Mullvad VPN was subject to a search warrant

Re:Mullvad VPN was subject to a search warrant by justsomehnguy on Thursday April 20, 2023 @09:08AM (#35639365)

> Mullvad could have been, and maybe even still is, lying about how they operate

Could they? Sure.

Do they have anything on me?

    * One BTC transfer
    * IPs where I'm connecting from (if they are lying and storing them)
    * My traffic (if they are lying and storing it)
    * My unencrypted traffic (if they are lying and storing it)

Do they have ... on me?

    * Email? - nope
    * Phone number? - nope
    * Credit card? - nope
    * My first name, family name? - nope
    * My address? - nope
    * My mother's maiden name? - nope

Because I never provided it to them because they never asked for them.

[ Parent | on HN ]

Re:Mullvad VPN was subject to a search warrant by ursuscamp on Thursday April 20, 2023 @09:22AM (#35639543)

Might I suggest for the future: https://vpn.sovereign.engineering

You can pay a Bitcoin lightning invoice on this site and get a redeemable Mullvad voucher instantly. Extremely convenient. Since you've only done 1 BTC transaction, I assume it was a large one for lots of time. However, when your time runs out, this option is great. It's an extra layer of privacy and you don't have to wait for the transaction to settle on chain.

[ Parent | on HN ]

Re:Mullvad VPN was subject to a search warrant by pulpfictional on Thursday April 20, 2023 @10:55AM (#35641063)

Monero is even better

[ Parent | on HN ]

Re:Mullvad VPN was subject to a search warrant by echoer_lyrist on Thursday April 20, 2023 @11:31AM (#35641655)

Did you obtain the BTC that you used for the purchase from an exchange that requires PII?

[ Parent | on HN ]

Re:Mullvad VPN was subject to a search warrant by justsomehnguy on Thursday April 20, 2023 @11:58AM (#35642051)

Exchange has my CC number and the 'card holder' (though I never put my name there, lol). A non-business card is probably the most easy way to identify someone globally.

If someone comes to exchange - they could identify me (and they can just tap their server to listen to email which do have all the transaction info, including CC# in the plaintext, lol).

To establish a correlation between my wallet and Mullvad account someone needs to find that transaction in Mullvad customer data. Which - they claim they don't have.

So yes, someone can identity what I bought services from Mullvad and... nothing more?

[ Parent | on HN ]

Re:Mullvad VPN was subject to a search warrant by tgsovlerkhgsel on Thursday April 20, 2023 @03:13PM (#35644777)

Unless you're using another VPN/proxy/Tor/... to connect to the VPN, the IP where you're connecting from (respectively the full 4-tuple including source/destination port) likely does identify your address.

[ Parent | on HN ]

Re:Mullvad VPN was subject to a search warrant by justsomehnguy on Thursday April 20, 2023 @03:56PM (#35645407)

Of course. It doesn't help what I'm getting pretty much the same IPs from my provider.

Double (triple|quad) hop, tied to different entities is necessary if you want at least plausible deniability. Thankfully I don't do things what may be of the interest of someone who can raid Mullvad offices.

But I recently discovered a VPS provider who only needs an email address to confirm an order, so it can be used as a bootstrap for a something pretty anonymous. Still needs an email, but as I said in some other comment recently, you can do that (if you are okay with leaving some traces) with a Google device with WiFi only capability.

[ Parent | on HN ]