Why? If I was an intelligence agency and designing a VPN I would simply log all the IPs connecting to my VPN and not rely on statistics on exit nodes to identify the users, even more so because they rely on the users to pick different servers.

▲

faangguyindia 2 hours ago | parent [-]

How would you claim it's a no log VPN?

▲

LordAtlas 2 hours ago | parent | next [-]

I could just...lie.

▲

im3w1l an hour ago | parent | next [-]

One person can tell a lie, but a company consists of many people. You must ensure that only few people know of the logging or there will be a risk of a leak.

▲

michaelt 4 minutes ago | parent | next [-]

Well, there should only be a few people with the access needed to discover logging is happening.

You'll have a server image where SSH can be toggled on using a config value in the test environment, to assist in debugging. That's normal. Don't worry, it's turned off in production. Obviously you're going to deploy the same server image you tested, only idiots test one thing and deploy another.

And you'll have a high security configuration management tool, to look after your production TLS keys and suchlike. Only a tiny handful of people have access to view production configuration values.

▲

arcfour an hour ago | parent | prev | next [-]

An intelligence agency already consists of more people than you need to run a VPN service.

▲

im3w1l 21 minutes ago | parent [-]

Still I think it's easier to avoid the need for more people than necessary. "Just lie" sounds like the easiest solution but on closer inspection maybe it is not?

	▲	arcfour 15 minutes ago \| parent [-]
		Because if you lie you get infinitely more data than if you don't lie. And if you lie you can do it completely in secret whereas if you don't lie you get articles like the OP exposing the teeny amount of data you're trying to collect. It makes no sense.

▲

xboxnolifes an hour ago | parent | prev [-]

Intelligence agencies... are generally pretty good at that.

▲

haakon an hour ago | parent | prev | next [-]

You really think someone would do that?

	▲	fragmede an hour ago \| parent [-]
		What, just go on the Internet and tell lies? Who would do such a thing‽

▲

ZeWaka an hour ago | parent | prev [-]

*gasp

▲

zahma an hour ago | parent | prev [-]

Their 3rd party audit didn’t catch this…

I guess we’ll see how they respond.