hn.today

Obscura: The first VPN that can't log your activity

obscura.com86 points77 comments
Screenshot of Obscura: The first VPN that can't log your activity

Obscura is a VPN built so the provider cannot log user browsing activity by design: traffic from a device is end-to-end encrypted with WireGuard to an independent exit hop (operated by Mullvad) and relayed through Obscura’s front-end servers over QUIC. Obscura’s servers act as NAT relays and cannot decrypt WireGuard packets because they’re encrypted to the exit hop’s public key, while the exit hop never sees the user’s real IP. The service eliminates account identifiers by using randomized account numbers (no email or phone required), accepts privacy-preserving payments (Bitcoin Lightning, Monero, or card), costs $8/month, and allows five simultaneous connection slots. Apps exist for iOS, macOS, Android, Windows and Linux; WireGuard configs are available but sacrifice QUIC-based obfuscation.

Technical claims include a “two-party” relay protocol (WireGuard-over-QUIC) that blends with normal HTTP/3 traffic to resist censorship and detection, and avoids TCP-over-TCP issues via QUIC’s datagram support. The code is open on GitHub with planned reproducible builds, and the app shows exit hop WireGuard keys for verification. Server infrastructure spans many relay and exit locations worldwide. The macOS client uses a sandboxed Network Extension (no kernel access). The design contrasts with standard “no-logs” or multihop VPNs by ensuring no single party can correlate identity and traffic.

Read on obscura.com77 comments on Hacker News

Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.

More in Security

AI Exec: We May Have Pulled Off "The Largest Theft of Labor in Human History"

AI Exec: We May Have Pulled Off "The Largest Theft of Labor in Human History"

Documents from a lawsuit reveal that AI companies like OpenAI and Microsoft may have committed the largest theft of labor in history by training their models on copyrighted content without permission. Executives discussed concerns about AI's potential to destabilize the economy and the internet, highlighting unfiltered views on legal and ethical issues. (motherjones.com)

The daily digest

Today's best Hacker News stories, summarized and screenshotted, one email a day.