Hacker News Reader

From the Introduction: "This report describes the results of a security assessment targeting five Mozilla VPN Qt5applications and clients, together with their corresponding codebase"

It's only the client-side software in scope,not the VPN service itself.

View on HN

That's because they are using Mullvad as infrastructure, which was audited earlier this year:

https://mullvad.net/en/blog/2021/1/20/no-pii-or-privacy-leak...

I don't want to speculate as for the reason of the scope for the audit. Just answering the question "So is everything said here true for Mullvad generally?" with "No, the audit is only looking at the client-side software and is therefore not saying anything of Mullvad in general".

Reply on news.ycombinator.com