on the dynamically-changing routes between the VPN and them? Surely not.

    VPNs are fine for casual anonymity (protecting against the MPAA/RIAA) and for protecting your internet connection when you're on an unsecured network like public Wi-Fi, but you should never rely on any VPN for real anonymity. VPNs are still fine though, don't get me wrong, but if your threat model includes NetFlow-level monitoring, a VPN is not going to be particularly bulletproof unless you use something like Tor.

    If your VPN provider actually doesn't keep logs, then there is no way of mapping the logs from other hops to you as an individual no?

    There is, because each other hop is only forwarding your data. If your home ISP is not trusted (which is taken as a given if you are looking for a VPN), then all it takes is one network logging the connection between the VPN and your destination website and, along with your home ISP's logs, it'll be able to reliably correlate the activity to you.

    Imagine:

    1. Home ISP sees you send 253 bytes of data at t+0 to your VPN.
    2. Intermediate ISP sees the VPN send a 253 byte request to lowendtalk.com at t+1.
    3. Intermediate ISP sees lowendtalk.com send a 90146 byte reply at t+2.
    4. Home ISP sees you receive a 90146 byte reply at t+3.

    Here, the intermediate ISP is any ISP between the VPN and LET (whether it's near your VPN or is literally LET's own upstream). If the intermediate ISP is logging, then it, with the help of your home ISP, can conclude that you visited lowendtalk.com despite you using your VPN and despite the VPN and its immediate upstreams not keeping logs.

    Of course, the real world will have potentially thousands of other requests mixed in with those 4 steps, but there are only so many possible combinations and it doesn't take many page loads before it's possible to exclude connections that can't possibly have been yours until only your own connections remain. Quite a few efficient algorithms have been developed to do just that and they work quite well given enough logs.

    That's not to say VPNs are shit. It'll still prevent the average website from knowing who is behind the VPN IP that connected to it, but it's not going to be effective all of the time against an adversary with access to network timing information. Tor is much better because it pads "cells" up to 514 bytes, and because the higher jitter makes it more difficult to correlate timing information. Additionally, there are far more possible exiting IPs to keep track of. Tor also sends periodic keepalives that "collapse" NetFlow records in their default configuration. But even Tor has some vulnerability to this general type of attack (a traffic correlation attack), especially due to the fact that many high-capacity relays are concentrated on just a few providers.

    i see what you meant, however this does feel quite impractical tho, unless you are on the top list of some intelligence agencies. if i understand correctly, the intermediate isp could say, log the footprint of certain data that they know were destined to a questionable server, and law enforcement was acknowledged of it, the next thing they need to do is to ask every single isp on planet earth about who sent the data with those footprint within a specific timeframe right? that just seems like, too much. especially considering the current international relationships and how willing is everyone to comply if its actually cross border. after all there is no perfect security but only about making the cost of an attack higher than the potential reward

    Thanked by 1Shakib
  • forestforest Member
    edited April 13

    @laythe said: unless you are on the top list of some intelligence agencies

    Or just purchase the data from a data broker in bulk like many companies do. But the original worry was about NetFlow records, which is already something that the average person has to worry about less than, say, old-fashioned cookie-based tracking. If NetFlow-level monitoring is within your threat model, then a VPN is certainly insufficient.

    @laythe said: the next thing they need to do is to ask every single isp on planet earth about who sent the data with those footprint within a specific timeframe right?

    No, just a single network between the VPS server and the destination. Just think of any network that owns a significant portion of the internet, such as Cloudflare.

    @laythe said: especially considering the current international relationships and how willing is everyone to comply if its actually cross border

    It's not the government sharing the data, it's for-profit companies which will happily operate anywhere they legally can.

    Thanked by 1Shakib
Sign In or Register to comment.