Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

WireGuard multihop available in the Mullvad app

mullvad.net

Post reply on HN
Print view View original

71–80 of 141 posts

Re: WireGuard multihop available in the Mullvad app

#71

Post by justsomehnguy »

gavinray wrote: post #28
dosshell wrote: post #14

10 years ago i was working at in a shared office where companies could hire a room. We all had a common lunch place and shared microwaves. There I met two security nerds. They never shutdown their computers and if it happened, they did a full format and reinstalled the os - because if security. They spoke with passion about security fixes they made in the vpn client that no other had. They got many requests regularly…

> "They never shutdown their computers and if it happened, they did a full format and reinstalled the os - because if security." I don't get it

Offline attack aka Evil Maid

Re: WireGuard multihop available in the Mullvad app

#72

Post by INTPenis »

ignoramous wrote: post #41

This isn't Tor-like multi-hop (but is similar to other multi-hop VPN providers out there). A proper multi-hop would happen across two different vendors in control of two different networks, as it were. The iCloud Relay paper outlined a pretty private and secure design [0] (and the intention to standardize it via IETF would probably make it simpler to self-host such a solution [1][2]). Among the VPNs, orchid.com's dis…

Splitting hairs no? I mean you're comparing multi-hop with onion routing.

I'm just speaking as a layman end user. When I see multi-hop it's self-explanatory, it's literally in the name.

Onion routing is another type of multi-hop with the onion routing algorithm.

Re: WireGuard multihop available in the Mullvad app

#73

Post by deno »

sodality2 wrote: post #55
matheusmoreira wrote: post #53

Earlier quoted context omitted.

> pull out the RAM and grab encryption keys in clear text How to defend against this?

Shut down your device, don't leave it on at all times. I don't know if there's a way to suspend and encrypt RAM though. But other than that, there's no way to keep a computer running without the miscellaneous data being kept in RAM

Besides memory encryption (AMD PRO & Epyc) you can zero-out in-use memory keys before suspend & restore on resume, preferably using sealed storage, like TPM. This is ‘the’ reason to prefer home encryption vs. full disk. The thing is if someone is prepared to attack your laptop with liquid nitrogen they might as well just wait for you to unlock your laptop and then steal it right there, or watch you type in your password; better get your privacy blanket ready ;) Not having physical security is a huge disadvantage, and there’s really no way around it—you automatically start in the defeated position, and have to stack gizmos just to break even.

Re: WireGuard multihop available in the Mullvad app

#74

Post by CPAhem »

twojacobtwo wrote: post #33
throwanem wrote: post #3

I use (and really like!) Mullvad, but have never tried the app, preferring to use my existing OpenVPN clients with the profiles Mullvad provides. This isn't because I have any reason to mistrust their app, but just because if I've already got a perfectly serviceable client on my device, why add another binary to do the same thing? But I would be interested to hear, from folks who have used the app, what you like and…

I've been using the app for a couple of years now and I have mostly enjoyed the experience relative to the few other VPN solutions I've tried (OpenVPN, Nord (old version), ProtonVPN). Things I mostly like: - The relative simplicity of the app interface (though 'advanced' settings should just be a sub-section of 'preferences') - How quickly/easily I can get connected (download, paste in account #, click connect - or c…

The Mullvad app is huge ~100MB which is odd for what it needs to do.

Re: WireGuard multihop available in the Mullvad app

#75

Post by DenseComet »

throwanem wrote: post #3

I use (and really like!) Mullvad, but have never tried the app, preferring to use my existing OpenVPN clients with the profiles Mullvad provides. This isn't because I have any reason to mistrust their app, but just because if I've already got a perfectly serviceable client on my device, why add another binary to do the same thing? But I would be interested to hear, from folks who have used the app, what you like and…

If you don't want to switch to the Mullvad app, it's still worthwhile to switch to their wireguard profiles. Connections seem more stable and wireguard is far easier to configure.

Re: WireGuard multihop available in the Mullvad app

#76

Post by capableweb »

vinay_ys wrote: post #70
gzer0 wrote: post #21

Tangentially related: Users can use Mullvad’s TOR address: http://o54hon2e2vj6c7m3aqqu6uyece65by3vgoxxhlqlsvkmacw6a7m7k... to generate their account ID and make their payment with Bitcoin seamlessly. I have never experienced such a smooth way to purchase from a provider, this was brilliant. +1 to Mullvad

How does it matter that your payment is anonymous when all your traffic is going through them?

If mullvad gets compromised, you can still remain anonymous if the payment method is anonymous as long as the traffic you've sent to mullvad been anonymous as well. Obviously, if you log into your normal Facebook account, it isn't, but there are plenty of other uses.

Re: WireGuard multihop available in the Mullvad app

#77

Post by throwanem »

CPAhem wrote: post #74
twojacobtwo wrote: post #33

Earlier quoted context omitted.

I've been using the app for a couple of years now and I have mostly enjoyed the experience relative to the few other VPN solutions I've tried (OpenVPN, Nord (old version), ProtonVPN). Things I mostly like: - The relative simplicity of the app interface (though 'advanced' settings should just be a sub-section of 'preferences') - How quickly/easily I can get connected (download, paste in account #, click connect - or c…

The Mullvad app is huge ~100MB which is odd for what it needs to do.

I believe it's Electron-based, which is another reason I've hesitated to try it out. I like Electron - from the developer's perspective, it's great! - but I do still try to avoid its resource impact until there's a compelling reason to take the hit.

Re: WireGuard multihop available in the Mullvad app

#78

Post by vinay_ys »

capableweb wrote: post #76
vinay_ys wrote: post #70

Earlier quoted context omitted.

How does it matter that your payment is anonymous when all your traffic is going through them?

If mullvad gets compromised, you can still remain anonymous if the payment method is anonymous as long as the traffic you've sent to mullvad been anonymous as well. Obviously, if you log into your normal Facebook account, it isn't, but there are plenty of other uses.

If mullvad is compromised, then all my traffic is also compromised and potentially my client machine is also compromised (since I'm running mullvad client). Alternately, to begin with, if my traffic wasn't sensitive or personally identifiable, then I don't actually need this multi-hop setup.

Re: WireGuard multihop available in the Mullvad app

#79

Post by silizium »

CPAhem wrote: post #74
twojacobtwo wrote: post #33

Earlier quoted context omitted.

I've been using the app for a couple of years now and I have mostly enjoyed the experience relative to the few other VPN solutions I've tried (OpenVPN, Nord (old version), ProtonVPN). Things I mostly like: - The relative simplicity of the app interface (though 'advanced' settings should just be a sub-section of 'preferences') - How quickly/easily I can get connected (download, paste in account #, click connect - or c…

The Mullvad app is huge ~100MB which is odd for what it needs to do.

My mullvad installation on Windows has 258MB but memory footprint is low. I find 5 entries in the task manager with a total of 14.6MB with active connection.

Re: WireGuard multihop available in the Mullvad app

#80

Post by seanw444 »

_rend wrote: post #8
throwanem wrote: post #3

I use (and really like!) Mullvad, but have never tried the app, preferring to use my existing OpenVPN clients with the profiles Mullvad provides. This isn't because I have any reason to mistrust their app, but just because if I've already got a perfectly serviceable client on my device, why add another binary to do the same thing? But I would be interested to hear, from folks who have used the app, what you like and…

I've found their apps to be (subjectively) higher quality than most OpenVPN clients on platforms I care about (macOS, iOS, Windows). It's nice to have a consistent UI, and not have to think or care about specific profiles — it's easy for me to jump between servers much more easily (I typically connect relatively locally, but occasionally find that certain out IP addresses have been blacklisted from specific sites; it…

I'll +1 your anecdote with mine: that Mullvad's app is pretty great. It's very simple, isn't buggy, has just what's needed, and has a good UI. I'm pleased with it. Better than the others I've used.
Post reply on HN