Windscribe

Last updated

Developer(s) Windscribe Limited [1]
Initial releaseApril 20, 2016;7 years ago (April 20, 2016) [2]
Repository https://github.com/Windscribe
Operating system
Platform
Type Virtual private network
Website windscribe.com

Windscribe is a commercial, cross-platform virtual private network (VPN) service provider that is based in Canada, but operates internationally. [3]

Contents

History

Windscribe was founded by Yegor Sak and Alex Paguis in 2016. [4]

In January 2021, Windscribe began beta testing ControlD, a new standalone DNS-based ad and tracker service, a direct competitor to services such as NextDNS, DNSFilter, and Cisco Umbrella. [5] [ better source needed ] [6]

In April 2023, a mid-sized VPN provider WeVPN shut down due to "unforeseen financial difficulties". Windscribe offered to match the remaining time left on WeVPN customer subscriptions, free of charge. Windscibe and WeVPN stated that this is not an acquisition, but "purely a gesture of good will". [7]

Features

Windscribe uses the OpenVPN, Internet Key Exchange v2/IPsec, and WireGuard protocols in its applications and manual configurations. Windscribe servers support P2P file sharing and is promoted as a no-log VPN service from their privacy policy. [8] [9] [10]

Windscribe offers open source desktop applications for Windows and macOS, with a command-line utility for Linux, and open source mobile applications for iOS, Android, and Android TV. [11] Windscribe also offers encrypted proxy support via browser extensions on Google Chrome and Firefox web browsers. Windscribe users can connect unlimited simultaneous devices. [12]

Social responsibility

Windscribe has been an active proponent of freedom of access to information censored by authoritarian regimes. These efforts include providing expanded bandwidth free accounts to everyone affected by the Russian invasion of Ukraine, using profanity laden promo codes in both Russian and Ukrainian languages, as well as free and unlimited service to all journalists in the region, [13] and subsequently combatting Russian blocks that were aimed to render these efforts fruitless. [14] [15] [16] In September of 2022, with the outbreak of the Mahsa Amini protests in Iran, Windscribe once again offered expanded free accounts to those affected, as well as Signal (software) proxies aimed to unblock the popular encrypted messaging service in the region. [17]

Windscribe maintains an evolving "VPN Relationship Map" which aims to shine the light on relationship between corporate VPNs and paid affiliates that promote them. [18]

Reception

In February 2022, Windscribe was named as one of the best VPNs according to Wired UK, stating "Windscribe has always been among the more generous free VPN providers, but it's also one of the most reliable and cost-effective paid-for consumer VPN services." [19]

In May 2023, Windscribe has been named "Best Free VPN of 2023" by Engadget, stating "We selected it as the best free VPN because of its high security and wide range of server options compared to other free VPNs." [20]

Criticism

On July 7, 2021, Windscribe self disclosed that two VPN servers hosted in Ukraine were seized by local authorities on June 24, 2021. On the disk of the VPN servers contained an OpenVPN private key, which under a set of strict pre-existing conditions could have been used to impersonate a Windscribe VPN server and capture traffic running through it, when OpenVPN protocol is used. [21] There was no impact to users who used the official apps or used other VPN protocols. Only those who used custom OpenVPN configs and were on a network that is under complete control of a hypothetical attacker were potentially vulnerable. In addition, Windscribe ran servers with an OpenVPN "compress" flag that is subject to a VORACLE attack. [22] A network wide key rotation occurred and both issues were fixed 13 days after the self-disclosure of the vulnerability.

In a follow-up article dated August 23 2021, Windscribe commented on the state of the VPN industry, pointing out identical flaws that existed with most major VPN providers at the time of writing. [23] As of May 2023, all named VPN providers are still subject to the vulnerability.

See also

Related Research Articles

A virtual private network (VPN) is a mechanism for creating a secure connection between a computing device and a computer network, or between two networks, using an insecure communication medium such as the public Internet.

<span class="mw-page-title-main">Cloudflare</span> American technology company

Cloudflare, Inc. is an American company that provides content delivery network services, cloud cybersecurity, DDoS mitigation, and ICANN-accredited domain registration services. Cloudflare's headquarters are located in San Francisco, California. According to The Hill, it is used by more than 20 percent of the Internet for its web security services as of 2022.

<span class="mw-page-title-main">Lantern (software)</span> Internet censorship circumvention software

Lantern is a free internet censorship circumvention tool that operates in some of the most extreme censorship environments, such as China, Iran, and Russia. It uses wide variety of protocols and techniques that obfuscate network traffic and/or co-mingle traffic with protocols censors are reluctant to block. It also uses domain fronting. It is not an anonymity tool like Tor.

<span class="mw-page-title-main">TunnelBear</span> Virtual private network service

TunnelBear is a public VPN service based in Toronto, Canada. It was created by Daniel Kaldor and Ryan Dochuk in 2011. In March 2018, TunnelBear was acquired by McAfee.

A public recursive name server is a name server service that networked computers may use to query the Domain Name System (DNS), the decentralized Internet naming system, in place of name servers operated by the local Internet service provider (ISP) to which the devices are connected. Reasons for using these services include:

<span class="mw-page-title-main">Mullvad</span> VPN service based in Sweden

Mullvad is a commercial VPN service based in Sweden. Launched in March 2009, Mullvad operates using the WireGuard and OpenVPN protocols. It also supports ShadowSocks as a bridge protocol for censorship circumvention.

ExpressVPN is a VPN service offered by a Hong Kong based company registered in the British Virgin Islands-as Express Technologies Ltd. The software is marketed as a privacy and security tool that encrypts users' web traffic and masks their IP addresses.

NordVPN is a VPN service provided by Nordsec Ltd with applications for Microsoft Windows, macOS, Linux, Android, iOS, and Android TV. Manual setup is available for wireless routers, NAS devices, and other platforms.

<span class="mw-page-title-main">IVPN</span>

IVPN is a VPN service offered by IVPN Limited based in Gibraltar. Launched in 2009, IVPN operates using the WireGuard, OpenVPN, and IKEv2 protocols.

<span class="mw-page-title-main">HMA (VPN)</span> Virtual private network service founded in 2005

HMA is a VPN service founded in 2005 in the United Kingdom. It has been a subsidiary of the Czech cybersecurity company Avast since 2016.

KeepSolid VPN Unlimited is a personal virtual private network software product available for iOS, macOS, Android, Windows, and Linux.

<span class="mw-page-title-main">PureVPN</span> Virtual private network company

PureVPN is a commercial VPN service and a part of PureSquare. It is owned by GZ Systems Ltd. Founded in 2007, the company is based in the British Virgin Islands.

1.1.1.1 is a free Domain Name System (DNS) service by the American company Cloudflare in partnership with APNIC. The service functions as a recursive name server, providing domain name resolution for any host on the Internet. The service was announced on April 1, 2018. On November 11, 2018, Cloudflare announced a mobile application of their 1.1.1.1 service for Android and iOS. On September 25, 2019, Cloudflare released WARP, an upgraded version of their original 1.1.1.1 mobile application.

Proton AG is a Swiss technology company offering privacy-focused online services. It was founded in 2014 by a group of scientists who met at CERN and created Proton Mail. Proton is headquartered in Plan-les-Ouates, Switzerland. It is supported by FONGIT and the European Commission.

<span class="mw-page-title-main">Mozilla VPN</span> Virtual private network service

Mozilla VPN is an open-source virtual private network web browser extension, desktop application, and mobile application developed by Mozilla. It launched in beta as Firefox Private Network on September 10, 2019, and officially launched on July 15, 2020, as Mozilla VPN.

Surfshark is a brand of VPN services offered by a Netherlands-based company of the same name.

A virtual private network (VPN) service provides a proxy server to help users bypass Internet censorship such as geoblocking and users who want to protect their communications against data profiling or MitM attacks on hostile networks.

PrivadoVPN is a VPN service provider with applications for Windows, macOS, Android, iOS, AndroidTV and Amazon Fire TV along with custom configuration support for routers and Linux. PrivadoVPN is based in Switzerland and operates under Swiss privacy laws.

<span class="mw-page-title-main">Amnezia VPN</span> Open-source self-hosted VPN software

Amnezia VPN is a free and open-source application that allows users to create a personal VPN using their own server. It uses the OpenVPN, WireGuard, Shadowsocks, IKev2 and Cloak protocols.

Atlas VPN is a freemium VPN service provider with applications for Microsoft Windows, macOS, Linux, Android, iOS, Android TV, Apple TV, and Amazon Fire TV.

References

  1. "Windscribe - Terms of Service". Windscribe. Retrieved August 19, 2021.
  2. Spark, Tom (January 20, 2017). "Is WindScribe a Good VPN?". Best10VPN.com. Archived from the original on February 2, 2017. Retrieved August 19, 2021.
  3. "Windscribe VPN Review 2023". Security.org. Retrieved March 16, 2023.
  4. Paul, Ian (December 14, 2017). "Windscribe Pro review: It's all about the extras". PC World . Archived from the original on August 20, 2020. Retrieved August 19, 2021.
  5. Brinkmann, Martin (April 25, 2021). "ControlD is a new DNS service by the makers of Windscribe VPN - gHacks Tech News". ghacks.net. Archived from the original on April 27, 2021. Retrieved August 19, 2021.
  6. "ControlD: Bypass geo-restrictions, block tracking, and be more". betalist.com. April 26, 2021. Archived from the original on August 19, 2021. Retrieved November 10, 2021.
  7. Fadilpašić, Sead (April 14, 2023). "WeVPN has shut down, users now moved onto Windscribe". TechRadar.com. Retrieved April 14, 2023.
  8. Zohair A. (May 21, 2017). "Windscribe VPN Review: The Cold Hard Facts You Need To Read Right Now". securitygladiators.com. Archived from the original on October 22, 2018. Retrieved August 19, 2021.
  9. Williams, Mike. "Windscribe VPN review". TechRadar.com. Archived from the original on January 8, 2017. Retrieved August 19, 2021.
  10. "Privacy Policy - Windscribe". Windscribe.com. Archived from the original on July 14, 2016. Retrieved August 19, 2021.
  11. "Windscribe VPN Review: Is It the Best Free VPN of 2021?". www.top10vpn.com. Retrieved August 19, 2021.
  12. "Windscribe VPN Review 2021: Is It a Good VPN?". CyberNews. July 29, 2021. Retrieved August 19, 2021.
  13. Sobey-Harker, Daniel (February 26, 2022). "Windscribe's Stance On The Invasion Of Ukraine". Windscribe. Retrieved February 26, 2022.
  14. Kennedy, Douglas (March 25, 2022). "Tech companies fighting back against Russian censorship". Fox News . Retrieved March 25, 2022.
  15. McGregor, Grady (March 25, 2022). "Tech companies fighting back against Russian censorship". Fortune . Retrieved March 25, 2022.
  16. Meaker, Morgan (March 30, 2022). "Russians Need VPNs. The Kremlin Hates Them". Wired . Retrieved March 30, 2022.
  17. "The Troubles in Iran". Windscribe. September 30, 2022. Retrieved September 30, 2022.
  18. Sobey-Harker, Daniel (May 9, 2022). "Who owns your data? A VPN Relationship Map". Windscribe. Retrieved May 9, 2022.
  19. Orphanides, K.G. (February 1, 2022). "The Best VPN Services Tested for Speed, Reliability and Privacy". Wired UK . Retrieved February 1, 2022.
  20. Malone, Katie (May 5, 2023). "The best VPNs for 2023". Engadget . Retrieved May 5, 2023.
  21. Sak, Yegor (July 7, 2021). "OpenVPN Security Improvements and Changes". Windscribe. Retrieved July 7, 2021.
  22. "The VORACLE attack vulnerability". OpenVPN . October 9, 2018. Retrieved October 9, 2018.
  23. Sak, Yegor (August 23, 2021). "OpenVPN Security Improvements and Changes". Windscribe. Retrieved August 23, 2021.