6 ms·
Remember — (from their own article announcing these servers): > Running the system in RAM does not prevent the possibility of logging. It does however minimise
by mbreese 4y ago
Remember — (from their own article announcing these servers):
> Running the system in RAM does not prevent the possibility of logging. It does however minimise the risk of accidentally storing something that can later be retrieved.
This doesn’t mean you can’t be logged. Running in RAM just means that any system level logging is transient and largely accidental. But if there were a need to specific logging, data could always be sent to a different node with disks. From Mullvad’s point of view, there is a reliability benefit to having diskless nodes. But from a privacy point of view, your access could still be logged, if required. But it would probably require more “active” monitoring than “passive”/accidental logging.
https://mullvad.net/en/blog/2022/1/12/diskless-infrastructure-beta-system-transparency-stboot/ https://mullvad.net/en/blog/2022/1/12/diskless-infrastructur...
- _8j50 4y agoNot if the whole os is a VM in ram, still though, network logging can happen by middleware.
- preisschild 4y agoSure you can. For example, with rsyslog you can just send all logs over the network to a logging server (which has disks).
- _8j50 4y agoThat's the network, someone looking at the logs via ssh is also a leak by that logic. Of course!
- deleted 4y ago[deleted]
- matja 4y agoEven without network logging, the hypervisor can still access the memory of the VM, parsing the kernel process and paging structures to read process memory, which can store transient logging information. Things like AMD SEV/SEV-ES are designed to mitigate that aspect, the implementation of which can be proven to end-users of the VM by remote attestation.
- stjohnswarts 4y agoThat's not necessarily the case, vendors have VMs that can spin up with encrypted memory so that only the person spinning them up can see what is in the memory. All AMD and Intel processors have capabilities for this. Just in case you didn't know.
- gigatexal 4y ago
- jallasprit 4y agoAnother tving with mullvad is that they let you send envelopes with cash in it instead of using your credit card
- afiori 4y agoAnd they stopped accepting subscriptions so that they don't even have to remember payment information* * for longer than required by law
- rekoil 4y agoI removed my subscription to add a voucher I received at a security conference, was meaning to re-add it, but apparently I can't now. I mean I get why they removed it, but still, it was a nice convenience.
- panick21_ 4y agoMullvad spends money on open source development and is actively trying to increase privacy technology and being transparent what their servers run. Sure you can never prove anything 100% but VPN providers can still make moves that make them more or less credible.
- Spooky23 4y agoSure. Apple made a big production about privacy and the Feds made a big production about how they need access to things. Then they both stopped. If you need this sort of anonymity, VPNs aren’t the way.
- panick21_ 4y agoYes, we all understand that if you want best of breed anonymity you need Tor. However, I still appreciate a vendor making a credible effort with privacy just as an everyday value. If I'm gone use a VPN I much rather use a vendor that does a credible job at privacy protection.