Fourth Infrastructure audit completed by Cure53 | Mullvad VPN
mullvad.net
We contracted Cure53 with performing a security audit towards our VPN infrastructure between 3rd June 2024 and 14th June 2024, this is our fourth audit in total, second with Cure53.
    • MoraEnglish
      5·
      5 months ago

      Big oof. But if you have a lifetime subscription you can still use them. Just generate/download the configs and don’t use their client.

    • FeelzGoodMan420@eviltoast.orgEnglish
      4·
      5 months ago

      So is he shitting on winscribe specifically or all commercial VPNs? Idk how to read into this. Is he saying Mullvad sucks too?

        • Synnr@sopuli.xyzEnglish
          7·
          5 months ago

          Just something to keep in mind for those not in the security space. When a security company does an audit, its generally a checklist of commercial and custom security software along with a couple people poking around looking for more manual harder to find stuff. But there’s a reason companies like Mullvad have a bug bounty program… Just because cure53 didn’t find it, it doesn’t mean some bored hacker won’t…

          Absolutely better than nothing though.

      • Undertaker@feddit.orgEnglish
        2·
        5 months ago

        He claims all private VPN providers are similar bad but there is no proof, only some snippets from Windscribe which say nothing about other clients.

        It’s like saying one person is lying, so must all others.

        Maybe good points about Windscribe but bad generalization in terms oft arguments.

  • Tangent5280@lemmy.worldEnglish
    8·
    5 months ago

    Damn, didn’t know this. I thought they were pretty standup people, didn’t think the actual product quality would be left, so… wanting.

    EDIT: Sorry, I was talking about Windscribe, and this comment was supposed to be in response to boredsquirrel’s comment in this thread.

    • uhmbah@lemmy.caEnglish
      9·
      5 months ago

      What did I miss?

      Cure53 concluded their report by stating that they “…attempted to identify any potential methods by which a user’s VPN traffic anonymity or integrity could be compromised. No such issues were found, and no vulnerabilities affecting the core product were detected.”