Comment on How do I host Jellyfin in the most secure manner possible?

• someacnt@sh.itjust.works ⁨2⁩ ⁨weeks⁩ ago

  Being concerned about security while using free VPN sounds like an oxymoron.

  source

  • sem@lemmy.blahaj.zone ⁨2⁩ ⁨weeks⁩ ago

    Is there any reason to think the free Proton VPN is somehow insecure?

    source

    • litchralee@sh.itjust.works ⁨2⁩ ⁨weeks⁩ ago

      Not “insecure” in the sense that they’re shoddy with their encryption, no. But being free could possibly mean their incentives are not necessarily aligned with that of the free users.

      In security speak, the CIA triad stands for Confidentiality, Integrity, and Availability. I’m not going to unduly impugn Proton VPN’s credentials on data confidentiality and data integrity, but availability can be a legit security concern.

      For example, if push comes to shove and Proton VPN is hit with a DDoS attack, would free tier users be the first to be disconnected to free up capacity? Alternatively, suppose the price for IP transit shoots through the roof due to weird global economics and ProtonVPN has to throttle the free tier to 10 Mbps. All VPN operators share these possibilities, but however well-meaning Proton VPN and the non-profit behind them are, economic factors can force changes that aren’t great for the free users.

      Now, the obv solution at such a time would be to then switch to being a paid customer. And that might be fine for lots of customers, if that ever comes to pass. But Murphy’s Law makes it a habit that this scenario would play out when users are least able to prepare for it, possibly leading to some amount of unavailability.

      source