Exit IP VPN servers mitigation rollout
Summary
Mullvad VPN is rolling out a new mitigation to prevent exit IP fingerprinting between VPN servers, applied to several servers across multiple locations.
View Cached Full Text
Cached at: 05/25/26, 06:48 PM
Similar Articles
Mullvad exit IPs are surprisingly identifying
An analysis reveals that Mullvad VPN deterministically assigns exit IPs based on the WireGuard key, not randomly, leading to a small number of IP combinations that can uniquely identify users across sessions, undermining anonymity.
Force all app traffic into the tunnel
Mullvad VPN’s iOS app adds “Force all apps” toggle to block all traffic leaks by enabling includeAllNetworks, accepting Apple bugs that can brick updates.
EU calls VPNs "a loophole that needs closing" in age verification push
The European Parliamentary Research Service (EPRS) has labeled VPNs 'a loophole that needs closing' in the context of online age-verification laws, raising concerns about children bypassing regional content restrictions. The push has sparked pushback from privacy advocates and VPN providers, highlighting tensions between child safety regulation and digital privacy rights.
Stop MITM on the first SSH connection, on any VPS or cloud provider
A new technique using cloud-init to inject temporary SSH host keys, protecting the first SSH connection to a new VM from man-in-the-middle attacks on any cloud provider. Includes a hardened open-source script implementation.
GrapheneOS fixes Android VPN leak Google refused to patch
GrapheneOS released an update fixing a critical Android VPN leak vulnerability that Google declined to patch in stock Android 16. The fix disables a QUIC connection optimization that allowed apps to bypass VPN protections and expose real IP addresses.