I wrote a program to start a VM on AWS every time you log into your computer, and turn off the VM when you log out. Different IP every time, no need to trust that logs aren't stored

So so the typical choices are to use a VPN provider who "tell you" they don't keep logs but of which you have absolutely no evidence and no control of how it's set up, the encryption methods and so on.

The alternative is to get a VPS and set up your VPN on that, that has the disadvantage that once your keys are discovered your traffic is useless, and you'll always have the same IP address which makes you totally identifiable. You also have to pay for your VPN for months or years at a time.

This method spins up a new machine every time you log into your account (I've got it set up to spin up a VPS running OpenVPN when I log into my local user account). This can then be customised to re-generate your certs, randomise the port, change the IP and so on.

Okay Amazon will keep logs, but they don't keep snapshots of every machine of all time. And there's an element of trust no matter what service you use. I also have a VPS running OpenVPN hosted in Russia, I don't trust them not to snapshot and decrypt my traffic either but I trust them not to hand shit over to the government.

In its current state the linked repo gives you the ability to spin up a VPN on demand (minimising costs) while randomising your IP (minimising identifiability) and via orchestration randomising your encryption methods (minimising the lifetime of your secure connection).

so you're now adding a middleman to the equation, right?

The alternative would be to literally travel to another country, set up a dedicated machine there (outwith a datacentre as they all keep logs) and proxy your traffic through there, somehow guaranteeing that nobody can gain local access to the bare metal while you're not there. This is something very few people do as it's difficult, very expensive, can be slow, ludicrously expensive when things go wrong (server crashes? gotta fly to another country!) and so on.

There's trust somewhere, always. I'm placing mine with AWS because it reduces the ability for websites to identify me, for my ISP to monitor my traffic and for the government to know what I'm doing. I fear these more than I fear Amazon.

/r/VPN Thread Parent Link - github.com