news.volyx.in

NordVPN confirms it was hacked (techcrunch.com)

1368 points by afshinmeh · 2551 days ago · 642 comments on HN

Article summary

NordVPN, a virtual private network provider, has confirmed it was hacked in March 2018, with one of its data centers in Finland being accessed without authorization. The attacker exploited an insecure remote management system left by the data center provider, but NordVPN claims that no user activity logs were stored on the server and that the breach did not affect other servers on its network. The company only disclosed the breach after being sure that its infrastructure was secure. The hack has raised concerns about the potential access to user data and the security of VPN providers.

Main themes

  • VPN security
  • Data breaches
  • Online privacy
  • Trust in VPN providers
  • Influence of advertising

What commenters say

  • The breach of NordVPN is a serious issue that undermines trust in VPN providers and highlights the importance of choosing a trustworthy company to handle internet traffic.
  • Influencers who recommend VPNs without properly evaluating their security claims are being reckless and irresponsible.
  • The use of VPNs is still a good idea, despite potential security risks, as they can provide protection against certain types of surveillance and data collection.
  • Some commenters believe that the risks associated with using a VPN are overstated and that the benefits of using one outweigh the potential drawbacks.
  • The VPN industry is plagued by shady business practices and a lack of transparency, making it difficult for users to make informed decisions.
  • The security of a VPN depends on various factors, including the use of forward secrecy and the security of the underlying infrastructure.
  • Users should be cautious when choosing a VPN provider and consider factors such as their track record on logging and data protection.
  • The breach of NordVPN highlights the need for greater transparency and accountability in the VPN industry.