Perfect Privacy, a VPN provider, blogs on VPN leaks, WireGuard tradeoffs, and OpenVPN setup.
HN commenters cite its WireGuard pros and cons post as a reason WireGuard isn't yet safe for VPN use, and its stunnel guide for hiding OpenVPN.
WireGuard is very hard to run without logging. It simply wasn’t designed for that and the maintainer was paid once to write “a rootkit-like” piece of code for a VPN provider which hired him to help them fix that.
It’s still an open question afaik
edit: I've worded this weird. I was typing on my phone at lunch stuff I'd just learned this morning[0] which referenced this[1] article saying running a log-less Wireguard might not be possible.
AirVPN in [0]:
> "Wireguard, in its current state, not only is dangerous because it lacks basic features and is an experimental software, but it also weakens dangerously the anonymity layer."
and Perfect Privacy:
> "WireGuard has no dynamic address management, the client addresses are fixed. That means we would have to register every active device of our customers and assign the static IP addresses on each of our VPN servers. [...]"
Things may have changed, but it appears that running a log-less vpn provider is actually more complicated with Wireguard than at first glance. Namely the issues around DynamicIPs.
[0]: https://restoreprivacy.com/wireguard/
[1]: https://www.perfect-privacy.com/blog/2018/10/10/wireguard-vpn-pros-and-cons/?a_aid=vpnrep
https://perfect-privacy.com if you're from Europe (they have most of their high bandwidth servers with good peering in Europe).
They've been raided multiple times (and are used by a lot of criminals - I think it's actually a good indicator when fraudsters trust your privacy service).
Raid in Rotterdam (Servers): https://torrentfreak.com/police-seize-two-perfect-privacy-vpn-servers-160902/
Raid in Erfurt (Admins Home): https://lists.torproject.org/pipermail/tor-talk/2010-August/002989.html
Also: Perfect-Privacy found an exploit (dubbed Port Fail) which was present in a lot of other commercial VPNs (PIA, nVPN, ovpn.to) and reported it to them before disclosing it publicly: https://torrentfreak.com/huge-security-flaw-can-expose-vpn-users-real-ip-adresses-151126/
Across browsers it works only if both browsers are based on the same engine.
- Group1: Chrome, Chromium, Opera, ...
- Group2: Firefox, Tor Browser, ...
- Group3: on iOS every browser is based on Safari
- ...
Though with a backend you could track users switching among Chrome and Firefox by misusing WebRTC to leak the private IP ( https://www.perfect-privacy.com/webrtc-leaktest/ ).
If the switching between browsers happens in a short period of time, the public + private IP is a pretty solid guess.
If you observe and store this connection once you can always track the user switching among the two browsers.
Google found this company offering ipv6 support.
https://www.perfect-privacy.com/vpn-with-ipv6-support/
What I'd really like is a vpn that gives me an ipv4 address and an ipv6/64 so I can have my router do the vpn and route my whole network through a vpn by only configuring one computer.
I just tried the following and they all had no IP or my VPN ip:
- https://www.perfect-privacy.com/webrtc-leaktest/
- https://browserleaks.com/webrtc
- http://whatismyipaddress.com/webrtc-test
- https://zpn.im/webrtc
- https://www.vpnmentor.com/tools/ip-leak-test-vpns-tor/
Here's one:
https://www.perfect-privacy.com/vpn-router/
although I picked up one of these e2500's at the goodwill by my house for $1.50. I have one and wanted a spare.
Here's another:
https://www.flashrouters.com/?gclid=COzwtN-B_NICFZcbgQodMdAPTA