Live data from Hacker News

Latest Mozilla VPN features

blog.mozilla.org

51–60 of 184 posts

Re: Latest Mozilla VPN features

#51
post #19

Earlier quoted context omitted.

Hi! I'm one of Mullvad's founders. I can't speak for Mozilla, but we have our own desktop and mobile apps because it enables us to do more privacy-preserving things with a higher assurance. Consider for instance DNS leaks, Teredo leaks, IPv6 leaks, esoteric DHCP directives that can hack your routing tables, and so on. And these are just a few of the things we were early in mitigating correctly. Consider also the tigh…

I thought Mullvad recommends WireGuard and that your app uses OpenVPN? On Mac, WireGuard is certainly faster to connect and more stable than the Mullvad app.

Hi! No, our app uses WireGuard by default.

https://mullvad.net/en/help/wireguard-macos-app/

Re: Latest Mozilla VPN features

#53

Earlier quoted context omitted.

While Mullvad provide those configuration files to customers who use their service directly, customers who are subscribed to Mozilla VPN don't have access to these configuration files, which is what makes it especially irritating to me.

I think the market segmentation is that more savvy users would bypass Mozilla and sub directly with Mullvad.

Which is fine except that I would go with Moz VPN specifically because I want to give them money.

Mozilla seems to make it really hard to pay them for goods and services.

Re: Latest Mozilla VPN features

#54
post #21

I feel like most of those VPN services are using very borderline marketing and like to keep a lot of information blurry. As far as I know, in a lot of country (like France) it is a legal obligation to keep logs and be able to identify one of your customer if the police demands it. Therefore, if you have server in France or any country with similar rules, you can't operate a "0 log" service. And since those kinds of s…

Another benefit is that VPNs raise the bar for investigation. You are not safe from the FBI or interpol, but for "petty crimes" like pirating you are safe(r).

Comcast basically has automated the process of sending you a cease and desist if they detect you are torrenting something you shouldn't. Mozilla doesn't.

Re: Latest Mozilla VPN features

#55

Earlier quoted context omitted.

Depends on the VPN. ExpressVPN is HK/CCP owned, so I wouldn't worry too much about my privacy being violated for petty copyright infringements (BitTorrent).

> ExpressVPN is HK/CCP owned Thank you for this callout. Had no idea. Comparing VPN services, I’ve found ExpressVPN to be highly rated. The aforementioned callout means ExpressVPN may not be the best service for me. In lieu of specific technical criteria regarding VPN services, who are the go-to (aka “top of mind” or “A list”) providers that privacy conscious, technically adroit (e.g. web dev with some sysadmin knowl…

I've never used any vpn myself, but whenever I come across the topic in tech circles people seems to recommend mullvad. Can't vouch for them or anything, but might be worth looking into.

Re: Latest Mozilla VPN features

#56
post #21

I feel like most of those VPN services are using very borderline marketing and like to keep a lot of information blurry. As far as I know, in a lot of country (like France) it is a legal obligation to keep logs and be able to identify one of your customer if the police demands it. Therefore, if you have server in France or any country with similar rules, you can't operate a "0 log" service. And since those kinds of s…

I agree. A VPN should only ever be used for the following: - Shifting traffic over a VPN when using untrusted/sketchy wifi hotspots - Spoofing your geo-location to use geo-specific content And that's it. If privacy is your goal, Tor is much more suitable since it's not a single-hop proxy like a VPN and compartments all your traffic. (But of course Tor is not a silver bullet and there are caveats).

What about tunnelling into a trusted network?

That's what a VPN is really for. The other uses are more side effects exploiting the encryption and tunnelling properties of VPN rather than the original intended purpose of a VPN.

Re: Latest Mozilla VPN features

#57
post #21

I feel like most of those VPN services are using very borderline marketing and like to keep a lot of information blurry. As far as I know, in a lot of country (like France) it is a legal obligation to keep logs and be able to identify one of your customer if the police demands it. Therefore, if you have server in France or any country with similar rules, you can't operate a "0 log" service. And since those kinds of s…

> As far as I know, in a lot of country (like France) it is a legal obligation to keep logs and be able to identify one of your customer if the police demands it.

Not for all types of services. ISPs are sometimes under obligation to log, but VPN services don't belong in that category.

I can't speak for others but we have contacts with legal experts (in a few jurisdictions) that alert us to changing laws. Ultimately if a country required us to start logging we would just cancel all of our machines there and leave.

On the topic of trustworthiness, you are completely right of course that VPN users put a lot of trust in their VPN provider. There is also the lemon market aspect - the information and competence asymmetry between user and operator. That begs the question of how to ascertain trustworthiness.

We think things like this help:

https://mullvad.net/blog/2018/10/17/signals-trustworthy-vpns...

https://mullvad.net/blog/2019/6/3/system-transparency-future...

Re: Latest Mozilla VPN features

#58

Earlier quoted context omitted.

Depends on the VPN. ExpressVPN is HK/CCP owned, so I wouldn't worry too much about my privacy being violated for petty copyright infringements (BitTorrent).

> ExpressVPN is HK/CCP owned Thank you for this callout. Had no idea. Comparing VPN services, I’ve found ExpressVPN to be highly rated. The aforementioned callout means ExpressVPN may not be the best service for me. In lieu of specific technical criteria regarding VPN services, who are the go-to (aka “top of mind” or “A list”) providers that privacy conscious, technically adroit (e.g. web dev with some sysadmin knowl…

Mullvad is probably the best choice for most. It's the company Mozilla is relying on for their VPN service as well.

Re: Latest Mozilla VPN features

#59
post #23

It's really disappointing to me that Mozilla VPN didn't support Linux from the get-go, and even now, from their FAQ [1], apparently only supports Ubuntu. The code for the client is open source, and can be built on other distributions, but the more pressing question to me is why their own client is necessary at all. Mullvad (which this VPN is based on) allows you to just download WireGuard/OpenVPN config files, which…

Like it's absolutely wild that their VPN implementation requires their client to work. Basically every other VPN provider will expose endpoints for IPSec, OpenVPN, WireGuard, etc. etc. for instant compatibility with clients that can't run your pretty app. Sad that PIA tanked their rep because their Linux support was top notch. They even had a script that would set up NetworkManager profiles for you.

They still have scripts for generating configs manually -- maybe not NetworkManager, but I use it on a server to establish a wireguard tunnel.

https://github.com/pia-foss/manual-connections

Re: Latest Mozilla VPN features

#60
post #27
post #21

I feel like most of those VPN services are using very borderline marketing and like to keep a lot of information blurry. As far as I know, in a lot of country (like France) it is a legal obligation to keep logs and be able to identify one of your customer if the police demands it. Therefore, if you have server in France or any country with similar rules, you can't operate a "0 log" service. And since those kinds of s…

The entire VPN industry is really shady. Their marketing is entirely based on creating literal FUD (fear, uncertainty, doubt) and sell their service as the perfect and cheap solution. The presence they have on youtube ads and other mainstream platform ads is really disturbing.

I hear what you're saying but that generalization isn't fair.

Check out IVPN for instance. They do a lot of things right:

https://www.ivpn.net/ethics/

Post reply on HN