Theoretically speaking, if one wanted to sail the seas while being not very tech savvy – is using a VPN (Mullvad) enough? I would never, of course… but theoretically?
Sweet, I'm doing something right, lol. I got my mom using Mullvad in Russia so she can get normal news and stuff, and I just top her account off with my American card cause she can't. Such a great system.
Thank you. Yes, it sucks. She is 81, and chose not to come here (USA) because everything she knows and her friends are all in Russia. It was really tough for her to be anti-war and lose friends over it, but at least she has not fallen for any propaganda like my dad did. I'm really proud of her, she uses a VPN and knows how to do a lot on the internet for her age.
I am not the best source for that because my mom avoids watching the government channels. But what I do know is they only report “positive” stuff about the war, like how Ukraine is being “liberated” and how Russia is valiantly fighting for its life and values. It’s sick. They never report on true casualties on either side and just say they only hit military targets.
When I lived back there in the 80s and 90s, we experienced a temporary reprieve from this kind of bullshit. For a short period of time, people felt free. The economy sucked, but it actually felt good to know you had a semblance of freedom of speech, comparatively speaking.
Now it’s back to fucking Stalin times. Like they say, all of Russian history can be summed up as “and then it got worse.”
If you want to learn more about Putin’s rise to power and how it was back then, I highly recommend The Man Without A Face by Masha Gessen. It was written in 2012, and it shows exactly who Putin is.
She uses it just fine. They also say they block FaceTime, but we have used it without an issue. Russian government and their technology is not the best. Although who knows, they are getting better, so maybe they will finally succeed.
check browserleaks.com and their webrtc leak test (or something similar) to find out! (if u get leaks u might need to disable ipv6). Also make sure to have a killswitch enabled in case ur vpn drops connection u dont want to automatically connect without it and expose urself
You could start by using the connection test on the mullvad website that checks for 3 different leaks.
VPN use is not illegal (yet).
Your ISP can still match your internet traffic to the act of torrenting - however they can not know what you are torrenting and the act of torrenting itself is not illegal.
Theoretically - using torrents to download free use material like you are going to do is 100% legal and above board. So what if you are choosing to use a VPN while doing it?
WebRTC (peer to peer media shit don't worry about it) intrinsically leaks IP information. It needs to be turned off in browsers like Firefox as well if that's whta you're using.
Either through settings, it's in there somewhere, or about:config and search for rtc amd disable.
If you are in the US, and the risk you're concerned about is getting in trouble, yes it is enough, provided you use it correctly. The only real risk is that copyright trolls will scrape your IP while you are torrenting along with the rest of a big list and then automatically send complaints to your ISP, which may then send you a threatening email, or shut off your internet if it happens enough times. The fact that this is the only action they are taking against consumer level pirates means that if your home IP is not itself available to torrent peers, you are entirely immune from anything happening.
Just make sure to bind your torrent client to your VPN, this is the accepted way of safely ensuring your IP cannot leak due to your VPN losing connection.
Thank you - I believe that's accomplished by setting Mullvad as the network interface in the client, which I did :D. But I will double check to make sure, theoretically speaking.
Keep in mind that each country has different piracy laws. Some don’t care much and fines won’t be pursued if you just ignore them, some poor countries don’t care at all, some don’t care about foreign content but take their own content and sports seriously, and some take all piracy seriously and hit you with tens of thousands of dollars of fines. I’d recommend looking into your local laws, and if you find out you’re in a danger zone, following the recommendations from your fellow countrypeople.
Even reputable no-logs VPNs aren’t foolproof, they can leak and the killswitch can fail. But Mullvad is currently the best, I heard their killswitch is better than Proton’s currently is.
Different methods carry different levels of risk. You’ll often hear that streaming from websites is safe since it’s not seeding (and exposing your IP address to the pool), but a lot of those sites do torrent from your browser these days (and can’t be bound to a VPN, I don’t think?). They’re also full of malware and malicious ads, so a good adblocker is necessary. The safest methods are private trackers (seeding but only to other private members) and debrid services (lowest risk but no seeding and they’re paid subscriptions. though there’s one that offers some seeding time at the highest subscription tiers). There’s also joining a trusted person’s private Jellyfin server (getting someone else to pirate for you).
Seeding is of course really important for preventing the entire system from collapsing and preventing niche or old media from being lost, so if you’re in a position to seed, you absolutely should. A good VPN bound to the torrent client (after enabling the killswitch and doing the leak tests) and the knowledge to ignore fines is enough for public trackers in many countries.
Note that even in countries where fines aren’t pursued if you just ignore them, (if they do somehow get sent due to a VPN accident or the government further eroding human rights) they’ll be sent out to your ISP and the person named on the internet bill. Your household may have their own thoughts about your viewing history, and some people are concerned about their government getting wind that they consume things like queer or non-English media.
You don't need to be so euphemistic. If you're just downloading, piracy is not really investigated rigorously anywhere. Just using a VPN is sufficient. You can talk openly about it too.
Mullvad is good, but it's not enough to make piracy safe.
An adblocker like ublock is essential, not just for blocking ads but for blocking malware.
Streaming piracy is about as safe as sketchy websites always are, which is pretty okay these days.
If you download anything, check the file type before opening and whether the type is safe. For example, .exe is extremely unsafe, .pdf is somewhat unsafe, and .mp3 is safe. Generally audio and video file formats are pretty safe because they're very locked down in what they can do, while interactive formats are dangerous. Someone might call audio by a misleading name to troll, but it shouldn't put your device at risk.
If you download .exe s, do not run them unless you are very confident the source is trustworthy. This means a trusted account posting on a trusted website claiming that a trusted person made the exe. I haven't caught this guide in a lie yet, but when it comes to exes double- and triple-check everything.
The more tech savvy solution would be to run .exes (or all pirated files if you're being paranoid) in a virtual machine so even if the virtual machine is pwned the rest of your computer wouldn't be.
One of the things I did was to run mulvad in a virtual machine and use a different web browser in the vm than I used normally. This makes tracking much harder because they rely on website fingerprinting to identify you independently of your ip address.
Same. I share on soulseek and use usenet and torrents. I have torguard VPN, have downloaded and uploaded TRRABYTES of data over the last 8 years. I use a completely different computer that I RDP to and use a completely different browser, Tor when I need to.
I've been sailing for a good 20 years now. I run PIA VPN, which I know has concerns with their ownership, but that's what I've always had and purchased before their sale, and have never had any issues. I have received 3 letters from ISPs in my life and all were when my VPN wasn't running. No I have a kill switch in my workflow that will cut access with no VPN.
If you look into something like MEGA, all that data is http traffic. I've used that without a VPN a lot and have had no issues there, but that's now my backup for when alternatives aren't available.
VPN is almost for sure good enough, but there are other actions you can take if you want to take it further. Do a search for fmhy and follow some advice I there for detailed info.
use PIA as well cuz its the only port forwarding vpn i got to work on arch linux, not endorsing them cuz what the fuck do i know but never had any issues
I use a seedbox. I won't link to the one I use, but if you add dot eye oh it'll redirect you to their new site. They run the seedbox in a country that doesn't force them to give up info to anyone asking, and you download stuff via SFTP which cannot be seen by the people looking at torrents, and to your ISP, it's just a connection to a server somewhere. So it's safe.
The seedbox I have even has emby, meaning I can click a magnet link in the browser that opens with rutorrent on the seedbox, add the torrent to one of the categories I also set up in emby, and once it's downloaded to the seedbox, I can stream it on my phone or desktop. It's painless.
That’s neat! As an animal lover, I also love the mole in their logo. Not that the logo has anything to do with the quality of the service… but it is cute.
Moles build tunnels. Underground, can't be seen. They dig a hole, build a tunnel, then surface somewhere else without anyone being any the wiser. Surely you have heard of VPN tunnels! That's why they have a mole as a design animal. :)
I can see an argument that the exit node is someone else's computer. An an example of this risk, honeypot Tor exit nodes.
In this context, however, I would trust Mullvad's exit nodes, I think. Well, do trust them, since I use them, just not for anything that would get me in hot water.
Yep, pretty much all servers are. You could say that about anything. Lemmy is just someone else's computer. Wikipedia is just someone else's computer. 100% of network infrastructure is just someone else's computer.
It's actually least accurate for VPN in general than anything else, because it's common to host a VPN for access to a local network and homelab services, or corporate network and internal work-related services, in which case the VPN server is not someone else's computer.
72 Comments
homes@piefed.world · 70 pts · 164d
any vpn is better than no vpn, and mullivad is well-reputed
ickplant@lemmy.world · 25 pts · 164d
Sweet, I'm doing something right, lol. I got my mom using Mullvad in Russia so she can get normal news and stuff, and I just top her account off with my American card cause she can't. Such a great system.
homes@piefed.world · 27 pts · 164d
I’m very sorry to hear that your mother is stuck in Russia, but at least she has access to the real world Internet.
ickplant@lemmy.world · 51 pts · 164d
Thank you. Yes, it sucks. She is 81, and chose not to come here (USA) because everything she knows and her friends are all in Russia. It was really tough for her to be anti-war and lose friends over it, but at least she has not fallen for any propaganda like my dad did. I'm really proud of her, she uses a VPN and knows how to do a lot on the internet for her age.
meco03211@lemmy.world · 14 pts · 164d
Now I'm curious. What is Russian news saying about the war?
ickplant@lemmy.world · 29 pts · 164d
I am not the best source for that because my mom avoids watching the government channels. But what I do know is they only report “positive” stuff about the war, like how Ukraine is being “liberated” and how Russia is valiantly fighting for its life and values. It’s sick. They never report on true casualties on either side and just say they only hit military targets.
When I lived back there in the 80s and 90s, we experienced a temporary reprieve from this kind of bullshit. For a short period of time, people felt free. The economy sucked, but it actually felt good to know you had a semblance of freedom of speech, comparatively speaking.
Now it’s back to fucking Stalin times. Like they say, all of Russian history can be summed up as “and then it got worse.”
If you want to learn more about Putin’s rise to power and how it was back then, I highly recommend The Man Without A Face by Masha Gessen. It was written in 2012, and it shows exactly who Putin is.
Diplomjodler3@lemmy.world · 8 pts · 164d
Russia is winning. All Ukrainians are Nazis. NATO made us do it. That should about cover it.
hexagonwin@lemmy.today · 5 pts · 164d
try searching for rtnews
SatansMaggotyCumFart@piefed.world · 10 pts · 164d
Or browse .ml.
harrys_balzac@lemmy.dbzer0.com · 2 pts · 163d
It's easy - just listen to what Trump and most Congressional Republicans say about it. They parrot most of Russia's talking points.
grue@lemmy.world · 8 pts · 164d
Theoretically doing something right, you mean.
ickplant@lemmy.world · 4 pts · 164d
*Cough… yes, of course.
tomiant@piefed.social · 3 pts · 164d
Mullvad is fucking leg¹t.
SlurpingPus@lemmy.world · 2 pts · 163d
Is Mullvad not blocked? Afaik Proton is blocked, for example, at least the free servers.
ickplant@lemmy.world · 2 pts · 163d
She uses it just fine. They also say they block FaceTime, but we have used it without an issue. Russian government and their technology is not the best. Although who knows, they are getting better, so maybe they will finally succeed.
lennee@lemmy.world · 32 pts · 164d
check browserleaks.com and their webrtc leak test (or something similar) to find out! (if u get leaks u might need to disable ipv6). Also make sure to have a killswitch enabled in case ur vpn drops connection u dont want to automatically connect without it and expose urself
ickplant@lemmy.world · 15 pts · 164d
Ooh, this is exactly the kind of stuff I need to learn how to check, thank you! I mean, theoretically...
bootstrap@lemmy.dbzer0.com · 12 pts · 164d
You could start by using the connection test on the mullvad website that checks for 3 different leaks.
VPN use is not illegal (yet).
Your ISP can still match your internet traffic to the act of torrenting - however they can not know what you are torrenting and the act of torrenting itself is not illegal.
Theoretically - using torrents to download free use material like you are going to do is 100% legal and above board. So what if you are choosing to use a VPN while doing it?
ickplant@lemmy.world · 3 pts · 164d
Thank you! And let’s hope it’s never made illegal, so we can continue to do things legally while respecting our internet preferences…
scytale@piefed.zip · 7 pts · 164d
Mullvad even has their own leak tests on their website. So once you’re connected, just go to the homepage and run a test before doing anything.
ickplant@lemmy.world · 2 pts · 164d
Awesome, thanks. I’m learning all kinds of theoretical things!
tomiant@piefed.social · 2 pts · 164d
WebRTC (peer to peer media shit don't worry about it) intrinsically leaks IP information. It needs to be turned off in browsers like Firefox as well if that's whta you're using.
Either through settings, it's in there somewhere, or about:config and search for rtc amd disable.
chicken@lemmy.dbzer0.com · 22 pts · 164d
If you are in the US, and the risk you're concerned about is getting in trouble, yes it is enough, provided you use it correctly. The only real risk is that copyright trolls will scrape your IP while you are torrenting along with the rest of a big list and then automatically send complaints to your ISP, which may then send you a threatening email, or shut off your internet if it happens enough times. The fact that this is the only action they are taking against consumer level pirates means that if your home IP is not itself available to torrent peers, you are entirely immune from anything happening.
Just make sure to bind your torrent client to your VPN, this is the accepted way of safely ensuring your IP cannot leak due to your VPN losing connection.
RodgeGrabTheCat@sh.itjust.works · 16 pts · 164d
Currently, I'm using Mullvad and used Proton a few months ago. Surfshark did the job many years ago.
Just make sure you pair your torrent client and vpn so if the vpn goes offline, the torrent stops down/up loading.
ickplant@lemmy.world · 10 pts · 164d
Thank you - I believe that's accomplished by setting Mullvad as the network interface in the client, which I did :D. But I will double check to make sure, theoretically speaking.
compostgoblin@piefed.blahaj.zone · 6 pts · 164d
Yep, binding Mullvad as the network interface should do it!
bunkyprewster@startrek.website · 2 pts · 158d
Why did you switch from Proton to Mullvad?
RodgeGrabTheCat@sh.itjust.works · 2 pts · 158d
Protonvpn has very limited options in their app on Fedora. Their CLI has about 6 settings.
Mullvad has nearly all the same features as their Android app - far more than Proton.
tomiant@piefed.social · 1 pts · 164d
Mullvad has a kill switch you can enable so it disables networking unless the VPN is up and running and traffic is routed through it.
No anonymity no internet. Very useful.
antlion@lemmy.dbzer0.com · 14 pts · 164d
A VPN won’t help you much. What you want is a boat, and a GPS.
BreadOven@lemmy.world · 5 pts · 163d
Probably a crew as well. Throw in an eye patch and parrot for good luck.
webkitten@piefed.social · 2 pts · 158d
BreadOven@lemmy.world · 1 pts · 117d
Agreed. I may prefer some good ol' Stan Rogers.
https://www.youtube.com/watch?v=s0CvSIhF_tA
Colonel_Panic_@eviltoast.org · 3 pts · 163d
Maybe a parrot and a few cannons too.
golden_king@lemmy.dbzer0.com · 14 pts · 164d
entropiclyclaude@lemmy.wtf · 4 pts · 163d
Just seconding this FMHY is your best friend
PocketGoblin@slrpnk.net · 13 pts · 164d
Keep in mind that each country has different piracy laws. Some don’t care much and fines won’t be pursued if you just ignore them, some poor countries don’t care at all, some don’t care about foreign content but take their own content and sports seriously, and some take all piracy seriously and hit you with tens of thousands of dollars of fines. I’d recommend looking into your local laws, and if you find out you’re in a danger zone, following the recommendations from your fellow countrypeople.
Even reputable no-logs VPNs aren’t foolproof, they can leak and the killswitch can fail. But Mullvad is currently the best, I heard their killswitch is better than Proton’s currently is.
Different methods carry different levels of risk. You’ll often hear that streaming from websites is safe since it’s not seeding (and exposing your IP address to the pool), but a lot of those sites do torrent from your browser these days (and can’t be bound to a VPN, I don’t think?). They’re also full of malware and malicious ads, so a good adblocker is necessary. The safest methods are private trackers (seeding but only to other private members) and debrid services (lowest risk but no seeding and they’re paid subscriptions. though there’s one that offers some seeding time at the highest subscription tiers). There’s also joining a trusted person’s private Jellyfin server (getting someone else to pirate for you).
Seeding is of course really important for preventing the entire system from collapsing and preventing niche or old media from being lost, so if you’re in a position to seed, you absolutely should. A good VPN bound to the torrent client (after enabling the killswitch and doing the leak tests) and the knowledge to ignore fines is enough for public trackers in many countries.
Note that even in countries where fines aren’t pursued if you just ignore them, (if they do somehow get sent due to a VPN accident or the government further eroding human rights) they’ll be sent out to your ISP and the person named on the internet bill. Your household may have their own thoughts about your viewing history, and some people are concerned about their government getting wind that they consume things like queer or non-English media.
Here’s the piracy community! You should do your research before getting started. https://lemmy.dbzer0.com/c/piracy
tomiant@piefed.social · 7 pts · 164d
pirates together stronk
ickplant@lemmy.world · 5 pts · 164d
Awesome, thank you for typing all of that out, that’s really helpful. And I subscribed to the community so I can learn more.
communism@lemmy.ml · 12 pts · 163d
You don't need to be so euphemistic. If you're just downloading, piracy is not really investigated rigorously anywhere. Just using a VPN is sufficient. You can talk openly about it too.
Tiresia@slrpnk.net · 9 pts · 164d
Mullvad is good, but it's not enough to make piracy safe.
An adblocker like ublock is essential, not just for blocking ads but for blocking malware.
Streaming piracy is about as safe as sketchy websites always are, which is pretty okay these days.
If you download anything, check the file type before opening and whether the type is safe. For example, .exe is extremely unsafe, .pdf is somewhat unsafe, and .mp3 is safe. Generally audio and video file formats are pretty safe because they're very locked down in what they can do, while interactive formats are dangerous. Someone might call audio by a misleading name to troll, but it shouldn't put your device at risk.
If you download .exe s, do not run them unless you are very confident the source is trustworthy. This means a trusted account posting on a trusted website claiming that a trusted person made the exe. I haven't caught this guide in a lie yet, but when it comes to exes double- and triple-check everything.
The more tech savvy solution would be to run .exes (or all pirated files if you're being paranoid) in a virtual machine so even if the virtual machine is pwned the rest of your computer wouldn't be.
Blue_Morpho@lemmy.world · 7 pts · 164d
One of the things I did was to run mulvad in a virtual machine and use a different web browser in the vm than I used normally. This makes tracking much harder because they rely on website fingerprinting to identify you independently of your ip address.
themachine@lemmy.world · 7 pts · 164d
Mulvad is great but if you need port forwarding you'll have to look elsewhere as they no longer provide that feature.
imsufferableninja@sh.itjust.works · 7 pts · 164d
I use Usenet instead of VPN + torrent, myself. I pay $6/mo for Usenet access and use a bunch of free indexers, plus a $2/mo paid one.
tronx4002@lemmy.world · 2 pts · 164d
Curious if you are in the US?
thermal_shock@lemmy.world · 2 pts · 164d
Same. I share on soulseek and use usenet and torrents. I have torguard VPN, have downloaded and uploaded TRRABYTES of data over the last 8 years. I use a completely different computer that I RDP to and use a completely different browser, Tor when I need to.
imsufferableninja@sh.itjust.works · 1 pts · 164d
I am
belazor@lemmy.zip · 2 pts · 164d
What are some good free indexers? I’ve only heard of paid ones (nzbgeek personally) 🤔
imsufferableninja@sh.itjust.works · 4 pts · 164d
Drunken slug, tabula rasa, square eyed, digital carnage
belazor@lemmy.zip · 1 pts · 163d
I’ll check them out, thank you!
redsand@infosec.pub · 7 pts · 164d
Mullvad has some advanced features like DAITA and 2 hop you can use for more security.
ickplant@lemmy.world · 4 pts · 164d
Thanks! I am learning a ton today. I’m googling every term I don’t know. Feeling very “galaxy brain” right now.
Edit: I should specify I’m using Duck Duck Go instead of Google cause you all taught me that. So thanks again.
redsand@infosec.pub · 1 pts · 164d
For your mom a BRICS country to Japan, the EU, etc... Would probably be a good idea. Use jurisdiction against them
tomiant@piefed.social · 5 pts · 164d
Yes, and Mullvad is the right choice.
BassTurd@lemmy.world · 5 pts · 164d
I've been sailing for a good 20 years now. I run PIA VPN, which I know has concerns with their ownership, but that's what I've always had and purchased before their sale, and have never had any issues. I have received 3 letters from ISPs in my life and all were when my VPN wasn't running. No I have a kill switch in my workflow that will cut access with no VPN.
If you look into something like MEGA, all that data is http traffic. I've used that without a VPN a lot and have had no issues there, but that's now my backup for when alternatives aren't available.
VPN is almost for sure good enough, but there are other actions you can take if you want to take it further. Do a search for fmhy and follow some advice I there for detailed info.
lennee@lemmy.world · 3 pts · 157d
use PIA as well cuz its the only port forwarding vpn i got to work on arch linux, not endorsing them cuz what the fuck do i know but never had any issues
tomiant@piefed.social · 3 pts · 164d
And uBlock Origin, goes without saying
daychilde@lemmy.world · 5 pts · 164d
I use a seedbox. I won't link to the one I use, but if you add dot eye oh it'll redirect you to their new site. They run the seedbox in a country that doesn't force them to give up info to anyone asking, and you download stuff via SFTP which cannot be seen by the people looking at torrents, and to your ISP, it's just a connection to a server somewhere. So it's safe.
The seedbox I have even has emby, meaning I can click a magnet link in the browser that opens with rutorrent on the seedbox, add the torrent to one of the categories I also set up in emby, and once it's downloaded to the seedbox, I can stream it on my phone or desktop. It's painless.
nul9o9@lemmy.dbzer0.com · 5 pts · 164d
+1 with mullvad. Haven't heard of any issues with them. Had nothing to turn over to investigators multiple times.
You can pay them in cash if you want, so they'd have no PII on you other than your IP.
tomiant@piefed.social · 5 pts · 164d
This is true, I know for a fact. Cops showed up demanded they gave them everything, and they did: they got nothing. Nothing stored, nothing to give.
Bye pig.
ickplant@lemmy.world · 4 pts · 164d
That’s neat! As an animal lover, I also love the mole in their logo. Not that the logo has anything to do with the quality of the service… but it is cute.
tomiant@piefed.social · 2 pts · 163d
Moles build tunnels. Underground, can't be seen. They dig a hole, build a tunnel, then surface somewhere else without anyone being any the wiser. Surely you have heard of VPN tunnels! That's why they have a mole as a design animal. :)
hesh@quokk.au · 5 pts · 164d
You can use ipleak.net to see if your IP is visible through your web browser AND through downloading a test torrent.
ickplant@lemmy.world · 3 pts · 164d
Thank you!!!
Jankatarch@lemmy.world · 2 pts · 164d
I think some ISPs still track if you use torrent and send warning emails.
EpicFailGuy@lemmy.world · 2 pts · 164d
mull is a very decent VPN and that will do OK to anonymize your traffic, but that's all you're doing ... you're far from safe from all threats.
There's malicious downloads, torrent hijacks, honeypots, bandwidth issues, the Number one thing you need to stay safe is COMMON SENSE ...
So educate yourself and learn about this world you're getting into. The information is out there and freely available.
WagnasT@piefed.world · 2 pts · 164d
If you don't want to store the media then yarrlist has a bunch of sketchy streaming sites that work well enough with an ad blocker.
Agility0971@lemmy.world · -3 pts · 164d
Vpn is someone elses computer
oeuf@slrpnk.net · 7 pts · 164d
Website is someone else's computer.
theunknownmuncher@lemmy.world · 5 pts · 164d
Wrong. VPN is the encrypted tunnel between your computer and someone else's computer.
You're thinking of a VPS.
schwim@piefed.zip · 2 pts · 164d
I can see an argument that the exit node is someone else's computer. An an example of this risk, honeypot Tor exit nodes.
In this context, however, I would trust Mullvad's exit nodes, I think. Well, do trust them, since I use them, just not for anything that would get me in hot water.
Agility0971@lemmy.world · 1 pts · 164d
I'll rephrase: VPN server is someone elses computer
theunknownmuncher@lemmy.world · 1 pts · 164d
Yep, pretty much all servers are. You could say that about anything. Lemmy is just someone else's computer. Wikipedia is just someone else's computer. 100% of network infrastructure is just someone else's computer.
It's actually least accurate for VPN in general than anything else, because it's common to host a VPN for access to a local network and homelab services, or corporate network and internal work-related services, in which case the VPN server is not someone else's computer.
tomiant@piefed.social · 1 pts · 163d
"It's all computer".