• Tangent5280@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    3 days ago

    Damn, didn’t know this. I thought they were pretty standup people, didn’t think the actual product quality would be left, so… wanting.

    • uhmbah@lemmy.ca
      link
      fedilink
      English
      arrow-up
      0
      ·
      2 days ago

      What did I miss?

      Cure53 concluded their report by stating that they “…attempted to identify any potential methods by which a user’s VPN traffic anonymity or integrity could be compromised. No such issues were found, and no vulnerabilities affecting the core product were detected.”

    • Mora@pawb.social
      link
      fedilink
      English
      arrow-up
      0
      ·
      2 days ago

      Big oof. But if you have a lifetime subscription you can still use them. Just generate/download the configs and don’t use their client.

    • FeelzGoodMan420@eviltoast.org
      link
      fedilink
      English
      arrow-up
      0
      ·
      edit-2
      3 days ago

      So is he shitting on winscribe specifically or all commercial VPNs? Idk how to read into this. Is he saying Mullvad sucks too?

      • Undertaker@feddit.org
        link
        fedilink
        English
        arrow-up
        0
        ·
        2 days ago

        He claims all private VPN providers are similar bad but there is no proof, only some snippets from Windscribe which say nothing about other clients.

        It’s like saying one person is lying, so must all others.

        Maybe good points about Windscribe but bad generalization in terms oft arguments.

        • Synnr@sopuli.xyz
          link
          fedilink
          English
          arrow-up
          0
          ·
          edit-2
          2 days ago

          Just something to keep in mind for those not in the security space. When a security company does an audit, its generally a checklist of commercial and custom security software along with a couple people poking around looking for more manual harder to find stuff. But there’s a reason companies like Mullvad have a bug bounty program… Just because cure53 didn’t find it, it doesn’t mean some bored hacker won’t…

          Absolutely better than nothing though.