Live data from Hacker News

We are removing the option to create new subscriptions

mullvad.net

41–50 of 453 posts

Re: We are removing the option to create new subscriptions

#42
post #17

This is a great idea! In practice, how would you go about this e.g. if you're using Stripe? After a few weeks, delete the customer information in Stripe?

Even if you delete it in Stripe, I very much doubt that stripe or the credit card providers will be deleting the data. Someone will know that Mr Smith has a mulvad VPN subscription. They just won't know his username on the service.

Probably true. So, how does Mullvad handle this?

Re: We are removing the option to create new subscriptions

#43

Great benefit. I also recommend to find a reputable masked card service provider if you plan to use a credit/debit card. Autopay is just another way for banks and providers to circumvent overdraft protection legislation and hopefully new legislation will remove any "perks" that providers offer for autopay services.

I would love to know if there are any of these in the EU – US friends of mine have mentioned privacy.com but I am unaware of a similar service in the UK.

Privacy.com abides by KYC. So it's not very private.

Re: We are removing the option to create new subscriptions

#44
post #23
post #18

Would it be possible to store subscription data without actually linking it to the account that is affected? Sort of like a one way encryption.

You'd have to have some form of connection, but it might be possible to design it in such a way that it could be plausibly denied. Holomorphic? All the ways I come up with (giving out keys) have the problem of how do you renew the key, and how do you cancel it, without knowing which is which.

Couldn't you give them short-lasting keys, that they can use to sign session keys?

e.g.

1. Connect to Mullvad over Tor, authenticate with real-world user ID

2. Use this to sign a blinded token

3. Use this to connect to Mullvad anonymously after some delay

The first run would be kind of dodgy, but after that you could get new session keys on a fixed schedule and switch them out at a random interval.

If they see that user A authenticates and 10 minutes later, key A comes online, that can be traced, but if you then wait a week, authorize key B, and then wait a few more days to start using it, you should be good.

In practice, this has way too many issues to work in practice. It still requires you to trust them not to e.g. log IPs and correlate it that way, so it's all just snake oil.

Re: We are removing the option to create new subscriptions

#45
Been using Mullvad for a year, give or take, and I'm very happy. Zero care to find another VPN provider. Simple, fast, and anonymous sign-up. The apps function perfectly. Never experienced a bug in the Android or Linux apps. And the Wireguard profiles work perfectly. Connections are fast and not throttled (IME). And the UI of the website and apps is minimal and to-the-point.

I hope Mullvad keeps on its current course. It's one of the most respectable companies right now, with a respectable product, and its one of the few I care to pay for on a consistent basis.

Re: We are removing the option to create new subscriptions

#49
post #31

Highly commendable position. Mullvad is leaving a ton of money on the table by doing this, but in the sea of shady VPN providers, having a provider do something proactive like this makes me want to switch.

Who are you using now?

Been using PIA for the past few years. Tried Proton but this looks really good and having the entire thread sending +1s is major. Will def give it a try.

Re: We are removing the option to create new subscriptions

#50
post #29

Have Mullvad's privacy guarantees been tested by subpoena?

This does not apply. They’re european, a subpoena from the us government wouldn’t have any effect on them.

Europe has courts, subpoenas, warrants, police, and all that too so I don't see how that affects the question? The US as mutual legal aid treaties with most European countries as well.
Post reply on HN