Tag Archives: NordVPN

NordVPN review: A bit too overhyped for the price

NordVPN review: A bit too overhyped for the price

 

Katie Malone
Katie Malone
 

You may know NordVPN from its popular ambassador program, taking social media by storm as influencers sign up to make money advertising the virtual private network. But despite its popularity, it didn’t make the list of the nine best VPN services we published in June. After vigorous testing, I concluded it was a bit overhyped for the price, lacking features considered standard in lower cost options.

Geoblocking, streaming and gaming are the three main VPN use cases. So, to test out NordVPN and its competitors, I used them to watch Canadian Netflix from my US-based home, played an online game from a UK-based server and streamed a news channel on YouTube via a Hong Kong-based VPN.

How much does NordVPN cost?

NordVPN was easy to sign up for, offering options like opting in to automatic updates to keep the service running at the latest version. Depending on the tier you pick, you can also get access to NordPass, the company’s password manager, or NordLocker, a file encryption software. The “complete” package runs at $5.79 per month.

NordVPN: Speed and privacy

The best VPNs stay out of your way and you’ll barely even notice they’re running. That was pretty much the case with NordVPN. It passed our basic privacy tests, like successfully masking the IP address, and the DNS and WebRTC leak tests.It was also easy to access geo-blocked content, stream on YouTube and game using NordVPN, with little-to-no buffering. We ran a ping test, which measures internet latency. It took 75 milliseconds with NordVPN on, which isn’t a lot slower than 62 ms with it off.

NordVPN supports up to six devices at once, which means I could conduct all tests simultaneously and still had no slowdown. That’s great for sharing it with a family, or folks that like to game, watch TV and scroll on their phone at the same time. Those connectivity options come with a caveat: the devices have to run on different VPN protocols if they’re connected to the same server. NordVPN has more than 5,000 servers in 60 countries, and offers a variety of device support from gaming systems to Raspberry Pi devices to streaming services.

NordVPN cons

Still, NordVPN’s security history is less than ideal. NordVPN is based in Panama, a country with limited data sharing laws. It uses industry-standard AES 256-bit encryption and a modification on the WireGuard protocol to avoid temporarily collecting IP addresses. It does third-party security audits and has a vulnerability disclosure program, two indicators of taking privacy basics seriously. But it’s not open source, and when it comes to data privacy, it falls short because of its patterns of collecting and storing unnecessary user information. Notably, NordVPN also failed to disclose a 2018 data breach in a timely manner. It wasn’t until a security researcher discussed it publicly, over a year after the incident, that NordVPN owned up to it.

NordVPN’s history of loaded terms and deceptive advertising also just didn’t sit well with me. The UK-based Advertising Standards Authority ruled a 2019 NordVPN ad as misleading, by exaggerating the risk from data theft. It makes sweeping claims about what’s possible with its VPN that are impossible to prove.

For an option so highly talked about, the experience using NordVPN was just… fine. It didn’t stand out, unlike ProtonVPN that offered a more comprehensive suite of products alongside the VPN and higher security measures. That’s why Nord didn’t make the cut as one of the top choices I’d recommend.

 

 

Engadget is a web magazine with obsessive daily coverage of everything new in gadgets and consumer electronics

(30)

NordVPN strengthens security measures following server breach

Mariella Moon, @mariella_moon

October 30, 2019
 
NordVPN strengthens security measures following server breach | DeviceDaily.com
 

NordVPN is taking steps to ensure customers that it can stay true to its promise of providing “secure and private access to the internet” after admitting that an attacker breached one of its servers. To start with, its in-house team of penetration testers will now be working with cybersecurity firm VerSprite to conduct comprehensive penetration testing, intrusion handling and source code analysis. The firm will also help NordVPN form an independent cybersecurity advisory committee as part of their long-term partnership.

In an effort to find vulnerabilities before a bad actor does again, it’s also launching a bug bounty program over the next few weeks. NordVPN also promises to undergo a complete a full-scale third-party independent security audit covering its hardware, software, backend architecture, backend source code and internal procedures in 2020.

The company says it’s planning to build a network of collocated servers — or servers it will fully own even though they’re located in a rented data center space — as well. It’s just currently finishing its infrastructure review to look for and remove any exploitable vulnerabilities left by third-party server providers. Finally, NordVPN says it’s planning replace its entire infrastructure with diskless servers so that nothing will be stored locally. That way, even if an infiltrator seizes a server, they won’t find anything in it.

NordVPN admitted last week that an unauthorized person accessed a server it rented from a data center in Finland back in March 2018. That data center spotted the infiltrator and removed their access without informing the company, but NordVPN found out about the incident a few months ago and ended its contract with the provider.

The company says it’s sure that the infiltrator wasn’t able to access customer data, since the compromised server didn’t contain any activity logs, usernames or passwords. An Ars Technica report says the hackers were able to steal encryption keys that could be used to stage decryption attacks on some customers. But NordVPN maintains that the “service as a whole was not hacked, the code was not hacked, the VPN tunnel was not breached and the NordVPN apps stayed unaffected.”

Engadget RSS Feed

(29)

Daily Updates on Technology & Devices