In 2025, it’s very difficult not to see gambling advertised everywhere. It’s on billboards and sports broadcasts. It’s on podcasts and printed on the turnbuckle of AEW’s pay-per-view shows. And it’s on app stores, where you can find the FanDuel and DraftKings sportsbooks, alongside glitzy digital slot machines. These apps all have the highest age ratings possible on Apple’s App Store and Google Play. But earlier this year, a different kind of app nearly disappeared from the Play Store entirely.Luck Be A Landlord is a roguelite deckbuilder from solo developer Dan DiIorio. DiIorio got word from Google in January 2025 that Luck Be A Landlord was about to be pulled, globally, because DiIorio had not disclosed the game’s “gambling themes” in its rating.In Luck Be a Landlord, the player takes spins on a pixel art slot machine to earn coins to pay their ever-increasing rent — a nightmare gamification of our day-to-day grind to remain housed. On app stores, it’s a one-time purchase of $4.99, and it’s $9.99 on Steam. On the Play Store page, developer Dan DiIorio notes, “This game does not contain any real-world currency gambling or microtransactions.”And it doesn’t. But for Google, that didn’t matter. First, the game was removed from the storefront in a slew of countries that have strict gambling laws. Then, at the beginning of 2025, Google told Dilorio that Luck Be A Landlord would be pulled globally because of its rating discrepancy, as it “does not take into account references to gambling (including real or simulated gambling)”.DiIorio had gone through this song and dance before — previously, when the game was blocked, he would send back a message saying “hey, the game doesn’t have gambling,” and then Google would send back a screenshot of the game and assert that, in fact, it had.DiIorio didn’t agree, but this time they decided that the risk of Landlord getting taken down permanently was too great. They’re a solo developer, and Luck Be a Landlord had just had its highest 30-day revenue since release. So, they filled out the form confirming that Luck Be A Landlord has “gambling themes,” and are currently hoping that this will be the end of it.This is a situation that sucks for an indie dev to be in, and over email DiIorio told Polygon it was “very frustrating.”“I think it can negatively affect indie developers if they fall outside the norm, which indies often do,” they wrote. “It also makes me afraid to explore mechanics like this further. It stifles creativity, and that’s really upsetting.”In late 2024, the hit game Balatro was in a similar position. It had won numerous awards, and made $1,000,000 in its first week on mobile platforms. And then overnight, the PEGI ratings board declared that the game deserved an adult rating.The ESRB had already rated it E10+ in the US, noting it has gambling themes. And the game was already out in Europe, making its overnight ratings change a surprise. Publisher PlayStack said the rating was given because Balatro has “prominent gambling imagery and material that instructs about gambling.”Balatro is basically Luck Be A Landlord’s little cousin. Developer LocalThunk was inspired by watching streams of Luck Be A Landlord, and seeing the way DiIorio had implemented deck-building into his slot machine. And like Luck Be A Landlord, Balatro is a one-time purchase, with no microtransactions.But the PEGI board noted that because the game uses poker hands, the skills the player learns in Balatro could translate to real-world poker.In its write-up, GameSpot noted that the same thing happened to a game called Sunshine Shuffle. It was temporarily banned from the Nintendo eShop, and also from the entire country of South Korea. Unlike Balatro, Sunshine Shuffle actually is a poker game, except you’re playing Texas Hold ‘Em — again for no real money — with cute animals (who are bank robbers).It’s common sense that children shouldn’t be able to access apps that allow them to gamble. But none of these games contain actual gambling — or do they?Where do we draw the line? Is it gambling to play any game that is also played in casinos, like poker or blackjack? Is it gambling to play a game that evokes the aesthetics of a casino, like cards, chips, dice, or slot machines? Is it gambling to wager or earn fictional money?Gaming has always been a lightning rod for controversy. Sex, violence, misogyny, addiction — you name it, video games have been accused of perpetrating or encouraging it. But gambling is gaming’s original sin. And it’s the one we still can’t get a grip on.The original link between gambling and gamingGetty ImagesThe association between video games and gambling all goes back to pinball. Back in the ’30s and ’40s, politicians targeted pinball machines for promoting gambling. Early pinball machines were less skill-based (they didn’t have flippers), and some gave cash payouts, so the comparison wasn’t unfair. Famously, mob-hating New York City mayor Fiorello LaGuardia banned pinball in the city, and appeared in a newsreel dumping pinball and slot machines into the Long Island Sound. Pinball machines spent some time relegated to the back rooms of sex shops and dive bars. But after some lobbying, the laws relaxed.By the 1970s, pinball manufacturers were also making video games, and the machines were side-by-side in arcades. Arcade machines, like pinball, took small coin payments, repeatedly, for short rounds of play. The disreputable funk of pinball basically rubbed off onto video games.Ever since video games rocked onto the scene, concerned and sometimes uneducated parties have been asking if they’re dangerous. And in general, studies have shown that they’re not. The same can’t be said about gambling — the practice of putting real money down to bet on an outcome.It’s a golden age for gambling2025 in the USA is a great time for gambling, which has been really profitable for gambling companies — to the tune of $66.5 billion dollars of revenue in 2023.To put this number in perspective, the American Gaming Association, which is the casino industry’s trade group and has nothing to do with video games, reports that 2022’s gambling revenue was $60.5 billion. It went up $6 billion in a year.And this increase isn’t just because of sportsbooks, although sports betting is a huge part of it. Online casinos and brick-and-mortar casinos are both earning more, and as a lot of people have pointed out, gambling is being normalized to a pretty disturbing degree.Much like with alcohol, for a small percentage of people, gambling can tip from occasional leisure activity into addiction. The people who are most at risk are, by and large, already vulnerable: researchers at the Yale School of Medicine found that 96% of problem gamblers are also wrestling with other disorders, such as “substance use, impulse-control disorders, mood disorders, and anxiety disorders.”Even if you’re not in that group, there are still good reasons to be wary of gambling. People tend to underestimate their own vulnerability to things they know are dangerous for others. Someone else might bet beyond their means. But I would simply know when to stop.Maybe you do! But being blithely confident about it can make it hard to notice if you do develop a problem. Or if you already have one.Addiction changes the way your brain works. When you’re addicted to something, your participation in it becomes compulsive, at the expense of other interests and responsibilities. Someone might turn to their addiction to self-soothe when depressed or anxious. And speaking of those feelings, people who are depressed and anxious are already more vulnerable to addiction. Given the entire state of the world right now, this predisposition shines an ugly light on the numbers touted by the AGA. Is it good that the industry is reporting $6 billion in additional earnings, when the economy feels so frail, when the stock market is ping ponging through highs and lows daily, when daily expenses are rising? It doesn’t feel good. In 2024, the YouTuber Drew Gooden turned his critical eye to online gambling. One of the main points he makes in his excellent video is that gambling is more accessible than ever. It’s on all our phones, and betting companies are using decades of well-honed app design and behavioral studies to manipulate users to spend and spend.Meanwhile, advertising on podcasts, billboards, TV, radio, and websites – it’s literally everywhere — tells you that this is fun, and you don’t even need to know what you’re doing, and you’re probably one bet away from winning back those losses.Where does Luck Be a Landlord come into this?So, are there gambling themes in Luck Be A Landlord? The game’s slot machine is represented in simple pixel art. You pay one coin to use it, and among the more traditional slot machine symbols are silly ones like a snail that only pays out after 4 spins.When I started playing it, my primary emotion wasn’t necessarily elation at winning coins — it was stress and disbelief when, in the third round of the game, the landlord increased my rent by 100%. What the hell.I don’t doubt that getting better at it would produce dopamine thrills akin to gambling — or playing any video game. But it’s supposed to be difficult, because that’s the joke. If you beat the game you unlock more difficulty modes where, as you keep paying rent, your landlord gets furious, and starts throwing made-up rules at you: previously rare symbols will give you less of a payout, and the very mechanics of the slot machine change.It’s a manifestation of the golden rule of casinos, and all of capitalism writ large: the odds are stacked against you. The house always wins. There is luck involved, to be sure, but because Luck Be A Landlord is a deck-builder, knowing the different ways you can design your slot machine to maximize payouts is a skill! You have some influence over it, unlike a real slot machine. The synergies that I’ve seen high-level players create are completely nuts, and obviously based on a deep understanding of the strategies the game allows.IMAGE: TrampolineTales via PolygonBalatro and Luck Be a Landlord both distance themselves from casino gambling again in the way they treat money. In Landlord, the money you earn is gold coins, not any currency we recognize. And the payouts aren’t actually that big. By the end of the core game, the rent money you’re struggling and scraping to earn… is 777 coins. In the post-game endless mode, payouts can get massive. But the thing is, to get this far, you can’t rely on chance. You have to be very good at Luck Be a Landlord.And in Balatro, the numbers that get big are your points. The actual dollar payments in a round of Balatro are small. These aren’t games about earning wads and wads of cash. So, do these count as “gambling themes”?We’ll come back to that question later. First, I want to talk about a closer analog to what we colloquially consider gambling: loot boxes and gacha games.Random rewards: from Overwatch to the rise of gachaRecently, I did something that I haven’t done in a really long time: I thought about Overwatch. I used to play Overwatch with my friends, and I absolutely made a habit of dropping 20 bucks here or there for a bunch of seasonal loot boxes. This was never a problem behavior for me, but in hindsight, it does sting that over a couple of years, I dropped maybe $150 on cosmetics for a game that now I primarily associate with squandered potential.Loot boxes grew out of free-to-play mobile games, where they’re the primary method of monetization. In something like Overwatch, they functioned as a way to earn additional revenue in an ongoing game, once the player had already dropped 40 bucks to buy it.More often than not, loot boxes are a random selection of skins and other cosmetics, but games like Star Wars: Battlefront 2 were famously criticized for launching with loot crates that essentially made it pay-to-win – if you bought enough of them and got lucky.It’s not unprecedented to associate loot boxes with gambling. A 2021 study published in Addictive Behaviors showed that players who self-reported as problem gamblers also tended to spend more on loot boxes, and another study done in the UK found a similar correlation with young adults.While Overwatch certainly wasn’t the first game to feature cosmetic loot boxes or microtransactions, it’s a reference point for me, and it also got attention worldwide. In 2018, Overwatch was investigated by the Belgian Gaming Commission, which found it “in violation of gambling legislation” alongside FIFA 18 and Counter-Strike: Global Offensive. Belgium’s response was to ban the sale of loot boxes without a gambling license. Having a paid random rewards mechanic in a game is a criminal offense there. But not really. A 2023 study showed that 82% of iPhone games sold on the App Store in Belgium still use random paid monetization, as do around 80% of games that are rated 12+. The ban wasn’t effectively enforced, if at all, and the study recommends that a blanket ban wouldn’t actually be a practical solution anyway.Overwatch was rated T for Teen by the ESRB, and 12 by PEGI. When it first came out, its loot boxes were divisive. Since the mechanic came from F2P mobile games, which are often seen as predatory, people balked at seeing it in a big action game from a multi-million dollar publisher.At the time, the rebuttal was, “Well, at least it’s just cosmetics.” Nobody needs to buy loot boxes to be good at Overwatch.A lot has changed since 2016. Now we have a deeper understanding of how these mechanics are designed to manipulate players, even if they don’t affect gameplay. But also, they’ve been normalized. While there will always be people expressing disappointment when a AAA game has a paid random loot mechanic, it is no longer shocking.And if anything, these mechanics have only become more prevalent, thanks to the growth of gacha games. Gacha is short for “gachapon,” the Japanese capsule machines where you pay to receive one of a selection of random toys. Getty ImagesIn gacha games, players pay — not necessarily real money, but we’ll get to that — for a chance to get something. Maybe it’s a character, or a special weapon, or some gear — it depends on the game. Whatever it is, within that context, it’s desirable — and unlike the cosmetics of Overwatch, gacha pulls often do impact the gameplay.For example, in Infinity Nikki, you can pull for clothing items in these limited-time events. You have a chance to get pieces of a five-star outfit. But you also might pull one of a set of four-star items, or a permanent three-star piece. Of course, if you want all ten pieces of the five-star outfit, you have to do multiple pulls, each costing a handful of limited resources that you can earn in-game or purchase with money.Gacha was a fixture of mobile gaming for a long time, but in recent years, we’ve seen it go AAA, and global. MiHoYo’s Genshin Impact did a lot of that work when it came out worldwide on consoles and PC alongside its mobile release. Genshin and its successors are massive AAA games of a scale that, for your Nintendos and Ubisofts, would necessitate selling a bajillion copies to be a success. And they’re free.Genshin is an action game, whose playstyle changes depending on what character you’re playing — characters you get from gacha pulls, of course. In Zenless Zone Zero, the characters you can pull have different combo patterns, do different kinds of damage, and just feel different to play. And whereas in an early mobile gacha game like Love Nikki Dress UP! Queen the world was rudimentary, its modern descendant Infinity Nikki is, like Genshin, Breath of the Wild-esque. It is a massive open world, with collectibles and physics puzzles, platforming challenges, and a surprisingly involved storyline. Genshin Impact was the subject of an interesting study where researchers asked young adults in Hong Kong to self-report on their gacha spending habits. They found that, like with gambling, players who are not feeling good tend to spend more. “Young adult gacha gamers experiencing greater stress and anxiety tend to spend more on gacha purchases, have more motives for gacha purchases, and participate in more gambling activities,” they wrote. “This group is at a particularly higher risk of becoming problem gamblers.”One thing that is important to note is that Genshin Impact came out in 2020. The study was self-reported, and it was done during the early stages of the COVID-19 pandemic. It was a time when people were experiencing a lot of stress, and also fewer options to relieve that stress. We were all stuck inside gaming.But the fact that stress can make people more likely to spend money on gacha shows that while the gacha model isn’t necessarily harmful to everyone, it is exploitative to everyone. Since I started writing this story, another self-reported study came out in Japan, where 18.8% of people in their 20s say they’ve spent money on gacha rather than on things like food or rent.Following Genshin Impact’s release, MiHoYo put out Honkai: Star Rail and Zenless Zone Zero. All are shiny, big-budget games that are free to play, but dangle the lure of making just one purchase in front of the player. Maybe you could drop five bucks on a handful of in-game currency to get one more pull. Or maybe just this month you’ll get the second tier of rewards on the game’s equivalent of a Battle Pass. The game is free, after all — but haven’t you enjoyed at least ten dollars’ worth of gameplay? Image: HoyoverseI spent most of my December throwing myself into Infinity Nikki. I had been so stressed, and the game was so soothing. I logged in daily to fulfill my daily wishes and earn my XP, diamonds, Threads of Purity, and bling. I accumulated massive amounts of resources. I haven’t spent money on the game. I’m trying not to, and so far, it’s been pretty easy. I’ve been super happy with how much stuff I can get for free, and how much I can do! I actually feel really good about that — which is what I said to my boyfriend, and he replied, “Yeah, that’s the point. That’s how they get you.”And he’s right. Currently, Infinity Nikki players are embroiled in a war with developer Infold, after Infold introduced yet another currency type with deep ties to Nikki’s gacha system. Every one of these gacha games has its own tangled system of overlapping currencies. Some can only be used on gacha pulls. Some can only be used to upgrade items. Many of them can be purchased with human money.Image: InFold Games/Papergames via PolygonAll of this adds up. According to Sensor Towers’ data, Genshin Impact earned over 36 million dollars on mobile alone in a single month of 2024. I don’t know what Dan DiIorio’s peak monthly revenue for Luck Be A Landlord was, but I’m pretty sure it wasn’t that.A lot of the spending guardrails we see in games like these are actually the result of regulations in other territories, especially China, where gacha has been a big deal for a lot longer. For example, gacha games have a daily limit on loot boxes, with the number clearly displayed, and a system collectively called “pity,” where getting the banner item is guaranteed after a certain number of pulls. Lastly, developers have to be clear about what the odds are. When I log in to spend the Revelation Crystals I’ve spent weeks hoarding in my F2P Infinity Nikki experience, I know that I have a 1.5% chance of pulling a 5-star piece, and that the odds can go up to 6.06%, and that I am guaranteed to get one within 20 pulls, because of the pity system.So, these odds are awful. But it is not as merciless as sitting down at a Vegas slot machine, an experience best described as “oh… that’s it?”There’s not a huge philosophical difference between buying a pack of loot boxes in Overwatch, a pull in Genshin Impact, or even a booster of Pokémon cards. You put in money, you get back randomized stuff that may or may not be what you want. In the dictionary definition, it’s a gamble. But unlike the slot machine, it’s not like you’re trying to win money by doing it, unless you’re selling those Pokémon cards, which is a topic for another time.But since even a game where you don’t get anything, like Balatro or Luck Be A Landlord, can come under fire for promoting gambling to kids, it would seem appropriate for app stores and ratings boards to take a similarly hardline stance with gacha.Instead, all these games are rated T for Teen by the ESRB, and PEGI 12 in the EU.The ESRB ratings for these games note that they contain in-game purchases, including random items. Honkai: Star Rail’s rating specifically calls out a slot machine mechanic, where players spend tokens to win a prize. But other than calling out Honkai’s slot machine, app stores are not slapping Genshin or Nikki with an 18+ rating. Meanwhile, Balatro had a PEGI rating of 18 until a successful appeal in February 2025, and Luck Be a Landlord is still 17+ on Apple’s App Store.Nobody knows what they’re doingWhen I started researching this piece, I felt very strongly that it was absurd that Luck Be A Landlord and Balatro had age ratings this high.I still believe that the way both devs have been treated by ratings boards is bad. Threatening an indie dev with a significant loss of income by pulling their game is bad, not giving them a way to defend themself or help them understand why it’s happening is even worse. It’s an extension of the general way that too-big-to-fail companies like Google treat all their customers.DiIorio told me that while it felt like a human being had at least looked at Luck Be A Landlord to make the determination that it contained gambling themes, the emails he was getting were automatic, and he doesn’t have a contact at Google to ask why this happened or how he can avoid it in the future — an experience that will be familiar to anyone who has ever needed Google support. But what’s changed for me is that I’m not actually sure anymore that games that don’t have gambling should be completely let off the hook for evoking gambling.Exposing teens to simulated gambling without financial stakes could spark an interest in the real thing later on, according to a study in the International Journal of Environmental Research and Public Health. It’s the same reason you can’t mosey down to the drug store to buy candy cigarettes. Multiple studies were done that showed kids who ate candy cigarettes were more likely to take up smoking (of course, the candy is still available — just without the “cigarette” branding.)So while I still think rating something like Balatro 18+ is nuts, I also think that describing it appropriately might be reasonable. As a game, it’s completely divorced from literally any kind of play you would find in a casino — but I can see the concern that the thrill of flashy numbers and the shiny cards might encourage young players to try their hand at poker in a real casino, where a real house can take their money.Maybe what’s more important than doling out high age ratings is helping people think about how media can affect us. In the same way that, when I was 12 and obsessed with The Matrix, my parents gently made sure that I knew that none of the violence was real and you can’t actually cartwheel through a hail of bullets in real life. Thanks, mom and dad!But that’s an answer that’s a lot more abstract and difficult to implement than a big red 18+ banner. When it comes to gacha, I think we’re even less equipped to talk about these game mechanics, and I’m certain they’re not being age-rated appropriately. On the one hand, like I said earlier, gacha exploits the player’s desire for stuff that they are heavily manipulated to buy with real money. On the other hand, I think it’s worth acknowledging that there is a difference between gacha and casino gambling.Problem gamblers aren’t satisfied by winning — the thing they’re addicted to is playing, and the risk that comes with it. In gacha games, players do report satisfaction when they achieve the prize they set out to get. And yes, in the game’s next season, the developer will be dangling a shiny new prize in front of them with the goal of starting the cycle over. But I think it’s fair to make the distinction, while still being highly critical of the model.And right now, there is close to no incentive for app stores to crack down on gacha in any way. They get a cut of in-app purchases. Back in 2023, miHoYo tried a couple of times to set up payment systems that circumvented Apple’s 30% cut of in-app spending. Both times, it was thwarted by Apple, whose App Store generated $1.1 trillion in developer billings and sales in 2022.According to Apple itself, 90% of that money did not include any commission to Apple. Fortunately for Apple, ten percent of a trillion dollars is still one hundred billion dollars, which I would also like to have in my bank account. Apple has zero reason to curb spending on games that have been earning millions of dollars every month for years.And despite the popularity of Luck Be A Landlord and Balatro’s massive App Store success, these games will never be as lucrative. They’re one-time purchases, and they don’t have microtransactions. To add insult to injury, like most popular games, Luck Be A Landlord has a lot of clones. And from what I can tell, it doesn’t look like any of them have been made to indicate that their games contain the dreaded “gambling themes” that Google was so worried about in Landlord.In particular, a game called SpinCraft: Roguelike from Sneaky Panda Games raised $6 million in seed funding for “inventing the Luck-Puzzler genre,” which it introduced in 2022, while Luck Be A Landlord went into early access in 2021.It’s free-to-play, has ads and in-app purchases, looks like Fisher Price made a slot machine, and it’s rated E for everyone, with no mention of gambling imagery in its rating. I reached out to the developers to ask if they had also been contacted by the Play Store to disclose that their game has gambling themes, but I haven’t heard back.Borrowing mechanics in games is as old as time, and it’s something I in no way want to imply shouldn’t happen because copyright is the killer of invention — but I think we can all agree that the system is broken.There is no consistency in how games with random chance are treated. We still do not know how to talk about gambling, or gambling themes, and at the end of the day, the results of this are the same: the house always wins.See More:

ExpressVPN is good at its job. It's easy to be skeptical of any service with a knack for self-promotion, but don't let ExpressVPN's hype distract you from the fact that it keeps its front-page promise of "just working." Outside of solid security, the two best things ExpressVPN offers are fast speeds and a simple interface. Our tests showed only a 7% average drop in download speed and a 2% loss of upload speed, worldwide. And while the lack of extra features may frustrate experienced users, it makes for a true set-and-forget VPN on any platform. This isn't to say ExpressVPN is without flaws — it's nearly bereft of customization options and it's notably more expensive than its competition — but it beats most VPNs in a head-to-head matchup. For this review, we followed our rigorous 10-step VPN testing process, exploring ExpressVPN's security, privacy, speed, interfaces and more. Whether you read straight through or skip to the sections that are most important for you, you should come away with all the information you need to decide whether to subscribe. Editors' note: We're in the process of rebooting all of our VPN reviews from scratch. Once we do a fresh pass on the top services, we'll be updating each review with a rating and additional comparative information. Table of contents Findings at a glance Installing, configuring and using ExpressVPN ExpressVPN speed test: Very fast averages ExpressVPN security test: Checking for leaks How much does ExpressVPN cost? ExpressVPN side apps and bundles Close-reading ExpressVPN's privacy policy Can ExpressVPN change your virtual location? Investigating ExpressVPN's server network Extra features of ExpressVPN ExpressVPN customer support options ExpressVPN background check: From founding to Kape Technologies Final verdict Findings at a glance Category Notes Installation and UI All interfaces are clean and minimalist, with no glitches and not enough depth to get lost in Windows and Mac clients are similar in both setup and general user experience Android and iOS are likewise almost identical, but Android has a nice-looking dark mode Speed Retains a worldwide average of 93% of starting download speeds Upload speeds average 98% of starting speeds Latency rises with distance, but global average stayed under 300 ms in tests Security OpenVPN, IKEv2 and Lightway VPN protocols all use secure ciphers Packet-sniffing test showed working encryption We detected no IP leaks Blocks IPv6 and WebRTC by default to prevent leaks Pricing Base price: $12.95 per month or $99.95 per year Lowest prepaid rate: $4.99 per month Can save money by paying for 28 months in advance, but only once per account 30-day money-back guarantee Bundles ExpressVPN Keys password manager and ID alerts included on all plans Dedicated IP addresses come at an extra price ID theft insurance, data removal and credit scanning available to new one-year and two-year subscribers for free 1GB eSIM deal included through holiday.com Privacy policy No storage of connection logs or device logs permitted The only risky exceptions are personal account data (which doesn't leave the ExpressVPN website) and marketing data (which the policy says should be anonymized) An independent audit found that ExpressVPN's RAM-only server infrastructure makes it impossible to keep logs Virtual location change Successfully unblocked five international Netflix libraries, succeeding on 14 out of 15 attempts Server network 164 server locations in 105 countries 38% of servers are virtual, though most virtual locations are accessed through physical servers within 1,000 miles A large number of locations in South America, Africa and central Asia Features Simple but effective kill switch Can block ads, trackers, adult sites and/or malware sites but blocklists can't be customized Split tunneling is convenient but unavailable on iOS and modern Macs Aircove is the best VPN router, albeit expensive Customer support Setup and troubleshooting guides are organized and useful, with lots of screenshots and videos Live chat starts with a bot but you can get to a person within a couple minutes Email tickets are only accessible from the mobile apps or after live chat has failed Background check Founded in 2009; based in the British Virgin Islands Has never been caught selling or mishandling user data Turkish police seized servers in 2017 but couldn't find any logs of user activity Owned by Kape Technologies, which also owns CyberGhost and Private Internet Access A previous CIO formerly worked on surveillance in the United Arab Emirates; no evidence of shady behavior during his time at ExpressVPN Windows Version 12 leaked some DNS requests when Split Tunneling was active Installing, configuring and using ExpressVPN This section focuses on how it feels to use ExpressVPN on each of the major platforms where it's available. The first step for any setup process is to make an account on expressvpn.com and buy a subscription. Windows Once subscribed, download the Windows VPN from either expressvpn.com or the Microsoft Store, then open the .exe file. Click "Yes" to let it make changes, wait for the install, then let your computer reboot. Including the reboot, the whole process takes 5-10 minutes, most of it idle. To finish, you'll need your activation code, which you can find by going to expressvpn.com and clicking "Setup" in the top-right corner. You can install ExpressVPN's Windows app from the Microsoft store, but we found the website more convenient. Sam Chapman for Engadget Extreme simplicity is the watchword for all ExpressVPN's designs. The Windows client's launch panel consists of three buttons and less than ten words. You can change your location or let the app pick a location for you — the "Smart Location" is the server with the best combination of being nearby and unburdened. Everything else is crammed into the hamburger menu at the top left. Here, in seven tabs, you'll find the Network Lock kill switch, the four types of content blockers, the split tunneling menu and the option to change your VPN protocol. You can also add shortcuts to various websites, useful if you regularly use your VPN for the same online destinations. To sum up, there's almost nothing here to get in the way: no delays, no snags, no nested menus to get lost in. It may be the world's most ignorable VPN client. That's not a bad thing at all. Mac ExpressVPN's app for macOS is almost identical in design to its Windows app. The process for downloading and setting it up is nearly the same too. As on Windows, it can be downloaded from the App Store or sideloaded directly from the expressvpn.com download center. Only a few features are missing and a couple others have been added. Split tunneling is gone (unless you're still on a macOS lower than 11), and you won't see the Lightway Turbo setting. ExpressVPN recommends some servers, but it's easy to search the whole list. Sam Chapman for Engadget Mac users do gain access to the IKEv2 protocol, along with the option to turn off automatic IPv6 blocking — Windows users have to leave it blocked at all times. Almost every website is still accessible via IPv4, but it's useful if you do need to access a specific IPv6 address while the VPN is active. Android Android users can download ExpressVPN through the Google Play Store. Open the app, sign in and you're ready to go. The Android app has a very nice dark-colored design, only slightly marred by an unnecessary information box about how long you've used the VPN this week. ExpressVPN's Android app puts a little more information on the screen than it needs to, but still runs well. Sam Chapman for Engadget There's a large button for connecting. Clicking on the server name takes you to a list of locations. On this list, you can either search or scroll and can choose individual locations within a country that has more than one. We connected to as many far-flung server locations as we could, but not a single one took longer than a few seconds. The options menu is organized sensibly, with no option located more than two clicks deep. You will see a couple of options here that aren't available on desktop, the best of which is the ability to automatically connect to your last-used ExpressVPN server whenever your phone connects to a non-trusted wifi network. There are also a few general security tools: an IP address checker, DNS and WebRTC leak testers and a password generator. These are also available on the website, but here, they're built into the app. With the exception of the latter, we'd recommend using third-party testing tools instead — even a VPN with integrity has an incentive to make its own app look like it's working. iPhone and iPad You can only install ExpressVPN's iOS app through the app store. During setup, you may need to enter your password to allow your phone to use VPN configurations. Otherwise, there are no major differences from the Android process. ExpressVPN looks good on iPhone and iPad. Sam Chapman for Engadget The interface is not quite as pleasing as the dark-mode Android app, but it makes up for that by cutting out some of the clutter. The tabs and features are similar, though split tunneling and shortcuts are absent. Also, both mobile apps make customer support a lot more accessible than their desktop counterparts — plus, mobile is the only way to send email support tickets. Browser extension ExpressVPN also includes browser extensions for Firefox and Chrome. These let you connect, disconnect and change server locations without leaving your browser window. It's nice, but not essential unless you have a very specific web browser flow you like. ExpressVPN speed test: Very fast averages Connecting to a VPN almost always decreases your speed, but the best VPNs mitigate the drop as much as possible. We used Ookla's speed testing app to see how much of your internet speed ExpressVPN preserves. For this test, we emphasized the locations ExpressVPN uses for most of its virtual servers, including the Netherlands, Brazil, Germany and Singapore. Some terms before we start: Latency, measured in milliseconds (ms), is the time it takes one data packet to travel between your device and a web server through the VPN. Latency increases with distance. It's most important for real-time tasks like video chatting and online gaming. Download speed, measured in megabits per second (Mbps), is the amount of information that can download onto your device at one time — such as when loading a web page or streaming a video. Upload speed, also measured in Mbps, is the amount of information your device can send to the web at once. It's most important for torrenting, since the amount of data you can seed determines how fast you can download in exchange. The table below shows our results. We conducted this on Windows, using the automatic protocol setting with the Lightway Turbo feature active — a recent ExpressVPN addition that keeps speed more consistent by processing connections in parallel. Server location Latency (ms) Increase factor Download speed (Mbps) Percentage dropoff Upload speed (Mbps) Percentage dropoff Portland, Oregon, USA (unprotected) 18 -- 58.77 -- 5.70 -- Seattle, Washington, USA (best server) 26 1.4x 54.86 6.7% 5.52 3.2% New York, NY, USA 156 8.7x 57.25 2.6% 5.57 2.3% Amsterdam, Netherlands 306 17x 53.83 8.4% 5.58 2.1% São Paulo, Brazil 371 20.6x 53.82 8.4% 5.65 0.9% Frankfurt, Germany 404 22.4x 55.71 5.2% 5.67 0.5% Singapore, Singapore 381 21.2x 52.76 10.2% 5.64 1.0% Average 274 15.2x 54.71 6.9% 5.61 1.6% These are extremely good results. ExpressVPN is a winner on both download and upload speed. No matter where we went in the world, we never lost more than about 7% of our download speeds, and upload lost an astoundingly low average of 2%. This suggests that ExpressVPN deftly distributes its user load between servers to eliminate bottlenecks. This Ookla speedtest shows you can still get fast internet while connected to ExpressVPN -- our unprotected speeds are around 58 Mbps. Sam Chapman for Engadget The latency numbers look worse, but the rise in the table is less sharp than we projected. Ping length depends far more on distance than download speed does, so we expect it to shoot up on servers more than 1,000 miles from our location. Keeping the average below 300 ms, as ExpressVPN does here, is a strong showing. ExpressVPN security test: Checking for leaks A VPN's core mission is to hide your IP address and make you untraceable online. Our task in this section is to figure out if ExpressVPN can carry out this mission every time you connect. While we can't be 100% certain, the tests we'll run through below have led us to believe that ExpressVPN is currently leak-proof. Available VPN protocols A VPN protocol is like a common language that a VPN server can use to mediate between your devices and the web servers you visit. If a VPN uses outdated or insecure protocols, or relies on unique protocols with no visible specs or source code, that's a bad sign. Not all protocols are available on all apps, but Mac has the full range. Sam Chapman for Engadget ExpressVPN gives you a selection of three protocols: IKEv2, OpenVPN and Lightway. The first two are solid choices that support the latest encryption algorithms. OpenVPN has been fully open-source for years and is the best choice if privacy is your goal. While IKEv2 started life as a closed project by Microsoft and Cisco, ExpressVPN uses an open-source reverse-engineering, which is both better for privacy and quite fast. Lightway is the odd one out, a protocol you'll only find on ExpressVPN, though its source code is available on Github. It's similar to WireGuard, in that both reach for faster speeds and lower processing demands by keeping their codebases slim. However, Lightway was recently rewritten in Rust to better protect the keys stored in its memory. Ultimately, you can't go wrong with any of ExpressVPN's protocol options. 99% of the time, your best choice will be to set the controls to Automatic and let the VPN decide which runs best. Testing for leaks ExpressVPN is one of the best services, but it's not leak-proof (as you can read in the Background Check below). Luckily, checking for DNS leaks is a simple matter of checking your IP address before and after connecting to a VPN server. If the new address matches the VPN server, you're good; if not, your VPN is leaking. First, we checked the Windows app with split tunneling active to ensure the flaw really had been patched. We tested several servers and didn't find any leaks, which suggests the patch worked, though leaks were rare even before ExpressVPN fixed the vulnerability. We checked our IP while connected to the virtual India location, which is run from a physical server in Singapore. Don't worry -- it still looks like India to streaming services. Sam Chapman for Engadget In fact, we didn't find any leaks on any ExpressVPN server we tested on any platform. Though questions remain about iOS, as you'll see later in this section, that's a problem on Apple's end that even the best VPNs can do very little about for now. The most common cause of VPN leaks is the use of public DNS servers to connect users to websites, which can mistakenly send browsing activity outside the VPN's encrypted tunnel. ExpressVPN avoids the risks of the public system by installing its own DNS resolvers on every server. This is the key factor behind its clean bill of health in our leak testing. Two other common flaws can lead to VPN leaks: WebRTC traffic and IPv6. The former is a communication protocol used in live streaming and the latter is a new IP standard designed to expand domain availability. Both are nice, but currently optional, so ExpressVPN automatically blocks both to ensure there's no opportunity for leaks to arise. One note about VPN security on iOS: it's a known and continuing problem that iOS VPNs do not prevent many online apps from communicating with Apple directly, outside the VPN tunnel. This risks leaking sensitive data, even with Lockdown Mode active in iOS 16. A blog post by Proton VPN shares a workaround: connect to a VPN server, then turn Airplane Mode on and off again to end all connections that were active before you connected to the VPN. Testing encryption We finished up our battery of security tests by checking out ExpressVPN's encryption directly. Using WireShark, a free packet sniffer, we inspected what it looks like when ExpressVPN transmits data from one of its servers to the internet. The screenshot below shows a data stream encrypted with Lightway UDP. After connecting to ExpressVPN, HTTP packets were rendered unreadable while in transit. Sam Chapman for Engadget That lack of any identifiable information, or even readable information, means encryption is working as intended. We repeated the test several times, always getting the same result. This left us satisfied that ExpressVPN's core features are working as intended. How much does ExpressVPN cost? ExpressVPN subscriptions cost $12.95 per month. Long-term subscriptions can bring the monthly cost down, but the great deals they offer tend to only last for the first billing period. A 12-month subscription costs $99.95 and includes three months for free with your first payment, costing a total of $6.67 per month. The bonus disappears for all subsequent years, raising the monthly cost to $8.33. You can also sign up for 28 months at a cost of $139.72, but this is also once-only — ExpressVPN can only be renewed at the $99.95 per year level. There are two ways to test ExpressVPN for free before making a financial commitment. Users on iOS and Android can download the ExpressVPN app without entering any payment details and use it free for seven days. On any platform, there's a 30-day money-back guarantee, which ExpressVPN has historically honored with no questions asked. You will have to pay before you can use it, though. In our opinion, ExpressVPN's service is solid enough that it's worth paying extra. Perhaps not this much extra, but that depends on what you get out of it. We recommend using the 30-day refund period and seeing how well ExpressVPN works for you. If it's a VPN you can enjoy using, that runs fast and unblocks everything you need, that's worth a server's weight in gold. ExpressVPN side apps and bundles ExpressVPN includes some special features that work mostly or wholly separate from its VPN apps. Some of these come free with a subscription, while others add an extra cost. Every subscription includes the ExpressVPN keys password manager. This is available under its own tab on the Android and iOS apps. On desktop, you'll need to download a separate extension from your browser's store, then sign in using your account activation code. It's available on all Chromium browsers, but not Firefox. Starting in 2025, new subscribers get an eSIM plan through holiday.com, a separate service linked to ExpressVPN. The baseline 1GB holiday eSIM plans last for 5 days and can apply to countries, regions, or the entire world (though it's not clear whether the package deal applies to the regional and global plans). Longer-term plans include larger eSIM plans. You can add a dedicated IP address to your ExpressVPN subscription for an additional cost per month. A dedicated IP lets you use the same IP address every time you connect to ExpressVPN. You can add the address to whitelists on restricted networks, and you're assured to never be blocked because of someone else's bad activity on a shared IP. Unlike many of its competitors, ExpressVPN doesn't currently offer antivirus or online storage services, but there is a comprehensive bundle of ID protection tools called Identity Defender. We haven't reviewed any of these products in detail, but here's a list for reference: ID Alerts will inform you if any of your sensitive information is leaked or misused online. It's free with all plans, but you'll have to enter your personal information on your ExpressVPN account page or a mobile app. ID Theft Insurance grants up to $1 million in identity theft reimbursement and comes free with new ExpressVPN one-year or two-year subscriptions. It's not yet available to those who subscribed before it launched in October 2024. Data Removal scans for your information in data brokerages and automatically requests that it be deleted. It's also free with one-year and two-year plans. Credit Scanner is only available for United States users. It monitors your activity on the three credit bureaus so you can quickly spot any suspicious transactions. The Identity Defender features are currently only available to new ExpressVPN customers in the US. Close-reading ExpressVPN's privacy policy Although we worry that the consolidation of VPN brands under the umbrella of Kape Technologies (ExpressVPN's parent company) will make the industry less competitive, we don't believe it's influencing ExpressVPN to take advantage of its users' privacy. To confirm, and get a full sense of what sort of privacy ExpressVPN promises its users, we set out to read ExpressVPN's privacy policy in detail. It's long, but thankfully aimed at casual users instead of lawyers. You can see it for yourself here. In the introduction, ExpressVPN states that it does not keep either activity logs (such as a user's browsing history while connected to the VPN) or connection logs (such as the duration of a user's session and their IP address, which can be used to extrapolate browsing activity). It then specifies the seven types of data it's legally allowed to collect: Data used to sign up for an account, such as names, emails and payment methods. VPN usage data which is aggregated and can't be traced to any individual. Credentials stored in the ExpressVPN Keys password manager. Diagnostic data such as crash reports, which are only shared upon user request. IP addresses authorized for MediaStreamer, which is only for streaming devices that don't otherwise support VPN apps. Marketing data collected directly from the app — a "limited amount" that's kept anonymous. Data voluntarily submitted for identity theft protection apps. Of those seven exceptions, the only ones that count as red flags are account data and marketing data. Both categories are highly personal and could be damaging if mishandled. Fortunately, complying with subpoenas is not one of the allowed uses listed for either data category, nor does the policy let ExpressVPN sell the data to other private parties. The only really annoying thing here is that if you ask ExpressVPN to delete your personal data, you won't be able to use your account from then on. You aren't even eligible for a refund in this case, unless you're within 30 days of your initial subscription. As for marketing data, ExpressVPN collects device fingerprints and location data when you sign up for an account on its website. The privacy policy also claims this is anonymized, as its "systems are engineered to decouple such data from personally identifiable information." Audits corroborate this, as we'll see in the next section. So, while it would be better if ExpressVPN didn't collect any personal data at all, its practices don't appear to pose a risk to anything you do while using the VPN — just the ExpressVPN website. Privacy audits VPN providers often get third-party accounting firms to audit their privacy policies. The idea is that a well-known firm won't mortgage its reputation to lie on behalf of a VPN, so their results can be trusted. For the last several years, ExpressVPN has had KPMG look over its privacy policy and relevant infrastructure (see "TrustedServer" below). KPMG's most recent report, completed in December 2023 and released in May 2024, found that ExpressVPN had enough internal controls in place that users could trust its privacy policy. The report is freely available to read. This is a very good sign, though we're looking out for a more up-to-date audit soon. TrustedServer "TrustedServer" is a marketing term ExpressVPN uses for its RAM-only server infrastructure. RAM-only servers have no hard drives for long-term storage and return to a standard disk image with every reboot. This makes it theoretically impossible to store user activity logs on them, even if ExpressVPN wanted to do that. The KPMG audit, linked above, reports that TrustedServer works as advertised. Between its many clean privacy audits and the Turkish server incident in 2017, we're prepared to say ExpressVPN is a private VPN, in spite of its aggravating exception for marketing. Can ExpressVPN change your virtual location? Next, we tested whether ExpressVPN can actually convince websites that you're somewhere other than your real location. Our security tests have already proven it can hide your IP address, but it takes more than leak-proofing to fool streaming sites these days — Netflix and the others have gotten very good at combing through metadata to sniff out proxy users. The process for testing this is a lot like how we handled the DNS leak tests: try several different servers and see if we get caught. We checked five sample locations outside the U.S. to see if we a) got into Netflix and b) saw different titles in the library. The results are below. Server Location Unblocked Netflix? Library changed? Canada Y Y United Kingdom Y (second try; Docklands failed) Y Slovakia Y Y India Y Y (different from UK library) Australia Y Y In fifteen tests, ExpressVPN slipped up only once. Docklands, the UK server it chose as the fastest, wasn't able to access Netflix. We switched to a server labeled simply "London" and unblocked it without issue. ExpressVPN can change your virtual location so you can explore the wonderful world of K-drama. Sam Chapman for Engadget All the other locations got us access to an alternate Netflix library on the first try. We even checked whether the India server, which is physically located in the UK, showed us different videos than the UK servers. It did, which makes us even more confident that ExpressVPN's virtual locations are airtight. Investigating ExpressVPN's server network ExpressVPN users can connect to a total of 164 server locations in 105 countries and territories. These locations are reasonably well distributed across the globe, but as with all VPNs, there's a bias toward the northern hemisphere. There are 24 locations in the U.S. alone and a further 66 in Europe. That isn't to say users in the Global South get nothing. ExpressVPN has IP addresses from nine nations in South America (Argentina, Brazil, Bolivia, Chile, Colombia, Ecuador, Peru, Uruguay and Venezuela) and six in Africa (Algeria, Egypt, Ghana, Kenya, Morocco and South Africa). The network even includes Kazakhstan, Uzbekistan and Mongolia, impressive since central Asia may be the region most often shafted by VPNs. However, many of these servers have virtual locations different from their real ones. For those of you choosing a server based on performance instead of a particular IP address, ExpressVPN's website has a helpful list of which servers are virtual. The bad news is that it's a big chunk of the list. A total of 63 ExpressVPN locations are virtual, or 38% of its entire network. To reduce the sting, ExpressVPN takes care to locate virtual servers as close to their real locations as possible. Its virtual locations in Indonesia and India are physically based in Singapore. This isn't always practical, leading to some awkwardness like operating a Ghana IP address out of Germany. But it helps ExpressVPN perform better in the southern hemisphere. Extra features of ExpressVPN Compared to direct competitors like NordVPN and Surfshark, ExpressVPN doesn't have many special features. It's aimed squarely at the casual market and will probably disappoint power users. Having said that, what they do include works well. In this section, we'll run through ExpressVPN's four substantial features outside its VPN servers themselves. Network Lock kill switch "Network Lock" is the name ExpressVPN gives to its kill switch (though it's called "Network Protection" on mobile). A VPN kill switch is a safety feature that keeps you from broadcasting outside the VPN tunnel. If it ever detects that you aren't connected to a legitimate ExpressVPN server, it cuts off your internet access. You won't be able to get back online until you either reconnect to the VPN or disable Network Lock. ExpressVPN's kill switch is called Network Lock on desktop, and Network Protection on mobile (Android pictured) Sam Chapman for Engadget This is important for everyone, not just users who need to hide sensitive traffic. The recently discovered TunnelVision bug theoretically allows hackers to set up fake public wi-fi networks through which they redirect you to equally fake VPN servers, which then harvest your personal information. It's unlikely, but not impossible, and a kill switch is the best way to prevent it — the switch always triggers unless you're connected to a real server in the VPN's network. Like most of ExpressVPN's features, all you can do with Network Lock is turn it on and off. You can also toggle whether you'll still be able to access local devices while the kill switch is blocking your internet — this is allowed by default. Threat manager, ad blocker and parental controls ExpressVPN groups three tools under the heading of "advanced protection" — Threat Manager, an ad blocker and parental controls. Threat Manager consists of two checkboxes: one that blocks your browser from communicating with activity tracking software and one that blocks a list of websites known to be used for malware. Check any of these boxes to use the pre-set blocklists whenever you're connected to ExpressVPN. Sam Chapman for Engadget You can't customize the lists, so you're limited to what ExpressVPN considers worthy of blocking. They share their sources on the website. While the lists are extensive and open-source, they rely on after-the-fact reporting and can't detect and block unknown threats like a proper antivirus. The adblock and parental control options work the same way: check a box to block everything on the list, uncheck it to allow everything through. In tests, the ad blocker was nearly 100% effective against banner ads, but failed to block any video ads on YouTube or Netflix. The parental control option blocks a list of porn sites. It's an easy option for concerned parents, but only works while ExpressVPN is connected. As such, it's meant to be used in conjunction with device-level parental controls that prevent the child from turning off or uninstalling the VPN client. Split tunneling Sometimes, you'll find it helpful to have your device getting online through two different IP addresses at once — one for your home services and one for a location you're trying to spoof. That's where split tunneling is helpful: it runs some apps through the VPN while leaving others unprotected. This can also improve your speeds, since the VPN needs to encrypt less in total. You can configure split tunneling through either a blocklist or an allowlist. Sam Chapman for Engadget ExpressVPN includes split tunneling on Windows, Android and Mac (though only on versions 10 and below). You can only split by app, not by website, but it's still pretty useful. For example, you can have BitTorrent handling a heavy download in the background while you use your browser for innocuous activities that don't need protecting. ExpressVPN Aircove router By now, it should be clear that we find ExpressVPN to be a highly reliable but often unexceptional VPN service. However, there's one area in which it's a clear industry leader: VPN routers. ExpressVPN Aircove is, to our knowledge, the only router with a built-in commercial VPN that comes with its own dashboard interface. Usually, installing a VPN on your router requires tinkering with the router control panel, which turns off all but the most experienced users — not to mention making it a massive pain to switch to a new server location. Aircove's dashboard, by contrast, will be instantly familiar to anyone who already knows how to use an ExpressVPN client. It even allows different devices in your home to connect to different locations through the router VPN. Aircove's biggest drawback is its price. Currently retailing at $189 (not including an ExpressVPN subscription), it's around three times more expensive than an aftermarket router fitted with free VPN firmware. Some of you might still find the convenience worth the one-time payment. ExpressVPN customer support options ExpressVPN's written help pages are some of the best on the market. Its live chat is more of a mixed bag, and complex questions may cause delays. However, it is at least staffed with human agents who aim to reply accurately, rather than resolve your ticket as quickly as possible. You can directly access both live chat and email from ExpressVPN's mobile apps (on desktop, you'll have to go to the website). Sam Chapman for Engadget We approached ExpressVPN's support features with a simple question: "If I requested that ExpressVPN delete all my personal data, would I be able to get a refund for my unused subscription time?" (Remember from the Privacy Policy section that submitting a full deletion request also cancels your ExpressVPN account.) Our first stop was expressvpn.com/support, the written support center and FAQ page. It's divided into setup guides, troubleshooting, account management and information on each of ExpressVPN's products. The setup guides are excellent, including screenshots and clearly written steps; each one includes a video guide for those who learn better that way. Troubleshooting is just as good — no videos, but the same standards of clarity and usefulness prevail. The section starts with general problems, then delves into specific issues you might face on each operating system. Each article clearly derives from a real customer need. The live support experience To get answers on our refund question, we visited the account management FAQs. This section stated that the refund policy only applies within 30 days of purchase. Pretty clear-cut, but we still wanted an answer on our special case, so we contacted live chat by clicking the button at the bottom-right of every FAQ page. Live chat is in the bottom-right corner of every page of expressvpn.com. Sam Chapman for Engadget Live chat starts with an AI assistant, which is not too hard to get past — just ask it a question it can't answer, then click "Transfer to an Agent." We got online with (what claimed to be) a human in less than a minute. Answering the question took longer and involved an uncomfortable 10-minute silence, but we did get a clear verdict from a real person: refunds are within 30 days only, no matter what. If the live chat agent can't answer your question, you'll be redirected to open an email support ticket. Annoyingly, there's no way to go directly to email support through the website or desktop apps, though mobile users have the option to skip directly there. ExpressVPN background check: From founding to Kape Technologies ExpressVPN launched in 2009, which makes it one of the oldest consumer VPNs in continual operation. In more than 15 years of operation, it's never been caught violating its own privacy policy, though its record isn't free of more minor blemishes. Headquarters in the British Virgin Islands Founders Dan Pomerantz and Peter Burchhardt registered the company in the British Virgin Islands from the start to take advantage of that territory's favorable legal environment for online privacy. The BVIs have no law requiring businesses to retain data on their users, and the process for extraditing data is famously difficult, requiring a direct order from the highest court. In 2021, the BVI implemented the Data Protection Act (DPA) [PDF link], which prevents companies based in the territory from accessing data on their users anywhere in the world. It's a great privacy law in theory, modeled on best-in-class legislation in the EU. However, we couldn't find any evidence that its supervising authority — the Office of the Information Commissioner — has a leader or staff. In other words, while ExpressVPN is not legally required to log any data on its users, there's technically nobody stopping them from doing so. Whether you trust the jurisdiction depends on whether you trust the company itself. Let's see what the other evidence says. Security and privacy incidents Two significant incidents stand out from ExpressVPN's 16-year history. In 2017, when Andrei Karlov, Russia's ambassador to Turkey, was shot to death at an art show. Turkish police suspected someone had used ExpressVPN to mask their identity while they deleted information from social media accounts belonging to the alleged assassin. To investigate, they confiscated an ExpressVPN server to comb for evidence. They didn't find anything. A police seizure is the best possible test of a VPN's approach to privacy. The provider can't prepare beforehand, fake anything, or collude with investigators. The Turkey incident is still one of the best reasons to recommend ExpressVPN, though eight years is a long time for policy to change. The second incident began in March 2024, when a researcher at CNET informed ExpressVPN that its version 12 for Windows occasionally leaked DNS requests when users enabled the split tunneling feature. While these users remained connected to an ExpressVPN server, their browsing activity was often going directly to their ISP, unmasked. The bug only impacted a few users, and to their credit, ExpressVPN sprang into action as soon as they learned about it. The team had it patched by April, as confirmed by the researcher who initially discovered the vulnerability. But while their quick and effective response deserves praise, it's still a mark against them that a journalist noticed the bug before they did. Kape Technologies ownership and management questions In 2021, an Israeli-owned, UK-based firm called Kape Technologies purchased a controlling interest in ExpressVPN. In addition to ExpressVPN, privately held Kape owns CyberGhost, Private Internet Access, and Zenmate (before it merged into CyberGhost). As shown on its website, it also owns Webselenese, publisher of VPN review websites WizCase and vpnMentor, which poses an apparent conflict of interest. When reached for comment, a representative for ExpressVPN said that "ExpressVPN does not directly engage with, nor seek to influence, the content on any Webselenese site," and pointed us to disclosure statements on the websites in question — here's one example. Even so, it's a good reminder not to take VPN reviews at face value without knowing who's behind them (Engadget is owned by Yahoo, which does not own any VPNs). Diving deeper into the background of Kape's ownership will lead you to owner Teddy Sagi. Go back far enough, and you'll see he did prison time in Israel and was mentioned in the Pandora Papers, among other things. More recently, headlines about the billionaire have focused more his businesses in the online gambling and fintech arenas, as well as his real estate ventures. An ExpressVPN representative told us that "Kape's brands continue to operate independently," and our investigation bore that out — we couldn't find any proof that Kape or Sagi have directly attempted to influence ExpressVPN's software or daily operations. Closer to the immediate day-to-day operations of ExpressVPN was the company's employment of Daniel Gericke as CTO from 2019 through 2023. During that time, the US Justice Department announced it had fined Gericke and two others for their previous employment on a surveillance operation called Project Raven, which the United Arab Emirates (UAE) used to spy on its own citizens. The revelation prompted a public response from ExpressVPN defending its decision to hire Gericke, arguing that "[t]he best goalkeepers are the ones trained by the best strikers." ExpressVPN's representative confirmed that the company still stands by that linked statement. Gericke parted ways with ExpressVPN in October 2023, per his LinkedIn profile. While we don't know what we don't know, we can say that ExpressVPN has not notably changed its public-facing security and privacy policies during the time it's been connected to Kape, Sagi, or Gericke. In the end, how much ExpressVPN's history matters to you is a personal choice. If you object to any current or past actions by Kape Technologies or Teddy Sagi, there are other premium VPN options you might prefer. If you need more information to make up your mind, we recommend reading through CNET's 2022 deep dive on ExpressVPN's corporate history. Final verdict ExpressVPN is the VPN we most often recommend to beginners. It takes zero training to use, and consistently gets past filters on streaming sites. It also runs in the background with virtually no impact. If anything is worth the high price of admission, it's the excellent speeds distributed evenly across the worldwide server network. However, for certain specific cases, ExpressVPN may not be the best choice. There's no way to set up your own server locations, like NordVPN offers, and no double VPN connections, like you can build for yourself on Surfshark. Its corporate background is more suspect than the entities backing Proton VPN, and unlike Mullvad, ExpressVPN doesn't work in China — it's so well-known that the government targets its servers specifically. We suggest going with ExpressVPN for general online privacy, for spoofing locations in your home country while traveling, or if you regularly need to unblock sites in other countries. That encompasses 19 of every 20 users, which is fine by us, as ExpressVPN is a great service. It's just more of a reliable old screwdriver than a multi-tool. This article originally appeared on Engadget at https://www.engadget.com/cybersecurity/vpn/expressvpn-review-2025-fast-speeds-and-a-low-learning-curve-160052884.html?src=rss

Nebraska is the latest state to crack down on how kids can use social media. The state's governor, Jim Pillen, recently signed into law a package of bills aimed at restricting certain social media features that keep kids hooked on the platform. The final bill signed, called the Age-Appropriate Online Design Code Act, will require companies to offer time limits on usage, restrict certain categories of content and provide chronological feeds instead of algorithmic ones that promote infinite scrolling. The Age-Appropriate Online Design Code Act, also known as LB504, details that social media companies can only collect the minimum amount of personal data from younger users, and offers parents more tools to limit how their children use their accounts. Along with those restrictions, the law prohibits any ads related to gambling, alcohol, tobacco or drugs from reaching kids on social media.  Alongside LB504, the signed package of bills includes LB140 that limits student use of smartphones in schools, LB383 that requires social media companies to verify the age of its users and require parental consent for creating accounts, and LB172 that creates criminal penalties for AI-generated pornography. "Collectively, all these bills have an incredible impact on helping our teachers and giving our schools the opportunity to teach our kids, instead of being disrupted in the classroom," Pillen said in a press release. "They also provide parents with the tools they need to protect our kids from big tech online companies and predators." The law is set to go into effect January 1, 2026, and any companies that violate these new regulations will face civil penalties. Nebraska is the latest state to restrict social media usage for minors, but Texas is also trying to pass a similar ban. With more efforts to regulate social media, NetChoice, an Internet advocacy organization whose members include Google, Meta and X, has voiced criticism of these states' efforts, arguing that they infringe on First Amendment rights and user privacy. In 2022, California signed a similar law meant to protect underage users, but it has since been in a legal battle following a lawsuit filed by NetChoice that claims a violation of free speech rights.This article originally appeared on Engadget at https://www.engadget.com/social-media/a-new-nebraska-law-wants-to-make-social-media-less-addictive-for-kids-171510432.html?src=rss

The turing test in reverse Real TikTokers are pretending to be Veo 3 AI creations for fun, attention From music videos to "Are you a prompt?" stunts, "real" videos are presenting as AI Kyle Orland – May 31, 2025 7:08 am | 13 Of course I'm an AI creation! Why would you even doubt it? Credit: Getty Images Of course I'm an AI creation! Why would you even doubt it? Credit: Getty Images Story text Size Small Standard Large Width * Standard Wide Links Standard Orange * Subscribers only   Learn more Since Google released its Veo 3 AI model last week, social media users have been having fun with its ability to quickly generate highly realistic eight-second clips complete with sound and lip-synced dialogue. TikTok's algorithm has been serving me plenty of Veo-generated videos featuring impossible challenges, fake news reports, and even surreal short narrative films, to name just a few popular archetypes. However, among all the AI-generated video experiments spreading around, I've also noticed a surprising counter-trend on my TikTok feed. Amid all the videos of Veo-generated avatars pretending to be real people, there are now also a bunch of videos of real people pretending to be Veo-generated avatars. “This has to be real. There’s no way it's AI.” I stumbled on this trend when the TikTok algorithm fed me this video topped with the extra-large caption "Google VEO 3 THIS IS 100% AI." As I watched and listened to the purported AI-generated band that appeared to be playing in the crowded corner of someone's living room, I read the caption containing the supposed prompt that had generated the clip: "a band of brothers with beards playing rock music in 6/8 with an accordion." @kongosmusicWe are so cooked. This took 3 mins to generate. Simple prompt: “a band of brothers playing rock music in 6/8 with an accordion”♬ original sound - KONGOS After a few seconds of taking those captions at face value, something started to feel a little off. After a few more seconds, I finally noticed the video was posted by Kongos, an indie band that you might recognize from their minor 2012 hit "Come With Me Now." And after a little digging, I discovered the band in the video was actually just Kongos, and the tune was a 9-year-old song that the band had dressed up as an AI creation to get attention. Here's the sad thing: It worked! Without the "Look what Veo 3 did!" hook, I might have quickly scrolled by this video before I took the time to listen to the (pretty good!) song. The novel AI angle made me stop just long enough to pay attention to a Kongos song for the first time in over a decade. Kongos isn't the only musical act trying to grab attention by claiming their real performances are AI creations. Darden Bela posted that Veo 3 had "created a realistic AI music video" over a clip from what is actually a 2-year-old music video with some unremarkable special effects. Rapper GameBoi Pat dressed up an 11-month-old song with a new TikTok clip captioned "Google's Veo 3 created a realistic sounding rapper... This has to be real. There's no way it's AI" (that last part is true, at least). I could go on, but you get the idea. @gameboi_pat This has got to be real. There’s no way it’s AI 😩 #google #veo3 #googleveo3 #AI #prompts #areweprompts? ♬ original sound - GameBoi_pat I know it's tough to get noticed on TikTok, and that creators will go to great lengths to gain attention from the fickle algorithm. Still, there's something more than a little off-putting about flesh-and-blood musicians pretending to be AI creations just to make social media users pause their scrolling for a few extra seconds before they catch on to the joke (or don't, based on some of the comments). The whole thing evokes last year's stunt where a couple of podcast hosts released a posthumous "AI-generated" George Carlin routine before admitting that it had been written by a human after legal threats started flying. As an attention-grabbing stunt, the conceit still works. You want AI-generated content? I can pretend to be that! Are we just prompts? Some of the most existentially troubling Veo-generated videos floating around TikTok these days center around a gag known as "the prompt theory." These clips focus on various AI-generated people reacting to the idea that they are "just prompts" with various levels of skepticism, fear, or even conspiratorial paranoia. On the other side of that gag, some humans are making joke videos playing off the idea that they're merely prompts. RedondoKid used the conceit in a basketball trick shot video, saying "of course I'm going to make this. This is AI, you put that I'm going to make this in the prompt." User thisisamurica thanked his faux prompters for putting him in "a world with such delicious food" before theatrically choking on a forkful of meat. And comedian Drake Cummings developed TikTok skits pretending that it was actually AI video prompts forcing him to indulge in vices like shots of alcohol or online gambling ("Goolgle’s [sic] New A.I. Veo 3 is at it again!! When will the prompts end?!" Cummings jokes in the caption). @justdrakenaround Goolgle’s New A.I. Veo 3 is at it again!! When will the prompts end?! #veo3 #google #ai #aivideo #skit ♬ original sound - Drake Cummings Beyond the obvious jokes, though, I've also seen a growing trend of TikTok creators approaching friends or strangers and asking them to react to the idea that "we're all just prompts." The reactions run the gamut from "get the fuck away from me" to "I blame that [prompter], I now have to pay taxes" to solipsistic philosophical musings from convenience store employees. I'm loath to call this a full-blown TikTok trend based on a few stray examples. Still, these attempts to exploit the confusion between real and AI-generated video are interesting to see. As one commenter on an "Are you a prompt?" ambush video put it: "New trend: Do normal videos and write 'Google Veo 3' on top of the video." Which one is real? The best Veo-related TikTok engagement hack I've stumbled on so far, though, might be the videos that show multiple short clips and ask the viewer to decide which are real and which are fake. One video I stumbled on shows an increasing number of "Veo 3 Goth Girls" across four clips, challenging in the caption that "one of these videos is real... can you guess which one?" In another example, two similar sets of kids are shown hanging out in cars while the caption asks, "Are you able to identify which scene is real and which one is from veo3?" @spongibobbu2 One of these videos is real… can you guess which one? #veo3 ♬ original sound - Jett After watching both of these videos on loop a few times, I'm relatively (but not entirely) convinced that every single clip in them is a Veo creation. The fact that I watched these videos multiple times shows how effective the "Real or Veo" challenge framing is at grabbing my attention. Additionally, I'm still not 100 percent confident in my assessments, which is a testament to just how good Google's new model is at creating convincing videos. There are still some telltale signs for distinguishing a real video from a Veo creation, though. For one, Veo clips are still limited to just eight seconds, so any video that runs longer (without an apparent change in camera angle) is almost certainly not generated by Google's AI. Looking back at a creator's other videos can also provide some clues—if the same person was appearing in "normal" videos two weeks ago, it's unlikely they would be appearing in Veo creations suddenly. There's also a subtle but distinctive style to most Veo creations that can distinguish them from the kind of candid handheld smartphone videos that usually fill TikTok. The lighting in a Veo video tends to be too bright, the camera movements a bit too smooth, and the edges of people and objects a little too polished. After you watch enough "genuine" Veo creations, you can start to pick out the patterns. Regardless, TikTokers trying to pass off real videos as fakes—even as a joke or engagement hack—is a recognition that video sites are now deep in the "deep doubt" era, where you have to be extra skeptical of even legitimate-looking video footage. And the mere existence of convincing AI fakes makes it easier than ever to claim real events captured on video didn't really happen, a problem that political scientists call the liar's dividend. We saw this when then-candidate Trump accused Democratic nominee Kamala Harris of "A.I.'d" crowds in real photos of her Detroit airport rally. For now, TikTokers of all stripes are having fun playing with that idea to gain social media attention. In the long term, though, the implications for discerning truth from reality are more troubling. Kyle Orland Senior Gaming Editor Kyle Orland Senior Gaming Editor Kyle Orland has been the Senior Gaming Editor at Ars Technica since 2012, writing primarily about the business, tech, and culture behind video games. He has journalism and computer science degrees from University of Maryland. He once wrote a whole book about Minesweeper. 13 Comments

May 30, 2025Ravie LakshmananCryptocurrency / Cybercrime The U.S. Department of Treasury's Office of Foreign Assets Control (OFAC) has levied sanctions against a Philippines-based company named Funnull Technology Inc. and its administrator Liu Lizhi for providing infrastructure to conduct romance baiting scams that led to massive cryptocurrency losses. The Treasury accused the Taguig-headquartered company of enabling thousands of websites involved in virtual currency investment scams that caused Americans to lose billions of dollars annually. "Funnull has directly facilitated several of these schemes, resulting in over $200 million in U.S. victim-reported losses," the agency said in a press release. The average loss is estimated to be over $150,000 per individual. Funnull, also called Fang Neng CDN (funnull[.]io, funnull[.]com, funnull[.]app, and funnull[.]buzz), was first attracted the attention of the cybersecurity community in June 2024 after it was implicated in the supply chain attack of widely-used Polyfill[.]io JavaScript library. Last year, an analysis by Silent Push revealed that the infrastructure associated with Funnull has been used to promote investment scams, fake trading applications, and suspect gambling networks. The infrastructure has been codenamed Triad Nexus. Then earlier this February, the cybersecurity company attributed Funnull to a practice dubbed infrastructure laundering wherein the company rented IP addresses from mainstream hosting providers such as Amazon Web Services (AWS) and Microsoft Azure to host criminal websites. Highlighting this aspect, the Treasury said Funnull enables virtual currency investment scams by acquiring IP addresses in bulk from major cloud services companies across the world and selling them to cybercriminals to host scam platforms and other malicious web content. "Funnull generates domain names for websites on its purchased IP addresses using domain generation algorithms (DGAs) – programs that generate large numbers of similar but unique names for websites – and provides web design templates to cybercriminals," the agency pointed out. "These services not only make it easier for cybercriminals to impersonate trusted brands when creating scam websites but also allow them to quickly change to different domain names and IP addresses when legitimate providers attempt to take the websites down." The Treasury also accused Funnull of purchasing Polyfill[.]io with the intent to redirect visitors of legitimate websites to scam websites and online gambling sites, some of which it said are linked to Chinese criminal money laundering operations. Furthermore, the department alleged that its administrator Liu, a Chinese national, was in possession of spreadsheets and other documents that contained information about the company's employees, their performance, and their work progress. The tasks assigned to them included assigning domain names to criminal actors for virtual currency investment fraud, phishing scams, and online gambling sites. In a standalone flash alert, the U.S. Federal Bureau of Investigation (FBI) said it identified 548 unique Funnull Canonical Names (CNAME) linked to over 332,000 unique domains since January 2025. "Between October 2023 and April 2025, multiple patterns of IP address activity were observed from several domains using Funnull infrastructure," the FBI said. "During this time frame, hundreds of domains using Funnull infrastructure simultaneously migrated from one IP address to another either on the same exact day or within the same timeframe." Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post. SHARE    

As long as I can remember, my wife has started each day with 30 minutes of a Candy Crush game. As long as she can remember, I have started each day by telling her it is pointless casual gamer cack. Now I write for the Guardian, I need to find a more eloquent way of putting that, so I thought I would have a go myself. I am begging you: do not do the same. Candy Crush Soda Saga nearly ruined me in a week.I like the game mechanics. As Oscar Wilde said, the man who doesn’t love sliding stuff to form chains of three or more matching shapes does not love life itself. This one is wrapped in a cute candy veneer, all fizzy bottles and gummy bears. And that makes the visuals so alluring. When you slide a Colour Bomb into a Candy Fish all the candies that colour get Candyfished and your eyes are treated to a bazillion of them fizzing around the screen destroying everything, while the firm yet gentle haptic feedback makes it a multisensory burst of pure, effervescent joy.“What’s that clicking noise?” my wife asks.“Don’t you play it with the haptic feedback on?”“Oh, I turned that off because I thought it was hurting my phone.”“In what way?”“I felt it was putting too much … pressure on it.” She says, like her phone is the USS Enterprise and she is Scotty diverting a dangerous amount of power away from the shields.We had many chats about Candy Crush while we both played the game in bed. I’m all for increased interspousal communication, but we used to do this kind of thing with broadsheet newspapers and now we’re matching jelly beans on phones. Luckily, you just need one hand to play, so the other is free to punch yourself repeatedly in the face as you realise how pointless your life has become.skip past newsletter promotionSign up to Pushing ButtonsFree weekly newsletterKeza MacDonald's weekly look at the world of gamingPrivacy Notice: Newsletters may contain info about charities, online ads, and content funded by outside parties. For more information see our Privacy Policy. We use Google reCaptcha to protect our website and the Google Privacy Policy and Terms of Service apply.after newsletter promotionYou are so hooked by the mechanics you hand over your few quid for some extra virtual bobbins quicker than those kids getting drugs in The WireAnd this game is utterly pointless in the long run. There is no story, no real achievements. It uses a board game path to fake big-time progression, but whether it’s me on level 150 or my wife on level 8,452 (gulp!) the pattern is the same: a few easy levels then a super hard one which, if you haven’t accumulated enough power-ups, is virtually impossible.That’s when the game drops its trousers and flashes its microtransactions. And by that stage you are so hooked by the mechanics and the colour you hand over your few quid for some extra virtual visual bobbins quicker and easier than those crazy kids getting drugs in The Wire. Oh yes! Candy Crush Soda Saga is the game Stringer Bell went to business school to invent. The cigarette was once hailed as the most efficient poison delivery system ever invented. Not now.This game “suggests” moves to you. These are frequently not the best ones. That is no accident. This is a game designed to make you fail. It’s a compulsion loop, sure, but one that encourages you to pay for the pleasure. It’s not gambling per se, because you know what you are buying, but, while gambling company ads now scream about setting limits and walking away, this game screams at you to have one more go.I have been addicted to so many things in my life that I stopped counting. (I became addicted to counting my addictions as well.) But this ranks as one of the worst. It only takes three days until I am dangerously hooked. Last Sunday I played Candy Crush Pop Saga for three solid hours. I nearly missed the Scottish Cup final as a result. Unlike my wife, I was dipping into it during the rest of the day as well, thinking, “Oh it’s been 15 minutes, I may have ended up getting a power-up via the Bake a Cake sub game my Candy Crush team are helping me with.”The self-loathing of the addict envelopes me. I know this is not nurturing me in any way, but I cannot stop. At least cocaine was quick. In terms of time? In one week I wasted what could have been, in Zelda terms, one third of a Breath of the Wild, one half of a Twilight Princess or an entire Majora’s Mask. And at least they tell stories. If the deadline for this article hadn’t made me stop, I would have had to have buried my phone in a lime pit and set it on fire to escape from Candy Crush.The irony is that there’s no real difference between this and the arcade offerings that made me fall in love with gaming as child. Pacman, Frogger, Space Invaders et al were all designed to make you pump another coin in the slot when it winked CONTINUE Y/N at you. They were even more repetitive. So I guess by the definition detailed in this Candy Crush castigation, those games were also a waste of time.But why didn’t they feel like that?Because back then, all I had was time. It wasn’t the dwindling commodity it is in my 50s. Maybe if I played Galaxian now it would feel like playing Candy Crush: a descent into a gaming horror world so uncomfortable it’s like watching that Event Horizon movie on treadmill while wearing Lego pants. A game that offers nothing repeatedly. Waiting for Godot with gummy bears instead of tramps. Nothing happens, nobody comes, nobody goes – it’s awful.

Macworld At a GlanceExpert's Rating Pros Good speed, tools, and customization settings Stopped every piece of malware 30-day trial Cons Tricky installation Web Protection feature does nothing to warn or prevent access to problem websites A disk access error required reinstallation (twice!) Our Verdict When the application works, it’s impressive. There was almost no malware I could get past it, the level of customization is impressive, and while I wish its Web Protection feature added warnings for clear scams and phishing attempts, Trend Micro Antivirus meets the needs of the Consumer market it’s targeted towards quite well. Price When Reviewed This value will show the geolocated pricing text for product undefined Best Pricing Today Best Prices Today: Trend Micro Antivirus for Mac Retailer Price Trend Micro 19,95 € View Deal Price comparison from over 24,000 stores worldwide Product Price Price comparison from Backmarket There’s a certain value in an application not trying to do everything under the sun, but honing in on a set of tasks and performing them well. And while Trend Micro Antivirus for the Mac hasn’t included a ton of revolutionary new features since the last time we reviewed it (in 2023), and while you’re less likely to hear about the program given the company’s focus on the business environment and lack of a marketing blitz towards consumer and home users, there’s something good to be had here. Trend Micro Antivirus for Mac requires macOS 10.13 (High Sierra) to download, currently retails for $29.95/£19.95 a year for one device for the first year (discounted from $39.99/£49.95 a year), and is also readily available as a 30-day trial with no credit or debit card needing to be sent along to Trend Micro. We have tested all the best Mac antivirus software options in our round-up of the Best antivirus software for Mac. Simply download the software, install it, and follow the prompts to add the iCore network extension, add the Safari and other web browser extensions, decide if you want to activate the Folder Shield feature, perform the initial virus definition updates, and allow the software to reboot. From there, Trend Micro will ask for permission to initiate full disk access to your Mac’s hard drive. The user interface is identical to its previous versions, with the home screen focusing on its Overview, Web, Scans, Folder Shield, and Logs modules. Trend Micro Antivirus continues to focus on its bread and butter with what is honestly excellent antiviral protection. Foundry Upon hurling the Objective See Mac Malware collection at it, there was almost nothing that got through, the application recognizing the malware and deleting it, save for a fake Adobe Flash Player extension that installed and was later removed by the macOS operating system. This, combined with a handy scheduling feature that allows for daily, weekly, or monthly setup and execution, allows for the application to run on its own without needing to be babysat.   There’s an interesting level of customization at work here, as Folder Shield offers boosted protection to assorted user folders (such as Documents, Music, Pictures, Movies, Dropbox, Mobile Documents, etc.), and you can create a Trusted Program list. It’s not crucial, but it’s fairly unique, and the application also scans inserted USB drives by default. Foundry The Web Protection module offers Privacy Scanner, Web Threat Protection, and Website Filter elements, which can block controversial content, such as pornography, etc., and users can also add trusted websites and blocked websites.  If there’s one thing that impressed me, it was the quick access to the logs, which cover scan results, unsafe websites found, websites filtered, updates received, folder shield, and dangerous notifications found. While this version of Trend Micro Antivirus isn’t designed for the sysadmin market, there’s nothing more useful than system logs to see what’s going on, and the fact that these logs are pre-sorted comes in handy.  For the final element of the Overview window, and as expected, the user interface hooks into ads for the company’s other wares from its home screen (“Privacy Tools” goes to Trend Micro VPN and “Utility Tools” hooks into its Cleaner One Pro, Unzip One, and AdBlock One utilities) which isn’t surprising, and is at least tucked out of the way as opposed to the application firing this into your eyeballs every two nanoseconds you use it.  Foundry Trend Micro has carved out something good here, even if there are a few wrinkles to iron out. The installation was a little trickier than expected, and you have to double-check the windows and options to make sure you’re enabling the right extensions, as opposed to an installer that does most of this for you. This gets a little bit tricky, but isn’t a deal breaker by any stretch of the imagination. Perhaps the most infuriating element to consider was the fact that the Web Protection feature, although well-hyped, does just about nothing to warn or protect you from websites associated with your spam folder, and I’m still able to go to sites offering me a free $1,000 prepaid Visa card, supposed free Bitcoin payouts, online casino gambling, etc. Finally, and I’m not sure exactly what led to this, but Trend Micro Antivirus stated twice that full disk access hadn’t been granted during testing despite the settings being correct, and needed to be uninstalled and reinstalled twice. This may be a bug between Trend Micro Antivirus and macOS Sequoia 15.5, but it would behoove Apple and Trend Micro to swap notes, brew a few pots of coffee, and see exactly what’s happening that could lead to this.  Should you buy Trend Micro Antivirus? I’m not sure what led to the error and the need for reinstallation, but when the application works, it’s impressive. There was almost no malware I could get past it, the level of customization is impressive, and while I wish its Web Protection feature added warnings for clear scams and phishing attempts, Trend Micro Antivirus meets the needs of the consumer market it’s targeted towards quite well, there’s ready access to Trend Micro’s help and feedback boards from the Overview window, and the options for the company’s additional tools are present but not overwhelming in the sense that a marketing department had gone out of control.

Weekly curated resources for designers — thinkers and makers.“Its “almost there” quality — the feeling we’re just one prompt away from the perfect solution — is what makes it so addicting. Vibe coding operates on the principle of variable-ratio reinforcement, a powerful form of operant conditioning where rewards come unpredictably. Unlike fixed rewards, this intermittent success pattern (“the code works! it’s brilliant! it just broke! wtf!”), triggers stronger dopamine responses in our brain’s reward pathways, similar to gambling behaviors.”The perverse incentives of Vibe Coding →By fred benensonIs your research repository holding back the impact of your insights? →[Sponsored] Join UX research experts Jake Burghardt and Emily DiLeo as they share the 6 red flags to look out for in failing repositories. Plus, get practical tips on how to build a repository that ensures your UX research delivers business value.Editor picksFigma uses nostalgia for their future in IPO →What happens when design tools grow up — and grow corporate.By Darren YeoDo people really want AI friends? →Zuckerberg seems to think so.By Daley WilhelmDesign for trust, then for possibility →From horseless carriages to robotaxis.By Sarah CordivanoThe UX Collective is an independent design publication that elevates unheard design voices and helps designers think more critically about their work.Nordic design gallery →Make me thinkThere should be no AI button →“It’s often unclear what the button will actually do. You may have a small text box to add a user prompt, but you’re at the mercy of the quality of an opaque system prompt.”Products need soul but markets reward scale →“Uber is the clearest example of a company that let go of the original story and embraced what the market wanted. It started out as a premium ride experience. Nice cars, polite drivers, smooth UX. Then it went public. Growth expectations took over. Fleet owners stepped in. Car quality dropped. The experience became inconsistent. And then came the ads.”About showing the “open to work” badge →“The reason might be that I do use LinkedIn professionally and that I’ve been both recruiting and being hired by large corporations. I’ve also been part of reorganisations, companies going bust and was on the wrong spreadsheet when mass layoffs happened. So I know how it feels to not have a job even when your performance was great.”Little gems this weekIs your creative character being sacrificed to Algorithm, Inc? →By Ian BatterbeeNo country for junior designers →By Patrick MorganThe next design trend should start with your hands, not a computer →By Michael F. BuckleyTools and resources20+ GenAI UX patterns →AI beyond the model.By Sharang SharmaUsing simulation models in UX research →Why it’s time we take behavior seriously.By Talieh KazemiDesign in the age of vibes →What the new wave of tools means for the future.By John MoriartySupport the newsletterIf you find our content helpful, here’s how you can support us:Check out this week’s sponsor to support their work tooForward this email to a friend and invite them to subscribeSponsor an editionPerverse vibes, Figma’s future IPO, 20+ GenAI UX patterns was originally published in UX Collective on Medium, where people are continuing the conversation by highlighting and responding to this story.

Nvidia’s RTX 5060 is finally here, and many people hoped it’d put up a fight against some of the best graphics cards. Does it really, though? Reviewers are split on the matter. Alas, I’m not here to judge the card. I’m here to show you some alternatives. While Nvidia’s xx60 cards typically become some of the most popular GPUs of any given generation, they’re not the only option you have right now. The RTX 5060 might not even be the best option at that price point. Below, I’ll walk you through four GPUs that I think you should buy instead of the RTX 5060. Recommended Videos Nvidia GeForce RTX 4060 Jacob Roach / Digital Trends I’m not sure whether this will come as a surprise or not, but based on current pricing and benchmarks, the GPU I recommend buying instead of the RTX 5060 is its last-gen equivalent. The RTX 4060 is one of the last RTX 40-series graphics cards that are still readily available around MSRP. I found one for $329 at Newegg, and it’s an overclocked model, meaning slightly faster performance than the base version. However, you might as well just buy a used RTX 4060 if you find it from a trustworthy source, as that’ll cost you a whole lot less. The RTX 5060 and the RTX 4060 have a lot in common. Spec-wise, they’re not at all far apart, although Nvidia’s newer Blackwell architecture and the switch to GDDR7 VRAM give the newer GPU a bit more oomph. But, unfortunately, both cards share the same 8GB RAM — an increasingly small amount in today’s gaming world — and the same narrow 128-bit bus. Some reviewers note that the RTX 5060 isn’t far ahead of the RTX 4060 in raw performance. The newer card gets the full benefit of Nvidia’s Multi-Frame Generation, though. Overall, they’re pretty comparable, but if you can score a used RTX 4060 for cheap, I’d go for it. AMD Radeon RX 7600 XT (or the RX 9060 XT) Jacob Roach / Digital Trends I wasn’t a big fan of the RX 7600 XT 16GB upon launch, and I still have some beef with that card. Much like Nvidia’s options, AMD equipped its mainstream GPU with a really narrow memory interface, stifling the bandwidth and holding back its performance. Still, in the current climate, I’ll take that 16GB with the 128-bit bus over a card that has the same interface and only sports 8GB VRAM. The cheapest RX 7600 XT 16GB costs around $360, and you can find it on the shelves with ease. But it’s the same scenario here — if you can find it used from a trustworthy source, it might be worth it, assuming you’re on a tight budget. The state of the GPU market as of late has made me appreciate second-hand GPUs a lot more. The RX 7600 XT is slower than the RTX 5060, and it’ll fall behind in ray tracing, but it gives you plenty of RAM where Nvidia’s card offers very little. That alone makes it worthy of your consideration. AMD’s upcoming RX 9060 XT could be a great option here, too. I expect it to offer better ray tracing capabilities than the RX 7600 XT, and it’ll have the same $300 price tag as Nvidia’s RTX 5060. Nvidia GeForce RTX 5060 Ti 16GB Gigabyte If your budget is a little bit flexible, you could go one level up and get the RTX 5060 Ti with 16GB of RAM. Unfortunately, the cheapest options are at around $479 right now, which is well over the MSRP and a whopping $180 more than the RTX 5060. However, for that price, you’ll get yourself a GPU that’s better suited to stand the test of time. With 16GB of video memory and the full benefit of GDDR7 RAM, the RTX 5060 Ti 16GB offers an upgrade over the last-gen version. It’s not perfect by any stretch, though. Reviewers put the GPU below the RX 9070 non-XT, the RTX 5070, and even the RTX 4070 when you consider pure rasterization. This means no so-called “fake frames,” which is what Nvidia’s DLSS 4 delivers. That leaves the RTX 5060 Ti in an odd spot. Basically, if your budget can stretch to it, the RX 9070 and the RTX 5070 are both better cards; they’re also a lot more expensive. Intel Arc B580 Jacob Roach / Digital Trends Less demanding gamers might find an option in Intel’s Arc B580. Upon launch, the GPU surprised pretty much everyone with its excellent performance-per-dollar ratio. The downside? That ratio is now a lot less impressive, because unexpected demand and low stock levels brought the price of the Arc B580 far above its $250 recommended list price (MSRP). The Arc B580 is a little bit slower than the RTX 4060 Ti, so it’ll be slower than the RTX 5060, too. It also can’t put up a fight as far as ray tracing goes. But it’s a budget-friendly GPU and a solid alternative to the RTX 5060 if you’d rather pick up something else this time around. My advice? Wait it out Jacob Roach / Digital Trends It’s not a great time to buy a GPU. The more successful and impressive cards from this generation, such as AMD’s RX 9070 XT or Nvidia’s RTX 5070 Ti, keep selling above MSRP. Those that aren’t quite as exciting may stick around MSRP (which is where the RTX 5060 sits right now, mere days after launch) … but that doesn’t make up for their shortcomings. Given the fact that reviews of the RTX 5060 are still pretty scarce, I’d wait it out for a week or two. Read some comparisons, check out the prices, and then decide. Gambling on a GPU just because the previous generations were solid doesn’t work anymore, and that’s now clearer than ever.

Image: Zion Grassl / Nintendo Life Now that multiple Nintendo theme parks have been built (with potentially more coming down the road), it's likely on the minds of many whether they should save up the large amount of funds to make a trip out for this. While we can't make that decision for you, we've written in the past about the overall experience you'll find visiting the smaller scale version of Super Nintendo World located in Hollywood, California, and we've just visited the larger park in Orlando, Florida. We did our best to capture the lands in these early stages from as many angles as possible. From the shops and snacks, the collectible relics, and games on offer to the staff that help keep the place under control. So get ready to take a walk with us through Universal Epic Universe, Super Nintendo World, the new home of Mario, Luigi, Peach, Donkey Kong, Diddy Kong, and co. We'll soon be sharing our own thoughts on the Donkey Kong Country portion, but for now we hope you enjoy this Nintendo Life look inside the park... You'll enter Super Nintendo World through this portal — Images: Zion Grassl / Nintendo Life The sheer height of everything does a great job of convincing you you're no longer on earth — Image: Zion Grassl / Nintendo Life Gambling in the Mushroom Kingdom? Not really, but a fun minigame to play, no doubt! — Images: Zion Grassl / Nintendo Life Look through these telescopes for long enough and you may get a quick glimpse of a different world... — Images: Zion Grassl / Nintendo Life We weren't allowed to take photos on the ride itself, but we hope these help illustrate how chill and lovely Yoshi's Adventure is — Images: Zion Grassl / Nintendo Life The queue itself wasn't as vast and intoxicating as the Yoshi portion found at the Hollywood park, but we still enjoyed the little details — Images: Zion Grassl / Nintendo Life Bowser Jr. and more baddies are waiting for you in the underground — Images: Zion Grassl / Nintendo Life Even the queue for Mario Kart: Bowser's Challenge has been extended, more in line now with the Japanese park — Images: Zion Grassl / Nintendo Life Once you exit the Mario Kart ride, you'll drift around a few corners and find yourself in this massive gift shop, decorated in racing decor and equipment — Images: Zion Grassl / Nintendo Life Peach's Castle at sunset is a sight to behold — Images: Zion Grassl / Nintendo Life and look, there's the Princess herself! If you ask nicely, she may even take a photo with you — Images: Zion Grassl / Nintendo Life Located in Celestial Park (just outside of Super Nintendo World), you'll find a store adorned with stone statues of Nintendo's characters — Images: Zion Grassl / Nintendo Life Just like in Super Mario 64, don't forget to look up while you're in the shop for a surprise! — Image: Zion Grassl / Nintendo Life Again, we beg of you. Let us buy miniature versions to take home — Images: Zion Grassl / Nintendo Life We're so glad to see Mario and Bowser could set aside their differences for a moment to pose for this photo...unless Bowser is planning a sneak attack? — Image: Zion Grassl / Nintendo Life Just outside the shop, you'll find this fountain which makes for a nice spot to stop and take a breather if you need, just make sure you've applied some sunscreen to help beat that angry heat — Images: Zion Grassl / Nintendo Life Now let's head back inside and roll on over to the Donkey Kong Country portion of Super Nintendo World! — Image: Zion Grassl / Nintendo Life Believe it or not, you can choose to get tossed through that barrel — Images: Zion Grassl / Nintendo Life Aside from the main Minecart attraction, there are a few other ways to spend your time in the countryside — Images: Zion Grassl / Nintendo Life We found Funky's plane, which some humans seem to have converted into a shop for him! You'll find lots of swag featuring the dynamic duo, but nothing here features Dixie or even Funky Kong. At the time of writing, Funky himself remains to be seen as well — Images: Zion Grassl / Nintendo Life Donkey Kong, however, was out in full force! At the ready with fist bumps for anyone willing to admire his banana hoard — Images: Zion Grassl / Nintendo Life DK only comes down from his hut every now and again (probably just to make sure the batch of bananas remains safe and sound), so go say "OKAY" and snap a picture with him if you can! — Image: Zion Grassl / Nintendo Life Cranky Kong and Squawks can found within the park bickering away at each other, but we'll let you discover them on your own... — Images: Zion Grassl / Nintendo Life If you're feeling something cold and sweet, you can try the DK Crush Float! An chilly desert made up of banana and pineapple soft serve, pineapple Fanta soda, sprinkles and...uhhh...caramel popcorn? — Images: Zion Grassl / Nintendo Life Alright, it's time we make our way into the queue for the main attraction of Donkey Kong Country, Mine-Cart Madness! There's not as much to see here as there is in the Mario Kart queue, but there are two key players that make this line completely worth the wait... — Images: Zion Grassl / Nintendo Life We weren't allowed to take photos on Mine-Cart Madness either, but we did our best to capture a few areas we could see from within the park! For Donkey Kong Country fans, it's something you absolutely have to ride if you're here and able — Images: Zion Grassl / Nintendo Life The park takes on an entirely new image at night, adding a soft neon glow to most things, even turning the ride itself into something more reminiscent of a dark ride at times — Images: Zion Grassl / Nintendo Life Now that we've somehow managed to spend all day in Super Nintendo World, let's make our way back through the Mario portion and head towards exit gate. Just make sure to not wake any of the piranha plants on our way out — Images: Zion Grassl / Nintendo Life With that, our time at Super Nintendo World comes to a close! We hope you had fun roaming the park with us. Let's give a round of applause to all the park staff that made our day so special and smooth! — Image: Zion Grassl / Nintendo Life Image: Zion Grassl / Nintendo Life Universal Epic Universe is now officially open to the public. Travel costs for this trip and access to the park were provided by Universal. Get the most from your visit to Hollywood, CA Share:0 1 Zion's been crafting videos and photos with our team for over half a decade now. While you'll usually find Zion playing RPGs, platformers, and adventure games, anything with a good story is sure to be right up his alley. For an on brand example: MOTHER 3 may not be recognized much by the Western side of Nintendo, but he still found a way to play it anyways and hopes it makes it way to the West officially so others can enjoy it more easily. Hold on there, you need to login to post a comment... Related Articles Feature: Universal Won't Say Anything About A Zelda Theme Park, But They Don't Have To Let's use the Lens of Truth Gallery: Nintendo Gives Us A Closer Look At Its New Store In The US Update: Now open!