mullvad / mullvad-browser

Privacy-focused browser for Linux, macOS and Windows. Made in collaboration between @torproject and @mullvad
https://mullvad.net/browser
1.26k stars 25 forks source link

Misleading "New Identity" feature #19

Open hmszeok886 opened 1 year ago

hmszeok886 commented 1 year ago

Currently, the browser requires users to manually select a proxy server when launching the application. This can be inconvenient for users who want to maximize their anonymity by using a different server each time they want to browse the web. To improve user experience and anonymity, Mullvad browser should offer an option to randomly select a different proxy server on each launch and after grabbing a "New Identity".

Without using a Mullvad proxy server in the browser, the user is vulnerable to a correlation attack. By using the same VPN server for all your applications, it becomes trivial for an adversary to correlate your online activity because your traffic will always be coming from the same IP address, which is only being used by a handful of people at any given time.

The "New Identity" feature in its current state is also extremely misleading. It offers no network/IP address separation at all from the previous browser session, nor the rest of your machine. For example, if you use log into two separate accounts on a website, while grabbing a "new identity" in between, your identity has not changed at all since the administrator could simply view the server's logs and see both accounts were logged in from the same IP address.

ruihildt commented 1 year ago

Thanks for bringing this up. There are indeed no way to do that automatically right now, and we plan to address this in a way or another.

We already have our roadmap the possibility to connect to a different socks5 proxy per URL/IP through the browser extension. See: https://github.com/mullvad/browser-extension/issues/8

postprivee commented 1 year ago

mentioned on hard-facts / new identity with a warning "Warning! Clicking this button will not change you IP address. You'll need to use a VPN and manually switch server as well."