Live data from Hacker News

Firefox Full-device VPN

private-network.firefox.com

81–90 of 122 posts

Re: Firefox Full-device VPN

#82

Earlier quoted context omitted.

Again, I'm happy to be corrected, but I thought that affected 1 server out of 1000s? Errors will inevitably happen with any system on that scale. Will Mozilla be more forthcoming or secure? Maybe but surely 1 error per 1000 servers is a manageable known risk vs Mozilla "may be perfect or terrible"?

NordVPN was mainly criticized for how they handled the disclosure. They didn't admit to the server breach until a whistleblower revealed it publicly a year later. https://www.bloomberg.com/news/articles/2019-10-21/after-twi... The utility of a VPN is mainly based on trust, and NordVPN's lack of transparency in that incident is a breach of trust.

> The breach was done by “exploiting a vulnerability of one of our server providers, which hadn’t been disclosed to us,” according to the company [NordVPN]’s statement.

Laying the blame on an undisclosed vulnerability is pretty ironic of them

Re: Firefox Full-device VPN

#83

So do they keep access logs for law enforcement? If this is the same VPN as Mullvard that means they don't? Could someone clarify maybe?

Just because they don't now, doesn't mean they might later. Law enforcement may override that in some circumstances.

Re: Firefox Full-device VPN

#84

So do they keep access logs for law enforcement? If this is the same VPN as Mullvard that means they don't? Could someone clarify maybe?

If Mullvad is in the US, courts can compel Mullvad to siphon their clients' information and not disclose it despite any claims their policy makes.

Yeah I wouldn’t use any US VPN unless it had a warrant canary and didn’t keep logs

Re: Firefox Full-device VPN

#85
post #7

Last time this was presented Mozilla mentioned a partnership with ProtonVPN. To any Mozillians reading this, what was the reason for the switch to Mullvad? Also will we be able to use our own standard Wireguard clients to connect?

It doesn't look like ProtonVPN supports WireGuard yet. https://protonvpn.com/blog/whats-the-best-vpn-protocol/ Edit: As Gaelan mentioned below, this is an answer to hellcow's first question.

Why would WireGuard be important? It's nice technically but the benefits vs mature protocols are not really material in a vpn service's value proposition, compared to other properties.

Re: Firefox Full-device VPN

#86
post #26

Earlier quoted context omitted.

It's a great idea to use Firefox like Wirecutter, as a recommendation for the best of each service type. Combine that with some thin interface over the top, like an OS, to control all the services you subscribe to with unified billing. Password leaks, manager, file sharing, bookmark sync, vpn, dns, newsfeed. Now a new person starting out on the internet doesnt need to learn about haveibeenpwned, dropbox, mullvad, clo…

> newsfeed I must have missed this, what RSS solution have they put out?

Pocket, their competitor to MSN and Facebook and Reddit. Lets be real, MOST people are consuming from one of those three feeds daily.

Re: Firefox Full-device VPN

#87

Perhaps Mullvad is great. I don’t know. The whole VPN industry is full of shucksters, and when Mozilla says that Mullvad has “committed” to privacy doesn’t sound like enough heft to me. Why isn’t Mozilla running their own servers if this really is something worth getting into? They’re one of the few privacy and public good companies we have left.

Exactly. I was baited by the Firefox name.

Re: Firefox Full-device VPN

#88

So do they keep access logs for law enforcement? If this is the same VPN as Mullvard that means they don't? Could someone clarify maybe?

If Mullvad is in the US, courts can compel Mullvad to siphon their clients' information and not disclose it despite any claims their policy makes.

Mullvad is in Sweden IIRC.

Re: Firefox Full-device VPN

#89
post #85

Earlier quoted context omitted.

It doesn't look like ProtonVPN supports WireGuard yet. https://protonvpn.com/blog/whats-the-best-vpn-protocol/ Edit: As Gaelan mentioned below, this is an answer to hellcow's first question.

Why would WireGuard be important? It's nice technically but the benefits vs mature protocols are not really material in a vpn service's value proposition, compared to other properties.

I recently became a mullvad customer and used wireguard for the first time. Maybe this is a windows thing, but it's so, so much faster than what I was used to from openVPN, ike, etc.

Re: Firefox Full-device VPN

#90
post #35

Earlier quoted context omitted.

You mean the NordVPN that was hacked for god knows how long, knew about it themselves for months, and both deliberately hid that information from their customers and failed to fix the issue in a reasonable timeframe? [0] With Mozilla you get someone you can hopefully trust (hopefully being the operative word). [0] https://techcrunch.com/2019/10/21/nordvpn-confirms-it-was-ha...

I'm curious about the parent's question, but consider that Mullvad is about $5 on its own anyways. It also already supports international customers and multiple platforms. So I'm not sure why you would buy it through FF and not directly from Mullvad? It just seems like a middleman with no benefits.

Mullvad is 5€, slightly more
Post reply on HN