Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Mullvad VPN was subject to a search warrant – customer data not compromised

mullvad.net

Post reply on HN
Print view View original

191–200 of 345 posts

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#191

Post by justsomehnguy »

echoer_lyrist wrote: post #171
justsomehnguy wrote: post #70

Earlier quoted context omitted.

> Mullvad could have been, and maybe even still is, lying about how they operate Could they? Sure. Do they have anything on me? * One BTC transfer * IPs where I'm connecting from (if they are lying and storing them) * My traffic (if they are lying and storing it) * My unencrypted traffic (if they are lying and storing it) Do they have ... on me? * Email? - nope * Phone number? - nope * Credit card? - nope * My first…

Did you obtain the BTC that you used for the purchase from an exchange that requires PII?

Exchange has my CC number and the 'card holder' (though I never put my name there, lol). A non-business card is probably the most easy way to identify someone globally.

If someone comes to exchange - they could identify me (and they can just tap their server to listen to email which do have all the transaction info, including CC# in the plaintext, lol).

To establish a correlation between my wallet and Mullvad account someone needs to find that transaction in Mullvad customer data. Which - they claim they don't have.

So yes, someone can identity what I bought services from Mullvad and... nothing more?

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#192

Post by troad »

pedro_hab wrote: post #71

I don't understand why go after the VPN, I think most people don't use a VPN correctly. What good is a VPN when multiple apps on your computer are phoning home? If the law has a suspect IP, couldn't they just ask google, microsoft and facebook what accounts were accessed with that IP? To use a VPN correctly wouldn't have to use a fresh OS and absolutely not login to any accounts connected to the IP you are trying to…

> don't use a VPN correctly

People have different use cases for a VPN. I use one because I travel a lot, and spend a lot of time on dodgy public Wi-Fi. Not because I’m living some Jason Bourne fantasy.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#194

Post by stametseater »

blamarvt wrote: post #72
andygeorge wrote: post #57

Earlier quoted context omitted.

ah yes, notoriously-anonymous physical mail

I'm confused by your sarcasm. A one-time physical mailing can be incredibly anonymous.

It's also incredibly easy to fuck up and accidentally hand them a DNA sample, fingerprints, handwriting sample, etc.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#195

Post by TJSomething »

vorpalhex wrote: post #190
bragr wrote: post #95

Earlier quoted context omitted.

That's a specious argument, because the choice could be between logging your traffic and being forced to shutdown under some kind of Swedish NSL, or forced to keep operating and logging even if they want to shut down. Not saying this is what happened, just that your reasoning doesn't really hold. Hell it's entirely possible Mullvad is a honeypot operated by some foreign intelligence service.

It's possible you're in a coma and everything you're experiencing is a terribly detailed dream. It's not very likely though.

That one's pretty easy to disprove though. Just have a computer solve a random NP-complete problem and then verify it by hand.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#196

Post by slekker »

slowmotiony wrote: post #139
asoneth wrote: post #97

> After demonstrating that this is indeed how our service works and them consulting the prosecutor they left without taking anything Setting aside impacts on customers, I wonder how common seizures would need to be to support a purely financial case that businesses that are known to not store identifying information are therefore less likely to incur the cost and effort of scrambling to replace seized hardware.

After getting a call from the CIA to leave their honeypot alone, they left without taking anything ;-)

Bold claim. Any more info on this?

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#197

Post by gala8y »

TJSomething wrote: post #195
vorpalhex wrote: post #190

Earlier quoted context omitted.

It's possible you're in a coma and everything you're experiencing is a terribly detailed dream. It's not very likely though.

That one's pretty easy to disprove though. Just have a computer solve a random NP-complete problem and then verify it by hand.

Can you, please, explain?

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#198

Post by psychphysic »

TJSomething wrote: post #195
vorpalhex wrote: post #190

Earlier quoted context omitted.

It's possible you're in a coma and everything you're experiencing is a terribly detailed dream. It's not very likely though.

That one's pretty easy to disprove though. Just have a computer solve a random NP-complete problem and then verify it by hand.

How would this work?

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#199

Post by sleepybrett »

hnarn wrote: post #75
wepple wrote: post #14

Earlier quoted context omitted.

Technically they could have been logging your traffic, which is “customer data” even if it doesn’t identify you by name

> Technically they could have been logging your traffic Of course they “could have” but their entire business depends on them not doing it.

Their entire business depends on them not telling you they are doing it.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#200

Post by troad »

kkielhofner wrote: post #186
Marsymars wrote: post #150

Earlier quoted context omitted.

I’ve got no real insight, but my guess would be that a) the goons have both technical and legal competence and b) Mullvad had legal representation show up quickly.

Have legal representation show up quickly means nothing. Consider the many, many scenarios where search warrants are served on companies with in house legal. Law firms. Individual lawyers. Literally happens every single day. Law enforcement has a warrant signed by a judge. Just because a lawyer of some sort is there doesn't mean they're going to stand around paralyzed saying "Oh there's a lawyer here, better stop wha…

This is quite silly. A warrant isn’t a magic bullet that ends all your rights and gives the police superpowers. A lawyer can very much say “no, this information isn’t responsive to the warrant”, where a lay person may not realise this, and volunteer information that they have no legal obligation to hand over.

The police absolutely rely on the information and power asymmetry between them and the public. You honestly don’t think the police behave very differently being watched (and these days often filmed) by a dozen high powered lawyers in suits, who will challenge absolutely everything they’ve just done as soon as they’re out the door?

Post reply on HN