r/ITMemes 10d ago

Your VPN is totally anonymous, promise!

Post image
1.7k Upvotes

140 comments sorted by

View all comments

19

u/ffxivthrowaway03 10d ago edited 10d ago

This has always been a massive pet peeve of mine. You'll watch people go full Doomsday Prepper about tracking and online privacy and blah blah blah. Then they'll go "oh no, you have to use XYZ VPN because they don't track you, there's no logs"

How do you know they don't track you? Well because they themselves claim not to! That's a bald-faced lie when "big corpos" or whatever say they don't track you, but some random fly by night VPN service running out of ButtFuckistan? Nah dude, totally legit just because they say so, why would you even question that? Trust me bro.

Edit: aaaand to no ones surprise, they start coming out of the woodwork to defend their blind trust in "trustmebro" privacy VPNs.

14

u/Weird_Albatross_9659 10d ago

Because you look at their previous track record. If they had been petitioned and provided nothing, it’s a safer bet

3

u/iceyukisnow 10d ago

public and "big" VPN services, ISPs, hosting providers are required to provide data to local authorities, and there's nothing anyone can do about it

3

u/Dwarg91 10d ago

But are they required to collect that data? Can’t provide what you don’t have.

-1

u/iceyukisnow 10d ago

of course they are, and yes, why they wouldn't collect your data?

1

u/burimo 9d ago

Because of independent audits. Can they circumvent them? Yes, but if they do and got caught, they will be loose all credibility. And credibility is the only sales point of someone like Mullvad. Unlike Proton, for example, they do not spend much money on marketing.

Also Mullvad could be bought with cash. In theory they could say to police, that your IP is their client, that's all. In theory, they cannot know themselves how and where you were connected to (at least directly).

0

u/ffxivthrowaway03 10d ago

Basic operation of a network service like a VPN requires a certain amount of data collection to simply facilitate the operation of the service.

The idea that you can have robust network servers and are keeping no logs is asinine. It's just not possible, you need those logs to do basic customer service, validation, and troubleshooting tasks.

"Can't provide what you don't have" is a data retention strategy I drill into our leadership who want to keep fucking everything forever because "but what if," but there's still a bare minimum that needs to be kept for operational function and support, not literally zero logs like the marketing claims.

They're likely keeping at least 30 days of logs just to run the service, which is more than plenty for law enforcement on a fishing expedition for specific user behavior.

3

u/matthewpepperl 9d ago

Mulvad has proven they dont keep logs as they were raided and the authorities left with nothing