More stories

  • in

    Top tech 2020: The two Jasons pick their favorite gear of the year

    Our last show discussed the various companies and products that earned a Tech Turkey award, and there were some doozies. Now it’s time to talk about what are, in our opinion, the top tech products or innovations in 2020. 
    Here are five products that stood out to Jason Cipriani and me this year. 

    (Image: Linksys)
    Jason Cipriani: This is kind of like 5G, where not everyone or every device is going to be able to take advantage of it. I only started using Wi-Fi 6 in the last few weeks with the most recent Velop Mesh system. It’s blown me away. For example, on the iPhone 12, it’s not unheard of for me to get 700+ Mbps in speed tests. The problem right now is that most tech we have in our homes doesn’t use Wi-Fi 6, so the incentive to go out and upgrade today isn’t there. However, the availability of both Wi-Fi 6 devices and Wi-F i6 routers has significantly expanded this year and will have a big impact on the home office, remote learning, etc., over the next year. 
    Jason Perlow: The speed of Wi-Fi 6, which is also referred to as 802.11ax, is not the only significant advancement of the new high-speed wireless networking standard. It’s also security, in the form of WPA3, which is a requirement of all Wi-Fi 6 equipment when they are certified. WPA3 is a major improvement over WPA2 in current routers because it uses a new authentication mechanism, known as SAE or Simultaneous Authentication of Equals to replace the PSK or Pre-Shared-Key in WPA2, which is a much more secure key exchange method. It makes it much more difficult for an attacker to record the session’s encrypted transmission and then play it back offline to attempt to crack it. Some existing Wi-Fi5/802.11ac routers support WPA3 experimentally now, so if you can turn it on and you have products that support it, such as any iOS 13 or iOS 14, or any Android later than 10 or even Windows 10 2004, you can use that protocol.
    Our pick for the best Wi-Fi 6 router this year is the Linksys Velop MX12600 mesh system. Amazon’s Eero Pro 6, looks promising as well, pending further review.
    $700 at Crutchfield $700 at Walmart $700 at Best Buy

    (Image: Samsung)
    Jason Cipriani: Perhaps a surprise entry, but I think the Fold 2 deserves a spot because Samsung took the original fold — a device Samsung had to pull from stores a few days before launch — reworked it, got it in good enough shape to release, and then kept iterating. At the time, I said it should have just canceled the phone, gone back to the drawing board, and tried again when the tech was ready. But Samsung proved me wrong, releasing the Z Fold 2 this year, with an improved experience overall. I think most of, if not all, reviews were very positive.
    Foldable phones are indeed in our future, and Samsung is currently leading the way. 
    Jason Perlow: So I am not a folding phone user yet because these things are just too darned expensive right now. However, I think Samsung is making some critical innovations in the space. It looks like Samsung managed to address most of the previous model’s issues, including any performance and usability compromises it had. It is making progress, and for that, it should be recognized.
    $2,000 at Amazon $2,000 at Best Buy $2,000 at Best Buy

    (Image: Google)
    Jason Cipriani: Google finally got TV right. A Chromecast device with an easy to understand UI and a remote for $50… enough said. 
    Jason Perlow: Look, to be honest, I was skeptical of Google being able to release a decent streaming set-top box, especially when you see how strong Roku, Amazon, and even Apple is in that space. Honestly, I wanted not to like it. But not only did I like it, I liked it even better than Amazon’s comparable offering this year, which was slower, had less memory, just didn’t have as slick an interface. So, now, I’m using it as my only streaming box in my living room. The only downside right now is the lack of Apple TV+ support, but I suspect that will be addressed at some point. The product is an excellent value for what it is if you are looking for a streaming device that supports just about all of the major services. And, as I discovered recently, you can even pair it with Bluetooth devices, such as headphones, so you don’t wake up your family late at night when you’re binging your favorite show.
    $50 at Best Buy $50 at Adorama $60 at HSN

    (Image: Jason Cipriani/ZDNet)
    Jason Cipriani: The way I review phones has changed a lot over the years, but that’s because phones changed. There used to be a big focus on camera capabilities once phones started to get good enough to replace most point and shoot cameras. Then, the competition kind of leveled off, and it was almost a given that a camera on a flagship phone was going to impress. Each release is more impressive than the last, but only incrementally for those who look closely. With the 12 Pro Max, and to that extent, the 12 Pro, the camera is a giant leap forward. I took it out the other day to take photos for our Christmas cards, and I honestly don’t think I’ll ever take out my expensive camera again. It was much easier to hold up the phone, snap a couple of photos, and not have to think about adjusting ISO or shutter speed. Tap on the screen to change focus, hit the shutter button, and enjoy. 
    Jason Perlow: So, look, Apple has been ahead of the game with its iPhone cameras since last year’s 11 Pro Max; it completely blew away anything Samsung or Google had. The only vendor it was on par or possibly even behind was Huawei, and frankly, it isn’t even in the picture right now. So, it’s safe to say, if you are someone where photography is paramount for you in a mobile device, the iPhone 12 Pro Max is your only logical choice. What the company is doing with its microprocessors and machine learning is astounding for machine learning. Which brings us to…
    $1,099 at Amazon $1,100 at Best Buy

    (Image: Apple)
    Jason Cipriani: Apple had a tremendous year. Seriously, we saw more innovation out of Apple this year than we have in the last couple of years — possibly combined. The ability to pull off a processor switch, where the underlying architecture is entirely different, and making it almost seamless for developers still blows my mind. 
    I think about the approach Microsoft is taking with the Surface Pro X, easing into the ARM switch in public, through a beta… and then I look at what Apple did, making the entire transition behind closed doors and releasing it on day one, ready to go. Man, it’s impressive. Everyone else in the computer industry is so far behind right now. 
    Jason Perlow: I don’t know where to begin with how amazed I am by this thing. I hate to start playing Apple word bingo, but that chip is astounding and magical. Cupertino put a tremendous amount of resources into it. Apple was able to take a processor architecture that was once only reserved for low power, mobile devices, and smartphone-types of application workloads and transform it into the future of desktop computing. 
    Everyone needs to notice this because we all thought it would take a long time before Arm chips were on parity with Intel. We have seen with this hybrid SoC architecture from Apple a much more optimized chip for modern workloads. It is much more efficient with memory and power use and can run apps not only just as fast as Intel, but run them even faster depending on what they are and how the code is built. The open-source machine learning benchmarks on the chip using TensorFlow are off the scale, and even Arm Windows virtualized and emulated runs faster than what Microsoft’s Surface Pro X can do with the Qualcomm SQ2 chip. 
    Hopefully, the success of the M1 encourages processor designers such as Nvidia, which now owns Arm, to create other Arm-based desktop-grade processors that are licensable. And, potentially, there are also RISC designs such as OpenPower and RISC-V that are open source that pave the way for future non-Intel chips in the datacenter or even on the desktop, too.
    This year, our choice for the best Mac for the money is, without doubt, the 2020 M1 Mac Mini.
    $670 at Amazon $700 at Best Buy $699 at Adorama

    ZDNet Recommends More

  • in

    ACMA registers new rules for fighting spam calls

    The Australian Communications and Media Authority (ACMA) has registered a set of rules developed by the Communications Alliance that will force Australian telcos to detect, trace, and block spam calls.
    The rules apply not just to calls originating on a telco’s network, but also those transiting the network.
    “Where scam calls are confirmed, [carriers] must as soon as practicable take action to block the scam calls being originated and/or carried over their network,” the code states.
    Under the code, carriers are required to look for characteristics of scam calls, share information with other telcos and regulators, block numbers being used for scams including those from overseas, and take measures to combat number spoofing.
    ACMA said over 30 million scam calls were blocked in the last year as telcos undertook trials to combat internationally inbound scams, ATO impersonation scams, and wangiri one ring and drop scams that trick users into calling a premium line when they return a missed call.
    “The code is a unique and ground-breaking contribution to global regulatory efforts to prevent the harms caused by scammers. It is a holistic, end-to-end framework for effective scam reduction activity,” chair of ACMA’s scam telecommunications action taskforce Fiona Cameron said.
    “There is no silver bullet to reduce scams, but these new rules place clear obligations on industry to do more to protect their customers and build confidence that it’s safe to answer a ringing phone.”

    The code will apply to calls in the traditional sense and do not cater to those delivered via over-the-top services. After two years, the code will be reviewed, with further reviews to be pencilled in for five-year intervals unless “significant developments” force an earlier review.
    In September, Telstra announced it was piloting a program to block fake messages claiming to be from myGov or Centrelink.
    Telstra CEO Andy Penn told ZDNet at the time that the program has completed its proof-of-concept stage and would be fully rolled out across its network by the end of the year.
    If the pilot is successful, it would then be rolled out to other Australian telcos, Minister for Defence Linda Reynolds told ZDNet.
    “This is a national problem that requires a truly collaborative national approach,” she said.
    ACMA unveiled its plan to crack down on scams in November last year.
    Earlier in the week, ACMA and Comms Alliance opened a consultation period on allowing a pair of determinations made by the regulator in relation to premium mobile services to sunset on April 1. The consultation period was opened on the proviso that the industry makes a variation to the relevant code to allow customers to bar all premium services, and not to charge a fee for that action.
    Submissions are due by January 17.
    Related Coverage More

  • in

    Best VPN service in 2020: Safe and fast don't come for free

    If finding the best VPN for your needs was a simple matter of comparing prices and features, this guide would not be essential reading. The fact is you won’t find the right VPN without first understanding how a VPN service accomplishes its primary mission: keeping you safe online.
    Fundamentally, most VPNs (virtual private network) provide two services: Encrypting your data between two points and hiding the IP address (from which a general location can be derived) where you’re located. For those traveling or out and about, the first function was critical because most Wi-Fi available publicly is unencrypted — so anyone on the network could see what you were sending. 

    But VPNs also serve to hide your IP address, replacing the address logged on servers with one in a completely different location — even a different country. For those worrying about stalking or other threats, this feature could save lives. Most consumers, though, find streaming VPN features compelling because — in some cases, and with dubious legality — it allows them to spoof their region of origin to get access to streaming media and sports blacked out from their home locale.
    There is no doubt that you should use a VPN service provider when you’re using public Wi-Fi when away from home. But what about when you’re at home? Should you use a VPN then?
    My general advice is that it’s not critical for most people at home, since your ISP rarely wants to look at your traffic. But if you live in an apartment with a bunch of curious roommates all sharing one router, a VPN might prove valuable. If you’re connecting to work and want to make sure you’re taking all the precautions you can (and if your employer hasn’t given you a corporate VPN to use) a VPN service would be useful. If you’re connecting to websites that log connection information and you don’t want to leave tracks where you are (especially where your home is), you might want to use a VPN. You get the idea: If you want extra protection at home, then a VPN isn’t a bad idea.
    Now, let’s be clear. Using a VPN does add a bit of a load on your computer and can often slow down your connection. That’s because your data is encrypted, decrypted, and sent through intermediate servers. Game responsiveness might suffer. If you’re a first-person shooter player, you might have enough lag to lose the shot. That said, both computers and VPNs have gotten a lot faster. When I first used a VPN, every… thing…slowed… down… to… an… unbearable… c-r-a-w-l. But now, the negative impact is almost unnoticeable, and at least one service we spotlight below (Hotspot Shield) actually increased performance, making it one of the fastest VPNs we’ve seen.
    Also, most (but not all!) of the providers we spotlight limit the number of devices you can connect simultaneously, so you may have to pick and choose which home devices connect through a VPN.

    Also: Why even the best free VPNs are not a risk worth taking
    We’re also spotlighting paid services in this article, although some of them offer a free tier. I generally don’t recommend free VPN services because I don’t consider them secure. Think about this: Running a VPN service requires hundreds of servers across the world and a ton of networking resources. It’s boo-coo expensive. If you’re not paying to support that infrastructure, who is? Probably advertisers or data miners. If you use a free service, your data or your eyeballs will probably be sold, and that’s never a good thing. After all, you’re using a VPN so your data remains secure. You wouldn’t want to then have all that data go to some company to sift through — it completely defeats the purpose.
    Before we jump into our cornucopia of VPN services, I want to make it clear that no one tool can guarantee your privacy. First, anything can be hacked. But more to the point, a VPN protects your data from your computer to the VPN service. It doesn’t protect what you put on servers. It doesn’t protect your data from the VPN provider’s VPN servers to whatever site or cloud-based application you’re using. It doesn’t give you good passwords or multifactor authentication. Privacy and security require you to be diligent throughout your digital journey, and VPNs, while quite helpful, are not a miracle cure.
    In this article, we look at a bunch of our favorite VPN solutions. We’ll cover many of the best VPN service providers, how to access the native VPNs built into your desktop machine, and even how to use your NAS as a VPN client and host. If you’re curious about VPNs, you can learn a lot more in our massive VPN FAQ.
    We’ll also dig back into what makes the best VPNs tick and answer some more of your questions at the end of this article, so read on. But first, our picks for the best VPNs of 2020.
    Best VPN providers
    If you’re curious about how VPNs work or what a VPN provider can do for you, here’s a great VPN overview article. Now that you understand how a VPN service can help keep you safe, let’s kick it off with our list of recommended service providers.

    A top-rated VPN provider
    Photo by Christian Englmeier on Unsplash
    Simultaneous Connections: 5
    Kill Switch: Yes
    Platforms: A whole lot
    Logging: No browsing logs, some connection logs
    Countries: 94
    Locations: 160
    Trial/MBG: 30 days
    ExpressVPN is one of the most popular VPN providers out there, offering a wide range of platforms and protocols. Platforms include Windows, Mac, Linux, routers, iOS, Android, Chromebook, Kindle Fire, and even the Nook device. There are also browser extensions for Chrome and Firefox. Plus, ExpressVPN works with PlayStation, Apple TV, Xbox, Amazon Fire TV, and the Nintendo Switch. There’s even a manual setup option for Chromecast, Roku, and Nvidia Switch.
    Also: ExpressVPN review: A VPN speed leader with a secure reputation
    With 160 server locations in 94 countries, ExpressVPN has a considerable VPN network across the internet. In CNET’sreview of the service, staff writer Rae Hodge reported that ExpressVPN lost less than 2% of performance with the VPN enabled and using the OpenVPN protocol vs. a direct connection.
    While the company does not log browsing history or traffic destinations, it does log dates connected to the VPN service, amount transferred, and VPN server location. We do want to give ExpressVPN kudos for making this information very clear and easily accessible.
    View Now at ExpressVPN

    Leak-free and unlimited connections
    Photo by David Clode on Unsplash
    Simultaneous Connections: Unlimited
    Kill Switch: Yes
    Platforms: Windows, Mac, Linux, iOS, Android, Fire TV, Firefox, Chrome
    Logging: None, except billing data
    Trial/MBG: 30 day
    At two bucks a month for a two-year plan (billed in one chunk), Surfshark offers a good price for a solid offering. In CNET’s testing, no leaks were found (and given that much bigger names leaked connection information, that’s a big win). The company seems to have a very strong security focus, offering AES-256-GCM, RSA-2048, and Perfect Forward Secrecy encryption. To prevent WebRTC leaks, Surfshark offers a special purpose browser plugin designed specifically to combat those leaks.
    Also: Surfshark VPN review: A feature-rich service with blazing speeds and a security focus
    Surfshark’s performance was higher than NordVPN and Norton Secure VPN, but lower than ExpressVPN and IPVanish. That said, Surfshark also offers a multihop option that allows you to route connections through two VPN servers across the Surfshark private network. We also like that the company offers some inexpensive add-on features, including ad-blocking, anti-tracking, access to a non-logging search engine, and a tool that tracks your email address against data breach lists.
    View Now at Surfshark

    Interesting options to enhance VPN protection
    Photo by Karl Köhler on Unsplash
    Simultaneous Connections: 6
    Kill Switch: Yes
    Platforms: Windows, Mac, iOS, Android, Linux, Android TV, Chrome, Firefox
    Logging: None, except billing data
    Countries: 59
    Servers: 5517
    Trial/MBG: 30 day
    NordVPN is one of the most popular consumer VPNs out there. Last year, Nord announced that it had been breached. Unfortunately, the breach had been active for more than 18 months. While there were failures at every level, NordVPN has taken substantial efforts to remedy the breach.
    Also: My in-depth review of NordVPN
    In our review, we liked that it offered capabilities beyond basic VPN, including support of P2P sharing, a service it calls Double VPN that does a second layer of encryption, Onion over VPN which allows for TOR capabilities over its VPN, and even a dedicated IP if you’re trying to run a VPN that also doubles as a server. It supports all the usual platforms and a bunch of home network platforms as well. The company also offers NordVPN Teams, which provides centralized management and billing for a mobile workforce.
    Also: My interview with NordVPN management on how they run their service
    Performance testing was adequate, although ping speeds were slow enough that I wouldn’t want to play a twitch video game over the VPN. To be fair, most VPNs have pretty terrible ping speeds, so this isn’t a weakness unique to Nord. Overall, a solid choice, and with a 30-day money-back guarantee, worth a try.
    View Now at NordVPN

    Deep capabilities hidden in an easy-to-use app

    Simultaneous Connections: Unlimited
    Kill Switch: Yes
    Platforms: Windows, Mac, iOS, Android, Linux, Chrome, plus routers, Fire Stick, and Kodi
    Logging: None, except billing data
    Servers: 1,500 
    Locations: 75
    Trial/MBG: 30 day
    IPVanish is a deep and highly configurable product that presents itself as a click-and-go solution. I think the company is selling itself short doing this. A quick visit to its website shows a relatively generic VPN service, but that’s not the whole truth.
    Also: My in-depth review of IPVanish
    Its UI provides a wide range of server selection options, including some great performance graphics. It also has a wide variety of protocols, so no matter what you’re connecting to, you can know what to expect. The company also provides an excellent server list with good current status information. There’s also a raft of configuration options for the app itself.
    In terms of performance, connection speed was crazy fast. Overall transfer performance was good. However, from a security perspective, it wasn’t able to hide that I was connecting via a VPN — although the data transferred was secure. Overall, a solid product with a good user experience that’s fine for home connections as long as you’re not trying to hide the fact that you’re on a VPN.
    The company also has a partnership with SugarSync and provides 250GB of encrypted cloud storage with each plan.
    View Now at IPVanish

    Open source with a dedicated focus on security

    Simultaneous Connections: Depends on plan
    Kill Switch: Yes
    Platforms: Windows, Mac, iOS, Android, Linux, routers
    Logging: None, except billing data
    Countries: 54
    Servers: 1,077
    Trial/MBG: 30 day
    We really like the ProtonVPN story. The company was created by engineers and scientists who met at CERN (the European Center for Nuclear Research — where the Web was invented) with a focus on creating encrypted email and VPN communications with the idea of protecting the communication of activists and journalists. The company is also headquartered in Switzerland, which has very strong privacy laws.
    In terms of product, ProtonVPN has a belt-and-suspenders approach to security, layering strong protocols on top of perfect forward secrecy, on top of strong encryption. Not only does ProtonVPN have a kill switch, but it also has an always-on VPN, which attempts to restore VPN service if it’s dropped mid-communication. Finally, we like that all apps are open source and the company reports that they are independently audited. 
    Finally, the company offers a very generous free service, allowing one machine to connect at medium speed, but there doesn’t appear to be any limit to the amount of data used in the free plan.
    View Now at Proton

    VPN service hosted on its own infrastructure

    Simultaneous Connections: 5
    Kill Switch: Yes
    Platforms: Windows, Mac, iOS, Android, QNAP, Synology, router, TV
    Logging: None, except billing data
    Servers: 700+ on their own infrastructure 
    Locations: 70
    Trial/MBG: 30 day
    Golden Frog, the company behind VyperVPN, claims to be “A company as old as the Internet itself,” yet its own about page says the company was founded in 2009. Apparently, the founders of Golden Frog were founding companies back in the 90s, and they conflated the two facts. I’m always a bit uncomfortable when a security company conflates facts.
    On the plus side, we like that Golden Frog owns and manages its own infrastructure and does not rely on hosting companies. VPN infrastructure is often a murky thing, with the VPN service providers renting time from available data centers in host countries.
    The company offers a huge array of client software, including apps for routers and even BlackBerry devices. Apps support key features like a kill switch, a zero-knowledge DNS service, and their own Chameleon VPN protocol for added security. The company’s no-log service was last audited in 2018, so they’re a bit overdue.
    Golden Frog, also registered in Switzerland, is a standout in their effort to provide privacy and thwart censorship. When China began its program of deep packet VPN inspection, Golden Frog’s VyperVPN service added scrambled OpenVPN packets to keep the traffic flowing.
    View Now at Golden Frog

    It’s Norton, a known and trusted brand. What else is there to say?
    Photo by John Salvino on Unsplash
    Simultaneous Connections: Based on plan
    Kill Switch: Yes
    Platforms: Windows, Mac, iOS, Android
    Logging: None, except billing data
    Countries: Unspecified
    Locations: Unspecified
    Trial/MBG: 60 day
    We found performance is middle-of-the-road and platforms are limited to Mac, iOS, Windows, and Android. Don’t even think of using it on routers, Linux, or gaming platforms. Pricing is weirdly and unnecessarily tiered. The service raises its price by ten bucks when you jump from 1 device to 5, and another ten bucks when you jump to ten devices. Given the full ten simultaneous device package is a good deal at $59, it’s odd that it’s nickel-and-diming the lower tiers.
    Also: Norton Secure VPN review: More work is needed for this privacy product to shine
    We’re recommending Norton not as much because it’s a great VPN (it’s really kinda meh), but because it’s from a brand we’ve long come to know and trust. The company also offers live 24/7 phone support and has an excellent 60-day money-back guarantee. The company also offers a generous 60-day money-back guarantee, but oddly doesn’t promote it. The only place it’s mentioned is deep inside their refund policy document.
    View Now at Norton

    Clear and understandable instructions

    Simultaneous Connections: 12
    Kill Switch: Yes
    Platforms: Windows, Mac, iOS, Android, Linux, Fire TV, Synology, Kindle, Kodi, and routers
    Logging: None, except billing data
    Countries: 30+
    Servers: 950+
    Trial/MBG: 30 day
    StrongVPN stands out because its setup, website, and support materials are clear and easy to understand. We found setup to offer just the right amount of explanation when we needed it.
    Also: My StrongVPN in-depth review
    The fact that StrongVPN doesn’t log anything is a big win, but it’s offset a bit by the fact that our testing showed endpoints can tell you’re using a VPN. To be sure, data is nicely encrypted, but if you’re trying to hide the fact that you’re on a VPN, Strong isn’t for you. That said, it had solid performance, an excellent UI, and did the job. Plus, they recently upped the number of simultaneous connections from five to twelve. That’s nice to see. The company also includes 250 GB of SugarSync secure storage with all plans.
    View Now at StrongVPN

    Astonishing performance
    Photo by Sergi Viladesau on Unsplash
    Simultaneous Connections: 5
    Kill Switch: Yes
    Platforms: Windows, Mac, iOS, Android, Linux, router, TV
    Logging: None, except billing data
    Countries: 80
    Locations: 115
    Trial/MBG: 45 days
    This is a company that has had some ups and downs in its coverage. That said, the company seems to have resolved its issues successfully. But I’m burying the lede for this story. Here’s what you need to know about Hotspot Shield: performance was astonishing.
    Also: My in-depth review of Hotspot Shield
    The company kept sending me bragging emails, claiming exceptional performance. Since reviewers often (always) get “we’re the best” emails, it’s something we ignore like the background noise it usually is. But then my editor challenged me to put Hotspot Shield to the test. And you know what? For most countries, while the VPN connection was active, it actually out-performed non-VPN connection speed. Go ahead and read my review. Surprised the heck out of me.
    View Now at Hotspot Shield

    A bundle of security features beyond VPN
    Photo by Steinar Engeland on Unsplash
    Simultaneous Connections: 7
    Kill Switch: Yes
    Platforms: All you’d expect and a lot more
    Logging: None, except billing data
    Countries: 89
    Servers: 6,381
    Trial/MBG: 45 days
    The CyberGhost client is more than a VPN connection driver. The company’s offering is a decently complete full security system, including ad-blocking, malicious website blocking, online footprint blocking (blocking cookies from dropping), and forced https redirect.
    Also: My in-depth review of CyberGhost
    With more than 6,000 servers deployed in 89 countries and 112 locations, CyberGhost has a larger number of servers than many of the other VPN providers we surveyed. Performance was adequate. It provided enough bandwidth to stream video and get your job done, but it certainly wasn’t a rocket. Also, if you’re trying to hide the fact that you’re using a VPN, you’ll want to look elsewhere. That said, for a solid overall security package, CyberGhost is a good option.
    View Now at CyberGhost

    31-day guarantee because sometimes that extra day matters
    Photo by Adam Vradenburg on Unsplash
    Simultaneous Connections: 10
    Kill Switch: Yes
    Platforms: Windows, Mac, iOS, Android, Linux, and a lot more
    Logging: None, except billing data
    Countries: 140
    Servers: 2,000
    Trial/MBG: 31 day
    Most VPN providers license their international server presence from local providers all over the globe. PureVPN doesn’t. They own their own self-managed network of more than 2,000 servers in 140 countries. This allows the company to support its full range of protocols (OpenVPN, L2TP/IPSec, SSTP, and IKEv2). It also offers PPTP, but it’s so porous, you probably shouldn’t use it.
    Given the tough times due to the novel coronavirus, PureVPN has sent its support folks home, but they’re up and running providing 24/7 support from the safety of sheltering in place. So even though business isn’t as usual, PureVPN has, like many companies, routed around the problem using internet technology to keep connected. We also like the 31-day money-back guarantee, support for a wide range of devices, including Kodi, Roku, and Boxee boxes. 
    View Now at PureVPN

    A tremendous number of servers

    Simultaneous Connections: 10
    Kill Switch: Yes
    Platforms: Windows, Mac, iOS, Android, Linux, Chrome, Firefox, Opera
    Logging: None, except billing data
    Countries: 76
    Servers: 17,605
    Trial/MBG: 30 day
    One of the more interesting aspects of Private Internet Access is the wealth of payment options the company offers. Sure, you can pay by credit card. But you can also pay with cryptocurrencies including BitcoinCash, Bitcoin, Zcash, Ethereum, and Litecoin. If you’re not all up on the crypto-craze but still don’t want to leave a record of your payment, you can use over 100 brands of gift cards, including those from Best Buy, GameStop, Home Depot, Lowes, Target, and Walmart.
    The company supports a good range of protocols and you can use it on your customized DD-WRT router. We do like the quick setup, included ad, malware, and tracker blocker, and unlimited bandwidth is always appreciated.
    View Now at Private Internet Access

    Relative newcomer that keeps improving each time we look at them
    Photo by Cephas CC BY-SA 3.0 on Wikipedia
    Simultaneous Connections: Unlimited
    Kill Switch: Yes
    Platforms: Windows, Mac, iOS, Android, Android TV, Linux, Chrome, routers
    Logging: None, except billing data
    Countries: Unspecified
    Locations: Unspecified
    Trial/MBG: 30 day
    Here’s the thing about Goose VPN. It’s called “goose VPN.” That’s nearly irresistible for a writer. When I asked, I was told geese make excellent guard animals, having performed guard duty in ancient Rome, an Air Defense Command base in Germany, and a brewery in Scotland. Hence Goose VPN, where the goose is the mascot for a service that guards your Internet access.
    When I first started talking to the folks at Goose VPN a few years ago, they didn’t offer a kill switch and only had clients for the Big Four. But, as time went on, they’ve been adding features and capabilities regularly and their offering is now a nice, robust system. Plus, here’s something really cool. Unfortunately, since the last time we looked at them, the company ditched its lifetime plan. Now, they offer yearly plan durations similar to their competitors. Finally, the company offers a reasonable 30-day money-back guarantee.
    View Now at Goose VPN
    Native VPN support on your desktop
    If you’re connecting to a corporate VPN, you may not need to purchase a VPN service. All the major desktop operating systems include VPN capabilities. Here’s how to get started using those.

    Connect to a corporate VPN with Apple
    Photo by Michail Sapiton on Unsplash
    If you’re connecting to an existing corporate virtual private network, you may not need an additional service. MacOS comes with native VPN support built right in.
    Apple provides VPN support for High Sierra, Mojave, Catalina, and now Big Sur. Just pop open System Preferences, head over to the Network tab, and either import the configuration file you were provided or hit the plus button and add a VPN interface. Here’s a handy tip sheet from Apple that will walk you through the process.
    View Now at Apple

    Connect to a corporate VPN with Microsoft

    If you’re connecting to an established corporate VPN, all you need to do is add a new Windows 10 VPN connection. Point your mouse at the Start menu, hit Settings, then Network & Internet, and then VPN. Make sure you have the connection details provided by work and then click on Add a New VPN Connection. Fill in the form and you’re good to go. Here’s a handy tip sheet from Microsoft.
    Windows 10 also allows you to host a VPN server by creating a new incoming network connection, choosing the users who can connect, and telling Windows that the incoming connection is across the internet. You’ll also have to configure your router to allow traffic to your computer. PureInfoTech has a helpful guide for setting it all up.
    View Now at Microsoft

    Connect your laptop with Google

    Sadly, this simple solution isn’t built into the standard Chrome browser. If you’re just using the browser on a Mac or Windows machine, you’ll need a different solution. 
    That said, if you’re rocking a Chromebook, all you need to do is open Settings and then Network. Click Add Connection. Then all you need to do is choose between OpenVPN and L2TP over IPSec. Google has a handy cheat sheet right here to guide you through the process. 
    View Now at Google

    Another reason to love open source
    Photo by Rekjezt on Unsplash
    WireGuard is Linux’s new baked-in VPN capability. Its code is relatively simple and small, making it far easier to maintain, test, and debug. Linus Torvalds, Mr. Linux himself, calls WireGuard “a work of art.”
    Also: Linux’s WireGuard VPN is here and ready to protect you
    So what do you need to set up WireGuard? More and more of the VPNs we spotlighted support WireGuard right out of the box. You can download it for Linux. But you can also download a package for Windows, Mac, iOS, Android, and FreeBSD. It’s like most open source products, in that you’ll need to do some reading and thinking to make it work. But it’s free, solid, safe, and, as Linus says, “Can I just once again state my love for it.” 
    View Now at WireGuard
    VPN for your whole home network
    Many of the commercial VPN services discussed above offer router-based VPN solutions. Even though I have a pretty powerful router, I prefer to run my VPN on my NAS. Here are two NAS-based VPN solutions that will get you connected securely.

    Built-in VPN app on the NAS

    If you have a NAS like the top-reviewed Synology, you may already have a NAS app you can set up and protect your whole home network. The Synology server has a very capable little VPN built-in, and it’s available free to anyone with the NAS.
    If you want to go a step further and use some Synology-exclusive VPN services like Synology SSL VPN, clientless WebVPN, and remote desktop, as well as a site-to-site VPN service, you can do so using the Synology router I reviewed last year. That service is called VPN Plus and it normally costs $9.99 per concurrent user. But because of COVID-19, Synology’s offering free VPN Plus between now and September.
    View Now at Synology

    A mini-FAQ about VPNs
    I answered a bunch of common questions above our big list of the best VPNs for 2020. But here’s a quick lightning round of questions and answers about VPNs, just to round out your knowledge.
    Do VPN providers limit usage? Some do. Check when you sign up. For non-free plans, none of the providers we recommended limit the amount of data you can use. But almost all limit how many devices you can use at once.
    What does logging really mean? Logging is the recording of data about your usage and it occurs everywhere. Every website, at minimum, records an IP address, time, and data accessed so they can track traffic. All VPN providers have to check credentials against recorded personal data to make sure you paid, but a few let you sign up with Bitcoin, allowing you to completely hide your identity. When we say a VPN doesn’t log data, we mean they don’t track what sites you visit and for how long, but they may track how much of their own infrastructure you use.
    Is it legal to use a VPN? Yes, in most countries. Some countries (and you should read my guide for more in-depth info) have made VPN use illegal. And even in countries where it’s legal, it’s likely to be illegal to use a VPN to spoof a streaming service into giving you content that otherwise wouldn’t be accessible. Plus…
    Can I use a VPN to get free Netflix or watch a blacked-out sports event? Sometimes, but it’s likely illegal and probably fattening. There’s an ongoing arms race where the media vendors are getting better at identifying and blocking VPN connections, so each case is different. And that’s all we can say about it, because… illegal.
    If I have a VPN to my office, do I need a VPN service? The VPN to your office will secure your link to your office. If you want to secure your link to anywhere else, you’ll need a VPN service.
    Should I use a VPN on my phone or tablet? If it’s your data and you want it to be secure, yes. The same choices are valid regardless of what kind of device you use to transmit and receive data over the Internet.
    What’s this kill switch thing? So let’s say you’re surfing along and all of a sudden your VPN connection fails. Your phone or computer is likely to immediately try to reconnect and do so directly, without going through a VPN. All of a sudden your data is unprotected. A kill switch is a feature in your device’s VPN app that detects that connection fail and immediately shuts down network access. Like with everything, it’s not a 100% perfect solution, but these days, I wouldn’t recommend using a VPN that doesn’t offer a kill switch.
    What do simultaneous connections mean and why should I care? I’ll give you a personal example. When I travel, I often take my laptop and my tablet. I use the laptop to write and I use the tablet as a second screen to look stuff up. I have two connections I’m using at once and I want my VPN to protect both. If my wife is also doing the same thing, that’s four connections. Add our phones and you have six connections. If we’re using all those devices at once that’s simultaneous connections. The more the better.
    What about all those weird protocol words? If you’ve been shopping for a VPN service, you’ve undoubtedly come across a bunch of names like SSL, OpenVPN, SSTP, L2TP/IPSec, PPP, PPTP, IKEv2/IPSec, SOCKS5, and more. These are all communication protocols. They are, essentially, the name of the method by which your communication is encrypted and packaged for tunneling to the VPN provider. To be honest, while VPN geeks can argue over protocols for hours, you’re probably good enough if you just use the default set up by your provider.
    How to choose
    I could write an entire article about how VPNs work and how to choose, and, in fact, I did. Rather than repeating it all here, I’m just going to point you to How to find the best VPN service: Your guide to staying safe on the internet.
    Our process
    This list did not involve as much original research and testing as some of my other recommendation lists. That’s because I’ve been writing VPN articles every month or so since early 2017. I have looked at a lot of VPN providers.
    Many of the providers recommended in this list have been subject to in-depth testing and reviews, written either by me or by CNET’s product evaluation team. (See: The best VPN services for 2020.) For those, we have tangible testing numbers. Other VPNs have been ones we’ve been talking about for years, spoken with their management and their users, and have developed a generally positive impression.

    A few of the VPNs (Hotspot Shield, in particular) had a more rocky road. They had some tough PR at the beginning and made some seemingly ludicrous claims about speed. It wasn’t until I brought them in house and pounded on them for a few weeks that I realized that their claims were justified. Sometimes, products just surprise you.
    But here’s the thing: All these vendors have solid money-back guarantees and we would not have recommended them otherwise. We do test VPN services from multiple locations, but we can’t test from all locations. Every home, every community, every local ISP, and every nation has a different infrastructure. It’s essential that once you choose, you test for all your likely usage profiles, and only then make the decision to keep the service or request a refund.
    One thing to consider is whether you’re looking for a solution for working at home vs. traveling. For example, if you travel rarely (even before COVID-19), have strong bandwidth at home, and have a NAS or a server box, you might want to VPN to your home server from your machine’s native client, and then out to the world. If you’re newly home for the duration and your company has a dedicated VPN, you’ll want to use whatever process they’ve set out for you.But, generally speaking, it doesn’t hurt to have a VPN provider already set up and in your kit bag. Most home-based traffic won’t require VPN usage, but if you’re on any sort of shared connection, having a VPN provider is a good idea. Also, if you ever think you’ll need to access the Internet from out and about — like a hospital or doctor’s office, then having a VPN provider can be a win. Likewise, if you want to obscure where you’re connecting from (this might be more important now that we’re always in the same place all day), a VPN provider might help.
    Finally, don’t expect miracles. Your home-based pandemic broadband pipes are likely to be more clogged than ever before. Everyone is at home, many people are streaming movies to stay sane, and there are only so many bits that can fit at any given time. If you experience traffic slowdowns, be sure to check not only your VPN, but your Wi-Fi connection between your device and your router, your connection to your broadband provider, and even their connection to upstream providers.
    That said, we’re all in this together. Hang in there and stay safe. How are you managing your home-based networking? Let us know in the comments below.
    You can follow my day-to-day project updates on social media. Be sure to follow me on Twitter at @DavidGewirtz, on Facebook at Facebook.com/DavidGewirtz, on Instagram at Instagram.com/DavidGewirtz, and on YouTube at YouTube.com/DavidGewirtzTV.

    ZDNet Recommends More

  • in

    Windows 10: This is 2020's last 2004 and 20H2 optional update, says Microsoft

    Windows users and admins can expect a Patch Tuesday update on December 8, but Microsoft just snuck in the final optional update for the latest versions of Windows 10 a day ahead of its December 1 cut-off. 
    In mid-November Microsoft warned it would stop delivering the optional updates it releases in the latter part of the month that let admins test against systems before it releases its Patch Tuesday updates on the second Tuesday of each month. 

    Windows 10

    The reason it’s not issuing optional or preview updates is to give admins a break over the holiday period when staffing resources could be stretched. It will resume these updates in January 2021.   
    Microsoft tests the newest versions of Windows 10 with users in the Windows Insider program before releasing them to the general public and it did that last week with the Windows 10 20H2 Build 19042.662 to the Beta and Release Preview Channels for Insiders who are on 20H2. 
    The update was tagged as KB4586853, which is now available to all Windows 10 systems on Windows 10 version 20H2 and 2004 that aren’t enrolled in the Windows Insider program. The cumulative update will be included in the December 2020 Patch Tuesday update. 
    There don’t appear to be any substantial changes from the preview build Microsoft released to Windows Insiders a week ago but there are a few lingering known issues that remain unresolved. 
    Microsoft highlights that it has fixed an issue that stalls Narrator after users unlock a device, if Narrator is being used before the device was locked. 

    The update addresses issues that affected Xbox, DirectX graphics, USB-connected devices, and Asian input method editors (IME). 
    After installing KB4586853, most Windows users should be able to find Xbox consoles more easily from a Windows device, while the Microsoft Xbox Game Bar app controls on supported monitors should be visible. This issue affected some Microsoft DirectX 9.0 games that run with Windows 10 variable refresh Rate enabled on monitors. 
    Microsoft has also been working to fix a USB 3.0 bug that caused a device connected to the hub to stop working when on devices in hibernation mode or after restarting the device. There’s also a fix for touch keyboard problems in the Windows 10 Mail app. 
    The update should address a whole lot of issues affecting consumers and enterprise admins running systems with the latest versions of Windows, according to release notes for the Insider preview.  
    As per the release notes for the preview for Windows Insiders, Microsoft addressed an issue preventing certain MIDI devices from connecting using Bluetooth Low Energy. It also fixed an issue that prevents access to Azure Active Directory (AD) using Google Chrome because of a Conditional Access policy error.
    Microsoft references a known issue for system and user certificates being lost after updating a device from Windows 10, version 1809 or later to a later version of Windows 10. 
    Microsoft acknowledged this issue in early November and said a fix would be available in a few weeks. It is important because losing user or system certificates can cause problems for VPNs that rely on them for connecting to work remotely. 
    The certificate issue affects devices that have installed any cumulative update (LCU) released since September 16, 2020.  More

  • in

    Nearly 40% of rural homes globally do not have access to internet: ITU

    Urban households around the world have almost twice as much access to the internet than those living in rural areas, according to the United Nation’s International Telecommunication Union (ITU).
    According to the ITU, about 72% of households in urban areas globally had access to home internet in 2019, while only 38% of homes in rural areas had the same access. 
    Published as part of the ITU’s annual Measuring Digital Development: Facts and figures report, the United Nations agency also said that urban access to the internet was 2.3 times higher than rural access in developing countries.
    Urban and rural areas were classified in accordance with each UN member country’s own definition for what they consider to be urban and rural.
    By comparison, the urban-rural gap in developed countries was much smaller, with 87% and 81% of urban and rural homes having access to home internet in 2019, respectively.
    Meanwhile, connectivity gaps in rural areas were the most particularly pronounced in the least developed countries, with 17% of these rural populations living in areas with no mobile coverage at all, and 19% of these rural populations being covering by only a 2G network. 
    “How much longer can we tolerate the significant gap in household connectivity between urban and rural areas?” ITU secretary-general Houlin Zhao said. 
    Image: ITU

    Looking at internet coverage, in most regions, more than 90% of the population have access to a 3G or higher quality mobile-broadband network, the ITU said in its report.
    Africa and the former Soviet states that make up the Commonwealth of Independent States were the regions that faced the biggest gap in 2019, where 23% and 11% of their populations, respectively, had no access to a mobile broadband network at all.
    Globally, almost 85% of the population will be covered by a 4G network by the end of this year, which would amount to a two-fold increase from five years ago, the report said. Annual growth has been slowing down gradually since 2017 however, with 2020 coverage only being 1.3 percentage points higher than 2019.
    93% of the world population, meanwhile, will have access to at least 3G networks by the end of 2020, which is only half a percentage point higher than a year ago. 
    Along with the slowing down of internet coverage expansion, 2020 also saw the total number of mobile-cellular telephone subscriptions decline for the first time in history, according to the report. 
    During 2020, there were an estimated 105 mobile-cellular subscriptions per 100 inhabitants, which is down from 108 in 2019. The report stated that further research would be required to understand whether the dip was caused by the COVID-19 pandemic or other socio-economic forces.
    In response to the slowdown of network coverage expansion and decline in mobile subscriptions during 2020, Zhao said infrastructure rollout needed to become an urgent issue for countries globally, especially as COVID-19 has forced many people to work and study from home. 
    “With the COVID-19 pandemic wreaking havoc on lives, societies, and economies around the world, many of our daily activities have moved online, throwing a sharp spotlight on global connectivity,” ITU director Dorren Bogan-Martin added.
    Despite the decline in global mobile-cellular subscriptions, international bandwidth usage continued to grow during the pandemic. According to the report, international bandwidth usage grew globally by 38%, exceeding the growth rate of the previous year by six percentage points.
    Earlier this year, the ITU and World Health Organization (WHO), supported by the United Nations Children’s Fund (UNICEF), worked with telcos around the world to text health information related to the pandemic to those without access to the internet.
    “The goal is to reach everyone with vital health messages, whatever their connectivity level,” the WHO and ITU said in a statement.
    Related coverage More

  • in

    FCC chairman Ajit Pai out, net neutrality back in

    Federal Communications Commission (FCC) Chairman Ajit Pai said he plans to leave the commission on Jan. 20, 2021. This opens the door to President-elect Joe Biden to select a new head of the telecommunications regulator. While best known for wrecking network neutrality, in his resignation letter Pai largely ignored that issue. His only comment relating to it was “this FCC has not shied away from making tough choices. As a result, our nation’s communications networks are now faster, stronger, and more widely deployed than ever before.”

    Few would agree with his rosy view. While according to the FCC’s 2020 Broadband Deployment Report, only 22.3%, 21.3 million rural Americans, don’t have access to internet download speeds of at least 25 Mbps, which is the recommended speed for working from home and online schooling, the real numbers are much worse. BroadbandNow Research using the FCC’s own data found almost twice that number, 42 million, don’t have broadband access. 
    This, in turn, as the coronavirus pandemic has made working from home the new normal, has made rural areas even more unattractive. In a recent SatelliteInternet survey, 36% of respondents said poor internet access is preventing them from moving to rural areas, while 67% said the internet availability in an area would affect their decision to move somewhere rural.
    As for net neutrality, as predicted, ISP costs to users have gone up while performance remains stagnant. The New America centrist think tank found in its 2020 Cost of Connectivity survey, which was completed before the work from home movement picked up speed, that prices have continued to spiral upward.
    The group also found that cost remains one of the biggest barriers to internet adoption. Cable.co.uk reported that US users pay $50 per month on average for the internet. And, thanks to a “lack of competition in the marketplace… Americans pay far more than they should compared to much of the rest of the world.”  I’m sure you’re surprised. 
    New America also noted, the lack of choice between ISPs — not just between urban and rural communities, but also between households that can afford a home internet connection and those that cannot — are turning us into a country of internet haves and have nots.
    Jonathan Schwantes’, privacy and technology policy director for Consumers Union, the advocacy division of Consumer Reports, prediction has come true: “Internet providers are now free to move forward on the anti-competitive practices they were flirting with before these rules were passed, including throttling content and paid-prioritization schemes that place smaller businesses at a disadvantage and ultimately cost consumers more.”

    For example, data-cap programs for fixed ISPs are now becoming commonplace. Comcast, for example, will now put a 1.2TB monthly data cap on all its customers in early 2021. That may sound like a lot, but when everyone’s working, studying, and playing at home, it’s not that much.
    Comcast isn’t the only one. AT&T’s millions of DSL subscribers also now must deal with monthly data caps. AT&T intends to kill off its legacy DSL business. This will leave millions of rural users with no broadband at all. Good job, Pai!
    Charter/Spectrum, while denying that they’ll ask for data caps, has asked the FCC to enable them to place caps starting in May 2021. Currently, Charter as part of its acquisition of Time Warner Cable, isn’t allowed to place data caps. 
    Also as Schwantes predicted, major ISPs are using zero-rating to make their own media streaming services look good, while slowing down the competition. In zero-rating, an ISP lets you stream its streaming service for free while restricting alternatives. 
    For example, AT&T gives its customers’ zero-rating on A&T TV Now, while if you wanted to watch Sling TV instead, your usage would count against your data cap. Evidence strongly suggests major ISPs, such as AT&T, Verizon, Sprint, and T-Mobile are slowing down traffic from popular video streaming services such as Netflix, YouTube, and Amazon Prime.
    Also: Best TV streaming service: Compare the top subscription-based video packages 
    It’s not just net neutrality where Pai has done the country wrong. Under defeated President Donald Trump, Pai has also sought to turn the FCC into what the Electronic Frontier Foundation (EFF) calls the free speech police. Trump’s most recent would-be FCC appointment, Nathan Simington, is one of the legal architects behind his recent executive order seeking to strike down Section 230, the most important law protecting online free speech. 
    Before Pai leaves, he’ll have one final issue to address. The FCC at its December 10th meeting will consider a “rip-and-replace” order. If passed, this would require all telecoms to remove Huawei and ZTE equipment from their networks on the grounds their hardware represents national security threats. 
    Who will Biden appoint in his place? Sources close to Biden’s transition team say, Mignon Clyburn, a former FCC member under Obama, and Jessica Rosenworcel, a present member, are under consideration for the FCC Chairperson’s spot. Both are strong net neutrality supporters.
    Under Biden and a new FCC chair, net neutrality will return and both consumer and business users will get better, more fairly priced, and more broadly distributed internet. In these days when we need fast internet from the smallest home to the largest business, net neutrality is more important than ever.
    Related Stories: More

  • in

    Best TV streaming service: Compare the top subscription-based video packages

    A few years ago, only hardcore techies and television fans were cord-cutting. Today, there are more people watching streaming shows than there are paying for cable or satellite TV. 
    There are three reasons for this shift. First, the best live TV streaming services now offer pretty much anything you’d ever want from a traditional TV service. Second, even though live TV streaming services costs are catching up with cable, for now, they’re still more affordable. Finally, the video-on-demand (VoD) services, which started the cord-cutting revolution, such as Netflix, Hulu, and Amazon Prime, are now more likely to produce “much watch” TV than their older competitors. 
    For example, CBS All Access’s Star Trek: Discovery; Disney Plus’s The Mandalorian; and Netflix’s The Queen’s Gambit all have huge audiences and are popular with the critics as well. Today, with the exception of HBO, which has its own streaming specific service now, HBO Max, you’re more likely to find the show you want to watch on a streaming service than on antenna, cable, or satellite.
    But, which service is right for you? Before describing them, I’d be remiss if I didn’t mention there are numerous free VoD services. If money is tight, there’s still a lot of good streaming movies and TV shows out there for you.
    What you need to stream  
    To make use of any of these services you’ll need broadband internet. If you’re living on your own, you may be able to get by with as little as 10 Mbp. If you’re sharing your home with others and/or you want to watch 4K videos, I recommend you have at least a 25 Mbps internet connection. Not sure how fast your connection is? Run the Ookla Speedtest.
    These services’ pricing, show lineups, and how many streams you can watch at one time are all subject to change. For the most part, all of these support the most popular streaming devices. For example, no matter which service you subscribe to, an Apple TV, Amazon Fire TV Cube, Roku Express, or Google Chromecast will almost certainly support it. But if you’re using a more obscure streaming gadget, such as an Nvidia Shield TV Pro or Tivo Stream 4K, it might not work with your preferred service. Smart TVs also frequently don’t support newer streaming offerings. The moral of this story is before subscribing make sure the service will work with your hardware. 
    Fortunately, most of these services give you a free 7-day trial period. Before signing up for a trial though check the fine print. You don’t want to end up paying for a service that you really don’t like. 

    If you love the BBC, you’ll love Acorn TV

    If you’re a fan of British TV like I am, then Acorn TV is for you. On it, I can get my fill of shows like Agatha Raisin, Doc Martin, Midsomer Murders, and Lovejoy. It also includes other shows such as the Australian hits Miss Fisher’s Murder Mysteries and  A Place to Call Home.
    This service used to have a lot of performance problems. That’s no longer the case. That said, at best, you can only watch shoes in 720p HDTV. You’ll find no 4K or UHD content here. You can, however, stream up to a generous four shows at once. 
    Acorn TV costs $6 a month or $60 a year. You can either stream it directly or you can subscribe to it via Amazon Prime Video. The advantage to this latter approach is far more streaming devices support Prime Video than Acorn TV.  
    View Now at Acorn TV

    Free two-day Amazon shipping and great videos, what’s not to like?

    Amazon Prime Video is far more than just videos. For $119 a year or $13 a month, besides free videos, you get free two-day shipping on most Amazon purchases. If you’re already using Amazon Prime for buying stuff, using its Video service is a no brainer. 
    The service offers VoD for older movies and TV shows. Many, but far from all, of these require an additional fee to rent or purchase. Lately though, like Netflix, Amazon is getting known for its great original content such as Fleabag, Good Omens, Jack Ryan, The Marvelous Mrs. Maisel, and The Boys. I’ll also always owe a debt of gratitude to Amazon for saving the best science-fiction show of all time, The Expanse. 
    Many of Amazon’s originals and some newer films are available in 4K and UHD. You can stream up to three shows at once. 
    Even if I didn’t shop at Amazon, I’d pay for Amazon Prime Video.
    $9 at Amazon

    Someday Apple TV Plus will be for everyone, today’s it’s really just for Apple users.

    I’m not so sure though that I’d pay much more than the $4.99 per month that  Apple TV Plus costs. There’s just not a lot there. It has relatively few “free” videos in its library and its original content is, well, minimal.
    The closest thing to a hit Apple TV Plus has is probably the drama The Morning Show. The what, you say? Exactly.
    It does, on the other hand, have many movies you can watch for additional fees. You can share your subscription with up to six people via Apple’s Family Sharing feature. But that’s not as generous as it sounds. Apple caps simultaneous streams to three for most of its content.
    One good point is that the content, when it’s available, can be viewed and heard in 4K, HDR, Dolby Atmos, and Dolby Vision. Just make sure you have the right gear to support it, or all that will go to waste.
    Apple TV Plus has promise and it’s handy if you’re already deep into the Apple world. But if you’re not a dyed-in-the-wool Apple fan, this is one service you can skip. 
    $5 at Apple TV Plus

    CBS All Access
    All CBS shows, all the time. You know, that’s just fine.

    CBS was the first of the big broadcasters to decide to go into streaming in a big way with CBS All Access. Its biggest selling point is the insanely large CBS catalog of past and new shows as well as live CBS news and sports content. I don’t care what kind of show you like, you’ll find something you want to watch on this service.
    What it doesn’t have is a lot of original content. What new shows it does have, such as Star Trek: Picard, The Good Fight, and The Twilight Zone, I like. But they may not be for you.
    One blemish is that even the new Star Trek shows are only available in HDTV. For now, there’s no 4K or HDR content.
    The basic CBS All Access plan, with commercials, costs $6 a month. To get rid of ads, you must pay $10-per-month. Annually, the limited-commercial plan is $60 per year, while the no commercials version will cost you $100 annually. But, pay attention, even with the high-end service, you’ll see ads when you watch live TV.
    Is it worth it? I think so. You just need to ask yourself, “How much do I love Star Trek and the rest of the CBS TV library?”

    Disney Plus includes content from Disney, Marvel, Fox Entertainment, and Star Wars.

    Disney Plus is the one new streaming service I can recommend for almost anyone. The reason? I’ll give you four: the Disney, Marvel, Fox Entertainment, and Star Wars movies and TV show library. For popular entertainment, you can’t beat Disney Plus. 
    Disney Plus is still building up its original content library, but it already has one huge hit, The Mandalorian. Honestly, though, tens-of-millions would still be subscribing even if they didn’t have any original content.
    With the pandemic keeping us in our homes, Disney Plus is also exploring pay per view (PPV) for movies like the live-action Mulan. If this plan works out, you’ll see other movies, such as Marvel’s The Black Widow, appearing on Disney Plus screens. 
    At $7 per month, it’s also one of the cheaper VoD best streaming. Better still, much of its content is available in 4K resolution with HDR color. For streaming, it also currently supports four simultaneous streams. 
    There are some people out there, somewhere, who might not find something fun to binge-watch on Disney Plus. I just don’t know any of them. 
    $7 at Disney Plus

    Now that HBO Max is widely available, if you love HBO, you’ll love HBO Max.

    HBO’s new streaming service HBO Max had trouble getting out of the gate. But now that Roku and Amazon Fire are coming on board, its future looks great. That’s because, like Disney Plus, it has a huge library of content people love to watch. Their audiences are different, though, with Disney Plus tending to be younger than the audience for such HBO classics as Deadwood and The Sopranos. 
    You may be a little confused as to what’s what with HBO streaming. I can’t blame you. I watch a lot of HBO shows and I cover this stuff for a living, and I’ve been puzzled. Here’s how it works. HBO Go is on the way out. It dies on July 31, 2021. If you’re already an HBO Go’s customer, you’ll automatically be moved to HBO Max. HBO Now is still around, at least for now, but it’s been renamed HBO. 
    So, what’s the difference? With HBO, you get, well HBO. With HBO Max you also get access to some movies and TV series from Warner Bros.; New Line; DC, CNN, TNT, TBS, truTV, Cartoon Network, Adult Swim; Looney Tunes Cartoons; CrunchyRole anime; and some classic movies from TCM. You’ll also be able to watch some new HBO Max exclusive shows. 
    You can watch these on up to three devices at once. Unfortunately, for now at least, you’ll only be able to watch these shows in HDTV. 
    If you’re already subscribed to HBO via your cable or satellite provider, you get HBO Max for free. Otherwise, HBO Max will run you $15 a month. That’s not cheap, but you do get a lot to watch for your money.
    $15 at HBO Max

    Hulu is still well worth a look.

    Hulu’s big brother, Hulu + Live TV’s big selling point is it’s the one service which combines both live TV and VoD. It’s a powerful package. Besides great original content, such as exclusive titles like The Handmaid’s Tale, it also has a large catalog of other on-demand shows and movies. On top of that, you get over 65 live and on-demand channels. 
    But Hulu + Live TV costs $65 a month, while Hulu, the pure VoD play, costs $6 a month or $60 a year with ads or $12 a month without ads. Is it worth it? I think so.
    That’s because Hulu comes with a huge library of 21st Century FOX content, that’s too adult for Disney Plus. It also has a good selection of original content. This includes some of my personal favorites such as Harlots, The Handmaid’s Tale, and Veronica Mars. 
    As for the video itself, Hulu supports two simultaneous streams. Some of its original shows are available in 4K, but most of the content is in HDTV.
    $6 at Hulu

    It’s still the best streaming service around thanks to its wealth of great original content.

    The 800-pound gorilla of streaming is Netflix. It has great older TV show and movie content. But what most of us watch on Netflix is its ever-growing collection of original programs. 
    Shows such as Glow, Emily in Paris, The Queen’s Gambit, and Black Mirror set the standard in great streaming TV, but I doubt very much you know exactly how many original shows Netflix produces. In 2019, Netflix released 371 new TV shows and movies. That’s more than one new video a day. Trust me, you’re going to find something you can not only watch, but love, on Netflix. 
    All of this comes with a rather complex pricing scheme. At the first tier, $9, you can watch on one screen in SD. Move up to $14 a month, which is what I recommend, and you get HDTV and two simultaneous streams. For $18 per month, you get 4K and four streams.
    The only thing I dislike about Netflix, and it’s really not the company’s fault, is its video partners are constantly moving shows and movies on and off the service. There’s a reason why there’s a website called What’s on Netflix, which does nothing but track what’s on and what’s about to leave Netflix. 
    Still, let’s get real, Netflix is the one essential streaming service. 
    $9 at Netflix

    With a lot of great old NBC shows, Peacock is a promising work in progress.

    Following CBS’s lead, NBC launched its own streaming network, Peacock, this summer. It includes a large collection of old and new NBC shows. 
    Peacock, at this point, is relying on its rich library of classic NBC shows such as Parks and Recreation, 30 Rock, and Columbo. The streaming network also has the enormously popular Law & Order and Chicago Fire franchises. 
    Since Peacock’s parent company owns Universal Pictures, Focus Features, and DreamWorks, we can be sure there will be lots of movies streaming from the service in time. So far, Peacock has little original content. So far, Brave New World and a Saved by the Bell reboot are the most interesting of the shows. 
    At best, though, you can only watch these shows in HDTV. On the other hand, you can watch up to three streams at once. 
    $0 at Peacock TV

    ZDNet Recommends More

  • in

    Consumption of public cloud is way ahead of the ability to secure it

    As companies need to build applications to cater for distributed workforces, the use of public cloud is a no-brainer, but as the parade of companies failing to secure S3 buckets shows, cloud customers are failing to secure it properly.
    “What we’ve seen across the board is most customers consumption of public cloud is way ahead of their ability to secure it,” Barracuda senior vice president of data protection, network and application security Tim Jefferson told ZDNet.
    “They haven’t figured out how to use the native services securely and how to instrument the controls because in many of those cases they’re very developer focus, so you’d have to essentially be a software developer to really understand how the application teams are using the native services, and then get your head around the best way [of] architecting controls.”
    For Jefferson, he believes the solution is sitting right there on the cloud platforms themselves.
    “The magic of public cloud is all the instrumentation and monitoring is done, it’s sitting there for free, which is historically the most expensive and hard part to do on premise,” he said.
    “The trick now is just knowing how to call those APIs and suck in that telemetry and make it more actionable which companies like us have … we can identify within seconds, every resource that’s deployed, who deployed it, what its configuration state is, and how does that compare against best practice and then you can automate remediation.”
    See also: Cybersecurity starts with the network fundamentals

    Siran Eren, founder and CEO of zero trust access provider Fyde until November when the company was purchased by Barracuda, added it is possible to keep an eye on multiple clouds through a single interface.
    “If you have Azure deployments, if you have a hybrid environment with AWS and GCP in the mix, you might have SaaS solutions like Office 365, Salesforce, you now have a control plane for security controls that basically covers all of them from a single poison policy point of view,” the now-vice president of zero trust access said.
    “From this platform, you get a single control plane that spans over all your applications and you can define very broad yet granular policies from a single point. That’s what I think we’re in the business for, not point products any more, something that spans across cloud service providers and SaaS solutions.”
    As the shift to working from home at the start of the year began, the old reliance on the VPN showed itself to be a potential bottleneck to employees being able to do what they are paid for.
    “I think the new mechanism that we’ve been sitting on — everyone’s been doing for 20 years around VPN as a way of segmentation — and then the zero trust access model is relatively new, I think that mechanism is really intriguing because [it] is so extensible to so many different problems in use cases that VPN’s didn’t solve, and then other use cases that people didn’t even consider because there was no mechanism to do it,” Jefferson said.
    Going a step further, Eren thinks VPN usage between client and sites is on life support, but VPNs themselves are not going away.
    “I would say to client-to-site VPN is gone — that’s going to be replaced with zero trust — but site-to-site VPN is actually going to remain and zero trust is going to be on top of it,” he said. “They’re complementary.”
    Another effect from needing to handle a dispersed workforce has been the collapse of what was formerly a fairly-well defined corporate network perimeter.
    Must read: Living with COVID-19 creates a privacy dilemma for us all
    According to Jefferson, the new best practice is to push security controls as far out to the edge as possible, which undermines the role of traditional appliances like firewalls to be able to enforce security, and people are having to work out the best place for their controls in the new working environment.
    “I used to be pretty comfortable. This guy, he had 10,000 lines of code written on my Palo Alto or Cisco and every time we did a firewall refresh every 10 years, we had to worry about the 47,000 ACLs [access control list] on the firewall, and now that gets highly distributed,” he said.
    “We even saw that in web application firewalls where instead of having a single web application firewall across many applications, now you tie [a] single web application firewall rule set per app, which makes it loosely coupled and then you can scale independent with the individual application, you can tune the rules in.
    “I think that’s been a big shift … getting away from the tightly coupled centralised policy enforcement to highly distributed push out to the edge loosely coupled architecture.”
    Related Coverage More