HMA (VPN) explained

HMA
Type:Subsidiary
Industry:Computer security software
Products:VPN software
Founded:2005
Founder:Jack Cator
Hq Location:United Kingdom
Area Served:Global
Parent:Avast (Gen Digital)

HMA (formerly HideMyAss!) is a VPN service founded in 2005 in the United Kingdom. It has been a subsidiary of the Czech cybersecurity company Avast since 2016.

History

HMA was created in 2005 in Norfolk, England by Jack Cator.[1] At the time, Cator was sixteen years-old. He created HMA in order to circumvent restrictions his school had on accessing games or music from their network.[2] According to Cator, the first HMA service was created in just a few hours using open-source code.[2] The first product was a free proxy website where users typed in a URL and it delivered the website in the user's web browser.

Cator promoted the tool in online forums[2] and it was featured on the front page of digg. After attracting more than one thousand users, Cator incorporated ads. HMA did not take any venture capital funding.[2] It generated about $1,000 - $2,000 per month while the founder went to college to pursue a degree in computer science. In 2009, Cator dropped out of college to focus on HMA and added a paid VPN service.[2] [1] Most early HMA employees were freelancers found on oDesk. In 2012, one of the freelancers set up a competing business.[2] HMA responded by hiring its contractors as full-time employees and establishing physical offices in London.[2]

In 2012, the United Kingdom's government sent HMA a court order demanding it provide information about Cody Andrew Kretsinger's use of HMA's service to hack Sony as a member of the LulzSec hacking group.[3] [4] HMA provided the information to authorities.[5] HMA said it was a violation of the company's terms of use to use its software for illegal activities.[6]

In 2013, HMA added software to anonymize internet traffic from mobile devices.[7] In 2014, the company introduced HideMyPhone! service, which allowed mobile phone users to make their calls appear to come from a different location.[8]

By 2014, the service had 10 million users and 215,000 paying subscribers of its VPN service.[8] It made £11 million in revenue that year.[9] HMA had 100 staff and established international offices in Belgrade and Kyiv.[8] [2]

By 2015, HMA became one of the largest VPN providers.[10] [2] In May 2015, it was acquired by AVG Technologies for $40 million with a $20 million earn-out upon achievement of milestones,[11] and became part of Avast after its 2016 acquisition of AVG Technologies.[12]

In 2017, a security vulnerability was discovered that allowed hackers with access to a user's laptop to obtain elevated privileges on the device. HMA corrected the vulnerability days later.[13]

In 2019, it was reported that HMA received a directive from Russian authorities to join a state sponsored registry of banned websites, which would prevent Russian HMA users from circumventing Russian state censorship. HMA was reportedly given one month to comply, or face blocking by Russian authorities.[14]

In 2020, HMA introduced a no-log policy for their VPN service. Under the policy HMA will not log a user’s original IP address, DNS queries, online activity, amount of data transferred or VPN connection timestamps.[15] Following HMA’s introduction of a no-log policy, HMA’s VPN was awarded a low risk user privacy impact rating for its no-logging policy, after it was independently audited by third-party cybersecurity firm VerSprite.[16]

Software

HMA provides digital software and services intended to help users remain anonymous online and encrypt their online traffic. Its software is used to access websites that may be blocked in the user's country, to anonymize information that could otherwise be used by hackers, and to do something unscrupulous without being identified.[2] HMA's privacy policy and terms of use prohibit using it for illegal activity.[17]

HMA hides the user's IP address and other identifying information by routing the user's internet traffic through a remote server.[18] However, experts note that the company does log some connection data including the originating IP address, the duration of each VPN session, and the amount of bandwidth used.[10] [19]

As of May 2018, the company had 830 servers in 280 locations across the globe and provided over 3000 IP addresses.[20] The software also includes a kill switch across all platforms.[21] [22]

Privacy

According to Invisibler, HMA VPN appears to have cooperated with US authorities in handing over logs in a hacking case. This led to the arrest of a hacker in what is known as the "LulzSec fiasco".

Reception

In 2015, a review in Tom's Hardware said HMA was easy to use, had good customer service, and a large number of server locations to choose from, but criticized it for slowing internet speeds.[23] In contrast, Digital Trends said HMA had strong speeds and good server selection, but wasn't fool-proof at ensuring anonymity, because it stored user activity logs[10] (in 2020, HMA announced that it would no longer log user activity[24]). In 2017, PC World noted that it was difficult to measure the effect a VPN service has on internet speed, because of variables like location, internet service speeds, and hardware.

A 2016 review in PCMag gave the HMA Android app 3 out of 5 stars.[25] It praised HMA for its server selection and user interface, but criticized it for price, speed, and the lack of advanced features.[25] In 2018, PCMag gave similar feedback on the HMA VPN service.[26] PC World’s 2017 review also praised HMA's simple user interface, but criticized the lack of advanced features, saying the software was ideal for casual users that do not need advanced configuration options.[27]

Notes and References

  1. Book: https://books.google.com/books?id=8JlMDwAAQBAJ&pg=PA65. The entrepreneurial character. Entrepreneurship and Small Business. 65. 4th. 978-1-137-43035-9. Palgrave Macmillan Limited. 2016. Google Books.
  2. Web site: Shadbolt. Peter. How misbehaving at school made one man a multimillionaire. BBC News. May 18, 2015. October 21, 2018.
  3. Web site: HideMyAss defends role in LulzSec hack arrest. The Register. John. Leyden. October 21, 2018.
  4. Web site: Ole. Reißmann. Anonymisierdienst hilft bei der Nutzeridentifizierung. Spiegel Online. Anonymizing service helps with user identification. September 26, 2011. de. May 20, 2018.
  5. Book: Stryker, Cole. Hacking the Future: Privacy, Identity and Anonymity on the Web. Gerald Duckworth & Company. 2012. 978-0-7156-4454-6. May 19, 2018. 80. Google Books.
  6. Web site: Blessenohl. Holger. VPN-Dienst bestätigt Weitergabe von Verbindungsdaten ans FBI. Hide My Ass - VPN service confirms forwarding of connection data to the FBI. GIGA. September 26, 2011. de. May 19, 2018. October 21, 2018. https://web.archive.org/web/20181021151239/https://www.giga.de/personen/lulzsec/news/hide-my-ass-vpn-dienst-bestaetigt-weitergabe-von-verbindungsdaten-ans-fbi/. dead.
  7. Web site: Woods. Ben. HideMyAss Now Has Its Own Dedicated Free to Download iOS App. TNW.com. October 10, 2013. May 19, 2018.
  8. News: Williams. Hattie. How I Made It: Jack Cator, founder of Hide My Ass!. The Sunday Times. November 16, 2014. May 20, 2018.
  9. Web site: Cadwalladr. Carole. HideMyAss! Your secret's safe with Jack. The Guardian. March 15, 2015. May 20, 2018.
  10. Web site: Stobing. Chris. Three VPN competitors go head-to-head. Digital Trends. January 23, 2015. May 20, 2018.
  11. Web site: Osborne. Charlie. AVG acquires desktop, mobile VPN firm Privax. ZDNet. May 6, 2015. June 21, 2018.
  12. Web site: Avast Software buys AVG Technologies for $1.3bn. The Inquirer. Dave. Neal. July 7, 2016. https://web.archive.org/web/20160708134614/http://www.theinquirer.net/inquirer/news/2464098/avast-software-buys-avg-technologies-for-usd13bn. dead. July 8, 2016. October 21, 2018.
  13. Web site: Osborne. Charlie. HideMyAss! privilege escalation flaws exposed. ZDNet. May 2, 2017. May 20, 2018.
  14. Web site: Russia Threatens to Block Popular VPN Services to Prevent Website Access. Reuters. 2019-03-29. The Moscow Times. en. 2019-04-02.
  15. Web site: 2020-05-12 . HMA VPN is now a No-Log VPN . 2023-02-18 . 24zero . en-US.
  16. Web site: 2020-08-05 . HMA no log policy gets stamp of approval from auditor . 2023-02-18 . TechRadar . en.
  17. Web site: Martin. Adam. LulzSec Hacker Exposed by the Service He Thought Would Hide Him. The Atlantic. September 23, 2011. June 21, 2018.
  18. Book: Network and Data Security for Non-Engineers. 106. Frank M.. Groom. Kevin. Groom. Stephan S.. Jones. 2016. CRC Press. 9781315350219. Google Books.
  19. Web site: Top 15 VPN Companies Log Policies – Are They Safe?. Kelly. Gilderson. October 18, 2018. privacyaustralia.net. October 21, 2018.
  20. Web site: Best mobile VPN services for 2018. David. Gewirtz. May 15, 2018. CNET. October 21, 2018.
  21. Web site: Williams. Michael. HideMyAss! VPN review. TechRadar.com. 1 February 2020.
  22. Web site: How to Fix Netflix Error Code M7111-1331-5059. 26 September 2019. vpngorilla.com. 1 February 2020.
  23. Web site: Winkle. William Van. Hide My Ass! VPN Service Review. Tom's Hardware. May 25, 2015. May 20, 2018.
  24. Web site: From Hide My Ass to HMA: New brand, new VPN [Sponsored].
  25. Web site: Hide My Ass VPN (for Android). PCMag.com. August 31, 2016. Max. Eddy. May 20, 2018.
  26. Web site: Hide My Ass VPN. PCMag.com. May 1, 2018. May 20, 2018.
  27. Web site: Paul. Ian. HMA Pro VPN review: An easy-to-use tool for securing your online privacy. PC World. February 3, 2017. May 20, 2018. December 8, 2018. https://web.archive.org/web/20181208122608/https://www.pcworld.com/article/3164573/home-networking/hma-pro-vpn-review-an-easy-to-use-tool-for-securing-your-online-privacy.html. dead.