Exit IP VPN servers mitigation rollout (opens in new tab)

it should probably link to this: https://mullvad.net/en/blog/exit-ip-fingerprinting-between-v...

which is the blog post, rather than a list of exit servers

related to this post: https://news.ycombinator.com/item?id=48143880

If you us Mullvad browser, which has built in Mullvad proxies, this isn't an issue because it doesn't use wireguard.

The browser also has a cool feature in the browser extension called Random mode. This gives you a different IP for each site, improving your privacy.

I'd really like some version of E.G. Librewolf configured to spoof the exact SAME information no matter who's using it. Like standard resolution for a 1080p monitor, the same GPU profile, Allow device timing stuff to work but with a fixed profile etc.

Effectively, stop spoofing random data, start spoofing still useful but not for finger printing data.

Do VPNs pay retail ISPs for exit points?

Honestly pretty interesting disclosure.

Most people think switching VPN servers completely resets correlation, but subtle infrastructure patterns like deterministic exit-IP allocation can still create linkage signals without actually exposing identity.

The fact that Mullvad openly documented it instead of silently patching it is probably the best part here.

Is this at all related to Wyden's recent congressional warning? Are any other VPN providers speaking up on this?

https://www.wyden.senate.gov/imo/media/doc/wyden_letter_to_g...