HMA (VPN)

Last updated

HMA
Company type Subsidiary
Industry Computer security software
Founded2005
FounderJack Cator
HeadquartersUnited Kingdom
Area served
Global
Products VPN software
Parent Avast (Gen Digital)
Website www.hidemyass.com/index

HMA (formerly HideMyAss!) is a VPN service founded in 2005 in the United Kingdom. It has been a subsidiary of the Czech cybersecurity company Avast since 2016.

Contents

History

HMA was created in 2005 in Norfolk, England by Jack Cator. [1] [2] At the time, Cator was sixteen years-old. [3] He created HMA in order to circumvent restrictions his school had on accessing games or music from their network. [3] According to Cator, the first HMA service was created in just a few hours using open-source code. [3] [2] The first product was a free proxy website where users typed in a URL and it delivered the website in the user's web browser. [4]

Cator promoted the tool in online forums [3] and it was featured on the front page of digg. [2] [5] After attracting more than one thousand users, Cator incorporated ads. [2] HMA did not take any venture capital funding. [3] [2] It generated about $1,000 - $2,000 per month while the founder went to college to pursue a degree in computer science. [2] In 2009, Cator dropped out of college to focus on HMA and added a paid VPN service. [3] [2] [1] Most early HMA employees were freelancers found on oDesk. [2] In 2012, one of the freelancers set up a competing business. [3] HMA responded by hiring its contractors as full-time employees and establishing physical offices in London. [3] [5]

In 2012, the United Kingdom's government sent HMA a court order demanding it provide information about Cody Andrew Kretsinger's use of HMA's service to hack Sony as a member of the LulzSec hacking group. [4] [6] [7] HMA provided the information to authorities. [6] HMA said it was a violation of the company's terms of use to use its software for illegal activities. [8]

In 2013, HMA added software to anonymize internet traffic from mobile devices. [9] In 2014, the company introduced HideMyPhone! service, which allowed mobile phone users to make their calls appear to come from a different location. [5]

By 2014, the service had 10 million users and 215,000 paying subscribers of its VPN service. [5] It made £11 million in revenue that year. [2] HMA had 100 staff and established international offices in Belgrade and Kyiv. [5] [3]

By 2015, HMA became one of the largest VPN providers. [10] [3] In May 2015, it was acquired by AVG Technologies for $40 million with a $20 million earn-out upon achievement of milestones, [11] and became part of Avast after its 2016 acquisition of AVG Technologies. [12]

In 2017, a security vulnerability was discovered that allowed hackers with access to a user's laptop to obtain elevated privileges on the device. HMA corrected the vulnerability days later. [13] [14]

In 2019, it was reported that HMA received a directive from Russian authorities to join a state sponsored registry of banned websites, which would prevent Russian HMA users from circumventing Russian state censorship. HMA was reportedly given one month to comply, or face blocking by Russian authorities. [15]

In 2020, HMA introduced a no-log policy for their VPN service. Under the policy HMA will not log a user’s original IP address, DNS queries, online activity, amount of data transferred or VPN connection timestamps. [16] Following HMA’s introduction of a no-log policy, HMA’s VPN was awarded a low risk user privacy impact rating for its no-logging policy, after it was independently audited by third-party cybersecurity firm VerSprite. [17]

Software

HMA provides digital software and services intended to help users remain anonymous online and encrypt their online traffic. [14] Its software is used to access websites that may be blocked in the user's country, to anonymize information that could otherwise be used by hackers, and to do something unscrupulous without being identified. [3] HMA's privacy policy and terms of use prohibit using it for illegal activity. [18]

HMA hides the user's IP address and other identifying information by routing the user's internet traffic through a remote server. [14] [19] However, experts note that the company does log some connection data including the originating IP address, the duration of each VPN session, and the amount of bandwidth used. [10] [20] [21]

As of May 2018, the company had 830 servers in 280 locations across the globe and provided over 3000 IP addresses. [21] The software also includes a kill switch across all platforms. [22] [23]

Privacy

According to Invisibler, HMA VPN appears to have cooperated with US authorities in handing over logs in a hacking case. This led to the arrest of a hacker in what is known as the "LulzSec fiasco".

Reception

In 2015, a review in Tom's Hardware said HMA was easy to use, had good customer service, and a large number of server locations to choose from, but criticized it for slowing internet speeds. [24] In contrast, Digital Trends said HMA had strong speeds and good server selection, but wasn't fool-proof at ensuring anonymity, because it stored user activity logs [10] (in 2020, HMA announced that it would no longer log user activity [25] ). In 2017, PC World noted that it was difficult to measure the effect a VPN service has on internet speed, because of variables like location, internet service speeds, and hardware. [26]

A 2016 review in PCMag gave the HMA Android app 3 out of 5 stars. [27] It praised HMA for its server selection and user interface, but criticized it for price, speed, and the lack of advanced features. [27] In 2018, PCMag gave similar feedback on the HMA VPN service. [19] PC World’s 2017 review also praised HMA's simple user interface, but criticized the lack of advanced features, saying the software was ideal for casual users that do not need advanced configuration options. [26]

Related Research Articles

<span class="mw-page-title-main">Proxy server</span> Computer server that makes and receives requests on behalf of a user

In computer networking, a proxy server is a server application that acts as an intermediary between a client requesting a resource and the server providing that resource. It improves privacy, security, and performance in the process.

<span class="mw-page-title-main">Open proxy</span> Proxy server accessible to any Internet user

An open proxy is a type of proxy server that is accessible by any Internet user.

Internet security is a branch of computer security. It encompasses the Internet, browser security, web site security, and network security as it applies to other applications or operating systems as a whole. Its objective is to establish rules and measures to use against attacks over the Internet. The Internet is an inherently insecure channel for information exchange, with high risk of intrusion or fraud, such as phishing, online viruses, trojans, ransomware and worms.

<span class="mw-page-title-main">Avast</span> Czech security software company

Avast Software s.r.o. is a Czech multinational cybersecurity software company headquartered in Prague, Czech Republic, that researches and develops computer security software, machine learning, and artificial intelligence. Avast has more than 435 million monthly active users and the second largest market share among anti-malware application vendors worldwide as of April 2020. The company has approximately 1,700 employees across its 25 offices worldwide. In July 2021, NortonLifeLock, an American cybersecurity company, announced that it was in talks to merge with Avast Software. In August 2021, Avast's board of directors agreed to an offer of US$8 billion.

Anonymizer, Inc. is an Internet privacy company, founded in 1995 by Lance Cottrell, author of the Mixmaster anonymous remailer. Anonymizer was originally named Infonex Internet. The name was changed to Anonymizer in 1997 when the company acquired a web based privacy proxy of the same name developed by Justin Boyan at Carnegie Mellon University School of Computer Science. Boyan licensed the software to C2Net for public beta testing before selling it to Infonex. One of the first web privacy companies founded, Anonymizer creates a VPN link between its servers and its users computer, creating a random IP address, rather than the one actually being used. This can be used to anonymously report a crime, avoid spam, avoid Internet censorship, keep the users identity safe and track competitors, among other uses.

An anonymizer or an anonymous proxy is a tool that attempts to make activity on the Internet untraceable. It is a proxy server computer that acts as an intermediary and privacy shield between a client computer and the rest of the Internet. It accesses the Internet on the user's behalf, protecting personal information of the user by hiding the client computer's identifying information such as IP addresses. Anonymous proxy is the opposite of transparent proxy, which sends user information in the connection request header.

<span class="mw-page-title-main">AVG Technologies</span> Brand of cybersecurity, privacy, performance and utility applications

AVG Technologies is a brand of cybersecurity, privacy, performance and utility software applications for desktop computers and mobile devices developed by Avast, a part of Gen Digital. AVG was a cybersecurity software company founded in 1991 and it merged into Avast following an acquisition in 2017. It typically offers freeware, earning revenues from advertisers and from users that upgrade to paid versions for access to more features.

<span class="mw-page-title-main">Digital privacy</span>

Digital privacy is often used in contexts that promote advocacy on behalf of individual and consumer privacy rights in e-services and is typically used in opposition to the business practices of many e-marketers, businesses, and companies to collect and use such information and data. Digital privacy, a crucial aspect of modern online interactions and services, can be defined under three sub-related categories: information privacy, communication privacy, and individual privacy.

<span class="mw-page-title-main">LulzSec</span> Hacker group

LulzSec was a black hat computer hacking group that claimed responsibility for several high profile attacks, including the compromise of user accounts from PlayStation Network in 2011. The group also claimed responsibility for taking the CIA website offline. Some security professionals have commented that LulzSec has drawn attention to insecure systems and the dangers of password reuse. It has gained attention due to its high profile targets and the sarcastic messages it has posted in the aftermath of its attacks. One of the founders of LulzSec was computer security specialist Hector Monsegur, who used the online moniker Sabu. He later helped law enforcement track down other members of the organization as part of a plea deal. At least four associates of LulzSec were arrested in March 2012 as part of this investigation. Prior, British authorities had announced the arrests of two teenagers they alleged were LulzSec members, going by the pseudonyms T-flow and Topiary.

Hotspot Shield is a public VPN service operated by AnchorFree, Inc. Hotspot Shield was used to bypass government censorship during the Arab Spring protests in Egypt, Tunisia, and Libya.

<span class="mw-page-title-main">Private Internet Access</span> Virtual private network service

Private Internet Access (PIA) is a personal VPN service that allows users to connect to multiple locations. In 2018, former Mt. Gox CEO Mark Karpelès was named chief technology officer of PIA's parent company, London Trust Media. In November 2019, Private Internet Access was acquired by Kape Technologies.

<span class="mw-page-title-main">Proton Mail</span> End-to-end encrypted email service

Proton Mail is a Swiss end-to-end encrypted email service founded in 2013 headquartered in Plan-les-Ouates, Switzerland. It uses client-side encryption to protect email content and user data before they are sent to Proton Mail servers, unlike other common email providers such as Gmail and Outlook.com. The service can be accessed through a webmail client, the Tor network, Windows, macOS and Linux (beta) desktop apps and iOS and Android apps.

<span class="mw-page-title-main">Avast SecureLine VPN</span>

Avast SecureLine VPN is a VPN service developed by Czech cybersecurity software company Avast. It is available for Android, Microsoft Windows, macOS and iOS operating systems.

<span class="mw-page-title-main">Mullvad</span> VPN service based in Sweden

Mullvad is a commercial VPN service based in Sweden. Launched in March 2009, Mullvad operates using the WireGuard and OpenVPN protocols. It also supports Shadowsocks as a bridge protocol for censorship circumvention. Mullvad's VPN client software is released under the GPLv3, a free and open-source software license.

ExpressVPN is a VPN service which offers privacy and security software that encrypts users' web traffic and masks their IP addresses. It is offered by a Hong Kong-based company registered in the British Virgin Islands as Express Technologies Ltd.

NordVPN is a Lithuanian VPN service provided by Nordsec Ltd with applications for Microsoft Windows, macOS, Linux, Android, iOS, Android TV, and tvOS. Manual setup is available for wireless routers, NAS devices, and other platforms.

<span class="mw-page-title-main">Proton VPN</span> VPN service operated by Proton Technologies AG

Proton VPN is a VPN service launched in 2017 and operated by the Swiss company Proton AG, the company behind the email service Proton Mail. According to its official website, Proton VPN and Proton Mail share the same management team, offices, and technical resources, and are operated from Proton's headquarters in Plan-les-Ouates, Switzerland.

<span class="mw-page-title-main">IPVanish</span>

IPVanish VPN is a US-based VPN service owned by Ziff Davis.

Outline VPN is a free and open-source tool that deploys Shadowsocks servers on multiple cloud service providers. The software suite also includes client software for multiple platforms. Outline was developed by Jigsaw, a technology incubator created by Google.[3]

A virtual private network (VPN) service provides a proxy server to help users bypass Internet censorship such as geoblocking and users who want to protect their communications against data profiling or MitM attacks on hostile networks.

References

  1. 1 2 "The entrepreneurial character". Entrepreneurship and Small Business (4th ed.). Palgrave Macmillan Limited. 2016. p. 65. ISBN   978-1-137-43035-9 via Google Books.[ permanent dead link ]
  2. 1 2 3 4 5 6 7 8 9 Cadwalladr, Carole (March 15, 2015). "HideMyAss! Your secret's safe with Jack". The Guardian . Retrieved May 20, 2018.
  3. 1 2 3 4 5 6 7 8 9 10 11 Shadbolt, Peter (May 18, 2015). "How misbehaving at school made one man a multimillionaire". BBC News . Retrieved October 21, 2018.
  4. 1 2 Leyden, John. "HideMyAss defends role in LulzSec hack arrest". The Register . Retrieved October 21, 2018.
  5. 1 2 3 4 5 Williams, Hattie (November 16, 2014). "How I Made It: Jack Cator, founder of Hide My Ass!". The Sunday Times . Retrieved May 20, 2018.(subscription required)
  6. 1 2 Stryker, Cole (2012). Hacking the Future: Privacy, Identity and Anonymity on the Web. Gerald Duckworth & Company. p. 80. ISBN   978-0-7156-4454-6 . Retrieved May 19, 2018 via Google Books.[ permanent dead link ]
  7. Reißmann, Ole (September 26, 2011). "Anonymisierdienst hilft bei der Nutzeridentifizierung" [Anonymizing service helps with user identification]. Spiegel Online (in German). Retrieved May 20, 2018.
  8. Blessenohl, Holger (September 26, 2011). "VPN-Dienst bestätigt Weitergabe von Verbindungsdaten ans FBI" [Hide My Ass - VPN service confirms forwarding of connection data to the FBI]. GIGA (in German). Archived from the original on October 21, 2018. Retrieved May 19, 2018.
  9. Woods, Ben (October 10, 2013). "HideMyAss Now Has Its Own Dedicated Free to Download iOS App". TNW.com. Retrieved May 19, 2018.
  10. 1 2 3 Stobing, Chris (January 23, 2015). "Three VPN competitors go head-to-head". Digital Trends . Retrieved May 20, 2018.
  11. Osborne, Charlie (May 6, 2015). "AVG acquires desktop, mobile VPN firm Privax". ZDNet . Retrieved June 21, 2018.
  12. Neal, Dave (July 7, 2016). "Avast Software buys AVG Technologies for $1.3bn". The Inquirer . Archived from the original on July 8, 2016. Retrieved October 21, 2018.
  13. Osborne, Charlie (May 2, 2017). "HideMyAss! privilege escalation flaws exposed". ZDNet . Retrieved May 20, 2018.
  14. 1 2 3 Groom, Frank M.; Groom, Kevin; Jones, Stephan S. (2016). Network and Data Security for Non-Engineers. CRC Press. p. 106. ISBN   9781315350219 via Google Books.
  15. "Russia Threatens to Block Popular VPN Services to Prevent Website Access". The Moscow Times . Reuters. March 29, 2019. Retrieved April 2, 2019.
  16. "HMA VPN is now a No-Log VPN". 24zero. May 12, 2020. Retrieved February 18, 2023.
  17. "HMA no log policy gets stamp of approval from auditor". TechRadar. August 5, 2020. Retrieved February 18, 2023.
  18. Martin, Adam (September 23, 2011). "LulzSec Hacker Exposed by the Service He Thought Would Hide Him". The Atlantic . Retrieved June 21, 2018.
  19. 1 2 "Hide My Ass VPN". PCMag.com. May 1, 2018. Retrieved May 20, 2018.
  20. Gilderson, Kelly (October 18, 2018). "Top 15 VPN Companies Log Policies – Are They Safe?". privacyaustralia.net. Retrieved October 21, 2018.
  21. 1 2 Gewirtz, David (May 15, 2018). "Best mobile VPN services for 2018". CNET . Retrieved October 21, 2018.
  22. Williams, Michael. "HideMyAss! VPN review". TechRadar.com. Retrieved February 1, 2020.
  23. "How to Fix Netflix Error Code M7111-1331-5059". vpngorilla.com. September 26, 2019. Retrieved February 1, 2020.
  24. Winkle, William Van (May 25, 2015). "Hide My Ass! VPN Service Review". Tom's Hardware . Retrieved May 20, 2018.
  25. "From Hide My Ass to HMA: New brand, new VPN [Sponsored]".
  26. 1 2 Paul, Ian (February 3, 2017). "HMA Pro VPN review: An easy-to-use tool for securing your online privacy". PC World . Archived from the original on December 8, 2018. Retrieved May 20, 2018.
  27. 1 2 Eddy, Max (August 31, 2016). "Hide My Ass VPN (for Android)". PCMag.com. Retrieved May 20, 2018.