Remix.run Logo
mulmen 6 hours ago

But if both services keep logs de-anonymization is a join.

dongcarl 5 hours ago | parent | next [-]

(Carl from Obscura here)

Very true, but if even 1 of (Obscura, Mullvad) is honest, there's no de-anonymization.

For traditional Single-Party VPNs, you just need to compromise 1 party, with Two-Party Relays, you need to compromise both.

mulmen 13 minutes ago | parent [-]

You certainly think and know more about this than I do so thanks for taking the time. Would adding multiple VPN providers improve the safety of Obscura? Then a compromised VPN provider only exposes a fraction of the traffic. Does that create more risks? Did I just invent Tor but worse?

PunchyHamster 6 hours ago | parent | prev [-]

They don't even need to. If you observe enough of them you can correlate traffic patterns between them and find out which one is used by which endpoint