‹ BackHN Continuity

Thread

Obscura: VPN that can't log your activity

233 points · 140 comments · Flimm

  1. hehdtyjjoj · · focus · HN ↗
    How does this prove Obscura and Mullvad can't just both gather tracking data and then just combine it on demand?
    1. woah · · focus · HN ↗
      and how is it better than just connecting to mullvad over nordvpn or something?
      1. iAMkenough · · focus · HN ↗
        If you're already a Tailscale user, seems like this solution is nearly identical to using Mullvad as an exit node.

        You would go with this solution if you don't trust Tailscale or NordVPN, I guess.

        1. dongcarl · · focus · HN ↗
          (Carl from Obscura here)

          I could be wrong but in Tailscale if you use Mullvad as an exit node, the traffic flows directly from your device to Mullvad's servers.

          Whereas with Obscura, your traffic flows to the Obscura relay, then the Mullvad exit.

          1. iAMkenough · · focus · HN ↗
            Yes, but your tailnet IP is what is provided to Mullvad's servers. Not your public IP or personally identifiable information (according to Tailscale).

            I'm under the impression that my personal device isn't the WireGuard endpoint for the Mullvad connection, Tailscale is.

            1. dongcarl · · focus · HN ↗
              I believe if your device connects directly to Mullvad they will have your real IP (to know where to send reply packets)
              1. iAMkenough · · focus · HN ↗
                After further research, I was under the wrong understanding. You are correct that Mullvad still receives your public IP even if routed through Tailscale.

                Obviously seems to be an industry-wide problem, but I hope both you and Tailscale can consider alternative endpoints for those who don't want to rely on the Mullvad infrastructure.

                Diversification of endpoint providers will help insolate your company from a collapse if Mullvad decides to sell out, and make you more attractive to former Mullvad customers turned off by their Co-Founder's investment of their privacy dollars into extreme right-wing politics.

                As far as I know, they don't plan to part ways with the "great replacement theory" executive staff being paid enough to be the highest contributor to the Swedish far-right party Örebropartiet. You have to question whether their highest-paid staff's loyalty to far-right politics influences Mullvad decisions and future partnerships.

                Cross the Örebropartiet, and you might be issuing refunds a year from now.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.