frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Mullvad exit IPs are surprisingly identifying

https://tmctmt.com/posts/mullvad-exit-ips-as-a-fingerprinting-vector/
66•RGBCube•1h ago

Comments

gruez•21m ago
>Surprisingly, the exit IP you are given is not randomized each time you connect to the server, but deterministically picked based on your WireGuard key

What's the point of this? This seems more complicated to implement than mapping exit ips at the server level, so surely they must be doing this for a good reason?

arciini•18m ago
I'd guess that this is to ensure one abusive user doesn't get every other user blocked from a large service (say, Google) for botting over the VPN and constantly rotating IPs.

It's a practical measure, but definitely has a privacy cost though.

stevekemp•12m ago
It's possible that contributes, but to be honest most VPN users are split "privacy seeking" and "abusive". Though I grant you paid users are probably slightly more circumspect than users of Tor, etc.

It seems more likely this is just about load-balancing use against their available nodes.

tempest_•18m ago
I imagine there are a bunch of things on the internet that break if you start trying to connect to them from varying IP addresses. Things like the various CAPTCHA schemes and rate limiting etc, IP reputation etc.
wg0•18m ago
VPNs are snake oil. Exit IPs are a public information.
avazhi•14m ago
> Exit IPs are a public information.

Yes, obviously.

> VPNs are snake oil

Huh?

Cider9986•12m ago
VPNs are not snake oil. They transfer the trust of your internet activity from a place of low-trust, your ISP, to a place of high-trust, ideally a trustworthy VPN like Mullvad, IVPN, or Proton. Among other benefits. If you don't like your ISP creating a profile of you and selling it to target ads to you, you should use a VPN.

>Should I use a VPN?

Yes, almost certainly. A VPN has many advantages, including:

1. Hiding your traffic from only your Internet Service Provider.

2. Hiding your downloads (such as torrents) from your ISP and anti-piracy organizations.

3. Hiding your IP from third-party websites and services, helping you blend in and preventing IP based tracking.

4. Allowing you to bypass geo-restrictions on certain content.

(https://www.privacyguides.org/en/basics/vpn-overview/)

jesterson•5m ago
> place of low-trust, your ISP, to a place of high-trust, ideally a trustworthy VPN like Mullvad

This is highly subjective statement.

Almost all commercial VPN services farm and sell your data. Just by that, my ISP is definitely high trust point while any commercial VPN is a low trust.

dewey•9m ago
> VPNs are snake oil

The most generous way of reading that would be the fact that every YouTube pushing for a VPN as an essential tool just to use the internet outside of your house without getting hacked is a big exaggeration or fear mongering but there's good reasons for using a VPN for a lot of reasons and it's not snake oil.

JoheyDev888•9m ago
Deterministic exit IPs let any site build a persistent profile across sessions. You're not eliminating tracking, just shifting who does it. Bad trade for a privacy VPN.
linkregister•9m ago
Given that Mullvad is basically a bulletproof VPN host[1], it would be great if site operators could rely on this property to enact bans. Given that the solution is simple (add a pseudorandom seed), Mullvad will likely push out a fix within a couple days.

1. It's the preferred VPN of TeamPCP.

Show HN: Trailmaps.app – Mobile maps that match the trail

https://trailmaps.app/
1•c0nsumer•1m ago•0 comments

Musk's China trip during OpenAI trial prompts apology from his lawyer

https://www.cnbc.com/2026/05/14/musk-lawyer-trial-jury-china-trip-openai-altman.html
1•1vuio0pswjnm7•4m ago•0 comments

How to Fix "DMARC Quarantine/Reject Policy Not Enabled"

https://dmarcguard.io/blog/dmarc-policy-not-enabled-fix/
1•meysamazad•5m ago•0 comments

How do you tell who's thinking?

https://willhackett.com/borrowed-cognition/
1•meysamazad•5m ago•0 comments

Ingest – Capture Anything from Anywhere

https://edleeman.co.uk/posts/ingest-capture-anything-from-anywhere/
1•meysamazad•6m ago•0 comments

Cowboy files plans for up to 20k orbital data centers

https://spacenews.com/cowboy-files-plans-for-up-to-20000-orbital-data-centers/
1•defrost•7m ago•0 comments

Bay Area customers may face warnings, fees under Recology's new camera system

https://www.sfgate.com/local/article/recology-cameras-22259377.php
1•turtlegrids•9m ago•0 comments

Water on Earth

https://www.scientificamerican.com/article/its-a-water-full-world/
2•soupspaces•10m ago•0 comments

Big tech is sacrificing its cashflows to prop up the AI boom

https://www.economist.com/business/2026/05/13/big-tech-is-sacrificing-its-cashflows-to-prop-up-th...
1•1vuio0pswjnm7•10m ago•0 comments

Possible Samsung strike puts more pressure on memory pricing

https://www.theregister.com/systems/2026/05/15/possible-samsung-strike-puts-even-more-pressure-on...
1•jnord•13m ago•0 comments

Beyond Git: Coordinating humans, agents, and automation in a repo with a ledger

https://www.mentu.ai/blog/beyond-git
2•rashidae•14m ago•0 comments

Audit of Serai's Substrate Blockchain

https://serai.exchange/2026/04/15/serai-blockchain-audited.html
1•Cider9986•15m ago•0 comments

The secretive and lucrative world of orchid breeding

https://www.bbc.com/news/articles/cly039rr2mgo
1•y1n0•15m ago•0 comments

Spam Resistant Forges

https://blog.feld.me/posts/2026/05/spam-resistant-forges/
1•y1n0•15m ago•0 comments

Untangling Communication (2001) [pdf]

https://dhemery.com/pdf/untangling_communication.pdf
1•mooreds•16m ago•0 comments

Don't let your old NVMe gather dust: It's the fastest USB stick you own

https://www.xda-developers.com/old-nvme-is-the-fastest-usb-stick-you-own/
2•y1n0•18m ago•0 comments

AI Wellbeing – Measuring and Improving the Functional Pleasure and Pain of AIs

https://www.ai-wellbeing.org/
1•xiaoyu2006•19m ago•1 comments

Heads up: new Google support scam uses a REAL email from Google: sysadmin

https://old.reddit.com/r/sysadmin/comments/1tdezhu/heads_up_new_google_support_scam_uses_a_real/
1•freediver•20m ago•0 comments

US plans to indict Cuba's Raul Castro, US DOJ official says

https://www.reuters.com/legal/government/us-plans-indict-cubas-raul-castro-us-doj-official-says-2...
1•tartoran•23m ago•0 comments

We Didn't Ask for This Internet

https://angelabenton.substack.com/p/what-a-post-social-media-internet
1•ethanplant•33m ago•0 comments

How the World Became a Casino

https://podcasts.apple.com/us/podcast/how-the-world-became-a-casino-with-natasha-sch%C3%BCll/id17...
1•gmays•35m ago•0 comments

A defunct email service as a template for campus AI

https://nathanschneider.info/2026/05/a-defunct-email-service-as-a-template-for-campus-ai/
1•ntnsndr•39m ago•0 comments

Why should a Trace-ID be 128 bits?

https://newsletter.signoz.io/p/why-should-a-trace-id-be-128-bits
2•pranay01•40m ago•0 comments

Dmitry Senin - I escaped Vladimir Putin in the belly of a dead cow

https://www.telegraph.co.uk/world-news/2026/05/14/dmitry-senin-russia-fsb-escaped-putin-in-dead-cow/
2•canucker2016•44m ago•0 comments

reCAPTCHA Mobile Verification Is Bringing the Play Integrity API to Desktops

https://discuss.grapheneos.org/d/35428-recaptcha-mobile-verification-is-bringing-the-play-integri...
3•Cider9986•45m ago•0 comments

Ask HN: What is shared across participants within "AI-native" environments?

1•juun_roh•48m ago•1 comments

Wide-Band Subharmonic Modeling

https://queuesevenm.wordpress.com/2026/05/14/wide-band-subharmonic-modeling/
1•q7m•54m ago•0 comments

Browser HTTP Leak Test

https://raw.githubusercontent.com/cure53/HTTPLeaks/main/leak.html
1•1vuio0pswjnm7•55m ago•0 comments

What if websites were callable like APIs?

https://github.com/weekend-project-space/openwalk
2•zhugeyangyang•55m ago•1 comments

We're Building Neal Stephenson's Primer

https://github.com/hherb/primer
1•hherb•58m ago•1 comments