Mullvad exit IPs are surprisingly identifying (tmctmt.com)

Article summary

Mullvad, a VPN provider, assigns exit IPs deterministically based on a user's WireGuard key, rather than randomizing them. This approach can potentially be used to identify users, as the same set of exit IPs is assigned to a user across different servers. The article's author discovered that the exit IP assignment is based on a seed-based RNG, which generates a consistent ratio of IP positions within each pool. This allows for the correlation of identities across different IP addresses.

Main themes

• VPN security
• Exit IP assignment
• User identification
• Privacy concerns
• Load balancing

What commenters say

• The deterministic assignment of exit IPs by Mullvad may be intended to prevent abusive users from getting other users blocked, but it comes at a cost to user privacy.
• Some argue that using a VPN is still a better option than relying on an ISP, as VPNs can be chosen from a global pool and some have been proven to not retain user data.
• Others claim that most commercial VPN services farm and sell user data, and that trusting a VPN provider is no different from trusting an ISP.
• The use of a seed-based RNG to assign exit IPs is seen as a potential flaw in Mullvad's system, allowing for the correlation of identities across different IP addresses.
• Some commenters believe that the benefits of using a VPN, such as hiding traffic from ISPs and protecting against data collection, outweigh the potential risks of using a potentially untrustworthy VPN provider.
• There is disagreement over whether ISPs or VPN providers are more trustworthy, with some arguing that ISPs are subject to local laws and regulations, while others claim that VPN providers are often based in shady jurisdictions.
• The choice of VPN provider and the level of trust placed in them is seen as a crucial factor in maintaining online privacy and security.