News for hackers. Stuff that matters.

A comment on DNS traffic can leak outside the VPN tunnel on Android. Parent comment

Re:DNS traffic can leak outside the VPN tunnel on Android by yencabulator on Friday May 03, 2024 @01:32PM (#40250148)
Mullvad is trying pretty darn hard to be as far from "just trust me bro" as is feasible. If you do take their word for how they run their systems (/are working toward), their servers are diskless (what logs?), will only run software signed by their infrastructure team, and will remotely attest that their software has not been tampered with.

This is so very, very, far away from the typical VPN company that any such comparison sounds ridiculous to me.

Just the pretense of doing all this work costs so much that a greedy biz bro simply wouldn't.

https://github.com/mullvad/system-transparency

https://www.system-transparency.org

https://news.ycombinator.com/item?id=29903695

[ Parent | on HN ]
Re:DNS traffic can leak outside the VPN tunnel on Android by kfreds on Friday May 03, 2024 @01:48PM (#40250317)
Thank you for noticing! System Transparency is taking way longer to figure out, design and build than I expected. On the other hand the project is quite ambitious, and our work on ST has sprouted two additional OSS projects:

- https://www.sigsum.org (a transparency log with witness cosigning)

- https://tillitis.se (an open-source hardware FPGA-based security key with measured boot)

[ Parent | on HN ]
Re:DNS traffic can leak outside the VPN tunnel on Android by fragmede on Friday May 03, 2024 @03:54PM (#40251662)
> a greedy biz bro simply wouldn't.

On the other hand, if it were an NSA honeypot, doing all that work would easily be worth the cost. Personally, I don't think they are, so I'm merely pointing out that there are angles other than totally above-board honest legitimate reasons, and "greedy biz bro".

[ Parent | on HN ]
Re:DNS traffic can leak outside the VPN tunnel on Android by yencabulator on Friday May 03, 2024 @03:59PM (#40251731)
For sure. Them being Swedes with a long track record decreases that probability a lot.
[ Parent | on HN ]