Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Mullvad VPN was subject to a search warrant – customer data not compromised

mullvad.net

Post reply on HN
Print view View original

61–70 of 345 posts

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#61

Post by FormulatedEdits »

moffkalast wrote: post #20
MPSimmons wrote: post #13

Earlier quoted context omitted.

To a legal inquiry via search warrant? Probably not unless it's operated in a country that doesn't have search warrants, but that sounds more like a lawless wasteland.

Still waiting for someone to convert an international waters oil rig to a lawless data center. Or like that submarine base that Microsoft did.

In case you hadn’t seen this story, which I believe fits a similar bill, here is the case of the Cyberbunker. This took place in the Netherlands.

Darknet Diaries has an (excellent, as always) episode about it. If it wasn’t that podcast it might have been Malicious Life.

https://www.newyorker.com/magazine/2020/08/03/the-cold-war-b...

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#62

Post by kklimonda »

CodesInChaos wrote: post #27
lionkor wrote: post #5

Full title: Mullvad VPN was subject to a search warrant. Customer data not compromised As a customer, I have no doubt about the "customer data not compromised". I'm a paying customer, yet I have never given them any PII. Great service.

How did you pay?

They also have vouchers you can buy from Amazon, which I find a nice alternative to sending cash in an envelope.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#63

Post by PragmaticPulp »

hubraumhugo wrote: post #11

Once again this shows the huge disconnect between the government authorities and the tech industry. Basic knowledge and a quick investigation would make clear that Mullvad is not storing any customer data.

> Once again this shows the huge disconnect between the government authorities and the tech industry.

Authorities have to follow their process and collect evidence, or document the absence of discovered evidence. They can’t simply read the website, shrug their shoulders, and decide not to investigate a key part of a criminal case because the website says the company won’t have the data.

They are obligated to explore the possibility of data existing and to document the fact that it could not be found. Assuming the evidence doesn’t exist isn’t an option. They have to document it.

I know Mullvad is generally trusted by the community, but you also have to remember that several VPN companies have claimed to not keep logs but were later found to have data useful to criminal cases.

I think the real disconnect is in the comments from people who think this is the government being dumb. They’re not, they’re just doing their job correctly.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#64

Post by colourgarden »

rasengan wrote: post #53
cinntaile wrote: post #26

Earlier quoted context omitted.

It's likely not the kind of data they were after so there was no point in seizing equipment.

Police investigations regarding 6+ officers showing up at your office do not end with “oh have a good day.”

Maybe not in the US.

> We argued they had no reason to expect to find what they were looking for and any seizures would therefore be illegal under Swedish law.

If this line is to be believed then the police would have been committing a crime by proceeding.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#65

Post by KyeRussell »

hubraumhugo wrote: post #11

Once again this shows the huge disconnect between the government authorities and the tech industry. Basic knowledge and a quick investigation would make clear that Mullvad is not storing any customer data.

So you’re suggesting that law enforcement take someone at their word?

I understand that some people are more less clued in than others, but your snarkiness really misplaced.

The VPN industry is notoriously shady, and that’s not just code for “fights for users’ rights against law enforcement”.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#66

Post by generalizations »

andygeorge wrote: post #57
Maxious wrote: post #38

Earlier quoted context omitted.

> Which payment methods do you accept? > We accept cash, Bitcoin, Bitcoin Cash, Monero, bank wire, credit card, PayPal, Swish, Giropay, Eps transfer, Bancontact, iDEAL, and Przelewy24. > Can I really pay with cash? > You bet, and please! Stay anonymous all the way. Just put your cash and payment token (randomly generated on our website) in an envelope and send it to us. We accept the following currencies: EUR, USD, G…

ah yes, notoriously-anonymous physical mail

I mean, just don't put a return address on it, and drop it off in a random post office box.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#67

Post by galleywest200 »

MPSimmons wrote: post #15
hacb wrote: post #2

I'm glad they are so transparent about it.

I also appreciate the lack of US-style warrant canary that might be necessary here, where depending on who comes asking, you're not allowed to post about it.

I was just thinking that if this was in the US then the law enforcement officers would have gone "smash and grab" on the company property anyways.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#68

Post by em-bee »

unixgoddess wrote: post #23
raverbashing wrote: post #3

"They intended to seize computers with customer data. In line with our policies such customer data did not exist" But please tell me again how hard it is to comply with the GDPR

the problem is, if this starts to become common, countries will move to make it illegal not to store data...

data retention laws have already been proposed, if not even enacted in some EU countries.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#69

Post by pdpi »

hubraumhugo wrote: post #11

Once again this shows the huge disconnect between the government authorities and the tech industry. Basic knowledge and a quick investigation would make clear that Mullvad is not storing any customer data.

Police got a warrant and went to service it, Mullvad explained why it was pointless, police agreed and left without further incident. It's not "a huge disconnect", it's the system working exactly as I'd hope for.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#70

Post by justsomehnguy »

jrootabega wrote: post #21
hubraumhugo wrote: post #11

Once again this shows the huge disconnect between the government authorities and the tech industry. Basic knowledge and a quick investigation would make clear that Mullvad is not storing any customer data.

There's also usually another disconnect: between tech industry publicity and tech industry reality. Mullvad could have been, and maybe even still is, lying about how they operate, because it's good for business.

> Mullvad could have been, and maybe even still is, lying about how they operate

Could they? Sure.

Do they have anything on me?

    * One BTC transfer
    * IPs where I'm connecting from (if they are lying and storing them)
    * My traffic (if they are lying and storing it)
    * My unencrypted traffic (if they are lying and storing it)
Do they have ... on me?

    * Email? - nope
    * Phone number? - nope
    * Credit card? - nope
    * My first name, family name? - nope
    * My address? - nope
    * My mother's maiden name? - nope
Because I never provided it to them because they never asked for them.
Post reply on HN