And ensure your VPN provider isn’t headquartered in the US (or better yet any five eyes nation) nor one of the ones owned by the Israeli Billionaire Teddy Sagi who likely also has deep ties to the Israeli and US governments

en.wikipedia.org/wiki/Kape_Technologies

TIL expressVPN started as

Crossrider started off by making a SDK for the deployment of browser extensions platforms with support for monetizing extensions. The monetization options were used by major [ad injectors which used man-in-the-browser to change or add advertisements to what users saw.

JFC.

Good lists of vpn providers would be appreciated.

Proton has been good for me. CEO seems like a dick but I’m gonna be honest it’s getting pretty hard to support any tech company that doesn’t have a dick CEO.

Mullvad is zero log and located in Sweden, and accepts payment in crypto to reduce traceable privacy footprint (which frankly is one of the real, relevant use-cases for crypto to further legitimate privacy needs).

Also take cash over mail

Yeah but one of the guys that owns it is the primary funder of that nutty far right political group.

I recently switched to windscribe.

They’re a good, solid wireguard provider.

AirVPN has been great so far. Moved to it from Mullvad.

I’ve been happy with IVPN since mullvad CEO donated a bunch of money to far right parties

I had trouble with IVPN. They didn’t have many countries/servers, and ended up being blocked.

Currently on ProtonVPN, and seems to be OK so far.

Proton, mullvad, air VPN, depending on threat case. NordVPN for torrenting specifically, but not as good for privacy etc.

The most important thing is to check who owns the VPN (as the previous commentor said, stay away from Kape tech) and where it’s based (e.g., 14 eyes), as well as independent security audits and the company’s public history with government requests.

Njalla. Run by Peter Sunde.

Godamnit, I didn’t realize PIA was bought out by them. Time to switch.

NextDNS is good and I just realised that it’s based in The US. The alternative ones don’t seem to provide the feature of granular filtering.

I use pihole+unbound right now and hoping that is unaffected

i think you have to set up DoH with unbound to make it not be in cleartext? I dunno honestly I’m a dummy, but I’m fairly sure that it’s pretty tricky to get it totally secured. I guess I don’t understand why you can’t use ubound recursively but have its root.hints pointing as something like quad9 instead of all the actual root authoritative dns servers, theres like 13 of them and more than half are the US government.