'Some aspects are as we intended and some are not' — Mullvad addresses WireGuard exit-IP fingerprinting concern after researcher flags privacy risk
- A researcher found Mullvad's WireGuard exit IP may enable fingerprinting
- Mullvad's co-founder confirmed an upcoming patch to address any issues
- Mullvad will also re-evaluate if the intended behaviors are acceptable or not
Mullvad VPN, a provider highly regarded for its rigid privacy stance and no-logs policy, is currently addressing claims that its IP assignment structure can be used to track individual users.
The issue was brought to light by an independent security researcher known as "tmctmt," who found that Mullvad’s method of assigning public exit IP addresses for its WireGuard connections isn't entirely random. Instead of assigning a fresh IP every time you connect, the exit IP is deterministically tied to your unique WireGuard key.
Because this internal mathematical "seed" remains static until your key rotates, moving between different Mullvad servers may produce a recognizable constellation of IP addresses. By analyzing these IP logs, administrators on forums or websites...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
