Questions about VPN's

[danb]

Hi!! A few questions about VPN sites. I signed up for ExpressVPN last year. It was the first VPN that I had ever used. I didn't use it that much but I would like to used it a bit more this year. They can be useful. I guess how they work is that when we access the VPN site it registers their IP address (located in a different country) as our IP address. It makes it look like we are surfing/ accessing the web from that different site located in Singapore or the US, etc..

 

When I got to China this year I had problems accessing my Credit union on-line. It just wouldn't work. I was getting a fault message. I was being blocked. So I access my VPN and viola , I could access my account. So it has been useful for me to have. Also I could access my school Gmail account. Typically I used it for just a short period of time. I wonder if i should worry how long of a time that I use the VPN. Is it's use easily be detected? Will we get in trouble for using it? I am trying to access some Chinese movie/TV watching sites but I can't read most of them. So I am just guessing what I am trying to select when I am clicking away.. So I am wondering if can I access Comcast Infinity site and watch some good old US TV shows on my computer, via my VPN? Will we run into any problems? What do you all think? Danb

[Randy W]

When they blocked the Google API functions a couple of years back, they all but made a VPN necessary to access just about ANY English-language site, including their own People's Daily, Global Times, Xinhua, etc., etc., etc. Look for the Facebook, Twitter, YouTube, etc. logos at prominent places on these pages. When NOT using a VPN, loading time for one of these pages can be delayed by minutes while waiting for these links to time out.

 

Even CFL delays for a minute while "waiting for goopleapis.api.com" if not using the VPN.

 

When you use ExpressVPN, I recommend that you select a TCP connection. TCP connections are packet-driven, meaning that there is no continuous connection as there is for a UDP connection. The TCP connection is only "alive" when data is being transferred.

 

My VPN connection is ON the entire time my computer is booted up.

 

Streaming data may or may not work, depending on your infrastructure. Try it on YouTube, or somewhere else that you can stream a long video to check the performance. My own performance can be anywhere from 0mbps to 10mbps - I would not PAY for a streaming service, although I often can watch a streamed video. I will usually simply watch it after downloading, but this is not always possible from a streaming service.

 

Remember that you're competing with everyone else for bandwidth at peak times.

 

MOST expats will tell you something like "<__fill_in_the_blank____> is illegal in China - they just don't enforce it". Even our buddy SerpentZA use to proclaim, "Motorcycles are illegal in China" - until he opened his own motorcycle shop. I say BS.

Edited December 22, 2016 by Randy W (see edit history)

[danb]

Hi Randy, Thank you for the reply. I looked around for the TCP and the UDP phrases.. I didn't see where that choice was given. I did see on a pull down menu something about Diagnostic and that seem to mentioning "UDP" a lot. The VPN works well for me to access banking info. That is what most important for me. Accessing Tv showns is secondary for me. Just something to do when my Lao Po is out. Danb

[Randy W]

Hi Randy, Thank you for the reply. I looked around for the TCP and the UDP phrases.. I didn't see where that choice was given. I did see on a pull down menu something about Diagnostic and that seem to mentioning "UDP" a lot. The VPN works well for me to access banking info. That is what most important for me. Accessing Tv showns is secondary for me. Just something to do when my Lao Po is out. Danb

 

 

There are three dots for 'More' - and 'Options' on the menu. It won't go there, though, if you're presently connected.

 

The TCP option is a stealth option, since it looks like any other connection to a web site by Port 80 (the TCP/IP default for ANY web site access). The UDP connection via OpenVPN default port 1194 is a no-brainer for them (the GFW) to block. This is what most VPN providers use, and is why they don't work very well in China. As far as I know, ExpressVPN has the largest selection of TCP VPN servers.

 

Use what works for you, and don't worry about getting "caught".

[Randy W]

from http://www.saporedicina.com/english/wp-content/uploads/2017/01/sdc-en.jpg

 

The Top VPNs for China: How to access Facebook behind the Great Wall

Edited March 21, 2017 by Randy W (see edit history)

[Greg.D.]

I saw this article a month or so ago in Arstechnica:

 

https://arstechnica.com/security/2017/01/majority-of-android-vpns-cant-be-trusted-to-make-users-more-secure/?comments=1

 

"Majority of Android VPNs can’t be trusted to make users more secure"

 

Which mentions that 38% of tested VPNs contained some malware code. It seems the 3 referenced in the above article are safe.

 

But, for me, it does raise the question of why some are blocked and others aren't. The top-rated VPN "F-secure Freedome" was recently blocked, seemingly permanently. As danb above said earlier, he mostly wants to do his online banking ... which would be my main use as a visitor.

[Randy W]

I saw this article a month or so ago in Arstechnica:

 

https://arstechnica.com/security/2017/01/majority-of-android-vpns-cant-be-trusted-to-make-users-more-secure/?comments=1

 

"Majority of Android VPNs can’t be trusted to make users more secure"

 

Which mentions that 38% of tested VPNs contained some malware code. It seems the 3 referenced in the above article are safe.

 

But, for me, it does raise the question of why some are blocked and others aren't. The top-rated VPN "F-secure Freedome" was recently blocked, seemingly permanently. As danb above said earlier, he mostly wants to do his online banking ... which would be my main use as a visitor.

 

 

Your bank should have its own VPN - a secure https: connection from your computer or phone to the bank's. If it does, then you should be safe as far as anyone hacking your information. But simply gaining ACCESS to that connection is another matter - THAT is where the VPN comes in, if you're having trouble there.

 

You don't REALLY need security from a VPN (although NOT having malware is definitely a plus). All you need is to be able to get beyond the Great Firewall. Once you're there, then it's similar to being online in the U.S. Yes, you're on a public piece of wire. But you need to be aware of that ANYWHERE, not just in China.

 

VPN services are probably blocked based simply on how easy it is to do so. But it seems to me that all they need to do to block a particular service is to SIGN UP for that service, and then block the IP addresses of each of the servers.

 

Something you could do that I think would be VERY effective is to set up your own (or a friend's) computer in a public accessible location in the U.S. with a VPN server on it. I believe that's very easy to do with the recent versions of windows

[Greg.D.]

I agree re roll your own vpn. It's the same idea I have too late before each trip and I don't have the time to get it working.

 

And, yes, the reason for the vpn is my CU and CC sites won't let me log in from China.

 

It does seem very easy to block IP addresses and I wondered if certain vpns were allowed to function because the party has backdoors in them. And I don't care if they want to know what sites I go to, just don't want them stealing my login and password details.

[Allon]

One problem if you use Chase and a VPN. If you chose a different location than the one you used last or recent, they will have you go through the security check -- send a code by text or email or phone. It's pain in the ass but knowing how logins can be trapped even with VPN's you are still walking the fence. I just assume everyone is watching anyway, but I also know that Randy's advice to use ExpressVPN got me out of one problem that happened. I won't get into it but it was ugly. And the IP I used at the time, saved me.

 

Thanks, Randy.

[Randy W]

One problem if you use Chase and a VPN. If you chose a different location than the one you used last or recent, they will have you go through the security check -- send a code by text or email or phone. It's pain in the ass but knowing how logins can be trapped even with VPN's you are still walking the fence. I just assume everyone is watching anyway, but I also know that Randy's advice to use ExpressVPN got me out of one problem that happened. I won't get into it but it was ugly. And the IP I used at the time, saved me.

 

Thanks, Randy.

 

 

I wouldn't mind hearing more, but you're welcome!

 

There are quite a few logins I use that require that verification, but I've always been able to receive the code by email. They'll do that even if you just change your browser or toss your cookies.

 

Chase actually dumped my online account - I had had it for around 15 years and added my sister's estate account to it. I couldn't verify my identity - they asked some VERY bizarre questions when I tried to get them to restore it - but I ended up just creating a new online account linking to the two bank accounts.

Edited March 22, 2017 by Randy W (see edit history)

[Allon]

Yeah, I think Chase is pretty strict since they had an attack (several) and their fraud division phone number is on my quick dial.

 

I'll tell you the story of what happened. I have been using a translation service to translate some some stuff for the wife, documents, and some letters to her so it is clear. Someone in that service has been selling my IP, user name, and other stuff he can capture to a sort of clearinghouse of porn sites. Apparently these sites appear for a while as one name and go away and a new link created. I did a lot of research after this incident came to me.

 

I saw several charges to a company I was unfamiliar with and called them. They said they handle billing for a number of companies. He asked what the charge was and I asked him what was it for. He said for two porn sites I never heard of or even clicked them out of curiosity. Sometimes I do but never complete anything. I just leave because they are not to my gentlemanly taste. (Ahem.) They are pretty bad.

But the names he gave me were not familiar at all and really insulting.

 

So he agreed to remove the charges and told me there would be an investigation into who did make the charge and the IP would be checked. I was concerned that they could just change the name to something I had clicked, but there is no way they had my user ID or email address.

 

He (an arrogant SOB) sent me a list of sites that I had visited (don't know where he got it) and the IP was mostly Seattle. I told him to look at my IP. (Black box me. I turned the computer off when I saw him come in.) He found I was from New York. And by the way, I had visited none of those filthy sounding sites. I do have some taste. The names of some of them were borderline illegal.

 

But I did notice the IP of the place I get translations from. That was the only place I know I visited. So I suspect that translation service is selling all their client information to this porn broker who signs people up without their knowledge and it looks good because they have an IP. It is fortunate I was logged into New York at the time and it was different from the IP's I saw. Some were not Seattle nor were they cities available on Express VPN. (I did a Snap of the list he gave me and checked their IP location later.)

 

So something else is bogus there. Meanwhile I am using Denmark right now (at home, not work) for a while, despite the latency. What you have to do these days to even use the internet at all. I am often redirected to porn sites only when I use Chrome. I got an add-on to prevent redirection and that solved that. Geez.....

 

I think there is some malware in my Register I have to clean out. But the translation service has caused me to have a new debit card 5 times. Each time the translation service is used, I have a problem. I feel like going to the FBI. (I have since changed to a local service that is much better.)

[DocMartin817]

I will be going back to China for spring festival in February. I have used Express VPN in the past with no problem but I seem to remember there were some discussions about it not being as reliable as Nord VPN as of late. Any updates on which one now works best?

 

Marty

 

[Randy W]

I will be going back to China for spring festival in February. I have used Express VPN in the past with no problem but I seem to remember there were some discussions about it not being as reliable as Nord VPN as of late. Any updates on which one now works best?

 

Marty

 

 

 

NordVPN has WAY more servers to choose from, but it can take a few tries to hit a good one. It's also more robust over the up and down cycles, depending on where you are.

 

Basically - your choice. If you're on your phone, Express might be the better bet.

 

I'll be keeping both handy for now.

[DocMartin817]

Thanks Randy,

 

I think I will try NordVPN this time

[danb]

Hello.  How are things going?   I have a question or two.  I am looking for a VPN.  I haven't used one for about 3 years.  Any recommendation for use in China?  I did use Expressvpn.  I don't recall having any problems with it but I didn't use it that much.  Is it more difficult to use Vpn in China now?  I just really need it to do banking and a few bills?  Any thoughts and suggestions?  Thank you. Danb