How to Make Your Own VPN (And Why You Would Want to)
ฝัง
- เผยแพร่เมื่อ 13 พ.ค. 2024
- Sponsored by Linode!
Get $20 credit for your first cloud server or VPS here: linode.com/wolfgang
Text version: notthebe.ee/blog/creating-you...
OpenVPN road warrior installer by Nyr: github.com/Nyr/openvpn-install
Support the channel:
Patreon / wolfgangschannel
PayPal (one time donation) www.paypal.com/donate/?hosted...
Follow me:
Twitter / notthebeeee
GitHub github.com/notthebee
Music:
Falls - Triboro
Memory Theory - Polymath
Falls - Magenta
Timestamps:
00:00 Introduction
01:28 Everything wrong with the VPN services
05:50 What are the alternatives?
07:39 VPN services vs. Self-hosted VPNs
08:58 Choosing a VPS provider
10:43 My choice of the VPS provider
11:25 Creating an account (The tutorial starts here)
11:45 Creating a VPS
12:37 Generating SSH keys
13:46 Updating the packages
14:07 Creating a non-root user
15:04 Configuring SSH
17:14 Installing and configuring OpenVPN
20:50 Installing mosh
21:14 Two-factor authentication
23:53 Automatic updates
25:11 Conclusion - วิทยาศาสตร์และเทคโนโลยี
The guide starts at 11:25
TIMESTAMPS
00:00 Introduction
01:28 Everything wrong with the VPN services
05:50 What are the alternatives?
07:39 VPN services vs. Self-hosted VPNs
08:58 Choosing a VPS provider
10:43 My choice of the VPS provider
11:25 Creating an account (The tutorial starts here)
11:45 Creating a VPS
12:37 Generating SSH keys
13:46 Updating the packages
14:07 Creating a non-root user
15:04 Configuring SSH
17:14 Installing and configuring OpenVPN
20:50 Installing mosh
21:14 Two-factor authentication
23:53 Automatic updates
25:11 Conclusion
Bruh
thank you i was about to look for this
Fun fact: make your own server do not avoid your network traffic to be shared, they still can order linode to give your network history.
This is exactly what I needed thanks.
nice vid bruh
starts at 0:00
Thanks
That's what I like.
0:00
thanks I was so lost
saved me a lot of waiting
Exactly, no matter what a VPN provider says, you have to trust them when it comes to storing and sharing your logs. If they can profit or have to protect themselves, they with share them with other companies.
Okay everyone knows this but how likely is it that they will steal your information or that it will be stolen? you're more likely to get hit by a car or be in an accident or just die.
And government too
Many commercial VPN providers make money through bogus claims to protect privacy of internet users. One example is NordVPN, which I find surprising is they refuse to allow XMR Monero but only Bitcoin and that too via Coinbase payment gateway. It is better to get a VPS that allows payment via XMR Monero crypto, and allow selfhost a VPN.
Do they sell insurance? Term GPU?
You will NEVER find out the truth on the Internet.. NEVER... It's always ONLY about money and making people feel insecure... At the end of the day, we don't know anything !! Everyone believes what they want to believe and will only google themselves in the direction of being "smart"... If you don't understand how the internet REALLY works... If you don't even know why audio is streaming through the air from a walky Talky is transmitted to the other... Then a lot can be told.. VPN, Proxy etc.. or not... Keeping the people STUPID -- It was done thousands of years ago and it's getting worse... Why? So that we don't pose a threat... But who am I... People get upset every day and yet they go back to work on Monday... Whether you believe in conspiracies or not, UFO's "YES" - "NO" ..Repteliuden and so on.. doesn't matter .. because we humans still do what they want, we go to work, consume, spend money and pay money to be entertained so that we feel good about ourselves to be able to go back to work...The REAL goals of each country, we will NEVER know and what we believe in whether sure or not sure if the government is bugging us or not.. Irrelevant... The question isn't, "Will we lied to - truth or lie? You should think about WHY we are told this and that - how do we behave because of it... Clearly: If we are told bullshit, and more bullshit and more bullshit .. what happens right - bullshit, doesn't matter how smart you are.... Stop racking your brains and focus on life and people that mean a lot to you and invest your time with your loved ones instead of thinking about it the government or your ISP is bugging you or your data is being sold...
Wolfgang, your content is phenomenal. Thank you for your generosity. I hope I can find the cash to donate to your channel soon because you've pieced together some concepts that I understood only in the abstract. Thank you.
Been doing it on my own for quite a while now, but with your hints I just took it to a new level of customization. Great video!
do u need a vpn provider or can u use data that u have when u were in another country .
is this a good thing to do if you want to work abroad without your employer knowing?
Yo-yo you wanna help me create a good vpn ?
@@jloc151 ye I would want to
15:48 "I personally prefer to use the port 69." I see you are a man of culture
No tftp for you! :P
@stormyweathers08 The text guide covers Windows as well th-cam.com/users/redirect?v=gxpX_mubz2A&event=video_description&q=https%3A%2F%2Fnotthebe.ee%2FCreating-your-own-OpenVPN-server.html&redir_token=QUFFLUhqbnlRRGRvY1RpemZRSFI2WkdFbGxWd3A3NExoUXxBQ3Jtc0trS0s5TFJwWlZfUHVoRUxVNk5Pc0ozbGJsUHBtWEJKVGctaV9JejktdnhtVWIyU1dUaTRWenc4cWhCd21SQWFfQi1FOFE4aWtudXJGdE4zWFhCTU9LN0hSclhEMmVPQzVhcjdpaEE4Y2Z3cnBON25zbw%3D%3D
Wolfgang's Channel Thank you!
@@WolfgangsChannel wolfgang, you either missed this joke or ignored it? lol the port number is significant LMAO
@@yogiballa I was replying to @stormyweathers08
Hey, thank you for this. I saw this on google but no one makes a tutorial. Glad I saw this today on my recommendation. Gonna finish this tutorial and will sign up with your link. Thanks again
Aye!!
I love that you posted the timestamps. Makes this video so much more useful! Thanks!! I "liked" the video.
Thank you for the in-depth explanation, prior to even starting the setup tut. No unexpected surprises halfway through the process. This is a refreshing compared to many various installation/setup tuts I have reviewed in the past. I have subscribed. Thanks again!
All the TH-cam ads being for VPN services is hilarious. Nice video!
Yeah, that's called personalized ads...
Truly. It's so cringe lmao
TH-cam be like "no, wait, hold on, let us take your money, plz don't go"
Ads? What are ads?
wouldnt know I use adblocker
Hello Wolfgang,
I want you to know that i appreciate your in depth knowledge and have deep respect for you that you take the time to share the results of the hard work that you do in order to educate the MANY MANY people that simply have NO CLUE! Thank you.
Mike S.
what the fuck is that supposed to mean?
Hey Yanish Mounnah,
I want you to know that he is just telling nothing. Have a Good day !
Killua Z.
Thanks for sharing such an interesting content for free and with so much clarity. You deserve a lot more subscribers than people sharing their gaming sessions...
"I know you guys are lazy and are not going to do that" - Fuck I really DO need a VPN he knows me too well.
Don't give up Rick !
@@mbedj1974 Rolled
Just download a cracked vpn
Hi Wolfgang,
Thank you for sharing this information. Assuming that everything you've said is true, both the loss of privacy and not knowing who to trust is a bigger issue that most of us realize.
This video actually had some very useful info aside from the VPN FUD at the beginning. I'm very thankful for pointing me to an alternative VPS provider that can do terraform and ansible so I don't have to constantly suck on AWS' teat.
Excellent video! Finally someone who explains this thoroughly and also shows how to improve everything. Thank you! I'm gonna give it a try. I just want to also mention that in Linode's Master Services Agreement and in their Privacy Policy they state that personal data (including network logs) are all maintained on their servers and may be presented to law enforcement if there is a court order etc. These will be used in case of suspicious criminal activities. So unless I'm reading this wrong, they do state that information is kept on their servers. So don't go and try something bad now ;)
Or if the govt is bent on getting opposition activity check. Fear factor
i really appreciate the amount of effort you put into making this tutorial and showing how serious you are about privacy
I appreciate your honesty, you sum up pro's and cons and if you are sponsored, you mention it, if you see another video which explains the same thing you do but better, you are man enough to admit and mention it and give credit where it's due. You also have a very clean info page with timestamps and more and are quite humble(with self-promotion). Good lad
He does have a lot of integrity for sure, but mentioning a sponsor isn't really special, they're required to do that by law and contract with their sponsor.
I once followed a tutorial to install AnsibleVPN and although the install process was so long, I was never able to get it to work. Your video on the other hand, is straight to the point. I followed the video from 17:16 to 20:51 and was able to get OpenVPN working on my EC2 instance in less than 10 minutes. Thanks a ton!
11:16
shocked when I saw you have the same wallpaper as myself.. subbed because you have good taste in wallpapers..
valuable info as well
keep it up
Really good tutorial, I was one of the many that viewed the original and thought it good. But this was great and I saved it in my linux folder for those moments I want to set something up like this. And the steps for openvpn and mosh etc was great too thanks!
Welcome to the comment section! Please read the FAQ before leaving a comment:
Q: How do you know that the VPS doesn't keep the logs? Isn't that the same as trusting a VPN service?
A: Every Internet gateway can potentially log and monitor your traffic. A VPN (be that a VPN service or a self-hosted VPN) doesn't give you extra privacy or anonymity and can potentially monitor your activity. Instead, if you need some extra privacy while browsing the Internet, you should use Tor 06:00 As I mentioned in my last video, VPNs should be used to avoid censorship, geoblocks and DMCA letters, but they won't magically make you more secure and anonymous.
Q: Are you only recommending a VPS as a solution because you were sponsored by Linode?
A: No. I've been using a self-hosted VPN since 2017 and am currently using a VPS from another company. I've also been approached by a several VPN companies that offered to sponsor my videos; I politely refused their offers because such sponsorship will go against my point of view on VPN services. Linode is one of the biggest VPS providers on the market and I'm glad they sponsored this video, however you can always choose another VPS to host your VPN: DigitalOcean, Vultr, Hetzner, etc.
Q: But doesn't a self-hosted VPN make you more identifiable since you're the only user?
A: Unlike a VPN service, on a self-hsoted VPN you get a dedicated IP that isn't shared with any other users. However, a shared IP on a VPN service doesn't give you more privacy: you still use your real IP to connect to it, and your account has a unique identifiable set of keys.
In both cases if a certain government agency were interested in your online activities, it would require requesting logs from the provider, and in case of Linode (or any VPS provider) the authorities would only retrieve connection logs (e.g. when you connected to the VPS from your IP address) - so pretty much the same as with a VPN service. In both cases the authorities can also request logs from the data center providers or hit the service with a FISA warrant if they reside in the US.
Q: Is this tutorial only going to work for Linode?
A: No, this tutorial applies to any KVM- (and possibly Xen-) based VPS. The only part that's going to be different is the process of creating an account, which is pretty easy.
I mean if your threat model includes state agents you shouldn’t use anything other than Tails
Wouldnt it be better to pin this comment?
@@princericard3702 thought it was pinned. youtube has a tendency to randomly unpin comments fter editing.
@@WolfgangsChannel typical lmao
What´s about vmware as a Virtualisation Technology ? Is it on the same level as KVM, or more in the direction towards OpenVZ ? Cant really find any Infos about that, maybe u have an Idea.
Fantastic video! You do such a great job that even semi-newbies can follow along easily. Thank you for your hard work.
You've actually got so quality stuff on your channel. Keep that up man!
The main reason people look for VPNs is anonimity and the possibility to change connection location and gain the ability to access services reserved only for specific places (ex Netflix). With a self hosted VPN you lose both. Anonimity: basically the same things that your ISP would spy on you, now are spyable by your VPS provider, you're just trusting a different entity. But, as you correctly said, this is a marginal problem, because only source IP and destination IP can be seen, the traffic in between is encrypted. The only thing that changes is that your ISP can only see you are contacting your VPS, and your destinations can see you are contacting them from your VPS. But that VPS can be traced back to your identity, because you're the only owner of that IP address. So we have no anonimity benefit here: in the case the sites you contact want to know who the source IP address belongs to, they can very easily if your VPS provider is complicit. This is more difficult (not impossble) with VPN services ( if they have logs of your real IP) because they have to link the traffic on their system to your real IP and identity manually by looking at metadata, because there are a lot of people using their system simultaneously. And also if the VPN service is, by chance, reliable as they say and they really don't save any logs, then you're anonymous. I don't think VPS providers keep less logs than a VPN service tbh, in this video you're just saying 'meh, I trust VPS providers more then VPN providers', without counting the fact that VPNs grants you the ability to avoid geoblocking by default, and also that the VPN providers base their business on the 'zero logs' policy, and that's not the case for VPS providers.
dude learning a lot here thank you. this is definitely the way
Dry humor, subtle sarcasm, good content including debunking... Gotta love this video man. TY
(learning if you search 'is pee is stored in balls' comes up with yes, was the one of the real highlights)
Much appreciated!
I was on the fence at first but this turned out to be very informative for a security
Personally I love the movement for personally owned data like your privacy and files. As an enthusiast with multiple industry grade certifications behind me ranging from general certifications in cyber-security & general networking to Cisco university grade diplomas. I don’t care about my own privacy (I know controversial opinion for my field..) however I stand behind this video in more ways then one, he outlines the benefits to self-hosting your own VPN perfectly.
The reason I use VPN’s is to allow much better security within my networks for the company I run. By only allowing OpenVPN’s port past our network firewalls and then encrypting all user profiles substantially it allows me and our employees to access and be on these networks remotely without fear of multiple ports/applications vulnerabilities.
Awesome video, love your other content too!
Thank you for this video WolfGang, I usually rely on typed tutorials but I thought this was so well done that you definitely deserved the full view. Was wondering how you initially got into coding? And how a newcomer may get into it?
This tutorial is amazing and you are really good at teaching !! great job sir !
Love your videos man so informative and honest. Off topic but I seen a video of yours from 2020 and you had longer hair, looked awesome and I want to try it put for myself because of seeing you with it. Thanks for the great videos bro
Thanks for all the hard work and information. I appreciate your dedication.
Excellent stuff thanks, wish I knew enough about coding to set one of these up for myself.
You might need two OpenVPN servers depending on your use case. I use it sometimes for old games that try to find other users on the LAN, so for that you need a bridged interface (tap) rather than the more typical tun, but if you want to use the VPN from your phone, well, the phone clients only support tun. You can run two servers on the same machine without any issues, just with the different config files. You might also need this if you want to reach other devices on your VPN, like some printers. I'm not a fan of scripts like the road warrior one... I would if they were more careful, but my server already runs a bunch of other services and unless these scripts are written super carefully they can mess up other stuff you have running already. I guess they're fine on a fresh VM though. I'm not sure offhand if Wireguard supports a bridged setup.
Thank you so much, man! It was quite difficult to set up through Windows but it worked in the end. I used your affiliate link but, really, this video is worth much more that whatever Linode pays you.
Did you use Ubuntu 20.10 or the one he used in the video? Also what did you use to edit the config? Thank you in advance.
@@zachg8941 I use Ubuntu 20.04 and the Neovim editor. Pretty much exactly the same setup as Wolfgang except I use the OpenVPN client for Windows.
you are doing gods work man thanks for lettings us know
I've never used VPN for "privacy concerns", since I know my data is out there long before anyone was aware of any internet privacy. But i do use a VPN for accessing blocked websites and that is basically the only use for a "public" VPN these days. If you want a "privacy" type of VPN then this video explains perfectly what you want to do and that is have your own VPN on a private server.
looking forward to learning from the rest of your videos. Subscribed!
Nice video. Most VPN subject videos won't dare explain both sides (like covering situations where other tools fit - most vpn videos just say: "you need this, and this alone: It solves everything in the world."). Rare to see honesty on the subject - might actually be the first VPN based video where I've actually seen balance (it can be tiring). Kudos.
Samy K's Evercookie can be used to track Tor users and Snowden revealed the NSA uses Evercookie.
that video from Tom Scott is indeed brilliant, I watched it many times for the entertainment value alone
Can you please put up the Tom Scott link
@@johnheikkinen3916 th-cam.com/video/dQw4w9WgXcQ/w-d-xo.html That's the link, hope it helps!
gay pirate assassins
@@dgfhjdgfhkjdgfhjdgfhkj4970 i remember the rickroll link... you arent fooling me!
Hey, you're very close to 100k subs! Congratulations!
Excellent tutorial! Thank you!
Excellent summary.
Don't worry about redundancy in your videos. In case of tutorials it's useful.
One thing of note... If you are using a VPS - Check the Terms Of Service for the hosting/rental company. Many companies have policies against setting up VPNs on there networks for a variety of both technical and legal reasons. Many companies also have a 'One Strike / No Warning' policy when it comes to TOS violations meaning that if there systems team detects a 'banned service' or there legal team gets a DMCA violation / take-down notice. They will take down your node, wipe all of the data (including onsite backups), cancel your hosting/rental account, and notify you via email after... No Refunds. --- TLDR: Lots of providers DO allow you to set up a VPN however, If for some reason a provider doesn't allow a VPN or other services/content to be set up, it will be in the Terms of Service. Because providers don't want to terminate your account, it will usually be written in very plain, easy to understand, language... Just read the TOS and make sure you understand what you can and can not do/run with that provider *before* starting hosting with them.
Oh, that is a very useful information, thank you. Yes, I thank you two years later :).
Yes sir! Very Good point! Sorry my reply is also 2yrs later, but I had to chime in and give a nod to this point. The DMCA violation / take-down notice or any legal dispute regardless of your innocense or guilt that you may be involved in doesn't get sent to you directly. So, you might think, "yea that's good for me, I'm anonymous with no logs and a fake name and account paid with crypto" But you don't own the server, you're renting it, and are subject to their usage policy and their legal right to operate rides on your conformity. They won't wait 1 sec when they get a complaint, you're gone and if you were malicious its justified, if not you're just unlucky. This exact scenario applies to public VPN providers Nord, Express,etc. You're subject to their AUP, and if you're not attempting malicious activities then you don't need to be paranoid about no logs because no-one will have a reason to pursue you. If you are malicious on a seedbox or virtual server and they get a court order to expose you, given that you are using a fixed IP and all of your VPN traffic is tied to that IP, obviously they know what server is assigned said Ip because they delete/ban your account and you might want to be Tor'ing in or using another VPN or proxy to access the server so that your personal WAN IP is not exposed. That said, they can be a cost effective sandbox to learn how to install/configure various OS/software and host services you just have to remember they own it and will boot you if they get shit for your actions.
You are great. I was surprised to see how much knowledge you have gained with this stuff.
Superb tutorial sir! Thank you so much for putting that together
It's always good to be critical about any service you're making use of. In the same sense I have two questions about the points you're making in your video:
- If you're using your own OVPN install on some VPS, then all traffic can still be pinpointed to exactly the virtual machine that your running on that server. In affect, you're still rely on that VPS not to disclose the account holder to that VM. I'd say that assumption is at least as "dangerous" (and maybe even more so...) as assuming that VPN providers wouldn't back-trace the user corresponding to some traffic from x months ago. Wouldn't you agree?
- Secondly, at 12:50, you seem to be saying ssh exchanges your pass in plaintext. That's not correct. To verify, I just ran a wireshark capture on my own system. Openssh is using the Diffie-Hellman encryption before your key exchange of the actual ssh connection. Maybe I'm misunderstanding you?
I hope you'll take the time to respond, I'm curious to hear your thoughts.
hmmmm no answer yet...
very very nice point everyone (including me) overlooked!
Surely, there would be many, many users that would rent bandwidth on a specific remote VPS server? Would the VPS owner be able to tell who was doing what and do they log your activity regardless of the server setup that you configure?
If you were the only subscriber to a particular machine, then yes, I can see how that would be a massive problem, but for a low cost VPS contract, you'd be sharing a machine with multiple other users, surely? If you choose not to log, is that it - no logging full stop? Complete novice here by the way.
@@MarkAinsworthAinz The hypothetical scenario is that someone is tracing data traffic that originates from your VPS. If this "someone" is tracking your traffic, they know precisely which IP this traffic corresponds to. This IP one-to-one correlates to the rented VPS. They would literally only have to ask the provider "who is the account holder to the VPS with this IP" to directly land on your doorstep, despite your fancy OpenVPN implementation.
I would thus argue that it is actually *much more* unsafe than a regular VPN provider. Because for a regular VPN provider, you would be absolutely right; the same IP is shared among many users at any point in time, and the VPN provider would have to keep *huge* logs to even be able to tell this "someone" who was corresponding to a certain data flow.
P.s. I would love to be corrected on this if I'm wrong, but it really seems to me that this approach *significantly* weakens the weakest link in your security.
Exactly what I was thinking about. If you have a dedicated Public IP, this can be traced directly to your vps. Law enforcement can force your vps provider to tell them who owns it.
I agree with the comment
Thank you for 23:28 , I almost had a heart attack when my server refused to connect. Luckily I had a previous tab that I kept minimised.
I'm a security analyst and it's the 1st time I watch your video and I already like you cause you tell the truth. You've got one more sub!
I just setup an OpenVPN with this. It's really useful. Thanks for the indepth and great video
I have a VPN set up on a VPS for port forwarding. Our home network is behind double NAT, so this is the only way for me to host anything on my PC.
Great video, just wish I understood it more so I could give it a go! 😂
I really appreciate this video. I've been working on getting a reliable and light weight VPN going to access local network resources, and set this thing off without a hitch following your tutorial. Thanks so much for the time and effort into putting this together, helped me a ton and saved a lot of time and headaches along the way! Cheers!
Glad I could help 😁
@@WolfgangsChannel Question for you. Currently running this on a Raspberry Pi 3 and seems to be working well. Do you think an upgrade to a Raspberry Pi 4 model B with extra ram and processing speed would help performance in any way or does it have more to do with the internet speeds? Thanks again!
RPi 3 has slower Ethernet (100 Mb/s), and the Ethernet adapter shares the same bus as the USB2 ports. This means that if something is connected to (and actively using) one of the USB ports (e.g. external HDD), it will further reduce the Ethernet speed. Normally, if your Internet speed is lower than 60-70 Mb/s that shouldn’t be an issue
@@WolfgangsChannel Thanks for the insight. Only VPN performance issues I've noticed is when trying to connect multiple devices to the VPN at once (cell phone with wireguard app and laptop). Seems like one has to wait while the other is actively in use. Perhaps the ethernet is the bottleneck then? Wasn't sure if the extra processing and ram would make a difference there. Thanks again!
You have to create separate "accounts" for different devices. Re-run the ./openvpn-install.sh script and choose the option called "Add a new user". It will generate a new .ovpn file which you can use on your device.
Awesome video, been wanting to do this for some time , just was not confident in doing it safely
seems pretty dope. was originally just gonna buy a vpn but this seems like a way better option.
And cheaper sometimes
@@lionelesquivel2498 i could use an express account...
@@lionelesquivel2498 nord please
@@lionelesquivel2498 I would love one thanks
@@lionelesquivel2498 I'm down for nord :--)
I certainly hope nobody is getting Linux ISOs from Pirate Bay lol
Oh bro u haven't herd the last of it in my country , over here we get window from pirate bay
@@davidr2421 Yah but that water mark is annoying tho
@Obadiah Guyman No. That's just simply false if you're using Windows 10.
@@xXRealXx You have no idea what you're talking about. Windows 10 is fully functional without activating it. Even the iso is free from microsoft. The only reason it's not usable is because of that little watermark on the lower right corner. And even that, can be ignored. Obadiah is right.
@Obadiah Guyman just simply download KMS Pico and activate your windows
Needed to see this. Thanks for the update. Already found some info that contridicts your statements. But this is important. It means I'm looking in the right direction, so again. Thank you. Great video.
Literally got an ad for Private IP VPN that used all the same marketing tactics you mentioned, I almost thought it was part of the video for a second XD
Perfect! Finally someone who speaks at the speed of thought instead of raising my blood pressure wishing they would hurry up. Thanks for not digressing and just sticking to the facts. Don't changing anything. I hadn't heard of Linode. I just went there to check it out. I will use it for more than a VPN. Thanks TONS!
This is such a well made video, super informative and visually amazing. Good job!
Glad you enjoyed it!
Marshall Lee!
@Chandon G Yeah, it's totally safe as long as you don't host it in Germany/Austria and set it up correctly.
@Chandon G Well, it's about as safe when it comes to DMCA letters. But it has some other advantages
Thanks a ton, Wolfgang - very helpful,
Roger (now a subscriber)
Great Video! I have a small issue with the vps solution because you still have to give them your personal data and you will be responsible for anything that happens on it. Nonetheless awesome explanation!
I have never known that I can do two-factor authentication with ssh until you post this video.
i prefer this kind of content over gnu/linux ricing
good vid!
This video is hilarious at the beginning and so honest! Great job!~
This is a fantastic video!
Thank you for starting with the clarification, and moving on to creating an at-home VPN.
Also, I like your name. xD
Wolfgang, I've always been a fan of testing one's security by trying to break it. You're a clever guy, so if you pretended you were an ISP and could install sslstrip on the network, had access to Let's Encrypt or your ISP/corporate certificate server, used mitmf to rewrite DNS queries I'm sure you could come up with a way to defeat the coloured padlock (note most padlocks are now grey which tacitly recognises how irrelevant they turned out to be). We're not yet at a point where we can secure a system against a malicious entity (or benevolent state actor, lol) that has physical access to one's system and this is the position we've put ISPs in.
Well, if someone has physical access to your machine you’re screwed either way, with or without the VPN. But the measures youve mentioned (sslstrip, etc.) will still set off the browser warnings.
This seems like an all day class crammed into less than 30 minutes.
Amazing video thank you so much. I loved the last part where you added all of these amazing features. I have a question, isn't it a bad practice to have automatic packages updates in your system ?
Outstanding work !!! I really like this !!! Your level of expertise is impressive !!!
Correction: You say using a clear text password is a bad idea because it isn’t encrypted in transit. It IS in fact encrypted in transit and a hacker would NOT be able to see it over an infected network. However I do still recommend an ssh key as it is a much better option for many different reasons.
MITM is still possible with SSH, just hard to pull off. Any dedicated attacker could pull it off.
I got an ad on a Vpn called ipvanish and the first words where "The internet is tracking everything you do!"
And we can say that its pretty much true... sadly its not problem that vpn itself solves. Every service you use and service they use to handle your usage will store lots of data. If you open any page in internet they probably have some google services that save something about you. Lets say they save time, ip, page address, browser agent, resolution/ viewport and some other data that tells how you are browsing web. Like where did you come to site (ref) and how much time you used to stay on page.
Then if they compare 'data' they have about page/site and your browsing history they know what you are interested in. And now we can advertise this item you did talk with Steven and opened single link steve gave to you about item. Then think how many pages have for example facebook 'like' button which isnt only picture but script.
LOL GOT THAT AD TOO
IPVanish is based in US therefore is on the UKUSA Agreements on Cyber Espionage your not safe m8
i can watch your videos all day your voice is so Calming, one of the best channels on TH-cam
What are you, a genius. Like you showed me so many linux related, I never knew I could do sftp instead of scp command @20:00. And your explanation is smooth. Just one thing, your terminal command were disappearing within a seconds, I had to pause and slow down video to 0.25x sometimes. Anyway superb. Thanks
Ima be honest. I have no interest in having a vpn, but this was very informative and entertaining.
Seems to me that Linode (or whatever VPS service you pick) can log your traffic. So if someone tracks your traffic to your VPS, the company that runs the VPS can tell them the identity of the person who was renting that IP address. So, it doesn’t really seem particularly anonymous.
My thoughts exactly. They'll just get legal claim which they can track internally and then there's the billing addresses etc. Don't want to diss the vid, but it really seemed to turn into Linode commercial early on.
Very nice with the only you can access the folder then , when opend deleted on Linux. And the full set up mate 👌
I love the way you talk, it's very relaxing
I only download the highest quality *linux isos*
Yes, *linux isos*
the Full HD one, right?
Did someone mention I use the highest quality of arch?
@@bleuify7 I hear the high quality ones can come in various sizes several times a day, and it's important to stay up to date.
@@bleuify7 4K only.
How you can be sure that ISP of your server doesnt keep logs of all traffic in dc?
You can't! That's why you use Tor for the private-sensitive stuff. Don't rely on the single point of failure solutions for something that can get you in trouble.
Still, it's totally fine for Netflix or torrenting since neither Netflix nor law companies will bother tracking you that far.
While they can still take logs, it will be associated with your vps, not you
@@theohenson7283 And VPS will be associated to you, directly. VPS services company will be forced to provide info about which it is obliged to provide.
@@nirmalmanoj Exactly.
Please, don't use a VPN (doesn't matter whether a service or self-hosted) for any kind of illegal stuff (except for piracy). You never know whether your provider is logging your activity, but you should always assume that it does.
Use Tor
@@WolfgangsChannel In my opinion, a widely trusted VPN service like ProtonVPN is much better than using a VPS service to create a VPN for personal use. VPS services are perhaps worse at safeguarding your privacy than a trusted VPN that promises privacy.
Excellent information, thanks! Subscribed.
Like very much how you explain! Many businesses leaders could learn from you. I, definitely a subscriber now
Isn't providing your details with the vps provider a vulnerability? Shouldn't you pay for these things anonymously?
yes it is, and this video is only for private network, you shouldnt be using this for trying to be anonymously in the web and do shade stuff, you will be fuckt.
@Mohammad Reza
Exactly‼️🎯 I agree with you 100% 🏆📌
If you want good VPN anonymity, might I recommend Mullvad? It has a good track record for logging (or lack thereof), only costs 5€/month, and can be paid for with cash.
@@TheZenytram so will it be sufficient enough to keep your internal network secure from very primative ISP? Where I'm living there recently was an incident where the ISP's customers' every creature personal information incl. payment infos and stuff were leaked and now being sold in the darkweb, and things won't change anytime soon so keeping at least your internal network transactions secure is unfortunately a mandatory procedure which you should do, by needlessly investing more money into which the ISP should be doing in the first place with the amount of fee they charge you anyways.
6:47 The fact that he recorded himself actually searching this up is hilarious XD
to make it realistic lol
Really useful and informative thank you!
Hey Wolfgan, really love your video!
Is it then possible to use the vpn with multiple pc or just with one?
I have no idea how to do anything I just watched. Still interesting though
same XDD
I m using Http injector with free SSH from website just insert ID and password you created in the website, FREE unlimited VPN (mostly 3-7 days but you can get 30 day if your hand fast enough because in free SSH website the 30 day account will snatched in minutes). I m using "SSH ocean" website mostly.
I've Been Waiting This, Thanks !!
But How Can You Trust These VPS Servers,isn't it the same as trusting vpn servers?
Many Thanks
VPS Servers aren't safe... at all. They are actually much more dangerous to your information than any VPN, because VPS can see and log EVERYTHING you do. But he is sponsored, so he will not mention that
@@afdkj7863 I actually did mention it quite a few times in response to other comments.
VPS servers can also potentially log or monitor the traffic, just like any other gateway on the Internet. That's why you use Tor for the private-sensitive stuff. Don't rely on the single point of failure solutions for something that can get you in trouble.
However, unlike VPN servers you can be sure that the VPN itself doesn't store logs, the binary isn't compromised and the server itself is properly secured.
@Wolfgang's Channel And what's the point of sureness in your vpn server program? It's like you don't have security cams inside of your house but you have plenty outside of every door and window. And the end result is the same: anything going in and out are monitored exactly as with logging vpn server. Even worse, VPS providers are openly stating in their privacy policy that they collect a lot of information about you, which VPNs are at least trying to persuade you they hiding.
You are a man of great humor ( 3:18 & 6:46 😂😂😂) and knowledge. Love to hear your take on Qubes OS.
I would like to hear your views on Qubes, also.
I would suggest establishing a firewall before creating the VPN. Do it as part of the server set up/configuration.
Great tutorial and I’m a linode fan myself. However, I would recommend a VPS provider outside of the 14 eyes territory to heighten privacy if VPN is the main objective. . Otherwise great content
What Non-14 eyes VPS providers do you recommend?
Why do you need a VPS? I'm curious.
@@locutusofborg7122 Cyber Ghost is one
imagine using openvpn in 2020
this post was made by wireguard gang
Switching to wireguard is still on my todo list. The last time I looked at it it seemed not ready for productive use. How is the cussent status?
@@dameck9570 It was merged into Linux 5.6. I would say it is pretty stable right now.
Wireguard = not as secure :)
Did they had their Independent Audit yet ?
@@HenryT Why is Wireguard not as secure?
It's an excellent guide... and he offers a little tutorial in some great remote server security techniques that are worth learning. It took me some time to realize that the openvpn-install script includes a feature for adding clients to the vpn server... thus making this a multi-client option - running the same .ovpn script on multiple hosts is problematic to say the least.
Did you figure out how to add more than 1 client to the server? Im having issues with that right now
Wow, I didn't even know you could do this!!! it's like seeing a new world!!!
There are a few thing he got wrong:
ISPs only have access to your IP address and the destination like he said, but that's still valuable information since third party cookies are often blocked and the only other good identification method that's left is fingerprinting. I know out of second hand that ISPs sell mapping files legally in eurpe. The IP addresses and the time can be used to connect your accounts on different platforms.
There is a difference between the https encryption (128 bits) and aes-256 (256 bits). 256 is practically impossible to crack, while 128 is just still very resource intense to crack.
A self hosted VPN does not really make you anonymous, if your the only person using it and the server can be traced back to you. The anonymity with a VPN comes from multiple people using the same server (and IP address).
+1, one of the first things I thought when Linode was presented was: ok but now it's the Linode server that will identify us.
"I know you guys are lazy and you're not gonna do that" 😂😂😂 this guy knows his audience too well.
Not me j actually went and typed in to you search and subscribed as well. Lol
@@infotruther Did you also smash the like button? What about ringing the bell?
Naah, I never refuse to watch a Tom Scott video.
@@WolfgangsChannel Yes I smashed it!
@@WolfgangsChannel sellout
I have benefited greatly from this video. Thank you!
10:25 I'm in Switzerland and I _might_ use BitTorrent a lot without a VPN. I have never been contacted by any copyright authorities nor have I heard of something like that happening to someone else. In Germany, however, the threat of receiving an "Abmahnung" from copyright lawyers with an invoice for a substantial sum is very real.
And regarding "strict copyright laws": in Switzerland we have the legal right to make personal copies of any published work and share them with close family and friends. You can legally copy a book or a movie and give it to your mother. You can even hire a third-party to copy it for you.