I found this to be an interesting watch in layering security/ privacy rather than throwing the hail mary at a VPN and expecting it to keep you anonymous.
I found this to be an interesting watch in layering security/ privacy rather than throwing the hail mary at a VPN and expecting it to keep you anonymous.
VPNs primarily give you privacy from your local ISP, not necessarily anonymity. And the VPN provider then takes on the role of ISP and has the technical ability to inspect your traffic as it goes by. They may agree not to do that in the one-sided non-negotiable unilaterally-updatable ToS they offer you, but you have no means of knowing if they stick to it, and they almost certainly have carve outs in the terms to comply with local (to them) law enforcement demands.
I’m somewhat trusting of Mullvad, since they’ve actually been raided by police who walked away empty-handed which IMO demonstrates that they’re not bullshitting about not logging anything. But yeah as you say, that could always change in the future.
As a wise person once said, “No company is going to break the law for you.”
It’s fine to have some trust in your services, but it should never be without exception. The responsibility for privacy is always ours to ensure.
No company will break the law for you, but you can, on occasion, manage to do business with a company in a location where the laws are favorable to your activity.
Exit all your torrent traffic in a country that doesn’t care enough to hunt you down.
I have a reasonable amount of trust in my VPN. They’ve been audited as early as 2024 by several indepentent agencies. They have proved their ‘no logs’ boast in court for quite a few instances. Even when servers were confiscated, there was no usable data found. So I feel reasonably confident in their service. However, that doesn’t mean I completely trust them.
What independent agencies? Are they not-for-profits or are they paid by the VPN provider?
I appologize for my poor word choice. These are third party auditors. Didn’t mean to mislead. Auditors like PwC (PricewaterhouseCoopers), Deloitte, KPMG, Cure53, Altius IT, VerSprite, Leviathan Security Group, MDSec.
I wasn’t commenting on your word choice. I was saying that basically any independent auditor brought in will have a conflict of interest.