Well, just that. Wich is stronger against trackers, hackers and doxxing threats? Proton VPN (I’m using this one actually), or Mullvad VPN?
Maybe try both!! I love both VPNs
I have and use both.
Without choosing some sort of dns based ip blacklist (offered by both providers btw), neither one really does what you asked about.
What are you actually trying to prevent? If you don’t know what language to use, just describe the situation.
Do VPN’s actually protect against any of that? They’re basically only useful if you want to get around your country’s internet filters, log into a website that has blocked your IP, or hide your traffic from the government (and in the latter’s case, Tor is probably a better pick).
I guess it may help with tracking, but there are so many ways in which your tracked, is your IP even one of them?
Precisely this. Consumer VPNs are not tools for security or anonymity. They won’t protect you from most kinds of fingerprinting or tracking beyond IP-based tracking. They have relatively specific uses. I recommend Privacy Guides’ article on them for further reading: https://www.privacyguides.org/en/basics/vpn-overview/
Mullvad. Not even a question
Also, the Proton CEO publicly supports Trump
I use Proton currently since it comes with my proton subscription. But I used mullvad for years and prefer it. They’re both good, you can’t go wrong really.
There’d thundermail coming out soon, which will probably have mullvad included. This also funds firefox too which is nice.
Mullvad any day. Support is awesome.
If you go with Mullvad look for the gift cards out there that are for 6 or 12 months of service. I grabbed one off Amazon.ca for 12 months at $75. Works out to be cheaper than paying per month with the ever changing exchange rates.
I also like the fact that Mullvad has servers in the city I live in where as Proton has them on the west coast or east coast. Not the greatest for those in the middle of the country.
Mullvad.
Proton has a Trump ass kisser working in their C-suite.
Okay, but how does the political stance of Proton workers affect my privacy?
At the moment, it doesn’t. He could decide to violate Swiss law and turn data over to Trump.
That would certainly affect your privacy.
Correct me if I’m wrong, but he doesn’t have the power to do that. Proton has a board with many members calling the shots.
There are sellouts and traitors.
I like that you don’t have to provide an email address to mullvad.
You can also send them money in a letter
Mullvad is much friendlier to privacy, but their proxies get blocked by A LOT of stuff, they also have a very small number of proxies. Mullvad collects literally nothing about you, but that’s a double edged sword. not having any way to verify exactly who paid money into which account number means they can’t help you if someone steals your account. I also have it on good authority that mullvad isn’t very reliable at getting past more aggressive censorship firewalls. the one in china for example won’t allow you to use mullvad unless the sim you’re connecting from is a US one.
Proton doesn’t record anything you’re doing with their VPN and they’ve had to prove that many times and their “sentinel” program and the 2FA and double password you can enable make it very hard if not impossible for someone to mootch off your account. I very rarely get blocked by anything when I use proton VPN, if I ever do get blocked I just have to change the proxy I’m on. I don’t even have to change the location most of the time because proton VPN has a huge number of proxies at each location.
Proton also gives you the ability to save recovery phrases and recovery files if you lose your password(s) or your 2FA
ente auth and ageis auth are great for storing your 2FAs and they allow you to back them up to a file if your account with ente fails in some way or if you forget the password to get into your ageis
as for those recovery files and phrases I talked about. save them in text files on a small capacity flash drive that you don’t use for anything else
Mullvad also has hidden servers they give access to on request if you can’t access the regular ones. Can help with government censorship etc
Good to know, but how can you safely request them without giving away that you’re using them?
What method does the request go through? What happens when those proxies get blocked by the censorship firewalls too?
I just used email lol, and I don’t think it’s possible to hide that you’re connecting to a certain IP. And if they get blocked too I’ll email them again D:
Who knows how to steal you mull account with out you knowing? This seems over blown atleast from that perspective. I’m sure it’s possible but unless you are incredibly slopping opsec I doubt it’s even on the list of problems. Given all other things you could be doing.
it’s just a string of numbers with no password
How would anyone get the long string though? Realistically speaking. It would be difficult and unlikely.
It’s just numbers, no punctuation marks, no letters, no math symbols. No entropy really.
For most people that’s not an issue, but some people out there can guess them.
one way to mitigate that problem is simply to not load your mullvad account with more than 1 year of time at any given time. If your mullvad account has like…10 years of time then yeah, lots of people are going to mootch if they figure out which number has that
Or even if they don’t mootch, they could just remove the devices on your account and fuck with you
Unless you are willing to do the math, “no entropy really” deserves a [citation needed]
Unless you are willing to do the math, “no entropy really” deserves a [citation needed]
what kind of password has more entropy? one with capital and lowercase letters, numbers, math symbols and puncuation marks?
or the one with only numbers?
Is there really a citation needed for that?
Entropy is calculated from the character set size to the exponent the length of the string: E = log2(R^L). A long string of numbers can have more entropy than a shorter alphanumeric string with special characters. I looked it up and apparently their account number is 16 digits. That’s 53 bits of entropy, which is not guessable. Someone brute forcing would have quadrillions of login attempts to try.
Mullvad hasn’t yet shown themselves fed- friendly.
Proton has.
Mullvad is the answer.
Source please, we in the /privacy community genuinely want to learn so when such things do happen, we all benefit from factual information. Please do not assume we all know what you are referring to. It is particularly in this kind of cases when, for example with Signal what was “shared” with authorities is basically irrelevant, cf https://signal.org/bigbrother/ so we must be precise.
Proton has cooperated with subpoenas on multiple occasions leading to the user’s arrest.
While they may challenge them, the point is that they have cooperated and thus are not reliable. There are no reported cases of Mullvad doing the same.
There are ample links from multiple sources that describe this with a simple search.
What about NordVPN? I use it and I’m pretty happy.
They are the trackers
Mullvad. Their servers run on RAM, and they don’t have any information about you no email, no username you can even pay with cash. However, Proton has port forwarding, while Mullvad does not.
I prefer Mullvad. Regularly audited, can pay with cash if preferred, everything runs on RAM, and hasn’t had any controversies so far. The only issue for some is no port forwarding. I also like the multi-hop and DAITA features.
A VPN is a VPN, having a different IP address is equally effective against those things no matter which IP it is. The issue is whether or not anyone can associate that IP with yours, and what that comes down to is how willing they are to give up their records when the government asks nicely (or, even more importantly: not so nicely.) I’m not familiar enough with either service to be able to speak to that, but everyone else seems to be talking about features, prices, politics, etc when none of those directly address your questions.
False and fake information.
lol, k, I definitely respect the opinion of someone who drops a half-assed comment like that without bothering to offer what they believe to be the correct information.
I can’t presume to know what they meant, specifically, but I think they’re probably referring to the fact that a VPN provider has access to all of the data you’re transmitting through their exit nodes, and a malicious one could harvest and sell it. Or work with LE and hand over all tracking data, all information about your browsing habits for the past year, all of the times you visited PornHub and Grinr, how many times you visited that trans support website… everything LE could get by surveiling your behavior if you weren’t using a VPN.
A VPN is only worth how trustworthy the VPN provider is. Mullvad, for instance, claims to keep no logs, so a search warrant for logged data is useless. This is not true of all VPN providers.
If that’s the case then both of you failed to read the part of my comment where I explicitly addressed that:
The issue is whether or not anyone can associate that IP with yours, and what that comes down to is how willing they are to give up their records when the government asks nicely (or, even more importantly: not so nicely.)
I admit I didn’t include the possibility of the VPN operator themselves being malicious, but it seems weird to call me out for not addressing the issue of record security re:governments/LE when pretty much the entire point of my comment was to address that specific issue because no one else was, no?
You start with “a VPN is a VPN.” However you qualify it, it’s not true unless you’re merely stating a tautology, which doesn’t seem constructive or helpful.
You ever notice how it sometimes helps to read the whole sentence to understand what some part of it means in context?
A VPN is a VPN, having a different IP address is equally effective against those things no matter which IP it is.
There’s a comma after that second VPN so obviously it’s related to what follows, which is the part where I describe exactly how a VPN is a VPN: in terms of getting a different IP address. This is twice now you’ve gone way out on a limb here trying to back the play of some fucking troll who didn’t bother to explain themselves and I’m not sure if that’s where you want to be. Picking through my comment and taking bits out of context to feed back to me as ‘evidence’ to back up your pedantry and assumption that the rest of the text of that same comment shows you to be wrong about is not a good look. If you’re going to nitpick my shit to death then you should at least try to read the whole thing and understand how each of the parts relate to each other first, otherwise people might mistake you for some fucking troll too (albeit a clearly slightly more intelligent one since you can actually elucidate what your issue is with what I said, regardless of whether or not it’s remotely accurate.)
Wow. You are a capital-D douche.
