Still don’t know why I’d need a vpn. My country doesn’t go after individuals pirating (yet). That’s the only reason, as far as I understand, to have a vpn for pirating. So until they start to take come after individuals, I’m gonna save my money.
You only need a VPN in very few countries, some where it is needed to avoid getting your internet connection cutoff from your ISP are the US, Germany, Greece, and a few other countries somewhere in Europe, the rest of the world doesn’t care about people downloading movies online.
VPNs don’t prevent tracking, they just make sure the tracking is done through a secure tunnel.
The extra hop adds a significant barrier for the website in knowing the actual source IP. The fake source IP is likely used by many other users, and the user you are trying to track can easily rotate VPN IPs.
Adtech relies on the OpenRTB 2.5/2.6 spec for tracking, you would have removed 1 identifier out of a hundred (one that isn’t really used anyway given SSAI is so popular). In addition to that, cookie expiry timers are typically set to 365 days meaning you’re VPN would need to enabled at all times to not invalidate multi-hop. WebStorage API based trackers tend to be indefinite.
EDIT: If anyone is looking for more specifics about WHY IP addresses and multi-hop don’t matter, the spec includes a mention:
BEST PRACTICE: Proper device IP detection in mobile is not straightforward. Typically it involves starting
at the left of the x-forwarded-for header, skipping private carrier networks (e.g., 10.x.x.x or
192.x.x.x), and possibly scanning for known carrier IP ranges. Exchanges are urged to research and
implement this feature carefully when presenting device IP values to bidders.
The issue is that mobile is so prevalent and mobile networks rely so extensively on CG-NAT that even with XFF headers, there’s no good way to tell if you are going to get an IP address that actually matters. You could potentially put in a lot of auction time trying to figure that out and still just end up with a private address that’s unusable. So, aside from the devicetype and the geo object which is used for geo targets and fencing, the device object isn’t useful in tracking. Instead adtech uses the user object. This object should contain all your GDPR specifics, any EIDs, 1st party cookie IDs, etc. Even if those change, there usually exists backend mapping that allows for vendors to correlate different user IDs as being the same user ultimately.
Yeah, multi-hop is pointless for tracking. The logic to it is crazy too. People think VPNs make them anonymous (they don’t), but they also think multi-hop makes them MORE anonymous. So anonymity is kind of an absolute concept. Either you are or you are not anonymous. You can’t be more anonymous than anonymous. There is no +1.
Still don’t know why I’d need a vpn. My country doesn’t go after individuals pirating (yet). That’s the only reason, as far as I understand, to have a vpn for pirating. So until they start to take come after individuals, I’m gonna save my money.
You only need a VPN in very few countries, some where it is needed to avoid getting your internet connection cutoff from your ISP are the US, Germany, Greece, and a few other countries somewhere in Europe, the rest of the world doesn’t care about people downloading movies online.
I am in Greece pirating without a VPN, and even after the new anti-piracy law passed, I haven’t received a notice (yet).
Oh I didn’t know that, are you using public trackers and leeching popular stuff too ?
I think you’ve exactly described why some people need a VPN. My ISP does 3 strikes when they get complaints :/
Also VPN makes you rather anonymous. The sites won’t track you and sometimes the trackers on public torrent files are notorious for tracking.
That is not true, the sites do still track you. VPNs don’t prevent tracking, they just make sure the tracking is done through a secure tunnel.
The extra hop adds a significant barrier for the website in knowing the actual source IP. The fake source IP is likely used by many other users, and the user you are trying to track can easily rotate VPN IPs.
Its one less identifier for them to use.
Adtech relies on the OpenRTB 2.5/2.6 spec for tracking, you would have removed 1 identifier out of a hundred (one that isn’t really used anyway given SSAI is so popular). In addition to that, cookie expiry timers are typically set to 365 days meaning you’re VPN would need to enabled at all times to not invalidate multi-hop. WebStorage API based trackers tend to be indefinite.
ORTB spec: https://www.iab.com/wp-content/uploads/2016/03/OpenRTB-API-Specification-Version-2-5-FINAL.pdf
EDIT: If anyone is looking for more specifics about WHY IP addresses and multi-hop don’t matter, the spec includes a mention:
The issue is that mobile is so prevalent and mobile networks rely so extensively on CG-NAT that even with XFF headers, there’s no good way to tell if you are going to get an IP address that actually matters. You could potentially put in a lot of auction time trying to figure that out and still just end up with a private address that’s unusable. So, aside from the devicetype and the geo object which is used for geo targets and fencing, the device object isn’t useful in tracking. Instead adtech uses the user object. This object should contain all your GDPR specifics, any EIDs, 1st party cookie IDs, etc. Even if those change, there usually exists backend mapping that allows for vendors to correlate different user IDs as being the same user ultimately.
So it can matter.
barely, efectively meaningless
Yeah, multi-hop is pointless for tracking. The logic to it is crazy too. People think VPNs make them anonymous (they don’t), but they also think multi-hop makes them MORE anonymous. So anonymity is kind of an absolute concept. Either you are or you are not anonymous. You can’t be more anonymous than anonymous. There is no +1.
Remember to read the rest of that sentence:
So, no. Not really.
That is a good point indeed, but also applies for regular internet use…