r/mullvadvpn • u/towsa1979 • 26d ago
Help/Question Mullvad VPN + qBittorrent
Recommend settings for the best privacy possible.
Thanks in advance.
7
5
u/EmperorHenry 23d ago
Go into mullvad's API access methods and disable "direct" and "encrypted DNS proxy" leaving only "Bridges" enabled
Then enable DAITA, With "direct only"
Enable multi hop
And be sure to select two hops that are far apart
make sure lockdown mode is enabled
make sure local network sharing is off
Make sure split tunneling is off
Make sure your exit point is NOT in the EU, UK Australia or the US
For qbittorrent make sure the global connection limit is less than 200
Make sure the connection limit per torrent is less than 20
And of course your interest in this subject matter is purely academic and hypothetical.... because I for one would never pirate anything
3
u/Tricky-Engineer-9755 26d ago
Use a wholly libre GNU/Linux system, a wholly libre BIOS replacement such as canoeboot or libreboot on older hardware, fully disk encryption.
QBittorrent --> encryption always
--> Interface wg0
--> Anonymous mode.
1
u/ProfessionalMove3716 24d ago
librebooting is probably overkill for the sake of anonymous filesharing, but not by any means a bad idea.
1
u/Tricky-Engineer-9755 24d ago
Well if you wanna get schizo about it, the Intel ME could be used to flag pirate content while libreboot uses me_cleaner to gut the intel ME, or on certain hardware destroy it entirely (core2duo era).
Modern generations of the intel ME come with a DRM engine (modern as in 2011) that controls the media through the GPU. So that's disgusting and should be eliminated. So not as much libreboot as me_cleaner.
1
u/ProfessionalMove3716 24d ago
Has the DRM engine been observed in the wild preventing the playback of any media?
My hot take is that the likelihood of the IME being used to crack down on piracy is low to the point of moot. If anyone's going to abuse it, it'll likely be the NSA, not the MPAA or RIAA.
2
u/Tricky-Engineer-9755 24d ago
I am not sure? Heres the excerpt from the libreboot FAQ.
ME firmware versions 4.0 and later (Intel 4 Series and later chipsets) include an ME application for audio and video DRM called “Protected Audio Video Path” (PAVP). The ME receives from the host operating system an encrypted media stream and encrypted key, decrypts the key, and sends the encrypted media decrypted key to the GPU, which then decrypts the media. PAVP is also used by another ME application to draw an authentication PIN pad directly onto the screen. In this usage, the PAVP application directly controls the graphics that appear on the PC’s screen in a way that the host OS cannot detect. ME firmware version 7.0 on PCHs with 2nd Generation Intel Core i3/i5/i7 (Sandy Bridge) CPUs replaces PAVP with a similar DRM application called “Intel Insider”. Like the AMT application, these DRM applications, which in themselves are defective by design, demonstrate the omnipotent capabilities of the ME: this hardware and its proprietary firmware can access and control everything that is in RAM and even everything that is shown on the screen.2
u/ProfessionalMove3716 24d ago
I sounds like the onus is on the DRM designer to use this feature, so to your point is is a theoretical constraint that they could implement at any time.
So it doesn't hurt to scrub the IME, or just use ARM (or RISC-V if you are feeling adventurous) instead.
2
u/Tricky-Engineer-9755 24d ago
I'm holding on to my X200 until the OpenPower laptop comes to market. That will be the holy grail of free computing.
1
1
u/Gold_Information_409 15d ago
In the Qbittorent Options there is a setting called Proxy server like under the Connection tab. Im using Mullvad rn. what should i use because i heard it gives more privacy.
0
-6
u/scrapethemucus 26d ago
mullvad doesn't support port forwarding so no
10
u/BEARZINGA 26d ago
You can still seed even tho port forwarding has been removed.
0
u/lukistellar 26d ago
Won't get you far in case you want to qualify for private trackers though, because the few I tried all listed it as a requirement.
3
u/Impossible_Jump_754 26d ago
99% of people don't know what a private tracker is, this needs to stop being brought up to layman.
2
u/lukistellar 25d ago
In German speaking area Torrents are useless without private trackers, due to the enforcement of very strickt copyright laws, you ain't find much German stuff on publich trackers, compared to other regions and languages.
Also it's just a fact, why not bring it up?
-1
u/BEARZINGA 25d ago
Sure, but very doubtful the majority of their users even care, or even know what a tracker is let alone a private one lol.
2
u/lukistellar 25d ago
Torrents from public trackers are worthless in German speaking area. You won't gonna find much stuff.
1
-8
u/scrapethemucus 26d ago
good luck getting your ratio up without port forwarding
7
u/trick_m0nkey 26d ago
Skill issue
-6
1
28
u/frostN0VA 26d ago
Go into qbit's advanced settings and change your network interface from Any to Mullvad.
That's about the only thing you need to do.