• 0 Posts
  • 17 Comments
Joined 2 years ago
cake
Cake day: July 8th, 2023

help-circle





  • Mozilla VPN is just Mullvad, so you are on a very good vpn service.

    As long as you are happy, I don’t see why you should swap.

    (Going to mullvad directly could be slightly beneficial if you want a generated account that has no direct metadata to link to you, using a card to pay would negate that benefit, but theres other options… in the end you are using a good service already)


  • It’s not entirely a big deal to me.

    I think I agree with the staff reply on this thread: https://airvpn.org/forums/topic/56799-audits/

    Our software is free and open source, while we repute at the moment not acceptable to provide external companies with root access to our servers to perform audits which can not anyway guarantee future avoidance of traffic logging or transmission to third parties. On the contrary, we deem very useful anything related to penetration tests. Such tests are frequently performed by independent researchers and bounty hunters and we also have a bounty program.



  • Bad take

    1. You only have one country (the one you run your vps in).
    2. Costs more than any vpn provider (which come with many extra features out the box).
    3. You are not maintaining your OpenVPN installation and having to is likely a pain for most people (you said you “can’t even remember how to login”, which tells you me are not updating your servers OS or OpenVPN itself, which is leaving you open to vulnerabilities in the old software).

    There might be advantages too, but I can’t think of any unless you are gonna use the VPS for other stuff too and creating the vpn is basically free then (but I still wouldn’t do it personally).


  • Maybe I don’t understand, but the fact there is a vote for it (or even just talk about it) is enough for me to warrant everyones immediate action.

    I’m glad the media got this to our attention asap, because we were able to react quickly (and stop this… hopefully its stopped and wont continue or come back).

    Edit: commented then read others, think ppl agree with this and they say it better than I have.

    P.s. i really don’t like this post and hopefully it doesn’t change anyones mind about action on this type of stuff in the future… we need action and to keep fightijg to keep our freedoms.




  • Yes that works if both the sender and receiever encrypt the emails before sending them.

    I specifically mentioned incoming plaintext (unencrypted) email.

    Since mail is technically decentralised, not everyone is using protonmail for example, so protonmail can only perform e2e encryption on protonmail to protonmail email sending (they let you encrypt mail to people outside but it’s not as seamless).

    Nevertheless, I was mentioning incoming plaintext emails, which email providers have to encrypt before storing. The government can middleman that procedure and read the incoming mail before it’s encrypted by your provider (protonmail, etc).

    (This is one of the reasons why lavabit may have shutdown, you can’t protect against incoming plaintext mail)




  • Email is a very different thing.

    You can’t protect against emails being received in plain text.

    Don’t know the technicalities of the specific case you are referencing, but I know that if the government wants to they can middleman any received email before the provider can encrypt it for storage on their servers (by forcing the provider to let them).

    On the other hand, if you use an end to end encrypted chat app, you can’t middleman any messages from the providers side by force because the messages are always encrypted on the users device before being sent.


  • You can use whatever app you like, but I think this adds confusion.

    Signal is private because no one can see your messages except the people you are messaging. The government can’t, Signal themselves can’t.

    Signal is not anonymous only in the sense that the government can check if you use Signal. That’s it. They can tell if you use Signal. They can’t link messages to your number in any way through data requests, etc.

    Not forcing anyone to use Signal, but if you choose to, you can know it is private.

    (So this post is confusing privacy with anonimity basically)