…because VPNs obscure a user’s true location, and because intelligence agencies presume that communications of unknown origin are foreign, Americans may be inadvertently waiving the privacy protections they’re entitled to under the law…

…VPNs might protect you against garden-variety criminals, but the intentional commingling of origin/destination points by VPNs could turn purely domestic communications into “foreign” communications the NSA can legally intercept (and the FBI, somewhat less-legally can dip into at will)…

Certainly the NSA isn’t concerned about “incidental collection.” It’s never been too concerned about its consistent “incidental” collection of US persons’ communications and data in the past and this isn’t going to budge the needle, especially since it means the NSA would have to do more work to filter out domestic communications and the FBI would be less than thrilled with any efforts made to deny it access to communications it doesn’t have the legal right to obtain on its own.

Since the government won’t do this, it’s up to the general public, starting with everyone sharing the contents of this letter with others. VPNs can still offer considerable security benefits. But everyone needs to know that domestic surveillance is one of the possible side effects of utilizing this tech.

  • CaptainBasculin@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    5
    ·
    11 hours ago

    Technically true, you should choose your VPN provider carefully and not opt for the cheapest one right on.

    In practice however, it’s safer than whatever surveillance US is trying to implement by forcing down US made routers.

    • mlg@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      13 hours ago

      Honestly they’d probably throw you on a list for not using the internet lol.

  • hansolo@lemmy.today
    link
    fedilink
    English
    arrow-up
    1
    ·
    20 hours ago

    This is utter BS.

    A foreign national on US soil doesn’t get the same protections as a US citizen would overseas.

    What they’re saying is “fuck 'em all, let God sort 'em out!” for warrantless data searches and collection. And then waiting for the lawsuit 20 years from now about clear violation of the law to bother thinking about this.

  • AlexLost@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    21 hours ago

    Hey, just so you know. Trying to hide from us “totally not spying on you” might force us to totally spy on you.

  • 𝕸𝖔𝖘𝖘@infosec.pub
    link
    fedilink
    English
    arrow-up
    2
    ·
    1 day ago

    VPNs could turn purely domestic communications into “foreign” communications the NSA can legally intercept

    Lol. Then they go and immediately say:

    and the FBI, somewhat less-legally can dip into at will

    In other words, they don’t gaf about your sovereignty, and will monitor communications in any way they want, legally or otherwise.

    They’ve been illegally digging into domestic communications for decades. Stallman and Snowden (to name a couple) exposed that a long time ago. Hell, the USA government exposes themselves all the time, the USA people just choose to ignore it.

  • dalekcaan@feddit.nl
    link
    fedilink
    English
    arrow-up
    5
    ·
    2 days ago

    Oh nooo, we won’t be protected by the law they can’t be arsed to follow anyway? Whatever will I do when they surveil my encrypted VPN traffic?

    • 9tr6gyp3@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      2 days ago

      Store now, decrypt later. Make sure your VPN is using quantum-safe encryption algorithms with perfect forward secrecy. They are storing ALL traffic that goes outside the country (probably domestic traffic too, realistically).

  • artyom@piefed.social
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 days ago

    Americans may be inadvertently waiving the privacy protections they’re entitled to under the law…

    LOL what privacy protections? The NSA has proven time and time again that they don’t give a single shit about the law, certainly now more than ever.

    • BlackLaZoR@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 day ago

      What do I trust more: Legal protections nobody cares to enforce and could be a multi year battle in court, or well verified strong cryptography.

      • calcopiritus@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 day ago

        It’s not the cryptography you have to trust. It’s the other end of the tunnel. A free VPN most probably sells your data. Nobody offers free services for actually free.

        • sleepyplacebo@rblind.com
          link
          fedilink
          English
          arrow-up
          1
          ·
          16 hours ago

          Respectfully, this is a bit more nuanced than that. There are free VPNs ran by non profits supported fully by donations. Yes somebody is paying for it but it’s people donating to the services.

          For example there is an open source application called Bitmask that has 2 VPN providers by default, Riseup VPN and the Calyx Institute.

          You can download the Bitmask app itself or download the RiseupVPN app which is based on Bitmask but just pre configured to only use that single Riseup provider.

          https://bitmask.net/

          https://riseup.net/en/vpn

          • calcopiritus@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            13 hours ago

            You have to trust them though. That’s my point.They may say they are funded only by donations and still sell your data.

            In fact the first link says the same as I do as the first phrase. When using a VPN, you are moving your trust from your ISP to your VPN provider.

            Of course there may be exceptions that are actually free and don’t sell your data. But the ones that sell your data will rarely state so.

          • calcopiritus@lemmy.world
            link
            fedilink
            English
            arrow-up
            0
            arrow-down
            1
            ·
            20 hours ago

            Idk what either of those are. I don’t endorse any VPN. All I’m saying is that it doesn’t matter how strong the encryption algorithm is, you still have to trust your provider.

            VPNs have the exact same power over you as ISPs. Using a VPN to avoid your ISP is just kicking the can down the road. That’s why you better choose a VPN that you trust.

  • Boiglenoight@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    edit-2
    1 day ago

    I use VPN because it actually speeds up my connection on cellular. My theory is the DNS servers that Verizon uses in my area are inefficient, to the point where I’ll get 1 Mbit down on Verizon, but 100 Mbit down connected to Proton VPN.

    It has nothing to do with security, unless I’m in a coffee shop on WiFi.

    Edit: here are my speeds on cellular, first without VPN, second while connected to a server in Los Angeles.

    • Octagon9561@lemmy.ml
      link
      fedilink
      English
      arrow-up
      0
      ·
      23 hours ago

      Bro fast isn’t measuring your internet speed, it’s measuring how fast you’re connected to Netflix. Phone carriers like Verizon generally throttle video streaming if you’re on a cheaper plan but everything else is uneffected. A VPN just bypasses the video streaming throttle because then Verizon can’t see what you’re connected to. Use a real speed test app.

  • No1@aussie.zone
    link
    fedilink
    English
    arrow-up
    1
    ·
    2 days ago

    I don’t get it.

    Why should a Russian spy have to tell Americans anything?

    • HugeNerd@lemmy.ca
      link
      fedilink
      English
      arrow-up
      0
      arrow-down
      1
      ·
      1 day ago

      lol please tell me more. I’ve heard kooks like you are roaming around unmedicated?

        • HugeNerd@lemmy.ca
          link
          fedilink
          English
          arrow-up
          0
          arrow-down
          1
          ·
          19 hours ago

          Oh yes, fact-free drivel from a reliable source!

          Oh my god I thought today wouldn’t be fun with all the rain. Thanks!

          Here, print this out and keep it in your wallet.

          RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA RUSSIA

          Don’t forget, Russians can take the form of socks or freezer-burned ground beef, check your dryer and your freezer tonight!

          😂

          • boonhet@sopuli.xyz
            link
            fedilink
            English
            arrow-up
            1
            ·
            7 hours ago

            There’s dozens of sources, I linked the first one. The things they mention actually happened and have been corroborated by other sources.

            She basically always agrees with Putin’s propaganda. Either she’s an asset or a useful idiot.

  • Tharkys@lemmy.wtf
    link
    fedilink
    English
    arrow-up
    1
    ·
    2 days ago

    So, I am a remote worker in Healthcare. Obviously, I need to use a VPN to connect to work to ensure that communication is secure. But because I have a job that requires secure access, I am a suspected domestic terrorist?

    • Psiczar@aussie.zone
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 days ago

      No, because there are different types of vpn connectivity.

      A point to point vpn is what employees use to connect to the office. The intention is to encrypt the connection so a 3rd party can’t access ithe data going through it. The FBI/NSA won’t care about this type of vpn because your work knows who you are and logs all traffic generated by you which could be subpoenaed by the government.

      Connecting to a vpn server in another country to then access the internet hides your original ip address, gets around geo-location blocks and the traffic is typically not logged by the vpn provider. This is the type of vpn governments don’t like.

      • Bad_Ideas_In_Bulk@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        2 days ago

        I think it’s somewhat naive to assume anything isn’t being spied on by the NSA. They don’t have a history of being picky.

        • ferrule@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          0
          arrow-down
          1
          ·
          1 day ago

          What are you doing on your work VPN that you care if the government illegally looked at? I work in an industry that legally requires security like a VPN and I don’t care if the government broke the rules. It’s above my paygrade.

        • Psiczar@aussie.zone
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 days ago

          Of course. I’m sure they are making use of plenty of bugs found in firewall software to access and monitor business traffic, but they can subpoena those logs at any time. It’s the private vpn clients where logs aren’t kept that they are most concerned about, hence why I was outlining the difference.