If I use a VPN on a browser like Google Chrome, doesn't Chrome still know what I am doing? (clueless individual asking)

Or Windows, for that matter. I guess it’s hiding the stuff from my provider, but what about Chrome? I don’t feel all that comfortable with that silent whisper that Google might still be selling all my data, but TOR is too slow on my PC, so I am somewhat clueless.

Then, on a sidenote, I use VPNs mostly for videos where the VPN often gets overwritten (clueluess person with lack of a better word). If that is true, why does Netflix & Co. still accept me to be on a different continent after I clicked on a vid?

For reference, I got CyberGhost.

If I use a VPN on a browser like Google Chrome, doesn’t Chrome still know what I am doing? (clueless individual asking)

The short answer is ‘yes.’ But let’s clear up what a VPN is, and more importantly, isn’t. A virtual private network (VPN) does not magically make you “private.” In fact, it may not successfully mask your location either. I’m sure you’re confused — keep reading.

A VPN is, essentially, a proxy on steroids. All traffic sent through a VPN can be read by the provider you’re using. When you utilize a VPN service, the only encrypted part of the connection is between you and the VPN provider. Any traffic beyond this flows as it would without a VPN in place. And since a VPN provider has access to your data, they could potentially MitM your SSL traffic — think of using a VPN as swapping from one ISP to another.

The reason why a VPN may not successfully “hide” your location is because many websites probe your browser to use its geographical location to identify traffic from visitors. If your browser is configured to blindly grant access to your location, it will likely bypass any safeguards put in place by your VPN provider.

Google Chrome can (and does) track your activities online, especially if you’re signed into the browser itself. Mozilla Firefox is an alternative browser that makes an effort not to track its users as much.

A VPN will not grant additional privacy when you’re signed into any account (Facebook, Twitter, YouTube, etc.) Furthermore, Microsoft does have the potential to keep tabs on your activities whilst using their operating system. There is no way around this. It’s their code running on your hardware and it may contain any number of backdoors. If you’re looking for better privacy on a foundational level, consider switching to a Linux distribution.

The reason why pirates and other privacy conscious individuals use VPNs is to make it difficult for the layman to track them across the internet, or re-gain access to a specific set of banned adversaries such as a public chatroom or website. They may also use a VPN service whilst on a known-vulnerable network (e.g. a public airport WiFi AP, friend’s house, local coffee shop, etc.) — in these locations, your VPN provider snooping on you may be less of an issue than a local bad actor.

A VPN isn’t used to fully conceal all activity — anyone who believes this is highly misinformed. The various articles you see online by numerous companies and bloggers promoting how secure and private your life will be whilst using a VPN are usually affiliates of various VPN providers. They make money every time you use their link to sign-up for a service. It’s that simple.

…, but TOR is too slow on my PC,…

Tor is slower because it encrypts your traffic and bounces it around multiple relays randomly to further obfuscate your data’s origin and destination — unlike a VPN. But Tor is not suitable for file-sharing (and streaming content, in my opinion) because these activities put an unnecessary burden on the entire network which is run by volunteers.

…, why does Netflix & Co. still accept me to be on a different continent after I clicked on a vid?

It would seem your browser does not grant location access (or you manually denied it) for Netflix’s website (or app). In this case, all Netflix has to go by is the geographical location associated with your IP address. If you’re connected to a VPN server in another continent, Netflix assumes you are on that continent.

However, Netflix has a strict policy against using location-changing software in conjunction with their service. They are constantly on the lookout for IP ranges used by various VPN providers. Being able to stream while connected to your provider means Netflix hasn’t banned the IP range yet. Once they do, you will run into an error until you disconnect from the service or re-connect to a server with an un-banned IP range.

but what about Chrome?

Google can definitely see what you’re doing and can easily link it to you if you’re logged in to the browser. Use something like Firefox if you don’t like that.

but TOR is too slow on my PC

That’s how TOR is since you route your traffic through multiple hops.

why does Netflix & Co. still accept me to be on a different continent after I clicked on a vid?

Because it think that you are on that continent.

juggle vast consist soup wrong wasteful sugar summer jellyfish tub – mass edited with redact.dev

That’s an amazing response thank you.

Do you actually know what you’re talking about or are you just sharing info you’ve read?

like, where exactly do you think chrome is getting the location data it’s “leaking”? I’m genuinely curious where you think this comes from when your’e connected to the vpn…

You’re welcome — I appreciate the comment.

Pretty sure s/he’s talking about the HTML geolocation API most modern browsers use . you do realize that if you don’t disable location access perms in Chrome/Firefox/Edge/Opera; the browser could use your wifi/wired network to geolocate where you are? Like, the network your devices are connected to can be used to map where you are IRL.

And this usually bypasses the VPN. Websites will know your location because instead of relying on an IP, you now gave them access to actually ask the browser for your exact location via the geolocation API.

read: W3C Geolocation API - Wikipedia

W3C Geolocation API

The W3C Geolocation API is an effort by the World Wide Web Consortium (W3C) to standardize an interface to retrieve the geographical location information for a client-side device. It defines a set of objects, ECMAScript standard compliant, that executing in the client application give the client’s device location through the consulting of Location Information Servers, which are transparent for the application programming interface (API). The most common sources of location information are IP address, Wi-Fi and Bluetooth MAC address, radio-frequency identification (RFID), Wi-Fi connection location, or device Global Positioning System (GPS) and GSM/CDMA cell IDs. The location is returned with a given accuracy depending on the best location information source available.


[1]
^Downvote ^to ^remove ^| ^v0.28


  1. ^PM ^| ^Exclude ^me ^| ^Exclude ^from ^subreddit ^| ^FAQ ^/ ^Information ^| ^Source ^ ↩︎

Wierd. Last time I tested this (I do software dev stuff and have worked on geofencing apps) running the browser through a vpn completely fucks this up.

For a basic example, all shopping sites will default to Atlanta or NYC metro when turned on. The AP that I’m accessing it through just looks like a hop on the route to the host.

I’ll do some digging though, I’ve given me some food for thought.

I’ve had situations where the VPN still hides my location even when granting location access and I’ve also had the opposite happen where my location “leaks”; that’s why I said “could” use your wifi/wired network to gelocate but not “will” Honestly, I’m not entirely sure why some VPNs stop this behavior and the other don’t. I guess that’s why the poster above decided to mention it because of the possibility that it could happen.

From what I understand, HTML5 geolocation uses either your device location settings, GPS, or closeby wifi networks (or any combination of the three depending upon device) to gelocate you when you give location access via browser. I think ExpressVPN has some browser extension that stop this from happening but it said some websites require HTML5 geolocation so if a website “breaks” then you gotta disable the extension.

Anyway, glad your looking into this as it aligns with your field of study. Good luck in any and all research you do.