Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

We are removing the option to create new subscriptions

mullvad.net

Post reply on HN
Print view View original

431–440 of 453 posts

Re: We are removing the option to create new subscriptions

#431

Post by iqkznnft »

dcow wrote: post #422
iqkznnft wrote: post #330

Earlier quoted context omitted.

I've read some articles online, but I still haven't managed to understand the hype around wireguard. It's lighter than OpenVPN, but has more obscure primitives? Doesn't seem like a great trade off...

Wireguard is your plumbing layer. OpenVPN is an entire application stack. Wireguard is super simple because it's low level. If you wanted to compare something (as a user in terms of feature parity, etc.) to OpenVPN a more accurate comparison would probably be nebula or tailscale (private/mesh network management tools that are built atop wireguard). I'm a wireguard fan and it's true that its crypto is much simpler, sm…

How is openvpn easy to fuck up? I just run sudo openvpn file, and that's it...

Also, I didn't really understand any of your explanation about layers. How is openvpn an application stack? Surely applications are the applications?

Re: We are removing the option to create new subscriptions

#432

Post by 4khilles »

Night_Thastus wrote: post #423

Sweden is part of 14-eyes. I realize this may be naive or already answered, but I don't see why I should trust any service in one of those 14 countries. When things are down to the wire, can anything in Sweden really guarantee any greater level of privacy?

See: https://mullvad.net/en/help/swedish-legislation/.

Also, the Swedish government can't compel Mullvad to divulge information that it doesn't have.

Re: We are removing the option to create new subscriptions

#433

Post by 4khilles »

donkarma wrote: post #368
gesman wrote: post #305

Tip: This portable secure travel router supports MullVad (and Azire-VPN) out of the box: https://www.amazon.com/GL-iNet-GL-MT1300-Wireless-Pocket-Siz... Just input your Mullvad account number and it will upload all WireGuard configurations for all MullVad servers worldwide automatically. Perfect to use to connect to any unsecure Wi-Fi and drive all traffic via VPN in hotels, airports, coffee shops, etc...

I'd pay a lot of money for an Ethernet device that sits between the jack and the router that would make a tunnel for me. Is that what this is for WiFi??

Good news, you need less than $250. Just buy a Protectli appliance, install OPNSense on it with the wireguard plugin. Setup Mullvad config and route all traffic through the tunnel. That's it!

I've been running a similar setup for a couple years now. It's been great.

Re: We are removing the option to create new subscriptions

#434

Post by gesman »

4khilles wrote: post #433
donkarma wrote: post #368

Earlier quoted context omitted.

I'd pay a lot of money for an Ethernet device that sits between the jack and the router that would make a tunnel for me. Is that what this is for WiFi??

Good news, you need less than $250. Just buy a Protectli appliance, install OPNSense on it with the wireguard plugin. Setup Mullvad config and route all traffic through the tunnel. That's it! I've been running a similar setup for a couple years now. It's been great.

Or spend less than $80 on GL.iNet GL-MT1300 travel router

or $90 on GL.iNet GL-AX1800 Wifi-6 router with MullVad support preconfigured.

Nothing to install, tweak or have hassles with.

Re: We are removing the option to create new subscriptions

#435

Post by orf »

iqkznnft wrote: post #431
dcow wrote: post #422

Earlier quoted context omitted.

Wireguard is your plumbing layer. OpenVPN is an entire application stack. Wireguard is super simple because it's low level. If you wanted to compare something (as a user in terms of feature parity, etc.) to OpenVPN a more accurate comparison would probably be nebula or tailscale (private/mesh network management tools that are built atop wireguard). I'm a wireguard fan and it's true that its crypto is much simpler, sm…

How is openvpn easy to fuck up? I just run sudo openvpn file, and that's it... Also, I didn't really understand any of your explanation about layers. How is openvpn an application stack? Surely applications are the applications?

Wireguard is a water pipe, whereas OpenVPN is a water pipe connected to a water bottling factory connected to a bottled water shipping port.

> How is openvpn easy to fuck up? I just run sudo openvpn file, and that's it...

The configuration is what is easy to fuck up, not the command to run it

Re: We are removing the option to create new subscriptions

#436

Post by newscracker »

Night_Thastus wrote: post #423

Sweden is part of 14-eyes. I realize this may be naive or already answered, but I don't see why I should trust any service in one of those 14 countries. When things are down to the wire, can anything in Sweden really guarantee any greater level of privacy?

I'd like to know which email provider(s) you use outside the 14-eyes, assuming you're not self-hosting. There are some privacy focused and relatively cheaper ones that avoid the five-eyes, but end up being in the nine-eyes or 14-eyes countries.

Note: I'm not considering ProtonMail (Switzerland) as relatively cheap. I came to know about CTemplar (Iceland), but that shutdown a month ago.

Re: We are removing the option to create new subscriptions

#437

Post by number6 »

iqkznnft wrote: post #430
dcow wrote: post #421

Earlier quoted context omitted.

It's not hub and spoke. Any existing network topology can be mirrored essentially 1:1 with wireguard. With hub and spoke VPNs the model constrains your deployment somewhat. Now I'm not saying key distribution with wireguard is easy , that's a different problem. But wireguard is literally like "let's take your existing network interface and give it modern fast impossible to fuck up encryption".

I have no idea what you just said. Can you dumb it down maybe?

Traditionally you have a server and all clients connect to this server (Hub and spoke). Wireguard can connect clients like you would in your network. You can mesh clients if you like. The hard part is getting the keys to all peers in the network.

Re: We are removing the option to create new subscriptions

#438

Post by AnssiH »

hunter2_ wrote: post #394
usr1106 wrote: post #359

Earlier quoted context omitted.

You fill-in in a bank transfer form and mail it to your bank (if you don't carry it in person to a branch office). The money gets transferred from the account of the receiver to the account of the recipient within a day. That's a standardized service every bank has to offer in the SEPA area and the price must be same regardless where the recipient's account is. No difference whether business or individual on either e…

Frankly, this sounds like a long-winded way of saying "you write a check," with a technical difference being that the transaction is a push from the sender rather than a pull from the recipient. If this form has an option for recurring on a (e.g.) monthly basis, then it's what Mullvad could suggest subscribers switch to, if both parties have a SEPA presence.

Yes, monthly SEPA payments (with a static amount and static reference/message) are a commonly used service at least in Finland, for e.g. paying rent between private individuals, and it works as-is with Mullvad wire transfers.

Re: We are removing the option to create new subscriptions

#440

Post by gasull »

andirk wrote: post #427
nottorp wrote: post #391

Earlier quoted context omitted.

> Bitcoin Cash does currently scale up to Paypal's daily number of transactions while keeping transaction fees below $0.01. On this here website there was a talk a couple months ago that led me to believe that paying $150 worth of bitcoin costs ... $150 if you want it done at credit card speed. Have things changed?

Credit cards take days to complete the transaction. Much like BTC, there are near-instant checks to make sure the desired transaction _will eventually and most likely_ be valid.

But that's not the user experience.
Post reply on HN