Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

WireGuard multihop available in the Mullvad app

mullvad.net

Post reply on HN
Print view View original

31–40 of 141 posts

Re: WireGuard multihop available in the Mullvad app

#31

Post by Kototama »

oceanplexian wrote: post #27
Kototama wrote: post #23

Earlier quoted context omitted.

FDE is not enough against physical access, see the evil maid attack.

Well obviously, FDE also doesn't protect you if someone is standing over your shoulder reading you type the password. The point is that leaving a machine turned on, while not in your physical possession puts all of your data at risk. My company would freak if I did this and I don't even work in the security space.

As you know, the evil maid attack is something different. It's better to be precise and not give a false-sense of security to readers who may be less informed about this subject.

Re: WireGuard multihop available in the Mullvad app

#32

Post by [deleted] »

gavinray wrote: post #28
dosshell wrote: post #14

10 years ago i was working at in a shared office where companies could hire a room. We all had a common lunch place and shared microwaves. There I met two security nerds. They never shutdown their computers and if it happened, they did a full format and reinstalled the os - because if security. They spoke with passion about security fixes they made in the vpn client that no other had. They got many requests regularly…

> "They never shutdown their computers and if it happened, they did a full format and reinstalled the os - because if security." I don't get it

[deleted]

Re: WireGuard multihop available in the Mullvad app

#33

Post by twojacobtwo »

throwanem wrote: post #3

I use (and really like!) Mullvad, but have never tried the app, preferring to use my existing OpenVPN clients with the profiles Mullvad provides. This isn't because I have any reason to mistrust their app, but just because if I've already got a perfectly serviceable client on my device, why add another binary to do the same thing? But I would be interested to hear, from folks who have used the app, what you like and…

I've been using the app for a couple of years now and I have mostly enjoyed the experience relative to the few other VPN solutions I've tried (OpenVPN, Nord (old version), ProtonVPN).

Things I mostly like:

- The relative simplicity of the app interface (though 'advanced' settings should just be a sub-section of 'preferences')

- How quickly/easily I can get connected (download, paste in account #, click connect - or change location.

- Relatively easy split-tunneling

- Easy switch between OpenVPN and Wireguard protocols

- Easy local network sharing (preference toggle)

- Tracker and ad block options (have not tested efficacy, appears to be DNS-based)

- Internet kill switch (will not fall back to non-vpn connections if set)

Things I don't like:

- Can cause issues on boot/reboot if kill switch is enabled (Windows - disable kill switch, restart app, re-enable kill switch)

- Limited options for mobile apps (and some unexpected disconnections on android)

- No configuration of app layout or color scheme

- Somewhat annoying upgrade (not bad, just no in-place upgrade solution)

Re: WireGuard multihop available in the Mullvad app

#34

Post by mirceal »

netfortius wrote: post #20
mft_ wrote: post #2

Tangential, but I recently discovered Mullvad. For years, I've used whichever mainstream VPN provider had a good deal on come renewal time, and cycled through a few of the usual suspects. Recently, I was with Surfshark, and was really struggling to get download rates above a few hundred K/sec - and sometimes even worse. I didn't even suspect the VPN at first, but ultimately tried a different provider as a diagnostic…

How are Mullvad apps across multiple platforms? I've been with PIA for quite a while, and I got it to work they way I want it, on macOS, windows and android, and I liked even more some of their recent exit points marked "for streaming", as I watch sports online, and there is a significant improvement when using those, with some countries local free broadcasting, but performance in the rest , sometimes, is really atro…

used it on macos, ios, linux. the app is solid. wireguard rules.

Re: WireGuard multihop available in the Mullvad app

#35

Post by tenebrisalietum »

oceanplexian wrote: post #19
dosshell wrote: post #14

10 years ago i was working at in a shared office where companies could hire a room. We all had a common lunch place and shared microwaves. There I met two security nerds. They never shutdown their computers and if it happened, they did a full format and reinstalled the os - because if security. They spoke with passion about security fixes they made in the vpn client that no other had. They got many requests regularly…

I would think you'd do the exact opposite. If you leave a computer running anyone (Well "anyone" being a skilled adversary) can simply pull out the RAM and grab encryption keys in clear text. Law enforcement does this so often, it's practically routine. The only "safe" system is one that has been long powered off and is using tried and true cryptography, ideally open-source FDE that's been fully audited.

What if I have some sort of trigger (accelerometer attached to a door connected to a serial port, for example) that makes the system kexec to memtest86 before the system is taken?

Re: WireGuard multihop available in the Mullvad app

#37

Post by sph »

mft_ wrote: post #2

Tangential, but I recently discovered Mullvad. For years, I've used whichever mainstream VPN provider had a good deal on come renewal time, and cycled through a few of the usual suspects. Recently, I was with Surfshark, and was really struggling to get download rates above a few hundred K/sec - and sometimes even worse. I didn't even suspect the VPN at first, but ultimately tried a different provider as a diagnostic…

Mullvad is fantastic. I get full bandwidth when torrenting 24/7 from my NAS, and I don't get blocked when I need to stream something unavailable in my country, and they have port forwarding support. They also have an Android TV client so I can watch on my couch.

All for €5 a month? Such a great company.

Re: WireGuard multihop available in the Mullvad app

#38

Post by pydry »

gzer0 wrote: post #21

Tangentially related: Users can use Mullvad’s TOR address: http://o54hon2e2vj6c7m3aqqu6uyece65by3vgoxxhlqlsvkmacw6a7m7k... to generate their account ID and make their payment with Bitcoin seamlessly. I have never experienced such a smooth way to purchase from a provider, this was brilliant. +1 to Mullvad

The ease with which you can pay anonymously makes me feel that its more likely a genuine privacy provider rather than a CIA run honeypot like Crypto AG.

Re: WireGuard multihop available in the Mullvad app

#40

Post by dosshell »

cma wrote: post #30
LanternLight83 wrote: post #24

Earlier quoted context omitted.

It must be attached such it tears when opened, tamper-evident- similar techniques are common fro doors, either across the frame or more stealthily near the hinge. You want it to be a little stealth because an informed adversary could break the seal, remove it, and be prepared to replace/recreate it when they're done (like faking a new wax seal)

Maybe overspray some spraypaint on the paper first and take a picture of the droplet pattern, so it can't be replaced easily.

spot on, but they used coffee to make a unique pattern.
Post reply on HN