this post was submitted on 16 Dec 2025
74 points (95.1% liked)

Privacy

3152 readers
172 users here now

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

founded 2 years ago
MODERATORS
 

Urban VPN is a particularly bad offender. It intercepts all your conversations with ChatGPT, Claude, and other AI bots (glad I don't use any), and sends them to the VPN vendor for resale. This is nuts.

top 9 comments
sorted by: hot top controversial new old
[–] Kevlar21@piefed.social 23 points 3 days ago (2 children)

I’ve always been told to beware of “free” VPNs for reasons like this

[–] Dumhuvud@programming.dev 15 points 3 days ago

If the free VPN provides an OpenVPN / Wireguard configuration, then you're mostly safe from this particular attack. Most sites use TLS, so the VPN provider won't be able to see shit.

In this particular case, it's a browser extension, which is actually able to access the contents of visited webpages.

[–] IrateAnteater@sh.itjust.works 9 points 3 days ago

Yup, as the old adage says: "if the service is free, you are the product."

[–] XLE@piefed.social 10 points 3 days ago (1 children)
[–] AntiBullyRanger@ani.social 1 points 3 days ago

Basic digressive victimization tactic. Nothing wrong with Urban VPN, but everything wrong with kod.ai.

[–] killingspark@feddit.org 7 points 3 days ago (1 children)

Just once I want that kind of headline to read "sold at a loss"

[–] Dumhuvud@programming.dev 5 points 3 days ago

I'm mostly surprised that there are companies interested in "conversations" between ~~bullshit generators~~ LLMs and mentally unwell people that "converse" with them.

[–] bobo1900@startrek.website 3 points 3 days ago* (last edited 3 days ago) (1 children)

If a security researcher is installing on their browser a free vpn browser extension, I assume they are a moron and can't do their job.

Seriously, not only your first question should be "how are these people paying for 6 millions people using their VPN?", but your second one should be " why they don't provide a client of a wireguard/ipsec/openvpn configuration file? So they don't have access to my webpages?"

[–] rimu@piefed.social 1 points 3 days ago

When an article relies on a clearly bs premise (like a security researcher using a free vpn), you should assume the article is fake. Which it is, in this case: https://piefed.social/post/1573197#comment_9269001