I’m sharing this one because I’m curious what more knowledgeable people think about this one. Please take a peek at the article before joining the discussion, as my limited quote might have dropped useful information

The VPN industry runs on a promise. Pick almost any provider and the pitch is the same: “we don’t keep logs.” You hand over your entire internet connection and, in return, you get a pinky-promise that nobody is writing anything down.

For a lot of privacy-minded people, that promise stopped being good enough a while ago. A no-logs policy is only as honest as the company making it, and even an honest company can be hacked, subpoenaed, or quietly acquired.

Obscura VPN is trying to answer to that problem. Instead of asking you to trust its word, it splits the job across two independent companies so that neither one can tie your identity to your browsing. The first hop is Obscura’s own servers; the exit hop is run by Mullvad. a respected VPM company out of Sweden. Your traffic is end-to-end encrypted to Mullvad’s keys, so Obscura literally can’t read it, and Mullvad never sees who you are.

  • Mas@feddit.fr
    link
    fedilink
    Français
    arrow-up
    0
    ·
    28 days ago

    The same people who were asking for a Google account so they could sign up for Obscura VPN beta 🤡

  • eremophila@lemmy.zip
    link
    fedilink
    arrow-up
    0
    ·
    28 days ago

    “the exit hop is run by Mullvad. a respected VPM company out of Sweden.”

    been living under a rock?

  • thanksforallthefish@literature.cafe
    link
    fedilink
    arrow-up
    0
    ·
    28 days ago

    I doubt I’m more knowledgeable but the argument made is reasonable. I’m not totally convinced that trusting 2 providers is an improvement on trusting one. The point not canvassed in the article is that if Mullvad is the encrypted end point with keys then it doesn’t really matter if they don’t know who you are from account info, it’s not very hard for them to have an unencrypted data flow split off for inspection which sooner or later will provide sufficient info to identify you.

    Tl;dr if you trust mullvad deal with them directly. If you don’t trust mullvad this doesn’t actually fix that although it makes it harder and more effort to identify you it can still be done.

    I wouldnt pay a premium over mullvad’s price for this. No real value added.

    • RecallMadness@lemmy.nz
      link
      fedilink
      arrow-up
      0
      ·
      27 days ago

      There’s potentially an argument in obscurity.

      If Mullvad only sees a firehose of data from one connection, then they might see 200 requests per second to Google, from customer O, for everything under the sun.

      Vs, if you go direct to Mullvad they’ll see 1 request per second from customer X for “big goth tiddies”.

  • adarza@lemmy.ca
    link
    fedilink
    English
    arrow-up
    0
    ·
    28 days ago

    this isn’t a revolutionary concept or anything, it’s basically just tor, without the middle hop, and with entry nodes that knows who you are

      • SpookyBogMonster@lemmy.ml
        link
        fedilink
        English
        arrow-up
        0
        ·
        28 days ago

        too slow and unreliable for general everyday use

        There was a guy on Lemmy awhile back who was daily driving TailsOS, as a bit. I wonder how it turned out

        • shortwavesurfer@lemmy.zip
          link
          fedilink
          arrow-up
          0
          ·
          27 days ago

          I’m actually using TorVPN on my device, and if it drops, I force all my internet connections to drop with it instead of leaking.

          I find that I can still access most things, although some things will pretend that the connection can’t be established as if the site was down, and others will just give me like an access denied page.

          The reason I am doing it at all to begin with is because one day we as free citizens are going to have to abandon the clear net entirely as it’s becoming the cuck net. I’m just preparing for that day by learning to use the services over tour today and getting used to the speeds and stuff I will have to deal with at that point.

    • r3g3n3x@lemmy.zip
      link
      fedilink
      arrow-up
      0
      ·
      27 days ago

      I mean yeah duck those people but if my enemy makes the honestly best quality vpn out there I’m going to use it.

        • TrollAccount69@lemmy.ml
          link
          fedilink
          arrow-up
          0
          ·
          26 days ago

          Air is a piracy vpn that literally can’t let people from the nation its based in use its service because the government would intervene.

          Fucking hot stove ass service.

          Air is also extremely complex to set up and use and has, not the most buggy app, but a strong contender for it. Users have to be careful to avoid creating an account or using a payment method with pii.

          I use airvpn daily. I would never recommend it as an alternative to mullvad.

  • Venia Silente@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    0
    ·
    28 days ago

    The pinky promise to not look at who you are on the tech side is only useful if it’s also accompanied with the promise to not know who you are on the business side ie.: not requiring any kind of payment data.

    Easily pay using Bitcoin’s Lightning Network for better privacy, instant payments, and lower transaction fees. We also accept Monero.

    Crypto? That’s almost worse!

    • AHemlocksLie@lemmy.zip
      link
      fedilink
      arrow-up
      0
      ·
      28 days ago

      As far as I’m aware, nobody has ever been identified by a Monero transaction or a Bitcoin lightning network transaction without getting verification from the other party, e.g., you send money to a company that retains records and gets subpoenaed. Bitcoin transactions made on the lightning network aren’t even recorded on the blockchain, so it’s completely immune to chain analysis.

      • Venia Silente@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        0
        ·
        27 days ago

        Yeah but that still means you have to get into crypto which is a well-known scam (and from what I gather even if there might be “legal” crypto exchanges, that “legal” carries its own implications there).

        • AHemlocksLie@lemmy.zip
          link
          fedilink
          arrow-up
          0
          ·
          27 days ago

          There are a TON of scams in crypto, no doubt about that at all. I don’t think Bitcoin is one of them, though. I don’t think Monero is, either, but I don’t think it’ll thrive long term. Most of the rest is bullshit just chasing dollars.

        • JillyB@beehaw.org
          link
          fedilink
          arrow-up
          0
          ·
          27 days ago

          Crypto is not a scam. Crypto is an unregulated transfer mechanism, which has many scammers. If you’re just buying crypto to fund your vpn, you’re not getting scammed unless the VPN itself is a scam.

        • mnemonicmonkeys@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          0
          ·
          27 days ago

          Using Monero for payment is fine once you have it set up. You’re just using it for facilitating anonymous payments, not treating it like stock.

          That being said, setting up Monero securely is a pain. I’d like to use it at some point in the future but right now I have more pressing projects to work on

    • ReverendIrreverence@lemmy.ml
      link
      fedilink
      English
      arrow-up
      0
      ·
      26 days ago

      I buy a Mullvad gift card from Amazon every 6 months, generate a new Mullvad user code and apply the card credit. Amazon knows I bought a Mullvad card but not the code I generated to use it with. Mullvad only knows someone showed up with a gift card. Is that not “good enough” for privacy and anonymity?