# Virtual Private Networks

**URL:** <https://boards.straightdope.com/t/virtual-private-networks/791956>\
**Category:** Factual Questions\
**Created:** [July 23, 2017, 5:31pm UTC](https://boards.straightdope.com/t/virtual-private-networks/791956 "2017-07-23T17:31:33Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![abashed](https://avatars.discourse-cdn.com/v4/letter/a/c6cbf5/32.png) [@abashed](https://boards.straightdope.com/u/abashed)\
**Post date:** [July 23, 2017, 5:31pm UTC](https://boards.straightdope.com/t/virtual-private-networks/791956/1 "2017-07-23T17:31:33Z")

</div>

Is there such a thing as a completely undetectable VPN? I know they hide your real IP address but it appears some sites are equipped with tools that can detect when someone is using a VPN. I have only tried free ones but are the paid ones worth the subscription?

---

<div class="post-metadata">

**Author:** ![beowulff](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/beowulff/32/542_2.png) [@beowulff](https://boards.straightdope.com/u/beowulff)\
**Post date:** [July 23, 2017, 6:03pm UTC](https://boards.straightdope.com/t/virtual-private-networks/791956/2 "2017-07-23T18:03:56Z")

</div>

Undetectable by whom?  
You will be generating internet traffic, so it’s pretty hard to be invisible.

---

<div class="post-metadata">

**Author:** ![DPRK](https://avatars.discourse-cdn.com/v4/letter/d/4491bb/32.png) [@DPRK](https://boards.straightdope.com/u/DPRK)\
**Post date:** [July 23, 2017, 6:06pm UTC](https://boards.straightdope.com/t/virtual-private-networks/791956/3 "2017-07-23T18:06:35Z")

</div>

A VPN per se is not necessarily designed to be steganographically “undetectable”, but it certainly does increase privacy and security over an insecure internet. As for whether the paid ones are worth it, without getting into details I am inclined to say “yes”. Compare to how paid-for, and especially business-grade, ISPs compare to whatever Internet (if any) you can pick up for free.

---

<div class="post-metadata">

**Author:** ![Riemann](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/riemann/32/3133_2.png) [@Riemann](https://boards.straightdope.com/u/Riemann)\
**Post date:** [July 23, 2017, 6:11pm UTC](https://boards.straightdope.com/t/virtual-private-networks/791956/4 "2017-07-23T18:11:31Z")

</div>

I don’t think that they are “detectable”. It’s just that some sites make the effort to catalog the IP addresses used by commercial VPN services. So they know the traffic is coming from a VPN service, but they still don’t know who you are. I think if you VPN’ed non-commercially (using a friend’s machine, say) then the target site would just see your friend’s IP address and have no way to infer anything at all.

If I’m wrong about that, I’d be interested to hear from one of the experts about how they would know?

---

<div class="post-metadata">

**Author:** ![abashed](https://avatars.discourse-cdn.com/v4/letter/a/c6cbf5/32.png) [@abashed](https://boards.straightdope.com/u/abashed)\
**Post date:** [July 23, 2017, 6:27pm UTC](https://boards.straightdope.com/t/virtual-private-networks/791956/5 "2017-07-23T18:27:28Z")

</div>

> [@beowulff](#):
>
> Undetectable by whom?  
> You will be generating internet traffic, so it’s pretty hard to be invisible.

Oh, I thought they gave you anonymity. No?

---

<div class="post-metadata">

**Author:** ![abashed](https://avatars.discourse-cdn.com/v4/letter/a/c6cbf5/32.png) [@abashed](https://boards.straightdope.com/u/abashed)\
**Post date:** [July 23, 2017, 6:28pm UTC](https://boards.straightdope.com/t/virtual-private-networks/791956/6 "2017-07-23T18:28:42Z")

</div>

> [@DPRK](#):
>
> A VPN per se is not necessarily designed to be steganographically “undetectable”, but it certainly does increase privacy and security over an insecure internet. As for whether the paid ones are worth it, without getting into details I am inclined to say “yes”. Compare to how paid-for, and especially business-grade, ISPs compare to whatever Internet (if any) you can pick up for free.

Okay, thank you. 🙂

---

<div class="post-metadata">

**Author:** ![abashed](https://avatars.discourse-cdn.com/v4/letter/a/c6cbf5/32.png) [@abashed](https://boards.straightdope.com/u/abashed)\
**Post date:** [July 23, 2017, 6:31pm UTC](https://boards.straightdope.com/t/virtual-private-networks/791956/7 "2017-07-23T18:31:51Z")

</div>

> [@Riemann](#):
>
> I don’t think that they are “detectable”. It’s just that some sites make the effort to catalog the IP addresses used by commercial VPN services. So they know the traffic is coming from a VPN service, but they still don’t know who you are. I think if you VPN’ed non-commercially (using a friend’s machine, say) then the target site would just see your friend’s IP address and have no way to infer anything at all.
> 
> If I’m wrong about that, I’d be interested to hear from one of the experts about how they would know?

Me too. :o

Thanks.

But I seem to to recall reading that VPN’s have a specific protocol when connecting to a site involving certain ‘ports?’ So perhaps this is another way the use of them can be detected.

---

<div class="post-metadata">

**Author:** ![wintertime](https://avatars.discourse-cdn.com/v4/letter/w/c68b51/32.png) [@wintertime](https://boards.straightdope.com/u/wintertime)\
**Post date:** [July 23, 2017, 7:54pm UTC](https://boards.straightdope.com/t/virtual-private-networks/791956/8 "2017-07-23T19:54:23Z")

</div>

Whenever you make contact with a site, you are detected by it in a myriad ways.

A VPN hides your IP behind the IP that the VPN uses to contact the site because you contact them via the VPN.

You can see what IP is used to contact a site by making contact with a [website that tests](https://www.doileak.com/) what kind of information you’re giving away.

Even if you use a VPN, you will likely still leak crucial identifying information via your web browser or other tools used for communication via the internet: WebRTC (Web Real-Time Communication) and WebGL are among the most notorious leakers that render privacy services useless - unless you make sure that such protocols or standards are disabled in your browser.

If you want to disable WebRTC in Firefox, I’ll cite the **highly(!)** recommended website [Privacy Tools](https://privacytoolsio.github.io/privacytools.io/):

> [@](#):
>
> How to disable WebRTC in Firefox?
> 
> In short: Set “media.peerconnection.enabled” to “false” in “about:config”.
> 
> Explained:
> 
> ```
> Enter "about:config" in the firefox address bar and press enter.
> Press the button "I'll be careful, I promise!"
> Search for "media.peerconnection.enabled"
> Double click the entry, the column "Value" should now be "false"
> Done. Do the WebRTC leak test again.
> 
> ```
> 
> If you want to make sure every single WebRTC related setting is really disabled change these settings:
> 
> ```
> media.peerconnection.turn.disable = true
> media.peerconnection.use_document_iceservers = false
> media.peerconnection.video.enabled = false
> media.peerconnection.identity.timeout = 1
> 
> ```
> 
> Now you can be 100% sure WebRTC is disabled.

BUT even if you use a highly secure VPN and use only communication tools that are considered privacy-oriented and disable any known way to leak information about yourself, you can still be identified statistically in far too many ways over time by your browser fingerprint, your behaviour, your writing etc.

And, of course, that are ways to detect you that are kept out of the public’s eye.

And don’t forget that the VPN provider does know your IP! You could use two by using virtual boxes (I recommend using one in any case whenever you contact the internet to have an additional buffer between your real OS and the nasty things that want to infect it), but the first VPN in line is still going to know your true IP.

Anonymity is impossible. Privacy is a much more reasonable goal. But its degree depends on you.

---

<div class="post-metadata">

**Author:** ![md2000](https://avatars.discourse-cdn.com/v4/letter/m/73ab20/32.png) [@md2000](https://boards.straightdope.com/u/md2000)\
**Post date:** [July 24, 2017, 1:16am UTC](https://boards.straightdope.com/t/virtual-private-networks/791956/9 "2017-07-24T01:16:25Z")

</div>

Also consider that Windows 10 especially, leaks private data like a sieve - although only to Microsoft. (Go into settings and turn off all that crap). If you use services like Dropbox, or login to Facebook, or Google - they all track things like cookies, or you login. They may track all your IP addresses, so they can know you by two different IPs, your home IP and VPN IP. Ditto for advertising sites - they dump cookies on your PC. So close down those background services, don’t login both ways to various sites, use anonymous browsing for what it’s worth.

---

<div class="post-metadata">

**Author:** ![LSLGuy](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/lslguy/32/5813_2.png) [@LSLGuy](https://boards.straightdope.com/u/LSLGuy)\
**Post date:** [July 24, 2017, 1:42am UTC](https://boards.straightdope.com/t/virtual-private-networks/791956/10 "2017-07-24T01:42:51Z")

</div>

I think the OP ought to tell us what his concerns are

Is he trying to prevent 3rd parties reading his traffic?  
Is he trying to prevent 3rd parties from knowing that he’s connecting to a particular site?  
Is he trying to prevent the site he’s going to from knowing who he is? where he is?  
Or is he just trying to do what his OP suggests, prevent his target site from knowing that he’s using a VPN for some unexplained reason?

etc.

There are lots of different tools that each solve a part of the total security/ privacy / anonymity puzzle.

As pointed out above, the idea of achieving sustained untraceable absolute anonymity on the commercial /public internet is substantially impossible. That doesn’t mean you need to give up entirely, but you do need to have a realistic expectation about what can be done.

For certain consume-freebies-only operations you can get close to anonymous if you’re willing to work hard enough. For pretty substantial levels of “hard enough.” And assuming of course that you’re not already targeted by some agency watching you.

---

<div class="post-metadata">

**Author:** ![engineer\_comp\_geek](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/engineer_comp_geek/32/504_2.png) [@engineer\_comp\_geek](https://boards.straightdope.com/u/engineer_comp_geek)\
**Post date:** [July 24, 2017, 2:08am UTC](https://boards.straightdope.com/t/virtual-private-networks/791956/11 "2017-07-24T02:08:59Z")

</div>

**Moderator Action**

While VPNs are a legitimate thing that have legitimate uses, too often these days they are used for IP concealment for the benefit of things like spamming and trolling. I have tried in the past to allow discussions of VPNs as long as the discussions remain on the legitimate side of things, but too many of those threads have been problematic and end up pushing too far into abuse territory.

These past thread problems have forced me to rein in VPN threads in general due to their conflict with our rule against discussions of IP hiding and IP spoofing (technically a VPN isn’t a spoof but many folks call it that).

Since the OP is about a method that could be used to hide one’s true IP from a message board like the SDMB, even though not explicitly stated as such, this thread is closed.
