6 ms·

This feels like mullad is trying to tell us something? Or, maybe, it's just slightly inept at lobbying for their cause? It should really end with a specific ca

This feels like mullad is trying to tell us something? Or, maybe, it's just slightly inept at lobbying for their cause? It should really end with a specific call to action, or at least mention if there's any legislation going through the process right now that needs support or opposition? I guess the call-to-action is to use Mullvad (which I happen to do, and can't complain about). For Germany, I will add http://freiheitsrechte.org/ http://freiheitsrechte.org/ as the local equivalent of ACLU & EFF that one might want to join.

SV_BubbleTime 5y ago
Do take into consideration that this is a Mullvad VPN ad.
Semaphor 5y ago
Never heard of GFF, thanks for the link. For anyone who speaks German, the wikipedia article [0] has a decent summary of them. [0]: https://de.wikipedia.org/wiki/Gesellschaft_f%C3%BCr_Freiheitsrechte https://de.wikipedia.org/wiki/Gesellschaft_f%C3%BCr_Freiheit...
maqp 5y ago
You might want to remind people what commercial VPNs are good for: it masks the IP from _COMMERCIAL_ entities. It doesn't protect from the NSAs of the world because they have no restrictions in what VPN foreign servers they compromise, and FVEY routinely bypasses constitutional protections by compromising servers of opposing countries, e.g. GCHQ and NSA exchange data they extract from the opposing countries citizens. Mullvad and other VPNs only provide trivial layer of IP address masking, they don't automatically block the endless list of tracking elements from HTTP headers to web bugs, LSOs, JWTs, cookies, webRTC, or canvas fingerprinting, and user actions on the site. It's also the case simply downloading a bunch of browser plugins will probably make your browser look unique, if it wasn't already. The best protection you have for anonymous browsing is with the Tor Browser, where every Tor user falls into three buckets depending on the privacy slider setting. Commercial VPN to access the Internet is mostly a "feel good" service that offloads trust under foreign jurisdiction that might not e.g. have laws wrt. torrenting, but don't think for a second it provides safeguards against governments. It's not that Wireguard isn't excellent protocol, it's that the server is performance aside, just an ordinary computer that can be compromised invisibly with one expensive zero-day and a persistent rootkit, and there's nothing the companies can do about it.
- elliekelly 5y ago
  > Mullvad and other VPNs only provide trivial layer of IP address masking, they don't automatically block the endless list of tracking elements from HTTP headers to web bugs, LSOs, JWTs, cookies, webRTC, or canvas fingerprinting, and user actions on the site. I’ve been a Mullvad user for a few years now and I’ve been quite happy with them but one thing I’ve noticed is that, no matter how I’ve got Mullvad or my browser configured, BBC/Channel 4 knows I’m not actually in the UK. If anyone has any idea how they’re getting my location I’d be curious to know.
  - stavros 5y ago
    Maybe they just assume that anyone on Mullvad isn't in the UK?
  - q3k 5y ago
    > BBC/Channel 4 knows I’m not actually in the UK. If anyone has any idea how they’re getting my location I’d be curious to know Plenty ways to figure out you're connecting from behind a VPN. Aggressively filtering for well known residential address space, detecting suspicious changes in traffic patterns from shared blocks/IPs used by VPN companies, detecting split DNS behaviour, detecting much higher latency and/or lower TTL between the client and server than what's expected/average within that public address space, detecting unexpectedly low MSS/MTU on the segment behind NAT, ...
  - codezero 5y ago
    You might be sending a language in the request header (many browsers do this by default), something like en-gb. I bet there are a few other areas this localization information leaks.
Enginerrrd 5y ago
>This feels like mullad is trying to tell us something? I agree: >If you would like to communicate in a truly safe manner, do not trust any 3rd party – encrypt yourself. Do not use any US-based service for anything secret, especially if you are a company or government handling PII information.

SV_BubbleTime 5y ago

Do take into consideration that this is a Mullvad VPN ad.

Semaphor 5y ago

Never heard of GFF, thanks for the link. For anyone who speaks German, the wikipedia article [0] has a decent summary of them. [0]: https://de.wikipedia.org/wiki/Gesellschaft_f%C3%BCr_Freiheitsrechte https://de.wikipedia.org/wiki/Gesellschaft_f%C3%BCr_Freiheit...

maqp 5y ago

You might want to remind people what commercial VPNs are good for: it masks the IP from _COMMERCIAL_ entities. It doesn't protect from the NSAs of the world because they have no restrictions in what VPN foreign servers they compromise, and FVEY routinely bypasses constitutional protections by compromising servers of opposing countries, e.g. GCHQ and NSA exchange data they extract from the opposing countries citizens. Mullvad and other VPNs only provide trivial layer of IP address masking, they don't automatically block the endless list of tracking elements from HTTP headers to web bugs, LSOs, JWTs, cookies, webRTC, or canvas fingerprinting, and user actions on the site. It's also the case simply downloading a bunch of browser plugins will probably make your browser look unique, if it wasn't already. The best protection you have for anonymous browsing is with the Tor Browser, where every Tor user falls into three buckets depending on the privacy slider setting. Commercial VPN to access the Internet is mostly a "feel good" service that offloads trust under foreign jurisdiction that might not e.g. have laws wrt. torrenting, but don't think for a second it provides safeguards against governments. It's not that Wireguard isn't excellent protocol, it's that the server is performance aside, just an ordinary computer that can be compromised invisibly with one expensive zero-day and a persistent rootkit, and there's nothing the companies can do about it.

elliekelly 5y ago
> Mullvad and other VPNs only provide trivial layer of IP address masking, they don't automatically block the endless list of tracking elements from HTTP headers to web bugs, LSOs, JWTs, cookies, webRTC, or canvas fingerprinting, and user actions on the site. I’ve been a Mullvad user for a few years now and I’ve been quite happy with them but one thing I’ve noticed is that, no matter how I’ve got Mullvad or my browser configured, BBC/Channel 4 knows I’m not actually in the UK. If anyone has any idea how they’re getting my location I’d be curious to know.
- stavros 5y ago
  Maybe they just assume that anyone on Mullvad isn't in the UK?
- q3k 5y ago
  > BBC/Channel 4 knows I’m not actually in the UK. If anyone has any idea how they’re getting my location I’d be curious to know Plenty ways to figure out you're connecting from behind a VPN. Aggressively filtering for well known residential address space, detecting suspicious changes in traffic patterns from shared blocks/IPs used by VPN companies, detecting split DNS behaviour, detecting much higher latency and/or lower TTL between the client and server than what's expected/average within that public address space, detecting unexpectedly low MSS/MTU on the segment behind NAT, ...
- codezero 5y ago
  You might be sending a language in the request header (many browsers do this by default), something like en-gb. I bet there are a few other areas this localization information leaks.

Enginerrrd 5y ago

>This feels like mullad is trying to tell us something? I agree: >If you would like to communicate in a truly safe manner, do not trust any 3rd party – encrypt yourself. Do not use any US-based service for anything secret, especially if you are a company or government handling PII information.