c/buyeuropean · by Sunshine@lemmy.ca · 305d

Another audit, same result - Mullvad proven secure and log-free in latest audit check

https://www.techradar.com/vpn/vpn-services/another-audit-same-result-mullvad-proven-secure-and-log-free-in-latest-audit-check

249 points · 16 comments · view on lemmy.world

16 Comments

emergencycall@fedia.io · 59 pts · 305d (3 replies)

A penetration test is not an audit and does not provide any such assurance that logs are not retained. The goal of a penetration test is to penetrate via vulnerabilities and misconfigurations, not validate public logging claims about a service

Vicinus@piefed.zip · 35 pts · 305d (2 replies)

The audit covered every public-facing component of Mullvad’s online presence, including the website, the Tor-only Onion service, the rsync setup, and the internal content management system (CMS). Each of these elements was examined for common attack vectors, misconfigurations, or any signs of hidden data collection.

I believe checking the "internal content management system (CMS)" is what they are using to say there were no logs.

They linked a more detailed report in the article, but I didn't look at it. It may contain something different than my takeaway from the article.

Weslee@lemmy.world · 6 pts · 305d

The content management interface for the Mullvad VPN web application is a Django ap- plication that allows content administrators to manage the blog, help guides and similar articles.

Doesn't look like the CMS is anything to do with the VPN service itself.

emergencycall@fedia.io · 2 pts · 305d

Your belief is wrong. That is not what a penetration test does. They are looking at it from the outside.

ordnance_qf_17_pounder@reddthat.com · 34 pts · 305d (4 replies)

Ah, Mullchad. The best VPN for those who don't need port forwarding.

Laser@feddit.org · 10 pts · 305d (3 replies)

Still on PIA despite the sketchy history just for that feature.

rycee@lemmy.world · 6 pts · 305d (1 reply)

OVPN also has port forwarding and are pretty transparent.

Laser@feddit.org · 1 pts · 305d

I'll check it out when my current subscription expires.

cantankerous_cashew@lemmy.world · 3 pts · 305d

Im in a similar situation, using protonvpn. CEO has unsavory political views but the service has been fantastic

PrimeErective@startrek.website · 6 pts · 305d (6 replies)

I wish they would make a flatpak

prole@lemmy.blahaj.zone · 3 pts · 305d (4 replies)

If you're using an immutable distro, you can still use mullvad. I've had no problem if I download the rpm (I'm on Bazzite), and install it as a local package. Only annoying thing is that I have to manually update it, but it's really not hard.

PrimeErective@startrek.website · 1 pts · 305d (3 replies)

Yeah, it's easy enough on bazzite, but it's such a pain on the steam deck to get a VPN working. I haven't been able to do the manual config lately either

Proton VPN flatpak on steam deck works great though

prole@lemmy.blahaj.zone · 4 pts · 305d

SteamOS is not that different than Bazzite... Can't you go into desktop mode, download the RPM from the mullvad site, and install the local package using "rpm-ostree" in command line?

Fizz@lemmy.nz · 1 pts · 304d

Use distrobox to install it from another distro.

drasglaf@sh.itjust.works · 1 pts · 305d

You could try CachyOS on the Deck, I used it for a few months and it worked great. It's practically the same as SteamOS but with pacman and paru available, with all the advantages this brings.

I sold my Deck and bought a Legion Go, and I'm also using CachyOS here. Same results.

carrylex@lemmy.world · 2 pts · 304d