Dozens of VPN reviews littered the search results, and each VPN provider claimed that they’re the best in town. They also rent their instances from various providers (the names of which they disclose on their website) and I could presumably just bypass them and rent an instance with one of those providers directly.Google’ best VPN’, and you’ll be spoiled for choice. They wrote the client and they control the protocol.
Mullvad on the other hand handles 100% VPN browsing data so if they unscrupulously keep logs, they would have clean logs to begin with, nicely organized by username, which is scary. Unless I was some Snowden-like target it's unlikely they would waste a couple weeks of engineer hours to wireshark and clean the data from my instances. I can also mildly obfuscate and pollute requests using their own infrastructure and make it hard for them to extract anything meaningful about me unless they really wanted to.īasically AWS isn't already set up as a VPN service, so they'd have to put in a nonzero amount of time to extract, parse, collate, and analyze VPN logs, let alone figure out which instances among their billions are actually VPN instances, especially if I run a non-standard, modified protocol. I don't consider corporate IT or Starbucks to be trustable.ĪWS I would "trust" slightly more only because I get to implement the infrastructure and among the sea of trillions of requests they serve it would be a bit more of a challenge for them to figure out which of those requests are VPN browsing data and clean that data.
That's the same privacy as using the colo-owned machine, which, for a VPN, is the same privacy as using a generic $5/mo VPN service, as in all cases the upstream can be trivially monitored (even in the case where it's your own, tamper-evident HSM-whatever remote attestation hardware). Really though this isn't the threat model at all for someone who just wants to use a VPN, I only went there because the comment senselessly advised shipping your own hardware to the colo.
#Mullvad vs nordvpn reddit code#
Once it leaves your possession, there's not much you can do to ensure that it still has unmodified code on it (assuming standard PC hardware). There are lots of ways of hiding persistence on a system, and decades of research along these lines. If you're worried about the kind of attacks that necessitate sending your own hardware, then, regardless of who owns title to the device, the firmware being replaced to snoop on or alter what is actually in RAM is in-bounds.
#Mullvad vs nordvpn reddit software#
> which the software image can't be modified without you knowing it. I feel like for most threat models its a more than acceptable tool. I don't think you have provided any substantial argument for most commercial vpn users to switch. After all nobody has to actually target you in particular they can look for vulnerable hosts in an automated fashion. On the other hand for most people the differential between know how between you and professionals is probably sufficiently useful that you are less likely to get hacked with them than on your own. In fact a VPS or indeed any host actually has the same problem you describe in that a host is a bigger target than you and therefore more valuable. Again this breaks the example of valuables in storage. If they are attentive and competent this either will never happen or it will be for a short duration. If the vpn provider doesn't keep any logs your total exposure is that they may start collecting logs of traffic for the duration during which they are compromised. Likewise with keeping your personal traffic personal instead of having it show up on your bosses network who cares if bob has it. If your vpn usage for example is downloading movies the fact that bob the hacker knows you downloaded inception isn't very worrisome. I think the analogy fails because thats valuable isn't a good that it is simply retained or lost.
0 kommentar(er)
