Hacker News new | ask | show | jobs
by aysfrm11 308 days ago
I have no relationship with OVPN but after watching their server deployment on YouTube I have to say I do like their approach to security / privacy.

Servers that don't log and can't without hard drives, ports physically glued shut.

https://www.ovpn.com/en/security
1 comments
nneonneo 308 days ago
Ah, but how can you tell that you’re connecting to a server that was actually configured that way?

Answer: no you can’t, you still have to trust them. At the end of the day, you always just have to trust the provider, somewhere.

link
lillecarl 308 days ago
OVPN successfully evaded Hollywood(through pressure on Swedish institutions) 5 years ago when they were up ThePirateBays ass again.

You still have to trust them, you're not wrong but at some point I'll fall back to the common question security people(not me) tell paranoid doubters: Whats your threat model?

If you're running a global child-abusing ring through Mullvad or OVPN(offers static IPv4 for inbound traffic) I don't know what they'd do but they've proved themselves over and over to be organisations you can trust.

OVPN turns around about 1.2M$ with 0.8M$ profit (0), Mullvad turns around significantly more money but with less profit margin (1) (probably funneling profits to a tax haven) so the risk of someone buying out OVPN is there, but "you" are probably not worth it if the ones targeting TPB didn't figure out how to get through.

You can still run TOR over their VPNs as another layer if you're uncertain their reputation is trustworthy enough for your usecase but don't want TOR traffic originating from your IP.

https://claude.ai/share/a47c19f7-8782-4a9f-ae26-2d2adb52eaed

0: https://www.allabolag.se/foretag/ovpn-integritet-ab/-/konsul... 1: https://www.allabolag.se/foretag/mullvad-vpn-ab/g%C3%B6tebor...

You can look up any Swedish company through sites like allabolag or merinfo if you're curious... until they grow into tax-evading evil megacorps :)

link