P
Perfect Privacy Blog
perfect-privacy.com · Company blog · on HN since 2015
Perfect Privacy, a VPN provider, blogs on VPN leaks, WireGuard tradeoffs, and OpenVPN setup.
What HN saysHN commenters cite its WireGuard pros and cons post as a reason WireGuard isn't yet safe for VPN use, and its stunnel guide for hiding OpenVPN.
15HN people shared it
11linked it in comments
4stories submitted
29story points
5 years agolast shared
2015people per year2026
Most-shared posts
- 1IP leak affecting VPN providers with port forwarding3 people · 26 points · first shared 2015 · 2 comments on HN
- 2Webrtc leaktest2 people · first shared 2016
- 3Wireguard vpn pros and cons2 people · first shared 2019
- 4“Wrong Way” security problem: Open ports expose VPN users’ real IP1 people · 2 points · first shared 2015 · discussion on HN
- 5Security Issue in Windows Leaks Login Data1 people · 1 points · first shared 2016 · discussion on HN
- 6Homepage1 people · first shared 2022
- 7Linux openvpn stealth stunnel1 people · first shared 2019
- 8Without logs1 people · first shared 2022
- 9Vpn router1 people · first shared 2017
- 10Vpn with ipv6 support1 people · first shared 2017
- 11Wireguard vpn pros and cons1 people · first shared 2019
What HN people wrote when they linked it
lovingCranberry · 2022-03-11
https://perfect-privacy.com if you're from Europe (they have most of their high bandwidth servers with good peering in Europe).
They've been raided multiple times (and are used by a lot of criminals - I think it's actually a good indicator when fraudsters trust your privacy service).
Raid in Rotterdam (Servers): https://torrentfreak.com/police-seize-two-perfect-privacy-vpn-servers-…
Raid in Erfurt (Admins Home): https://lists.torproject.org/pipermail/tor-talk/2010-August/002989.htm…
Also: Perfect-Privacy found an exploit (dubbed Port Fail) which was present in a lot of other commercial VPNs (PIA, nVPN, ovpn.to) and reported it to them before disclosing it publicly: https://torrentfreak.com/huge-security-flaw-can-expose-vpn-users-real-…
dtx1 · 2022-01-12
This is hardly a new thing in VPN providers though. I know that perfect privacy[1] and azire vpn[2] both advertise this feature already.
[1]https://www.perfect-privacy.com/en/features/without-logs
[2]https://www.azirevpn.com/docs/environment
niczem · 2020-03-02
Not so sure, as lonng as you can not disable logging:
https://www.perfect-privacy.com/en/blog/wireguard-vpn-pros-and-cons
hclaria · 2019-07-31
Or you could encapsulate OpenVPN inside stunnel to make it indiscernible from regular HTTPS traffic
https://www.perfect-privacy.com/en/manuals/linux_openvpn_stealth_stunn…
brynjolf · 2019-06-20
It is not safe yet to use as a VPN because of the way it is designed, see
https://www.perfect-privacy.com/en/blog/wireguard-vpn-pros-and-cons
arkadiyt · 2017-04-02
I just tried the following and they all had no IP or my VPN ip:
- https://www.perfect-privacy.com/webrtc-leaktest/
- https://browserleaks.com/webrtc
- http://whatismyipaddress.com/webrtc-test
- https://zpn.im/webrtc
- https://www.vpnmentor.com/tools/ip-leak-test-vpns-tor/
aidenn0 · 2017-03-29
Google found this company offering ipv6 support.
https://www.perfect-privacy.com/vpn-with-ipv6-support/
What I'd really like is a vpn that gives me an ipv4 address and an ipv6/64 so I can have my router do the vpn and route my whole network through a vpn by only configuring one computer.
pnutjam · 2017-03-29
Here's one:
https://www.perfect-privacy.com/vpn-router/
although I picked up one of these e2500's at the goodwill by my house for $1.50. I have one and wanted a spare.
Here's another:
https://www.flashrouters.com/?gclid=COzwtN-B_NICFZcbgQodMdAPTA
Capira · 2016-09-27
Across browsers it works only if both browsers are based on the same engine.
- Group1: Chrome, Chromium, Opera, ...
- Group2: Firefox, Tor Browser, ...
- Group3: on iOS every browser is based on Safari
- ...
Though with a backend you could track users switching among Chrome and Firefox by misusing WebRTC to leak the private IP ( https://www.perfect-privacy.com/webrtc-leaktest/ ).
If the switching between browsers happens in a short period of time, the public + private IP is a pretty solid guess.
If you observe and store this connection once you can always track the user switching among the two browsers.
brudgers · 2015-11-27
The original article at Perfect Privacy: https://www.perfect-privacy.com/blog/2015/11/26/ip-leak-vulnerability-…
HN: https://news.ycombinator.com/item?id=10636912
0xCMP · 2019-01-16
WireGuard is very hard to run without logging. It simply wasn’t designed for that and the maintainer was paid once to write “a rootkit-like” piece of code for a VPN provider which hired him to help them fix that.
It’s still an open question afaik
edit: I've worded this weird. I was typing on my phone at lunch stuff I'd just learned this morning[0] which referenced this[1] article saying running a log-less Wireguard might not be possible.
AirVPN in [0]:
> "Wireguard, in its current state, not only is dangerous because it lacks basic features and is an experimental software, but it also weakens dangerously the anonymity layer."
and Perfect Privacy:
> "WireGuard has no dynamic address management, the client addresses are fixed. That means we would have to register every active device of our customers and assign the static IP addresses on each of our VPN servers. [...]"
Things may have changed, but it appears that running a log-less vpn provider is actually more complicated with Wireguard than at first glance. Namely the issues around DynamicIPs.
[0]: https://restoreprivacy.com/wireguard/
[1]: https://www.perfect-privacy.com/blog/2018/10/10/wireguard-vpn-pros-and…