Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Latest Mozilla VPN features

blog.mozilla.org

Post reply on HN
Print view View original

41–50 of 184 posts

Re: Latest Mozilla VPN features

#41

Post by Spivak »

purjolok wrote: post #31
Spivak wrote: post #28

Earlier quoted context omitted.

But it throws compatibility with devices that don't support your client out the window. Like I might want to have an entire VLAN on my home network route all traffic through the VPN which would happen through my router. But my router only supports common VPN protocols like IPSec, OpenVPN, and WireGuard. Sure, I could make it work with a separate Linux server running your app and some routing but that's far more work…

Mullvad also provides OpenVPN and Wireguard config files. https://mullvad.net/sv/help/tag/other-vpn-software/

So then what's with all the claims that Mozilla VPN doesn't work with them? I held off trying Moz's VPN service because of people saying it didn't work and not finding any official support.

Re: Latest Mozilla VPN features

#42

Post by ignoramous »

ComodoHacker wrote: post #35
cyberlab wrote: post #26

Earlier quoted context omitted.

I agree. A VPN should only ever be used for the following: - Shifting traffic over a VPN when using untrusted/sketchy wifi hotspots - Spoofing your geo-location to use geo-specific content And that's it. If privacy is your goal, Tor is much more suitable since it's not a single-hop proxy like a VPN and compartments all your traffic. (But of course Tor is not a silver bullet and there are caveats).

- Routing traffic over untrusted home/office ISP - Censorship circumvention

> Censorship circumvention

In some countries, censorship circumvention usually require sophistication that not all VPNs provide. A few like getoutline.com, getlantern.io, and psiphon.ca specialize in that.

In most countries, VPNs aren't even needed to circumvent censorship. Apps like getintra.org, GreenTunnel employ simpler techniques to bypass firewalls.

> Routing traffic over untrusted home/office ISP

With TLS v1.3 and DoH / DoT, I think VPNs may no longer be required if "hiding traffic" is the only need. Hiding IPs, however; (of both the client's from the server and the server's from the ISP) would continue to require the use of VPNs.

Re: Latest Mozilla VPN features

#43

Post by opheliate »

Spivak wrote: post #41
purjolok wrote: post #31

Earlier quoted context omitted.

Mullvad also provides OpenVPN and Wireguard config files. https://mullvad.net/sv/help/tag/other-vpn-software/

So then what's with all the claims that Mozilla VPN doesn't work with them? I held off trying Moz's VPN service because of people saying it didn't work and not finding any official support.

While Mullvad provide those configuration files to customers who use their service directly, customers who are subscribed to Mozilla VPN don't have access to these configuration files, which is what makes it especially irritating to me.

Re: Latest Mozilla VPN features

#44

Post by zo1 »

forgotpwd16 wrote: post #24
theshrike79 wrote: post #2

Isn't Mozilla VPN just rebranded Mullvad? The only difference is that you can get Mullvad anywhere and pay anonymously without any accounts.

Also Mullvad's app has been audited.

I'm curious - Have their servers and processes been subjected to any audit like that?

Re: Latest Mozilla VPN features

#45

Post by lordofgibbons »

cyberlab wrote: post #38
sodality2 wrote: post #32

Earlier quoted context omitted.

What about avoiding copyright letters?

If someone is determined enough, they just subpoena the VPN and ask for logs. Since a VPN is a single-hop proxy, your real IP is trivially exposed. Even if the VPN provider claims they don't keep logs. There's no way of proving they don't keep logs, and you need to hope the server you connect to is not compromised in some way. And VPN providers are known to use cheap colocation servers/Virtual Private Servers which h…

Have there been any known cases of someone being identified for copywrite violation while using a VPN service?

Re: Latest Mozilla VPN features

#46

Post by wintermutestwin »

kfreds wrote: post #19
opheliate wrote: post #12

It's really disappointing to me that Mozilla VPN didn't support Linux from the get-go, and even now, from their FAQ [1], apparently only supports Ubuntu. The code for the client is open source, and can be built on other distributions, but the more pressing question to me is why their own client is necessary at all. Mullvad (which this VPN is based on) allows you to just download WireGuard/OpenVPN config files, which…

Hi! I'm one of Mullvad's founders. I can't speak for Mozilla, but we have our own desktop and mobile apps because it enables us to do more privacy-preserving things with a higher assurance. Consider for instance DNS leaks, Teredo leaks, IPv6 leaks, esoteric DHCP directives that can hack your routing tables, and so on. And these are just a few of the things we were early in mitigating correctly. Consider also the tigh…

I thought Mullvad recommends WireGuard and that your app uses OpenVPN? On Mac, WireGuard is certainly faster to connect and more stable than the Mullvad app.

Re: Latest Mozilla VPN features

#47

Post by wintermutestwin »

opheliate wrote: post #43
Spivak wrote: post #41

Earlier quoted context omitted.

So then what's with all the claims that Mozilla VPN doesn't work with them? I held off trying Moz's VPN service because of people saying it didn't work and not finding any official support.

While Mullvad provide those configuration files to customers who use their service directly, customers who are subscribed to Mozilla VPN don't have access to these configuration files, which is what makes it especially irritating to me.

I think the market segmentation is that more savvy users would bypass Mozilla and sub directly with Mullvad.

Re: Latest Mozilla VPN features

#49

Post by mistersquid »

vehemenz wrote: post #40
cyberlab wrote: post #26

Earlier quoted context omitted.

I agree. A VPN should only ever be used for the following: - Shifting traffic over a VPN when using untrusted/sketchy wifi hotspots - Spoofing your geo-location to use geo-specific content And that's it. If privacy is your goal, Tor is much more suitable since it's not a single-hop proxy like a VPN and compartments all your traffic. (But of course Tor is not a silver bullet and there are caveats).

Depends on the VPN. ExpressVPN is HK/CCP owned, so I wouldn't worry too much about my privacy being violated for petty copyright infringements (BitTorrent).

> ExpressVPN is HK/CCP owned

Thank you for this callout. Had no idea.

Comparing VPN services, I’ve found ExpressVPN to be highly rated. The aforementioned callout means ExpressVPN may not be the best service for me.

In lieu of specific technical criteria regarding VPN services, who are the go-to (aka “top of mind” or “A list”) providers that privacy conscious, technically adroit (e.g. web dev with some sysadmin knowledge but little networking knowhow) users prefer?

In other words, I’m looking for VPN recommendations but no longer trust my own Google-fu (advert rabbit hole) to discern what is a “good” choice.

Re: Latest Mozilla VPN features

#50

Post by trillic »

tgragnato wrote: post #34
kfreds wrote: post #19

Earlier quoted context omitted.

Hi! I'm one of Mullvad's founders. I can't speak for Mozilla, but we have our own desktop and mobile apps because it enables us to do more privacy-preserving things with a higher assurance. Consider for instance DNS leaks, Teredo leaks, IPv6 leaks, esoteric DHCP directives that can hack your routing tables, and so on. And these are just a few of the things we were early in mitigating correctly. Consider also the tigh…

This is great for non-techies, but I want to control my own traffic, customize the behavior of my VPNs, ... Any deviation from the standard implementation, open source or not, is a hindrance.

Mullvad allows you to use any Wireguard public key you want on your account, you can just use the standard client, generate your own keys, and do your own config.

Not an employee I just like the service.

Post reply on HN