News for hackers. Stuff that matters.
Re:DNS traffic can leak outside the VPN tunnel on Android by radicality on Friday May 03, 2024 @11:39AM (#40248922)
I’ve been using and still using Mullvad but also getting worried. I live in nyc and in the last few months I’ve seen a _lot_ of ads from them. Huge billboards in high-traffic areas. Full-sized ads on a side of a bus. A whole subway car just with mullvad ads.

Some of the ads also felt deceptive making it seem like it will prevent all your online tracking, even though we know that’s not the case.

Re:DNS traffic can leak outside the VPN tunnel on Android by fernandotakai on Friday May 03, 2024 @12:01PM (#40249192)
they do advertise, but they try to keep traditional (instead of influencers) https://mullvad.net/en/help/policy-reviews-advertising-and-a...
Re:DNS traffic can leak outside the VPN tunnel on Android by kfreds on Friday May 03, 2024 @01:58PM (#40250428)
> Some of the ads also felt deceptive making it seem like it will prevent all your online tracking, even though we know that’s not the case.

I'm sorry to hear that. For what it's worth our marketing colleagues make a big effort to minimize the risk of such interpretations. Sometimes a really snappy string of words can be interpreted multiple ways. There's also only so many words we can put on an ad before it gets messy. We do try hard to make the nuances clear on our website, which ultimately is where any new users will have to go in order to buy the service.

Re:DNS traffic can leak outside the VPN tunnel on Android by woodruffw on Friday May 03, 2024 @02:43PM (#40250870)
I’m a big fan of your service, but I agree with GP. I rode the subway yesterday and saw a Mullvad ad that strongly implied that a VPN is adequate protection against data brokers and data collection on websites.

It certainly wasn’t the most egregious VPN ad I’ve ever seen, but it was disappointing to see Mullvad imply privacy properties for VPNs knowing that ordinary people don’t understand cookies, sessions, fingerprinting, or JavaScript.

Re:DNS traffic can leak outside the VPN tunnel on Android by kfreds on Friday May 03, 2024 @06:18PM (#40253002)
Did the ad in fact talk about the VPN by itself, or in conjunction with the Mullvad Browser?

In any case we make the most important nuances clear on our landing page, and in other places on our website.

Re:DNS traffic can leak outside the VPN tunnel on Android by woodruffw on Friday May 03, 2024 @09:53PM (#40254189)
I believe it just said Mullvad, which I interpreted to be the VPN. It was on the NYC subway.
Re:DNS traffic can leak outside the VPN tunnel on Android by wepple on Friday May 03, 2024 @03:50PM (#40251618)
Sorry, not buying it. To claim that you stop online ad networks is a downright falsehood and you know it.

That copy should’ve never made it past basic checks for legitimacy.

Or alternatively: feel free to describe to HN how Mulvad protects users against ad networks.

Re:DNS traffic can leak outside the VPN tunnel on Android by nickburns on Friday May 03, 2024 @05:02PM (#40252355)

  To claim that you stop online ad networks is a downright falsehood and you know it.
can you link to these remarks? i can't see kfreds making any reference to ad networks anywhere.
Re:DNS traffic can leak outside the VPN tunnel on Android by wepple on Saturday May 04, 2024 @06:32AM (#40256498)
I’m going to make sure to photograph the NYC subway ads next time I see them
Re:DNS traffic can leak outside the VPN tunnel on Android by nickburns on Saturday May 04, 2024 @07:52AM (#40256958)
ah, now i understand. your earlier comment very much read like you were accusing kfreds personally of making such a statement about ad networks. but you meant to say one (or more) of the ads you've seen yourself appears to makes such a claim. thanks for clarifying.
Re:DNS traffic can leak outside the VPN tunnel on Android by wepple on Wednesday May 08, 2024 @05:11PM (#40302751)
Follow up: I just took this photo: https://ibb.co/v3rdHcm
Re:DNS traffic can leak outside the VPN tunnel on Android by kfreds on Friday May 03, 2024 @05:49PM (#40252794)
> feel free to describe to HN how Mulvad protects users against ad networks.

A VPN is not enough for privacy. But in combination with a privacy-focused browser, you make sure to block third-party cookies and other tracking technologies used by the data collectors.

That's why we partnered with the Tor Project to develop Mullvad Browser – a browser designed to minimize tracking and fingerprints.

Please also note that this information is clearly displayed on our landing page. We don't want people using our service for things it's not designed for.

Re:DNS traffic can leak outside the VPN tunnel on Android by wepple on Saturday May 04, 2024 @06:33AM (#40256504)
In combination?

The browser piece is doing almost all of the work against ad networks, isn’t it?

Which part of defense against ad networks does a VPN contribute to?

Re:DNS traffic can leak outside the VPN tunnel on Android by robertlagrant on Friday May 03, 2024 @07:02PM (#40253292)
> Sorry, not buying it. To claim that you stop online ad networks is a downright falsehood and you know it.

Where do they claim their VPN stops online ad networks?

Re:DNS traffic can leak outside the VPN tunnel on Android by wepple on Saturday May 04, 2024 @06:32AM (#40256493)
The NYC subway ads
Re:DNS traffic can leak outside the VPN tunnel on Android by robertlagrant on Saturday May 04, 2024 @04:06PM (#40259947)
Can you point me at the one you're talking about, please?
Re:DNS traffic can leak outside the VPN tunnel on Android by wepple on Wednesday May 08, 2024 @05:10PM (#40302742)
I literally just took this photo right now (2024-05-08) https://ibb.co/v3rdHcm
Re:DNS traffic can leak outside the VPN tunnel on Android by roncesvalles on Sunday May 05, 2024 @02:19AM (#40262669)
They do offer DNS-level ads filtering when you enable the VPN.
Re:DNS traffic can leak outside the VPN tunnel on Android by trelane on Friday May 03, 2024 @05:30PM (#40252603)
There are settings to help with that, though.

https://mullvad.net/en/blog/aiding-to-break-habits-gambling-...

https://mullvad.net/en/blog/how-were-knocking-down-ads-and-t...

It's not going to prevent everything, but it'll definitely help.