Kevin Karhan Aug 1, 2025

@thygrrr @PallasRiot Personally, I'd not count on @mullvadnet being a "#LoglessVPN" because if they were unable and/or unwilling to comply they would've been shut down due to the statistical inevitability of being swarmed by bad actors!

This is far more complex than just #ComSec, but #InfoSec, #OpSec & #ITsec come together and need to be weaved into a continuous, multi-layered pattern...

  • Your mileage may vary depending on your needs, demands, threats, budget, capabilities and options.

"JuSt UsE a VpN!" is dangerous #disinfo towards #TechIlliterates!

Kevin Karhan :verified: (@[email protected])

@[email protected] @[email protected] The only *"legitimate use case"* for a commercial #VPN I know of is circumventing #Geoblocking... - Neither will a VPN prevent leakage of data! That's why I *explicitly recommended* using #Tails, because that does have mitigations in place against that and @[email protected] / #TorBrowser does so too... - Again: Your mileage may vary and depend on the individual threat assessment on a case-by-case basis.

Infosec.Space
Show threadKevin Karhan Mar 20, 2025

@fennix TBH, I think those bs claims should be illegal.

The only valid claims I've seen is that it enables people to circumvent #geoblocking and potentially #InternetCensorship as well as #TrafficDiscrimination due to lack of #NetNeutrality, but those are always to be taken with a truckload of salt!

Most certsinly, there are no "#loglessVPN|s" and no #VPN provider will risk jailtime for any.client…

thaddeus e. grugq on Twitter

“I’m gonna tell you a secret about “logless VPNs” — they don’t exist. Noone is going to risk jail for your $5/mo https://t.co/Q2aOQJkG4g”

Twitter
Show threadKevin Karhan Mar 9, 2025

@lostgen ich würde zu @torproject / #TorBrowser raten.

1
2

This Video Is Sponsored By ███ VPN

I tried to write a more honest VPN commercial. The sponsor wasn't happy about it. • Get ██ days of ███ VPN free at ██████.com/honestThe ASA ruling I referenc...

YouTube
Kevin Karhan Feb 21, 2025

@erebion @inaruck es gibt soviele Gründe weshalb Mensch nicht @signalapp vertrauen sollte.

Aber um es nochnal klar zu erklären:

Nur echte #Dezentralisierung wie bei #XMPP+#OMEMO kann #Datenschutz, #Informationssicherheit und #Vertraulichkeit sicherstellen.

Die strukturellen Probleme von Signal machen es angesichts einer #gleichgeschaltet|en #USA ein absolut unnötiges #Risiko, denn ich garantiere @Mer__edith wird für keine*n User*in lebenslange #Beugehaft riskieren!

Und #Signal ist sehr wohl in der Lage #Govware - #Backdoors zu integrieren, denn sonst wären die wegen #ITAR bereits geknastet worden, weil diese #Nutzer*innen aus #Kuba, #Nordkorea und #Russland haben!

Signal's Terrible MobileCoin Betrayal

YouTube
Show threadKevin Karhan Feb 14, 2025
@Avitus @lispi314 @lauren And if you think @signalapp is gonna defy a duely submitted warrant and doesn't store or;collect any #PII like #PhoneNumbers then you propably;also believe that #LoglessVPN|s are real...
thaddeus e. grugq on Twitter

“I’m gonna tell you a secret about “logless VPNs” — they don’t exist. Noone is going to risk jail for your $5/mo https://t.co/Q2aOQJkG4g”

Twitter
Kevin Karhan Jan 22, 2025

@MastoDenunzianten natürlich kannste den Werbeprospekten glauben, aber ich garantiere dir wenns drauf ankommt finden die doch was...

  • Keine*r wandert freiwillig & unbezahlt für Dritte in den Knast - siehe #LoglessVPN|s!

https://web.archive.org/web/20220112020000/https://twitter.com/thegrugq/status/1085614812581715968

#CloudAct & Co. sind da sehr eindeutig!

thaddeus e. grugq on Twitter

“I’m gonna tell you a secret about “logless VPNs” — they don’t exist. Noone is going to risk jail for your $5/mo https://t.co/Q2aOQJkG4g”

Twitter
Show threadKevin Karhan Nov 11, 2024

@deilann +9001%

Use actually secure comms instead that are #decentralized, #SelfHosting-capable, auditable and provide actual #SelfCustody of all the #Keys, so you can enforce your 5th Amendment!

thaddeus e. grugq on Twitter

“I’m gonna tell you a secret about “logless VPNs” — they don’t exist. Noone is going to risk jail for your $5/mo https://t.co/Q2aOQJkG4g”

Twitter
Show threadKevin Karhan May 14, 2024

@inthehands how about the #InconvenientTruth that both @signalapp / #Signal and #Telegram are BOTH EQUALLY BAD since they both are #proprietary, #centralized #SingleVendor & #SingleProvider solutions that collect #PII like #PhoneNumbers with no "#LegitimateInterest" because they are not "technically necessary" to fulfill their services.

Plus they not only can but will include #Govware #backdoors when pressed hard enough aka. cops with 3-hole masks put a gun to their heads...

Just like there are no #LoglessVPN's these Services and their #staff have addresses...
https://web.archive.org/web/20210226175949/https://twitter.com/thegrugq/status/1085614812581715968

Instead, consider something where the #developers nor #maintainers can't do that - like with #XMPP + #OMEMO where you have #SelfCustody of all the #Keys and thus you are in control!

thaddeus e. grugq on Twitter

“I’m gonna tell you a secret about “logless VPNs” — they don’t exist. Noone is going to risk jail for your $5/mo https://t.co/Q2aOQJkG4g”

Twitter
Kevin Karhan Jul 11, 2023

@Joseph @deviantollam me neither.

The only think that gets my blood boiling are lies that insult my intellect.

It's like with "#LoglessVPN|s" because if they actually existed, they'd be shut down instantly for violating #telco legislation and refusing to comply with #LawfulInterception and Court Orders...
https://mobile.twitter.com/thegrugq/status/1085614812581715968

thaddeus e. grugq [email protected] on Twitter

“I’m gonna tell you a secret about “logless VPNs” — they don’t exist. Noone is going to risk jail for your $5/mo https://t.co/Q2aOQJkG4g”

Twitter