News for hackers. Stuff that matters.

A comment on Mullvad VPN – Infrastructure Audit Completed by Open Security. Parent comment

Re:Mullvad VPN – Infrastructure Audit Completed by Open Secu... by rvnx on Wednesday August 09, 2023 @08:02AM (#37061372)
Self-hosting also makes you vulnerable to the network hosting you (not only the hosting server itself, but also the internet transit provider) and of course the website you are visiting, as you are the only user from that source IP (rendering a VPN practically useless).
[ Parent | on HN ]
Re:Mullvad VPN – Infrastructure Audit Completed by Open Secu... by BLKNSLVR on Wednesday August 09, 2023 @08:43AM (#37061798)
There may be holes in this but:

1. |Router| -> Wireguard / OpenVPN -> |VPS|

2. |Device| -> Wifi -> |Router|

3. |Device| -> app -> |Mullvad|

= |Device| -> |VPS| -> |Mullvad| -> Internet

Can do various mixing and matching if you have more than one VPS. Again, it rearranges rather than removing the vulnerabilities, and it's pure window dressing against an organised, financed actor.

I've done this as an intellectual challenge more than anything else.

[ Parent | on HN ]
Re:Mullvad VPN – Infrastructure Audit Completed by Open Secu... by pokeymcsnatch on Wednesday August 09, 2023 @08:56AM (#37061946)
I do this, mostly for the static IP that isn't linked directly to me and my approximate location, with mullvad exit only for 'sensitive' stuff. The degree of separation is nice even if the breadcrumbs are there. Best if the VPS allows crypto or cash payments.
[ Parent | on HN ]