4 ms·

In the extreme case that Obscura and Mullvad are forced to cooperate, you're right that this is the case. However, this is strictly (and much) less likely than

In the extreme case that Obscura and Mullvad are forced to cooperate, you're right that this is the case. However, this is strictly (and much) less likely than a _single_ party being pressured or even a single party's infrastructure being hacked. Another important thing to note: in our App, you can check your connected server’s public key against those listed on Mullvad’s server page, since we use the same servers as Mullvad's normal ones. It would be unheard of for a VPN provider (let alone a trustworthy one like Mullvad) to give their WireGuard private keys to a new partner.

ignoramous 2y ago
> less likely than a _single_ party being pressured or even a single party's infrastructure being hacked. Since Obscura uses a custom QUIC-based (?) protocol, you'd need to use their custom made (open core) app to pay & register with both Obscura & Mullvad. That means, all your apples are in their app-basket, which is built entirely by a single-party? Private Relay, otoh, seems like a 3 party setup (Apple, Cloudflare, Akamai)? See also: https://news.ycombinator.com/item?id=43017140 https://news.ycombinator.com/item?id=43017140
- dongcarl 2y ago
  Perhaps my answer [here](https://news.ycombinator.com/item?id=43017681 https://news.ycombinator.com/item?id=43017681) addresses your concerns! > The client software is here: https://github.com/Sovereign-Engineering/obscuravpn-client https://github.com/Sovereign-Engineering/obscuravpn-client, we also plan to make reproducible builds of our apps. In fact, I previously led the effort to revamp Bitcoin Core’s reproducible builds system to be [bootstrappable](https://bootstrappable.org/ https://bootstrappable.org/), work that is [referenced by the Tor project](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/32523 https://gitlab.torproject.org/tpo/applications/tor-browser-b...).

ignoramous 2y ago

> less likely than a _single_ party being pressured or even a single party's infrastructure being hacked. Since Obscura uses a custom QUIC-based (?) protocol, you'd need to use their custom made (open core) app to pay & register with both Obscura & Mullvad. That means, all your apples are in their app-basket, which is built entirely by a single-party? Private Relay, otoh, seems like a 3 party setup (Apple, Cloudflare, Akamai)? See also: https://news.ycombinator.com/item?id=43017140 https://news.ycombinator.com/item?id=43017140

dongcarl 2y ago
Perhaps my answer [here](https://news.ycombinator.com/item?id=43017681 https://news.ycombinator.com/item?id=43017681) addresses your concerns! > The client software is here: https://github.com/Sovereign-Engineering/obscuravpn-client https://github.com/Sovereign-Engineering/obscuravpn-client, we also plan to make reproducible builds of our apps. In fact, I previously led the effort to revamp Bitcoin Core’s reproducible builds system to be [bootstrappable](https://bootstrappable.org/ https://bootstrappable.org/), work that is [referenced by the Tor project](https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/32523 https://gitlab.torproject.org/tpo/applications/tor-browser-b...).