yashsingh1/xdaforums huggingface dataset:
[Paid Software Announcement and Discussion] M66B:
Yes, global is global to your device. If you have a suggestion for a better name, please let me know.

It is not possible to manually enter addresses and I don't know if I will add this. On a mobile device this is inconvenient and error prone. You can always set VPN/Sentry in white list mode and allow what is necessary, without this inconvenience and risking errors.

The hosts file will be provided server side, so ad blocking will be just on or off. No hosts file is perfect anyway and you can always block additional addresses using the global rules.

As a side note: I would like to add wildcards, but I don't know how to process them efficiently. Checking if an address matches a regex is simple and fast, but checking if a regex matches an address efficiently is something else.
[Paid Software Announcement and Discussion] sulasno:
Will try to crash once anti ad is up
[Paid Software Announcement and Discussion] M66B:
Ad blocking is high on my own list as well, so that won't be long. I have already thought out how to implement it, which is about half the work.

A little bit about this: unlike NetGuard, ad blocking will be done at connection level and not at DNS level. This has as advantage that the log can show for which app an ad was blocked and will allow for allowing individual addresses for an app if blocking leads to problems for an app. Ad blocking at DNS level is more energy efficient, but this is not an issue when the server takes care of the handling.
[Paid Software Announcement and Discussion] Gerolianis:
Global is fine, as I know it's related to my device.

How would wildcard rules make it into rules list then? A wildcard rule wouldn't be more than an extended version of address

agreed

That's what I do. I might however consider creating a simple script that reads all entries of my current host file, trying to access these adresses. Under control of VPN/S these addresses would then make it into my global rule set.

I am aware of that dilemma. I personally would prefer performance over ease of use. RegEx is extremely powerful and efficient. It's up to the users to define them wisely. Zillions of tutorials and testers are available online at any complexity. Just my 2¢ however...
[Paid Software Announcement and Discussion] M66B:
It is not just a performance issue, which is something that does matter on a server with many users. What we need is "reverse regex", so an address can be matched with an entered regex, not the other, usual, way around.

Entering could be done by turning an existing address into a wildcard address, so for example graph.facebook.com could be turned into *.facebook.com, using for example a menu.

I would like to add this, but I don't know how yet.
[Paid Software Announcement and Discussion] Gerolianis:
Give me some time to think about that, Marcel. I feel, I understand your point ;)
[Paid Software Announcement and Discussion] sulasno:
Incoming messages are mostly handled by Google Play services, and therefore cannot be blocked by blocking an app only.

Maybe should exclude disenabling all Google services
[Paid Software Announcement and Discussion] M66B:
BitTorrent is a legal transport system, but it can and will be used to transport illegal stuff.

You are absolutely right that I cannot oversee the legal consequences of this project and that is the very reason I am quitting with it.

I have just canceled all subscriptions and released beta version 0.50 that doesn't allow subscribing anymore. I will let the server run until it expires and that will be the end.
[Paid Software Announcement and Discussion] Linuxephus™:
You can verify it due to the very laws of the land that lend credence to that very matter. What this really comes down to is your own uncertainty on the subject material. Which fails the burden of the actual material as being uncertain. Notwithstanding also you have been unable to find any Lawyer or individual within the Community or outside of said Community to conclusively prove liability on your end. As a matter of fact, I am so absolutely sure of this, I'll permanently retire this account and my very presence within the Community if you have in fact conclusively proven otherwise via any other Counselor aside from I myself.

Consider this also: Of the hundreds (low end of the spectrum estimate) of available VPN applications in the Google Playstore and the hundreds of thousands (again, low end of the spectrum estimate) of abuses perpetrated in the Google Playstore in the use of those very applications, how many of those abuses have ever lead to the Developer being liable in any given court of law?

None.

This is your project and ultimately your decision my friend as stated before. Consider myself as merely making a last minute defense for the affirmative of non-liability in my closing statement.

Respectfully, Counsel has no further comment.
[Paid Software Announcement and Discussion] M66B:
If you are so sure, maybe you want to sign a contract taking full liability.
[Paid Software Announcement and Discussion] Droidphilev:
I do wonder what much more can be done than give good advice? There is no laywer that would "sign a contract" but they wouldn't either in any other case.
[Paid Software Announcement and Discussion] M66B:
Indeed, lawyers never take any responsibility.

I understand that you want me to continue with this project, but see it from my perspective: I don't do this for the money because I earn my money in other ways, so why should I take a risk?
[Paid Software Announcement and Discussion] Droidphilev:
If there is any risk of course...

Anyway... my subscription was indeed canceled. Before Sentry i didn't have any experience with this VPN stuff. I liked it allot when i started using it and felt also kinda safe (after i had to give up on XPrivacy). Since you decided to quite i don't wanna use it untill it dies. Simply because after it dies i won't have an alternative. I don't wanna know what my device connects to anymore. Better be stupid afterwards than not feeling safe. I uninstalled, i'm sorry. :(
[Paid Software Announcement and Discussion] Linuxephus™:
I cannot sign a contract where *no liability* is at issue other than your personal uncertainty.

Nonetheless, I'll sign that contract ultimately for the benefit of making you certain to continue with your project free of *fear* and for that of the Community at large.

Do you accept these terms accordingly?

I never gave advice, nor do I ever give advice.

I give sound counsel or no counsel at all.

Last, but not least, no Lawyer would knowingly sign a contract where liability to self or client was evident. And with that, so shall I sign.

---------- Post added at 05:44 ---------- Previous post was at 05:42 ----------

One cannot take a risk where there is no risk to be taken.
[Paid Software Announcement and Discussion] M66B:
Propose me a contract and I will see if it is acceptable.
[Paid Software Announcement and Discussion] Linuxephus™:
On the contrary, it is you who proposed the initial contract to begin with for signing, followed by my gleeful willingness to happily oblige. Thus, it stands to reason that *you* propose the terms for the contract you initially proposed to your satisfaction. And I'll sign accordingly as per the terms stated by myself.

I believe you already have my Email. Forward the contract to that address at your convenience for my signature.
[Paid Software Announcement and Discussion] M66B:
I have no idea what to put in such a contract.
[Paid Software Announcement and Discussion] Linuxephus™:
For a Developer who is so obviously brilliant in software development, you have a very stubborn streak masquerading as a lack of idealistic wording. A contract is no excessively difficult wording to convey. You simply word the contract in such manner that removes any and all uncertainty of liability from yourself by naming myself as the sole party "liable" using whatever means you are comfortable with. Think of it as doing a quick rewrite of your TOS.

Simple and straight forward. :good:
[Paid Software Announcement and Discussion] M66B:
I can't be good in everything.

Let me think about this for a while.
[Paid Software Announcement and Discussion] RBJ26:
I really hope you'll find a way to keep this going. Either way, do what's best for you.
[Paid Software Announcement and Discussion] M66B:
Even though there is a new update available which fixes expanding/collapsing the app details in some cases, the updated title of this thread reflects my final decision. For me, the potential risk isn't worth continuing this project. It is nice of [MENTION=7687520]Linuxephus™[/MENTION] trying to waive the risks for me, but I don't fully trust that that can be done (which is not the fault of [MENTION=7687520]Linuxephus™[/MENTION], but entirely mine).

The hired server will expire on November 19th and everybody with a subscription will have unlimited data usage until that date, even if the subscription expires earlier.
[Paid Software Announcement and Discussion] zele75:
What about selling the solution trough some company that would accept the liability issue?

Or releasing server code and making client where we could connect to our private servers?
[Paid Software Announcement and Discussion] M66B:
Maybe I will try to sell VPN/Sentry, which is also the reason I don't want to open source it.
[Paid Software Announcement and Discussion] sulasno:
M66B,

In turning all rights of said application to me, I hereby offer you 70% all income derived from the sale of all services after deduction of all costs involved. You will be responsible for the future development of this application.

How does this sound?
[Paid Software Announcement and Discussion] M66B:
I have been offered many times shares of a company in exchange for development work. I never take such a deal, since it is unfair because development work is basically endless. I guess you did mean it in a practical, constructive way, so don't take this the wrong way. Your proposal is appreciated. Licensing the software to run on servers I don't hire might be a way to solve my dilemma.
[Paid Software Announcement and Discussion] Linuxephus™:
Well, I certainly regret having read the concluding decision of yours. Despite having done everything within my quite considerable verbally written power to the contrary. It's not often that pro bono clientel (infer those willingly helped with no fee attached) refuse a known outcome where no liability on the part of the client has been conclusively proven, even if not understood in the broader scope of things by the client worked with. And as stated before, ultimately you can only choose to do that which is best for yourself, even in lieu of having a Waiver Of Liability signed. Which is what any TOS effectively acts as.
[Paid Software Announcement and Discussion] yadida08:
Hi

Can be a crazy idea?

Would not it be possible to prevent access to all torrents from your servers through a Host file for example? This would prevent the transfer of forbidden data by blocking them directly. At the same time, the IP address that tries to connect to it could be immediately blocked and prohibited to servers and thus banned from VPN / S. Is this stupid?
[Paid Software Announcement and Discussion] M66B:
BitTorrent will already result in an automatic ban, so that is not what I am worried about much. What I am worried about is a criminal investigation where I am the subject, while somebody else used VPN/Sentry for illegal things.

Since a VPN is in a way comparable to a Tor exit node:

"Can EFF promise that I won't get in trouble for running a Tor relay? No. All new technologies create legal uncertainties, and Tor is no exception. We cannot guarantee that you will never face any legal liability as a result of running a Tor relay."

(from https://www.torproject.org/eff/tor-legal-faq.html.en)

Edit: to extend on that:

"Exit relays raise special concerns because the traffic that exits from them can be traced back to the relay's IP address. While we believe that running an exit relay is legal, it is statistically likely that an exit relay will at some point be used for illegal purposes, which may attract the attention of private litigants or law enforcement. An exit relay may forward traffic that is considered unlawful, and that traffic may be attributed to the operator of a relay."
[Paid Software Announcement and Discussion] Loader009:
How to block decentralized technology of Bittorrent?

DHT?

PEX?

Deep Packet Inspection is forbidden (at least in my country; and it's also very CPU intensive) so there is no way to block peer-to-peer communication for DHT and PEX.

Also, blocking specific domains (which is impossible for all private trackers) is kind of censorship and any VPN using domain-blocking techniques is a no-go for me.

Thereas I fully understand M66B's decision to block torrents and agree completely with it.
[Paid Software Announcement and Discussion] M66B:
BitTorrent traffic is easily recognized using a combination of used ports and the direct usage of IP addresses instead of domain names. Since VPN/Sentry keeps track of IP addresses, domain names, protocols and ports, BitTorrent traffic can easily be revealed by a smart database query. So, no deep packet inspection, which is not only costly, but might also not be allowed as pointed out.
[Paid Software Announcement and Discussion] Linuxephus™:
Reading as how you've made your own mind up regarding VPN/Sentry's discontinued development; you wouldn't mind if I add to this material and debunk other aspects of it with all of the information provided on the page by the link supplied, would you?
[Paid Software Announcement and Discussion] M66B:
You called me stubborn before, but that is not really a fitting qualification. So, I am listening. Nevertheless, I consider the EFF information pretty reliable and therefore you'll need really good arguments to convince me.
[Paid Software Announcement and Discussion] Linuxephus™:
Actually, I merely stated you had a stubborn streak in reference to your persistence of uncertainty with information provided that should have allayed any further concerns regarding liability. Far from being labeled as stubborn, is it not? Then again, I reckon the same holds true of myself regarding the unwillingness to let it rest. Yet in all fairness, throughout the entire proceedings, I detect a willingness upon your end to continue your own project, excepting your own uncertainty being the preventive measure.

Regarding the EFF: They are absolutely reliable. Which is exactly why I intend to use their own information to convey what they themselves are speaking of. Thus negates the need of any argument to the contrary simply by educating using the knowledge they themselves provide.
[Paid Software Announcement and Discussion] yadida08:
I read the FAQ for Tor Relay and I quote:

"Has anyone ever been sued or prosecuted for running Tor?

No, we are not aware of anyone being sued or prosecuted in the United States just for running a tor relay. Further, we believe that running on a relay - including an exit relay that allows people to be sentenced to receive and receive traffic - is legal under U.S. law. "

I do not understand why you would be held responsible for a crime you did not commit?

If I buy a supercar the dealer is not responsible if I drive at 180mph ... this justice is an injustice.
[Paid Software Announcement and Discussion] M66B:
The same FAQ is clear about that that just might happen, at least it cannot be guaranteed it will not happen, see my earlier quotes from the same FAQ.

As already concluded, I would like to continue with this project and it seems that I am not the only one, but I don't want to risk trouble for it.
[Paid Software Announcement and Discussion] Loader009:
[MENTION=2799345]M66B[/MENTION], all instances (normal and also the work profile/Island) of VPN/Sentry stopped to have unlimited data plan after I updated today and opened the app once.

My Plan is actually still going for about two weeks (checked it in Play Store), so there might be some issue by not being able to subscribe your plan anymore.

Sadly I have a very slow internet connectivity for today and for a few more days. Therefore I cannot provide too much info, just logs (which might be enough).
[Paid Software Announcement and Discussion] M66B:
Please contact me use this contract form: https://contact.faircode.eu

I will need your client ID (at the bottom of the help) and the Play store order/transaction number.

Cancelling subscriptions seems to void them, contrary to what Google says and contrary to what they expect from developers in case of cancelled subscriptions, which is to provide service until the subscription expires.

Fortunately there are not many subscriptions to fix for me.
[Paid Software Announcement and Discussion] Linuxephus™:
[MENTION=2799345]M66B[/MENTION]: https://www.comparitech.com/blog/vpn-privacy/vpn-safe-legal-or-illegal/

I had a contact who works with the EFF shoot me a link from an article he's used more than once to simplify the explanation of liability/non-liability issues for those such as yourself who remain cautiously uncertain on such matters. Falls into what the EFF already explains in the link you provided via the Tor Project.

I'd like to take the time to personally break down the EFF related Tor Project link you provided, but considering the outcome of the information already provided in numerous comments lending credence of non-liability, I'll leave the link provided me and the rest to your own choice accordingly without further adieu.
[Paid Software Announcement and Discussion] RBJ26:
Any chance you'd make it a paid app, and enable the ability to use another VPN service?

Just curious..
[Paid Software Announcement and Discussion] Droidphilev:
I wanted to take a look to the very last version in a new rom i flashed. Eventhough i took a subscription it even cannot be found anymore in the playstore. So even the paid version is gone. I guess its over. I still wonder what all these problems are about. I guess many good people tried to help in any way they could. Even signing contracts etc. When will it be good enough? TBH it's the second time i'm having this problem with apps being 'discontinued'. I will forget i paid for it and go back to M and just start using Xprivacy (or what is left of it).
[Paid Software Announcement and Discussion] M66B:
That article is written for the users of a VPN, not for VPN providers. I see little information that could change my mind.
[Paid Software Announcement and Discussion] M66B:
Please see here why that is not possible: https://www.vpnsentry.net/faq/#FAQ22
[Paid Software Announcement and Discussion] M66B:
I have explained several times what my problem is and it doesn't go away by other people just saying there is no problem. l haven't seen any concrete argument, like a law text, why my problem isn't a problem. The EFF cannot guarantee I don't have a problem, which says exactly the opposite. It is up to me to decide if I find it acceptable to take that risk. I have put a lot of time into VPN/Sentry, but I have still decided I don't want to take the risk. Please have respect for this.

You were aware of these problems before subscribing, so it isn't fair to complain about it now. Complaining about XPrivacy isn't fair at all. XPrivacy was always free to use and you cannot expect me to put hundreds of hours for free into it just because you want it. I am sorry, but this tells more about you than about me.

Edit:

"I took a subscription for as long as it lasts. If i get killed it will be because of something else i guess"

https://xdaforums.com/showpost.php?p=74310915&postcount=533
[Paid Software Announcement and Discussion] Droidphilev:
I never told i don't respect anything you decide. Still this doesn't mean a user should be glad with these decisions all the time. I am/was indeed aware before i signed up, true. Still i think many people did their best here to help you decide. At least in my opinion a lot information was given that looked very "professional" (dunno exact word). Scanning Torrent isn't allowed i saw somewhere. Letting Torrent through makes you think you can get caught... if i read everything here i cannot understand how other VPN companies stay alive (even the hundreds free malicious ones!!!)

I did not complain about Xprivacy as i can go back to M. ANd now you will even start get more angry because many people told this before me: i donated for Xprivacy. I did it *hoping* it would stay alive. I know your opinion: i did not pay you the app, but i donated to the project so it stays free. Still, in my place, i donated for something that died.

"I am sorry, but this tells more about you than about me."

> This isn't also fair IMHO. I even paid/donated for an app you made that i never use. Even it's only a few euro's, i did my best!
[Paid Software Announcement and Discussion] M66B:
You indeed didn't literally say you didn't respect my decision.

Information that just looks professional doesn't say me much. Without concrete references, it is just hearsay. The only article referenced didn't say me much either.

Other VPN services likely earn enough money to cover any legal costs and the shady providers likely have servers in shady countries and/or at shady providers. I don't earn a lot of money with VPN/Sentry, I have only lost money on it, and I don't want to host in shady countries and/or at shady providers.

Donations are for the work done, not for the work to come.

I get that you are disappointed and I am sorry for that, but please understand my position. I would like to continue this project as well, but I am not willing to take a risk with my personal finances.
[Paid Software Announcement and Discussion] Droidphilev:
No need to be sorry. It is what it is although it sucks.

But: the info that is given does not satisfy/guatantee you. How come that the single faq of tor (that there is a riskfor such node thing) DOES satisfy you? Only that faq you take for true, all the other things you have serious doubts about. I would think that this single faq that says there is a risc also wouldn't mean much. I'm sorry now.
[Paid Software Announcement and Discussion] M66B:
Simply because the information in that FAQ comes from the EFF and they know what they are talking about, likely more than anybody else.
[Paid Software Announcement and Discussion] Droidphilev:
Very hard to find something about your case on that site TBH
[Paid Software Announcement and Discussion] iwanttoknow:
Hi all,

I don't want to convince anyone; it's only my opinion.

I think that Marcel acts as a VPN service provider with VPN/Sentry. He has developed the software providing a VPN facility to users and hosted it by IT datacenters.

So I think that he could be prosecuted by justice if he can't make available logs to the authorities, in case of law enforcement requests.

As you know, some countries require service providers to register their customers' Internet connections and keep them for a certain period of time in case of investigation.

The investigators want to be able to go back to the user who initiated the Internet communication, in case of suspicion of fraud or illegal activity.

So a no-logs policy could be a serious issue from a legal point of view in some countries. IMO it's the central point in our discussion but I can also be wrong.

I'm not a lawyer :)
[Paid Software Announcement and Discussion] Droidphilev:
If this would be a solution: i don't mind him logging everything i do. Nothing to hide.
[Paid Software Announcement and Discussion] Loader009:
I do have something to hide.

Even if it is all legal, I am never willing to give up my privacy (even to governments).
[Paid Software Announcement and Discussion] Droidphilev:
Well, i meant of course that he provide logs to someone who demands logs because a user did something illegal. Just for him not to be responsible anymore. So in other words: "i have nothing illegal to hide".
[Paid Software Announcement and Discussion] RBJ26:
OK, thanks anyway.

I'd prefer to use a trusted app instead of an unknown.

Looks like that'll be impossible.

At any rate.. Time to move on.

Thanks again for your work.