Live data from Hacker News

Obscura VPN – Privacy that's more than a promise

obscura.net

11–20 of 170 posts

Re: Obscura VPN – Privacy that's more than a promise

#12
post #9

Interesting concept. The blog has a lot more details[1]. One comment/question about the exit nodes. Can someone correct or validate my thoughts: It’s a WireGuard tunnel from the user to Mullvad, so while Obscura can’t see the user traffic, couldn’t the Mullvad exit node see the traffic, and using knowledge of the users WireGuard public key, associate all that users traffic with that key? So even if they can’t associa…

Also, Obscura can collect metadata on when you use the service, how much data you send/receive, etc. Even if Mullvad doesn't do it, someone else might. Mullvad is, I expect, now a valuable target because it is the VPN service of choice for so many people concerned with security. Does Mullvad have the budget and expertise to protect itself against determined, highly-resourced attackers? Finally, is it possible for a t…

Mullvad is near the cutting edge on zero trust deployments; allowing user traffic to pass thru, with guaranteed no logging, assumption of compromise guiding system architecture, etc. Nobody can withstand a nation state, not even other nation states, so I feel like they're doing the best that can be reasonably expected of them

Re: Obscura VPN – Privacy that's more than a promise

#14

Doesn't this just move trust from mullvad to obscura?

The concept is that Obscura knows who you are, but not what you are doing. Mullvad knows what you are doing but not who you are.

Your trust is that Obscura and Mullvad will not collude.

Re: Obscura VPN – Privacy that's more than a promise

#15

Doesn't this just move trust from mullvad to obscura?

From what I understand they're dividing both identity (IP address) and browsing activity. Mullvad sees your browsing activity but not your identity, and Obscura sees your identity. So no single provider has full visibility into both who you are and what you do

Re: Obscura VPN – Privacy that's more than a promise

#17

Interesting concept. The blog has a lot more details[1]. One comment/question about the exit nodes. Can someone correct or validate my thoughts: It’s a WireGuard tunnel from the user to Mullvad, so while Obscura can’t see the user traffic, couldn’t the Mullvad exit node see the traffic, and using knowledge of the users WireGuard public key, associate all that users traffic with that key? So even if they can’t associa…

Thanks! that blog post had a thread here:

Trust, 2-Party Relays, and QUIC - https://news.ycombinator.com/item?id=43016574 - Feb 2025 (33 comments)

Post reply on HN