Jump to content

Windscribe: Difference between revisions

From Wikipedia, the free encyclopedia
Content deleted Content added
No edit summary
Tag: Reverted
m Reverted edit by 46.153.199.173 (talk) to last version by GhostOfNoMan
 
Line 44: Line 44:
Windscribe was founded by Yegor Sak and Alex Paguis in 2016.<ref>{{cite web|url-status=live|first=Ian|last=Paul|title=Windscribe Pro review: It's all about the extras|url=https://www.pcworld.com/article/407657/windscribe-vpn-review.html|archive-url=https://web.archive.org/web/20200820171228/https://www.pcworld.com/article/3239292/windscribe-vpn-review.html|date=December 14, 2017|archive-date=August 20, 2020|access-date=August 19, 2021|website=[[PC World]]}}</ref>
Windscribe was founded by Yegor Sak and Alex Paguis in 2016.<ref>{{cite web|url-status=live|first=Ian|last=Paul|title=Windscribe Pro review: It's all about the extras|url=https://www.pcworld.com/article/407657/windscribe-vpn-review.html|archive-url=https://web.archive.org/web/20200820171228/https://www.pcworld.com/article/3239292/windscribe-vpn-review.html|date=December 14, 2017|archive-date=August 20, 2020|access-date=August 19, 2021|website=[[PC World]]}}</ref>


In January 2021, Windscribe began beta testing ControlD, a new standalone [[DNS]]-based ad and [[web tracking|tracker]] service, a direct competitor to services such as NextDNS, DNSFilter, and Cisco Umbrella.<ref>{{cite web|first=Martin|last=Brinkmann|date=April 25, 2021|title=ControlD is a new DNS service by the makers of Windscribe VPN - gHacks Tech News|url=https://www.ghacks.net/2021/04/25/controld-is-a-new-dns-service-by-the-makers-of-windscribe-vpn|archive-url=https://web.archive.org/web/20210427071818/https://www.ghacks.net/2021/04/25/controld-is-a-new-dns-service-by-the-makers-of-windscribe-vpn|archive-date=April 27, 2021|access-date=August 19, 2021|website=[[ghacks]].net}}</ref><ref>{{cite news |title=Secure browsing with VPN |url=https://www.webdesignbooth.com/vpn/ |access-date=19 October 2024}}</ref>{{better source needed|date=July 2022}}
In January 2021, Windscribe began beta testing ControlD, a new standalone [[DNS]]-based ad and [[web tracking|tracker]] service, a direct competitor to services such as NextDNS, DNSFilter, and Cisco Umbrella.<ref>{{cite web|first=Martin|last=Brinkmann|date=April 25, 2021|title=ControlD is a new DNS service by the makers of Windscribe VPN - gHacks Tech News|url=https://www.ghacks.net/2021/04/25/controld-is-a-new-dns-service-by-the-makers-of-windscribe-vpn|archive-url=https://web.archive.org/web/20210427071818/https://www.ghacks.net/2021/04/25/controld-is-a-new-dns-service-by-the-makers-of-windscribe-vpn|archive-date=April 27, 2021|access-date=August 19, 2021|website=[[ghacks]].net}}</ref>{{better source needed|date=July 2022}}


On July 7, 2021, Windscribe self disclosed that two VPN servers hosted in [[Ukraine]] were seized by local authorities on June 24, 2021.<ref>{{Cite web |last=Goodin |first=Dan |date=2021-07-26 |title=VPN servers seized by Ukrainian authorities weren’t encrypted |url=https://arstechnica.com/gadgets/2021/07/vpn-servers-seized-by-ukrainian-authorities-werent-encrypted/ |access-date=2024-02-08 |website=Ars Technica |language=en-us}}</ref> On the disk of the VPN servers contained an OpenVPN private key, which under a set of strict pre-existing conditions could have been used to impersonate a Windscribe VPN server and capture traffic running through it, when OpenVPN protocol is used.<ref>{{cite web |last=Sak |first=Yegor |date=July 7, 2021 |title=OpenVPN Security Improvements and Changes |url=https://blog.windscribe.com/openvpn-security-improvements-and-changes-7b04ea49222/ |access-date=July 7, 2021 |website=Windscribe}}</ref> There was no impact to users who used the official apps or used other VPN protocols. Only those who used custom OpenVPN configs and were on a network that is under complete control of a hypothetical attacker were potentially vulnerable. In addition, Windscribe ran servers with an OpenVPN "compress" flag that is subject to a VORACLE attack.<ref>{{cite web |date=October 9, 2018 |title=The VORACLE attack vulnerability |url=https://openvpn.net/security-advisory/the-voracle-attack-vulnerability/ |access-date=October 9, 2018 |website=[[OpenVPN]]}}</ref> A network wide key rotation occurred and both issues were fixed 13 days after the self-disclosure of the vulnerability.
On July 7, 2021, Windscribe self disclosed that two VPN servers hosted in [[Ukraine]] were seized by local authorities on June 24, 2021.<ref>{{Cite web |last=Goodin |first=Dan |date=2021-07-26 |title=VPN servers seized by Ukrainian authorities weren’t encrypted |url=https://arstechnica.com/gadgets/2021/07/vpn-servers-seized-by-ukrainian-authorities-werent-encrypted/ |access-date=2024-02-08 |website=Ars Technica |language=en-us}}</ref> On the disk of the VPN servers contained an OpenVPN private key, which under a set of strict pre-existing conditions could have been used to impersonate a Windscribe VPN server and capture traffic running through it, when OpenVPN protocol is used.<ref>{{cite web |last=Sak |first=Yegor |date=July 7, 2021 |title=OpenVPN Security Improvements and Changes |url=https://blog.windscribe.com/openvpn-security-improvements-and-changes-7b04ea49222/ |access-date=July 7, 2021 |website=Windscribe}}</ref> There was no impact to users who used the official apps or used other VPN protocols. Only those who used custom OpenVPN configs and were on a network that is under complete control of a hypothetical attacker were potentially vulnerable. In addition, Windscribe ran servers with an OpenVPN "compress" flag that is subject to a VORACLE attack.<ref>{{cite web |date=October 9, 2018 |title=The VORACLE attack vulnerability |url=https://openvpn.net/security-advisory/the-voracle-attack-vulnerability/ |access-date=October 9, 2018 |website=[[OpenVPN]]}}</ref> A network wide key rotation occurred and both issues were fixed 13 days after the self-disclosure of the vulnerability.

Latest revision as of 12:43, 2 December 2024

Developer(s)Windscribe Limited[1]
Initial releaseApril 20, 2016; 8 years ago (April 20, 2016)[2]
Repositoryhttps://github.com/Windscribe
Operating system
Platform
TypeVirtual private network
Websitewindscribe.com

Windscribe is a commercial, cross-platform virtual private network (VPN) service provider based in Canada.[3]

History

[edit]

Windscribe was founded by Yegor Sak and Alex Paguis in 2016.[4]

In January 2021, Windscribe began beta testing ControlD, a new standalone DNS-based ad and tracker service, a direct competitor to services such as NextDNS, DNSFilter, and Cisco Umbrella.[5][better source needed]

On July 7, 2021, Windscribe self disclosed that two VPN servers hosted in Ukraine were seized by local authorities on June 24, 2021.[6] On the disk of the VPN servers contained an OpenVPN private key, which under a set of strict pre-existing conditions could have been used to impersonate a Windscribe VPN server and capture traffic running through it, when OpenVPN protocol is used.[7] There was no impact to users who used the official apps or used other VPN protocols. Only those who used custom OpenVPN configs and were on a network that is under complete control of a hypothetical attacker were potentially vulnerable. In addition, Windscribe ran servers with an OpenVPN "compress" flag that is subject to a VORACLE attack.[8] A network wide key rotation occurred and both issues were fixed 13 days after the self-disclosure of the vulnerability.

In a follow-up article dated August 23, 2021, Windscribe commented on the state of the VPN industry, pointing out identical flaws that existed with most major VPN providers at the time of writing.[9] As of May 2023, all named VPN providers are still subject to the vulnerability.

In April 2023, a mid-sized VPN provider WeVPN shut down due to "unforeseen financial difficulties". Windscribe offered to match the remaining time left on WeVPN customer subscriptions, free of charge. Windscribe and WeVPN stated that this is not an acquisition, but "purely a gesture of good will".[10]

Features

[edit]

Windscribe uses the OpenVPN, Internet Key Exchange v2/IPsec, and WireGuard protocols in its applications and manual configurations. Windscribe servers support P2P file sharing and is promoted as a no-log VPN service from their privacy policy.[11][12][13]

Windscribe offers open source desktop applications for Windows and macOS, with a command-line utility for Linux, and open source mobile applications for iOS, Android, and Android TV. Windscribe also offers encrypted proxy support via browser extensions on Google Chrome and Firefox web browsers. Windscribe users can connect unlimited simultaneous devices.[14]

Reception

[edit]

In February 2022, Windscribe was named as one of the best VPNs according to Wired UK, stating "Windscribe has always been among the more generous free VPN providers, but it's also one of the most reliable and cost-effective paid-for consumer VPN services."[15]

In May 2023, Windscribe has been named "Best Free VPN of 2023" by Engadget, stating "We selected it as the best free VPN because of its high security and wide range of server options compared to other free VPNs."[16]

Ukraine

[edit]

Windscribe has been an active proponent of freedom of access to information censored by authoritarian regimes. These efforts include providing expanded bandwidth free accounts to everyone affected by the Russian invasion of Ukraine, using profanity laden promo codes in both Russian and Ukrainian languages, as well as free and unlimited service to all journalists in the region, and subsequently combating Russian blocks that were aimed to render these efforts fruitless.[17][18][19]

See also

[edit]

References

[edit]
  1. ^ "Windscribe - Terms of Service". Windscribe. Retrieved August 19, 2021.
  2. ^ Spark, Tom (January 20, 2017). "Is WindScribe a Good VPN?". Best10VPN.com. Archived from the original on February 2, 2017. Retrieved August 19, 2021.
  3. ^ "Windscribe VPN Review 2023". Security.org. Retrieved March 16, 2023.
  4. ^ Paul, Ian (December 14, 2017). "Windscribe Pro review: It's all about the extras". PC World. Archived from the original on August 20, 2020. Retrieved August 19, 2021.
  5. ^ Brinkmann, Martin (April 25, 2021). "ControlD is a new DNS service by the makers of Windscribe VPN - gHacks Tech News". ghacks.net. Archived from the original on April 27, 2021. Retrieved August 19, 2021.
  6. ^ Goodin, Dan (July 26, 2021). "VPN servers seized by Ukrainian authorities weren't encrypted". Ars Technica. Retrieved February 8, 2024.
  7. ^ Sak, Yegor (July 7, 2021). "OpenVPN Security Improvements and Changes". Windscribe. Retrieved July 7, 2021.
  8. ^ "The VORACLE attack vulnerability". OpenVPN. October 9, 2018. Retrieved October 9, 2018.
  9. ^ Sak, Yegor (August 23, 2021). "OpenVPN Security Improvements and Changes". Windscribe. Retrieved August 23, 2021.
  10. ^ Fadilpašić, Sead (April 14, 2023). "WeVPN has shut down, users now moved onto Windscribe". TechRadar.com. Retrieved April 14, 2023.
  11. ^ Zohair A. (May 21, 2017). "Windscribe VPN Review: The Cold Hard Facts You Need To Read Right Now". securitygladiators.com. Archived from the original on October 22, 2018. Retrieved August 19, 2021.
  12. ^ Williams, Mike. "Windscribe VPN review". TechRadar.com. Archived from the original on January 8, 2017. Retrieved August 19, 2021.
  13. ^ "Privacy Policy - Windscribe". Windscribe.com. Archived from the original on July 14, 2016. Retrieved August 19, 2021.
  14. ^ "Windscribe VPN Review 2021: Is It a Good VPN?". CyberNews. July 29, 2021. Retrieved August 19, 2021.
  15. ^ Orphanides, K.G. (February 1, 2022). "The Best VPN Services Tested for Speed, Reliability and Privacy". Wired UK. Retrieved February 1, 2022.
  16. ^ Malone, Katie (May 5, 2023). "The best VPNs for 2023". Engadget. Retrieved May 5, 2023.
  17. ^ Kennedy, Douglas (March 25, 2022). "Tech companies fighting back against Russian censorship". Fox News. Retrieved March 25, 2022.
  18. ^ McGregor, Grady (March 25, 2022). "Tech companies fighting back against Russian censorship". Fortune. Retrieved March 25, 2022.
  19. ^ Meaker, Morgan (March 30, 2022). "Russians Need VPNs. The Kremlin Hates Them". Wired. Retrieved March 30, 2022.