How private is my VPN?

Re:How private is my VPN? by tolleydbg on Friday August 13, 2021 @07:05AM (#28167548)

As a researcher studying VPN security, I have tested a lot of VPN providers, and there are few that stand out as trustworthy. Mullvad is mentioned in this thread several times for a reason. When we publicly disclosed CVE-2019-14899, they had a patch within a day and included it in the release - all within a week. To the best of our knowledge, Mullvad was the only provider and WireGuard was the only protocol to take swift action to mitigate the vulnerability.

This comment is only about the trustworthiness of the provider and not of VPNs in general, which I'm still hesitant about. I'll provide a link for our paper exploring CVE-2019-14899 and attacks we've developed since then:

https://www.usenix.org/system/files/sec21-tolley.pdf

There's also a blog post, which is quicker to read and written for a general tech audience:

https://breakpointingbad.com/2020/05/25/Vintage-Protocol-Non...

[ Parent | on HN ]

Re:How private is my VPN? by dexwell on Friday August 13, 2021 @08:23AM (#28168023)

I've seen people here mention IVPN in the same breath as Mullvad; do you have any insight on how they compare? AFAIK Mullvad is based in Sweden, which is a Fourteen Eyes country, whereas IVPN is based in Gibraltar, which is not.

[ Parent | on HN ]

Re:How private is my VPN? by blueflow on Friday August 13, 2021 @08:30AM (#28168068)

Gibraltar is a UK overseas territory and houses GCHQ facilities, therefore a fives eyes territory.

[ Parent | on HN ]

Re:How private is my VPN? by dexwell on Friday August 13, 2021 @09:47AM (#28168761)

Good to know! If we go by jurisdiction, it seems that surprisingly NordVPN (Panama) is better than these two.

[ Parent | on HN ]

Re:How private is my VPN? by tolleydbg on Saturday August 14, 2021 @10:21AM (#28180863)

NordVPN relocated to the United States late last year.

[ Parent | on HN ]