Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Mullvad VPN was subject to a search warrant – customer data not compromised

mullvad.net

Post reply on HN
Print view View original

41–50 of 345 posts

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#41

Post by bluehatbrit »

colesantiago wrote: post #7

That is a shame. Is there an alternative VPN provider that wouldn't be subject to this? Huh? Why all the downvotes all of a sudden? this is a genuine question.

A VPN provider who wouldn't be subject to a search warrant? I suppose only one operating from a country where warrants aren't required for a search by police, but that would presumably be much worse.

What's happened here is the best way it could possibly go. A warrant was needed which meant prosecutors / police had to meet a certain bar to conduct a search, and when the search happened the data does not exist anyway. That's exactly what you want from a VPN. This isn't "a shame", it's cause of celebration that the process actually worked and the provider can clearly demonstrate that.

I guess the only alternative would be a country which passes a law saying that VPN data (or something including VPN data) could never be searched, but that's extremely unlikely of any country at the moment.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#42

Post by actionfromafar »

unixgoddess wrote: post #23
raverbashing wrote: post #3

"They intended to seize computers with customer data. In line with our policies such customer data did not exist" But please tell me again how hard it is to comply with the GDPR

the problem is, if this starts to become common, countries will move to make it illegal not to store data...

At least that forces legislators to be overt.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#43

Post by raverbashing »

john_the_writer wrote: post #28
wepple wrote: post #14

Earlier quoted context omitted.

Technically they could have been logging your traffic, which is “customer data” even if it doesn’t identify you by name

Also, just because a company doesn't get your name, doesn't mean they don't know every little thing about you. PPI doesn't include my fingerprint, but Google 100% has my online fingerprint.

True, and it's a good reminder that VPN does not mean "more privacy". It means more privacy in relation to specific parts and less to others.

You can get a lot of info through DNS queries for example.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#44

Post by talhah »

hubraumhugo wrote: post #11

Once again this shows the huge disconnect between the government authorities and the tech industry. Basic knowledge and a quick investigation would make clear that Mullvad is not storing any customer data.

I might be uninformed here, but on the surface Mullvad says they don't record customer data but there's always a chance they might be recording some data or lying.

So I figure that authorities still obtained a search warrant to atleast see what data they can get their hands on and to verify that this is true. In that case, it doesn't really illustrate any disconnect.

> Basic knowledge and a quick investigation would make clear that Mullvad is not storing any customer data.

This is something more along the lines of trust. Sure you don't have to provide PII but Mullvad could supppsedly still be recording other data which would count as customer data.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#46

Post by hammyhavoc »

hubraumhugo wrote: post #11

Once again this shows the huge disconnect between the government authorities and the tech industry. Basic knowledge and a quick investigation would make clear that Mullvad is not storing any customer data.

Of course a for-profit entity wouldn't lie or fail to adhere to their own standards.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#47

Post by rasengan »

dannyw wrote: post #18
hubraumhugo wrote: post #11

Once again this shows the huge disconnect between the government authorities and the tech industry. Basic knowledge and a quick investigation would make clear that Mullvad is not storing any customer data.

A service provider may claim to not store any user data, but they could be lying. From the article: "After demonstrating that this is indeed how our service works" Presumably, Mullvad employees showed this data does not exist live.

> service provider may claim to not store any user data, but they could be lying.

As someone who ran a VPN in the past, this blog post is extremely strange as well as the purported described sequence of events.

Police in any jurisdiction aren’t jokes - especially not Sweden where they can absolutely walk in and take your stuff according to mullvads website [1].

It’s 2023 - if a VPN is how you’re doing your privacy you’re probably doing it wrong.

Don’t trust. Verify.

[1] https://mullvad.net/en/help/swedish-legislation/

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#48

Post by nivenkos »

hubraumhugo wrote: post #11

Once again this shows the huge disconnect between the government authorities and the tech industry. Basic knowledge and a quick investigation would make clear that Mullvad is not storing any customer data.

They can still try to seize equipment as an intimidation tactic though.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#49

Post by pebble »

hubraumhugo wrote: post #11

Once again this shows the huge disconnect between the government authorities and the tech industry. Basic knowledge and a quick investigation would make clear that Mullvad is not storing any customer data.

Mullvad has also been an outspoken critic of the chat control proposal. There may have been different motives at work here.

Re: Mullvad VPN was subject to a search warrant – customer data not compromised

#50

Post by PurpleRamen »

hubraumhugo wrote: post #11

Once again this shows the huge disconnect between the government authorities and the tech industry. Basic knowledge and a quick investigation would make clear that Mullvad is not storing any customer data.

Just trusting public claims would be pretty bad investigation. There are so many companies claiming not saving any logs and data, yet occasionally it's revealed that they lied and still stored something significant for the police to fetch. Looking deeper at reality is a relevant part of a good investigation. And in the first place, we don't even know whether the story is true or just marketing, until someone can back it with an official police-report.
Post reply on HN