"We Do Not monitor user activity nor do we keep any logs." (VPNs)

[Elixer]

You heard this from pretty much EVERY VPN.
"We Do Not monitor user activity nor do we keep any logs."

Problem is, every single one of them DO.

Yet, the most conclusive evidence came after the FBI managed to obtain logs from two VPN providers — PureVPN and WANSecurity.

The logs showed how within the span of minutes the same VPN IP address had logged into Lin's real Gmail address, another Gmail address used for some of the threats, and a Rover.com account Lin created to discover Smith's real phone number. PureVPN was later able to link the stalking activity with Lin's home and work IPs.

Ironically, FBI agents also found tweets in which Lin was warning other users that VPN providers store activity logs, advice he didn't follow himself.

https://www.bleepingcomputer.com/ne...after-vpn-providers-shared-logs-with-the-fbi/

 

[John Connor]

That doesn't mean all log connections. That's just two crap VPNs. I use a VPN that's based in Romania, so good luck to the FBI. Plus, I have double hop capability.

 

[Elixer]

You can't disprove they don't log, (and it takes a court order to prove) so, everyone should believe that everyone actually does log, despite what they say on their web site.

It isn't far fetched to believe that any law enforcement agency can cooperate with foreign entities.

 

[John Connor]

There was one VPN provider I read about (Can't remember the name) that was given a court order and they said in fact we don't have any logs. I read about it at this site: https://torrentfreak.com

 

[Mark R]

You need to read the small print carefully:
From pureVPN's T&C:

Our servers automatically record the time at which you connect to any of our servers. From here on forward, we do not keep any records of anything that could associate any specific activity to a specific user.

In this case, the FBI had precise times at which the events occurred. Even though the VPN provider may not have had any logs about what activity was taking place, they did have logs about which IPs were making incoming connections.

All, the FBI would need to do is ask "Did you have a customer connecting from ${IP} at ${TIME} on ${DATE}?

In this case, it appears that the answer was yes, to connections from the suspects home and work IPs.

 

[John Connor]

Yeah, my VPN states do they in fact log, but it's for bandwidth and they delete the log like every 24 hours. They also state every VPN logs in one form or another.

 

[Red Squirrel]

I'd say one should assume they do log, but it still does add a layer of security as there is still a decent chance they don't. And even if they do it's still an extra step for authorites to get the log. Depending on what country it's in and how big the military of said country is, they can also just tell the authorities (of the other country) to pound sand.

One thing I've been thinking of doing is just starting my own small VPN provider, even if I don't get many customers, the fact that I'm providing VPN service from that server means it's not necessarily just my own traffic leaving it and there is no way to prove it. I think it's good to have many small VPN providers than few big ones.

 

[Elixer]

One thing I've been thinking of doing is just starting my own small VPN provider, even if I don't get many customers, the fact that I'm providing VPN service from that server means it's not necessarily just my own traffic leaving it and there is no way to prove it. I think it's good to have many small VPN providers than few big ones.

I'd think liability costs would be pretty high. You would need legal services on retainer or something like that.

 

[Red Squirrel]

I'd think liability costs would be pretty high. You would need legal services on retainer or something like that.

Yeah that would probably be an issue, would of course need to host it outside the country and use TOR to manage it but if it does get traced back to me then it could be an issue. Would also need to find a server provider that accepts payments in gift cards or something.

Idealy would want to code my own distribution (or modify one) that is super turn key so I can setup a server in minutes. Like something that's already presetup the way I want. I would then switch providers a lot too just to make it a tad harder if someone is on a witch hunt.

 

[John Connor]

That's the beauty of the VPN I use. They are based in Romania which is not too friendly to other countries requesting server logs, etc.