Mullvad uses Gmail
The VPN company Mullvad mouths off âprivacy is a rightâ, but deep down they really donât give a shit. They donât even bother to host their own emails for critical technical support, and point their MX email record to Google. (See attached image)
This is a potential privacy risk because many times people will not bother to use PGP and the technical support will ask for their account number. And youâre assuming the people who need VPN technical support even know how to use PGP, and they likely arenât hiding their IP address because they need support. Often people may use their real email, so they donât miss the reply on burners, and that leaks their name. Now Google, and therefore the government, know your mullvad account numberâŠ
From here, the government can sign in to Mullvadâs site as you, and see the timestamp of first sign-in on each device with the wireguard public key. Although Mullvad masks it will bullshit names, the government can sign-out of the device so when you re-sign in thinking itâs a random technical error, they now know which is which. This enables at a minimum, the identification of your other devices. Maybe you signed in at another location? For example your cellphone.
When youâre out using WiFi anonymously at a public location, the government signs you out of Mullvad. So then when you sign back in, they identify the public location traffic as you. If this is not enough, now the government knows which account to demand a court order for. What are you going to request technical support? Sounds like more info gathering.
Even if none of this is relevant to you. The basic fact remains that Mullvad is using primarily Google to talk to customers, and the customers arenât even aware of it because itâs a vanity domain. I donât think people realize just how difficult it is to avoid Google. Itâs not voluntary dude, these companies are forcing me out to the fringe of society, to not have everything Iâm doing piped into a company I so vehemently hate.
Google is literally paid by the US government to manipulate search results through their Jigsaw division and Moonshot CVE. They arenât just doing ads dude, itâs a for-profit propaganda machine.
Other privacy influencers always recommend Mullvad, and for the most part I do agree with this for the âaverage joeâ. But letâs keep it real here, if you check the servers, they use many of the same 3rd party providers. Mullvad, IVPN, and TorGuard all use M247 for New York and Los Angeles. So if you connected to LA Mullvad, then switch to LA IVPN, thinking youâre getting a ânew identityâ youâre not. Itâs NSA passive surveillance on the size of data packets going in and out of places like M247 that reveal you, and NOT Mullvad backstabbing you.
Does using Gmail mean Mullvad is compromised? No! Youâre twisting my wordsâŠ
What Iâm saying is that very few people genuinely care about privacy, and when you realize just how involuntary Google is, only then can you actually take steps to free yourself.
Is the point of this to smear Mullvad? Sort of. I want to create negative consequences for all companies that force Big Tech on us. All of them think they can cut costs because the public doesnât care.
Well, Iâm here today to say that I care. And even if I stand alone. Even if Iâm shadow banned by search engines off the face of the earth. I stand my ground.
But I got a feeling Iâm not alone. So if you spread this message, maybe⊠just maybe, we can get Mullvad to change.
