We'll use standard DHE if the user selects an RSA cert (2048, 3072, or 4096). And we'll use ECDHE if the user selects an Elliptic Curve cert. We'll also be displaying a disclaimer about the potential issues with ECC (certain experts believe TLS curves may be compromised/weakened) if the user selects that.
For OpenVPN - which is the only protocol we advise for real security (PPTP and IPSec/L2TP are fine for just hiding your IP) - we don't use pre-shared keys. OpenVPN uses TLS for exchanging strong symmetric keys. Your password is only used for authentication and its entropy isn't related to your session's security.
Uh, no. We aren't subsidized by the NSA or any part of any government or any organization or person for that matter. We bootstrapped Private Internet Access with 500$ and a lot of caffeine and have been profitable since our second month in operation.
We believe what the NSA is referring to when talking about "VPN startups" is the initial stages of PPTP sessions. PPTP has been crackable for a while, check out moxie's cloudcracker.com. We believe it highly unlikely that they have broken OpenVPN (which is what our application uses) or SSL.
Looks like app.net isn't perfect either. Their HSTS isn't implemented correctly. Only 'alpha.app.net' and 'join.app.net' are protected while 'app.net' is not. They fell into one of the common pitfalls with their http->https redirects: http://coderrr.wordpress.com/2010/12/27/canonical-redirect-p...
You can verify this at: chrome://net-internals/#hsts
Has anyone else not been receiving 'charge.succeeded' events on their Stripe webhooks? We have been receiving all events except that one, even when all charges are succeeding as verified through the management panel. This is a big problem as that is the event that's used to actually process a payment and create a new account.
The problem seems to have been going over for around 8 hours now.
We've received no reply from their support in 4 hours.
Anyone have any ideas how to get in contact with them at this time?
I just remembered it's not actually custom protocols with raw sockets that are common and don't respect SOCKS settings but rather Flash's RTMP protocol.
Yea I should have. I guess I forgot to because I had already done so in these other comments [1] and wrongly assumed everyone had read them as well. Anyway, I'm the cofounder of said service.
If you email me at [email protected] I can try to help figure out why you get slow speeds on some of our US servers. None of our servers are even running near capacity.
You're correct HTTP connections over flash will use HTTP proxy settings. The problem is many sites don't stream over HTTP, they use some custom streaming protocol using raw flash sockets. And these do not respect SOCKS proxy settings.
As I've said in other comments. This is fun and hackerish but it's cheaper and simpler to just sign up for a VPN for a month that has UK gateways. Like https://www.privateinternetaccess.com/ for $6.95
Or you could sign up at https://www.privateinternetaccess.com for our VPN with two UK gateways for 6.95 for one month. Cheaper and much easier to setup.
Our VPN at https://www.privateinternetaccess.com also has multiple gigabits of bandwidth available through our two UK gateways. We have an app that provides one click setup on both windows and osx.
I'm the original creator of this site. The initial version had no market rate chart (the one in the middle). It was purely a live version of the bids/asks (see bottom graph http://bitcoincharts.com/markets/mtgoxUSD.html). After making that it didn't take much creativity to realize a price chart would fit nicely in the middle.