Bitcoin Forum
May 30, 2024, 09:30:59 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Hola VPN, free browser extension is a voluntary botnet  (Read 1187 times)
alani123 (OP)
Legendary
*
Offline Offline

Activity: 2422
Merit: 1441


Leading Crypto Sports Betting & Casino Platform


View Profile
May 29, 2015, 01:56:30 PM
 #1

If you don't know what Hola is, think of it as an easy way to bypass geoblocking. It's basically a free VPN in a browser extension.

Well, turns out that the extension took advantage of its users by using their IP's and internet connections to lend them to other users as well as sell them to users of their subsidiary company Luminati.io, which is advertised as an anonymizing network.

So while Hola is a free extension, its users are quite literally the product that is being sold.

Article on the topic from Vice's Motherboard:
http://motherboard.vice.com/read/your-tool-to-access-netflix-content-abroad-is-hijacking-your-internet-connection

What's funnier is that a 15-year-old hacked into Hola's service. Here's his own post on this:
http://milankragujevic.com/post.php?id=72

If this is not the best board for this post, feel free to give me a hint on where I should move it at.

..Stake.com..   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
..PLAY NOW..
mishax1
Legendary
*
Offline Offline

Activity: 2898
Merit: 1017


View Profile
May 30, 2015, 10:41:07 AM
 #2

They did warn its customers in their FAQ section.. but they surely need to improve their service or compensate their users for extended traffic.
alani123 (OP)
Legendary
*
Offline Offline

Activity: 2422
Merit: 1441


Leading Crypto Sports Betting & Casino Platform


View Profile
May 30, 2015, 12:56:12 PM
 #3

Here's something more ridiculous about this story. A team got together and created http://adios-hola.org/

In this website, they were able to successfully exploit hola to run programs at the other end, at the computers of those that had it installed.

Demonstration:

https://www.youtube.com/watch?v=0yh07wCBGuw

Some days after that, hola pushed a silent update. 

..Stake.com..   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
..PLAY NOW..
Amph
Legendary
*
Offline Offline

Activity: 3206
Merit: 1069



View Profile
May 30, 2015, 01:02:41 PM
 #4

i did find hola suspicious since i used it, fortunately there are free alternatives like dotvpn and browsec, and another one which i don't remember right now, just search for vpn in the extension store
alani123 (OP)
Legendary
*
Offline Offline

Activity: 2422
Merit: 1441


Leading Crypto Sports Betting & Casino Platform


View Profile
May 30, 2015, 01:18:33 PM
 #5

i did find hola suspicious since i used it, fortunately there are free alternatives like dotvpn and browsec, and another one which i don't remember right now, just search for vpn in the extension store

Should we really trust 'free VPNs'? After seeing how much an extension like hola can expose its users I'm probably going to stay away from 'free VPN extensions'.

..Stake.com..   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
..PLAY NOW..
altcoinhosting
Hero Member
*****
Offline Offline

Activity: 896
Merit: 1006


View Profile
May 31, 2015, 09:53:41 AM
 #6

It always sounds strange to me when people are serious about becoming anonymous, but still use a free service to become "anonymous".
This while a service like earthvpn costs $40/year...

Amph
Legendary
*
Offline Offline

Activity: 3206
Merit: 1069



View Profile
May 31, 2015, 02:59:07 PM
 #7

i did find hola suspicious since i used it, fortunately there are free alternatives like dotvpn and browsec, and another one which i don't remember right now, just search for vpn in the extension store

Should we really trust 'free VPNs'? After seeing how much an extension like hola can expose its users I'm probably going to stay away from 'free VPN extensions'.

something like tunnelbear(they do offer a free pla up to 1.5 giiga with twitter) seems trustable to me, you can run that as your main vpn, and then use the extention, at worst they will do the exact play of Hola with the ip from tunnelbear
mishax1
Legendary
*
Offline Offline

Activity: 2898
Merit: 1017


View Profile
June 01, 2015, 06:59:09 AM
 #8

It always sounds strange to me when people are serious about becoming anonymous, but still use a free service to become "anonymous".
This while a service like earthvpn costs $40/year...

When people have the ability to get a free service they will use is instead of paying similar services even tho the consequences are much worse than the benefit..
aikunsatu
Sr. Member
****
Offline Offline

Activity: 252
Merit: 250


View Profile
June 01, 2015, 02:32:16 PM
 #9

I did not use hola since it's always can't connect,  Cheesy
I prefer use socks5 or premium vpn, I think that's trusted enough...
jdebunt
Legendary
*
Offline Offline

Activity: 1596
Merit: 1010


View Profile WWW
June 01, 2015, 07:42:05 PM
 #10

When people have the ability to get a free service they will use is instead of paying similar services even tho the consequences are much worse than the benefit..

Convenience trumps everything else for the average consumer unfortunately
futurebit640
Hero Member
*****
Offline Offline

Activity: 910
Merit: 1000


View Profile
June 04, 2015, 03:21:29 AM
 #11

Damn I'm using it all the time for Netflix Undecided Thanks for the heads up OP!
klm bitcoin
Full Member
***
Offline Offline

Activity: 139
Merit: 100


View Profile
June 04, 2015, 04:54:49 AM
 #12

In other words, if you are a Hola user, your bandwidth and internet connection can be sold to others.
yslyung
Legendary
*
Offline Offline

Activity: 1500
Merit: 1002


Mine Mine Mine


View Profile
June 04, 2015, 06:01:33 PM
 #13

thx for the info, just uninstalled it !
ajw7989
Legendary
*
Offline Offline

Activity: 924
Merit: 1000


View Profile
June 04, 2015, 09:06:03 PM
 #14

that is crazy. thanks for the post good to know. I heard about the extension and was curious about it but now I know to stay away lol
zenitzz
Hero Member
*****
Offline Offline

Activity: 560
Merit: 500


View Profile
June 04, 2015, 10:42:03 PM
 #15

thank you for info free vpn, because im search apps free vpn.
micjustin33
Newbie
*
Offline Offline

Activity: 46
Merit: 0


View Profile
June 09, 2015, 06:49:08 AM
 #16

Hola is terrible as you can also get the instance of being unlucky if one of those IPs has been filtered as spam and you browse on here while waiting for netflix.. you get shadowbanned (speaking from experience).
If people are looking for free alternatives I'm currently using Zenmate, which works fairly well for everything.
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!