Hacker News new | ask | show | jobs
by ejiblabahaba 1055 days ago
Are you sure you're not thinking of Mullvad?

Related: https://news.ycombinator.com/item?id=35638917

1 comments

Yes. This is a totally unrelated case that never made the news.
Countless examples of Nord supplying logs. They all have to keep logs or would be banned from offering services to US citizens.
Are you sure you aren't thinking UK?

In the US, you have to be a common carrier to be covered by CALEA. Internet services are not required to keep logs.

I could be wrong though.

Provide just one example. Am curious.
Here is a general text on that: https://www.pcmag.com/news/nordvpn-actually-we-do-comply-wit...

Exact examples are hard to find in the press. One that comes to mind is from a Belgian Telco company that was internally hacked by an employee hiding behind NordVPN. Nord when approached by the telco responded with the usual no logs, but after the telco involved the Interpol, logs were given and the attacker doxxed.

> Here is a general text on that: https://www.pcmag.com/news/nordvpn-actually-we-do-comply-wit...

This article (edited multiple times!) is not evidence of anything, let alone Nord co-operating with law enforcement to log customer data.

> Exact examples are hard to find in the press.

You said there are countless examples of Nord logging user data, why are you backtracking now?

> One that comes to mind is from a Belgian Telco company that was internally hacked by an employee hiding behind NordVPN. Nord when approached by the telco responded with the usual no logs, but after the telco involved the Interpol, logs were given and the attacker doxxed.

Give source or it did not happen.

>This article (edited multiple times!) is not evidence of anything, let alone Nord co-operating with law enforcement to log customer data.

Not sure what is not clear from this: “We will comply with lawful requests as long as they are delivered according to all the laws and regulations," NordVPN says. "We are a company that protects the security and privacy of our customers, but we operate according to laws and regulations.”

Why you don't find articles googling is that Nord puts a lot of effort in removing or burring it (google their dispute with TorGuard). Same what they tried to do with the breach in 2018, they half-ass disclosed at least 6 months later after being known to them. (at a point in time the breach already leaked)

Example I gave was a talk in a hacker conference, with no recording (common request for hacker conference talks).