I read the OP and the several replies before they were deleted, but it didn't really make any sense, I don't see what the forum has to do with the PIA incident.
Edit: removed the pastebin link, if he doesn't want it posted I guess it shouldn't be.
Topic: PIA (Read 996 times)
PIA is a honeypot, all US VPN providers are legally wrangled by the FBI to do so. Look at lavabit, the FBI of course told the same thing to every VPN provider, web mail, etc.. Lavabit and silent circle are the only two that defied.
Well..not exactly. The US is one of very few countries in the world that do not require VPN/proxies to keep logs. Most countries do. In that sense its safe, but of course they can still be forced by a government agency to "start" logging, but the same applies everywhere else and anything that happened before they start logging will remain safe.
I still would not use a US VPN provider though. and especially not PIA, because it's PPTP service uses the broken MSCHAPv2 encryption leaving it vulnerable to MITM attacks. It also uses L2TP w/ IPSEC which I am told is worse but I do not personally have any experience with cracking that. Their SOCKS service goes without saying, that is very straight forward to execute MITM attacks with. When your choosing a VPN make sure their crypto is secure, thats one of the main things.
Not to mention a VPN provider can MITM you themselves. They can see all of your unencrypted data and modify it if they want to.
To be honest, using a VPN to stay anonymous is not a good idea. In many cases it can aid someone in de-anonymizing you. Use a VPN for privacy and security, especially if you use public internet, but not to do anything that requires anonymity.
Jump to: