this post was submitted on 10 Nov 2023
105 points (99.1% liked)

Privacy

32137 readers
2155 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

I use ProtonVPN for everything, and I've started noticing more and more sites simply blocking me if I try to connect to them through ProtonVPN. As much as it sucks, I've more or less become acclimated to having to deal with an increased number of captchas while using a VPN; but I'm pretty angry about being blocked outright. There are at least two broad blocking tactics. First, some sites will say that my network traffic looks suspicious and/or that they simply block traffic from certain IP addresses. But second, and far more maddeningly, some sites tell me that my username and password combo are incorrect when I'm using a VPN. But I know this to be a blatant lie because (1) I use a password manager that auto-fills login forms with credentials that match the domain name, and (2) such sites accept my credentials when I visit them without the VPN connection.

What the hell can we do about this shit? Do I have to run my own VPN to avoid sharing an IP address with other people and thus getting blocked? I really don't want to do that because I have neither the time nor expertise, and I like that connecting through a VPN provider makes my IP address much less significant. I'm aware that this is connected to the broader conversation about WEI and other methods for determining whether requests are legitimate or not, and I'm sure that businesses of all sizes are reeling from massive increases in bot and AI activity. But solutions that end up punishing legitimate users are not good or valid solutions.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 15 points 1 year ago (3 children)

This is extra maddening with my banking app recently. I even set up split tunneling for it, but it still somehow figures out the VPN. The problem is, it doesn't let me do ATM withdrawals nor generate one-time virtual cards. Ironically, it still let's me view full details of my physical card...

So just disconnect from VPN? Oh, not so fast. It remembers that VPN was used at some point, and I'll have to deactivate the app and then reactivate it without ever connecting to VPN.
Since I have to deactivate and reactivate it daily, immediately when needed, this has led me to decreasing the security by using virtual card reader for 2FA kept on same device as opposed to using physical one and keeping it at home as I used to before this BS.

This is what I mean by the physical 2FA card reader:

Yes, that's the only thing at hand I had to cover the card number :)

[–] [email protected] 10 points 1 year ago

Lmfao at the arch sticker. Also use arch btw.

[–] [email protected] 2 points 1 year ago (1 children)

Just make another user profile and dont put a vpn on it (assuming android)

Also it still knows you're using vpn because split tunnel still uses the VPN provider's DNS server, so sounds like they are also checking who you DNS provider is.

They sound like complete scumbags. Switch banks lol.

[–] [email protected] 1 points 1 year ago (1 children)

I use NextDNS. That's also used when I am connected to VPN. It seems to not be the problem. Maybe some Android service it talks with, I don't know.

Unfortunately, MIUI disabled the multi-user option for some reason.

[–] [email protected] 1 points 1 year ago (1 children)

You desperately need to use a custom rom. You have virtually zero mobile privacy until you do

[–] [email protected] 1 points 1 year ago (1 children)

I know. Especially after the last motherboard replacement. It used to run EUXM version, but now it runs MIXM. EUXM is version for EEA, and it has to comply with stuff like GDPR, so you get (optional) prompts for consent on data processing everywhere. Well, MIXM is the global variant, and this simply doesn't exist.

Anyway, I don't want to void my warranty by flashing custom ROM. After all, this phone already had not 1, but 2 in-warranty motherboard replacements, and there's still time (6 months) for more.
Poco X3 Pro's motherboard has it coming from both software and hardware. From software side, MIUI updates have high chance of hard-bricking the MOBO. From hardware side, the CPU has issues with cooking itself to death.

Yeah...

[–] [email protected] 2 points 1 year ago

damn bro. you've been through the wringer. just simplify your life and get a new phone. Pixel 6a for Graphene maybe.

[–] UnsyllabledQuickies 2 points 1 year ago

Oof. That really sucks.