Live data from Hacker News

PureVPN IPv6 Leak

anagogistis.com

81–90 of 93 posts

Re: PureVPN IPv6 Leak

#81
post #73

I donwt know any single VPN provider apart from Mullvad with proper v6 implementation.

Even Mullvad give out ULA addresses. You can hardly call that a proper implementation :(

In Context of a VPN Provider like Mullvad a ULA is required. One of the rare cases where ipv6 nat is a thing.

Re: PureVPN IPv6 Leak

#82

I donwt know any single VPN provider apart from Mullvad with proper v6 implementation.

mullvad is the only normie vpn worth using. worth every penny

I've yet to see any reason why mullvad is supposed to be particularly trustworthy compared to the alternatives. They aren't doing anything wrong in particular but there's nothing that stands out to me as particularly making them trustworthy

Re: PureVPN IPv6 Leak

#83

I have no idea why it seems to be so hard for VPN providers to get IPv6 right. The technology has been here for ages. Also, unlike physical ISPs, VPN providers have no other way to differentiate from each other but getting this sort of things right, so one could except them to be motivated, but no.

They separate each other by spending money on YouTube ads and sponsorships and jacking up prices to offer 50%, no 70% no NINETY PERCENT DISCOUNT if you subscribe for 17 years using my promo code MisterSandman!

Re: PureVPN IPv6 Leak

#84
post #73

Earlier quoted context omitted.

Even Mullvad give out ULA addresses. You can hardly call that a proper implementation :(

In Context of a VPN Provider like Mullvad a ULA is required. One of the rare cases where ipv6 nat is a thing.

NAT might be a thing in Mullvad's case, but there's no link between that and needing ULA.

Re: PureVPN IPv6 Leak

#85
post #73

Earlier quoted context omitted.

Even Mullvad give out ULA addresses. You can hardly call that a proper implementation :(

Well it's more private. Also there's only one proper IPv6 implementation (using GUAs) and most people.cant get one

It's exactly as private as doing the same service with a GUA prefix. Just get a PI block and pick a /64 from it to use instead of whatever ULA prefix they picked at the moment.

Re: PureVPN IPv6 Leak

#86
VPN providers do not have reputations for making secure or reliable software.

Here's a good privacy proxy (VPN) setup: Set up a second wifi router, enable the "Internet kill switch", and connect it with Wireguard to a reputable VPN service. I recommend GL.iNet routers and Mullvad.

With this setup, one can move individual devices between the privacy wifi and identity-broadcasting wifi.

Re: PureVPN IPv6 Leak

#87

If you can't see your VPN's source code, you can almost safely assume that they're broken in some way.

Even if you could, there's no way to guarantee it's the same code that's actually pushing your packets around.

Even vp.net which says they use SGX to verify the code that is running on a box... yea you are verifying a box, somewhere, not necessarily the one forwarding your packets. And those packets can still be monitored/modified outside the system at some other part of the network anyways.

And even if you could verify all that, eBPF swoops in and lets you modify code at runtime with no evidence trails.

Re: PureVPN IPv6 Leak

#88
post #84

Earlier quoted context omitted.

In Context of a VPN Provider like Mullvad a ULA is required. One of the rare cases where ipv6 nat is a thing.

NAT might be a thing in Mullvad's case, but there's no link between that and needing ULA.

Explain because as far as i can tell, to make it impossible for i.e. google to tell me apart from another mullvad user, me and that other user must share the same IP adress.

Re: PureVPN IPv6 Leak

#89
post #15
post #14

Earlier quoted context omitted.

Given what you said about not using it for anything sensitive, I'm assuming you're not actually logging into your bank... right?

Everything is TLS-encrypted anyway these days, so the primary concern is metadata privacy. When it comes to that, I trust VPN providers about as much as ISPs (i.e. absolutely not).

And VPN providers who ask you to install a CA root cert. (I don't think PureVPN does this from a casual search, but there are VPN providers that do.)

Re: PureVPN IPv6 Leak

#90

Earlier quoted context omitted.

mullvad is the only normie vpn worth using. worth every penny

I've yet to see any reason why mullvad is supposed to be particularly trustworthy compared to the alternatives. They aren't doing anything wrong in particular but there's nothing that stands out to me as particularly making them trustworthy

ram only servers, accepting cash, probably other things.

its the only vpn provider (of a handful of not yt sponsor garbo tier) ive tried that saturates my down and uplink completely (1gbit symmetrical!)

Post reply on HN