It’s reasonably easy to set up a l2tp VPN on AWS, using cloudformation. Running an EC2 instance for a full month for this costs roughly $5 USD. I don’t really get why someone with a bit of tech skills (=using github) would use a third party VPN service from an unverified provider. Sure enough, if Five Eyes want to get your logs from AWS they will, but for avoiding airport or hotel WiFi’s snooping a simple l2tp VPN over AWS serves quite fine, and it works with mobile phones and laptops without requiring any additional software.
Do you suppose that Amazon, which actively sells cloud services to the US intelligence community, is less able or willing to spy on your setup than a VPN provider would be? I have some bad news for you.
AWS would lose lots of business if their complicity became public. Foreign customers have lost confident in the security/data compliance of public cloud in the wake of the NSA revelations.
It'd be bad for the NSA, too. I assume they are spying but only rarely act on the data they're slurping. If Amazon loses customers, and the NSA has eyes inside, the NSA loses their eyes.
