HNHacker News
TopNewBestAskShowJobs

kfreds

2,639 karma · joined June 16, 2012

Cofounder of Mullvad VPN, Glasklar Teknik and Tillitis. Co-designer of System Transparency, Sigsum, TKey, among other things.

Obsessed with building more trustworthy systems.

submissionscomments
kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
I don't know the context of that quote, but no, that doesn't sound empathetic at all.
kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
My understanding is that the party leader, Markus Allard, is basing his political ideology on some new kind of Marxist analysis.

You can read more about him here: https://en.wikipedia.org/wiki/Markus_Allard

kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
> I think the legal and fiduciary concept of Conflict of Interest is relevant here, but perhaps only by analogy. https://en.wikipedia.org/wiki/Conflict_of_interest is quite informative.

That's an interesting angle!

> What we can do, is recognise that if someone actually takes a large material action against the company's mission, then they have gone a step further and demonstrated the conflict of interest.

As far as I understand Daniel doesn't believe his donation materially harms Mullvad's mission. I am undecided and need more information. I highly doubt he would donate if he believed it would be antithetical to Mullvad's mission, given that the company is founded on our shared values around privacy. I'll ask him.

kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
As would I. That doesn't seem like a nice workplace. I'm pretty sure it's illegal too, at least in Sweden.
kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
> would you act differently if this person were not a co-founder?

I have several colleagues who I'm fairly certain are anarcho-syndicalists, meaning they want to abolish the state and capitalism. I don't know about my colleagues, but in general anarcho-syndicalists seek to bring about their vision through organising trade unions, and use that to seize control of the means of production and distribution. I on the other hand am clearly a capitalist pig seeking to oppress my workforce. Why else would I invite them to join me on the barricades against mass surveillance and censorship? Shared values around privacy? :P

I have no business questioning which demonstrations my colleagues participate in, or what they write on their blog. As long as they are not actively malicious against me, our workplace, or their fellow coworkers.

It's getting late, maybe I'm missing something in my description. I guess that's a rough approximation of how I feel about tolerating differences of opinion.

kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
> I think/hope everyone here fully realizes and accepts that he technically donated as a private individual

In this forum, yes. Unfortunately there are lots of people who don't care to inform themselves in the least. During the weekend my impression was that most people assumed Mullvad only had one founder, owner and CEO. Some people were implying that Mullvad's workforce supported this, which of course is ridiculous. I don't want to be associated with this donation. Then there are the people who think he donated 5 million USD or EUR. Sigh.

It would be nice if people didn't resort to make things up, and instead expressed their disapprovement based on fact. That's what I'm doing. As are several of my colleagues.

> The issue seems to be simply in this case, some people clearly find the private individual's actions objectionable enough to not want to support a product that individual is deeply associated with

Yes, that is clear.

> Fixating on this being done as a private individual just comes off like a bit of a deflection attempt from a pretty straightforward case of individual actions having consequences.

Ah, thanks. That was not my intent. For sure an individual's actions has consequences, especially when you're in a position of power. In this case people are holding Daniel accountable by switching providers. They are acting according to their beliefs. That's fine.

Meanwhile I am also trying to clarify Mullvad's position on the matter. Many people understand it and still disagree. That's also fine.

kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
> I'm a long-time Mullvad customer, and I respect what the company has been doing and the pro-privacy political stance it openly and publicly stands for.

Thank you.

kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
> are you saying that this right should only be afforded to those who pay for it

Not at all. When we say we believe privacy is a universal right, we're saying that e.g. states and corporations that actively violate your privacy are in the wrong. We're not saying that Mullvad, you or anyone else are obligated to work for free in order to provide privacy as a service.

Does that make sense?

kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
You set the focus. I was simply responding to your comment, same as I am now.

Again, I'm not defending his choice, but no, I'm not being naive. Over the 20 years I've known him he has demonstrated his values through consistent words and actions. I'd share details but that's not my place to do. You may choose to believe me or not.

kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
Indeed. What I hear you saying is that you recognize there is a kind of consistency, and benefit, to Mullvad's position.

I'll admit holding the line like this, when most people don't understand the nuance, and most of those who do don't value it, is irrational from a business perspective. Then again we founded the company because of our political convictions about free speech, free press, privacy, mass surveillance and censorship.

I respect your choice to leave, and also appreciate that we're both making an effort to understand each other. I wish all disagreements were like this.

kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
I've known Daniel for 20 years. He's one of the most empathetic individuals I know. Neither he nor I wants to make our workplace a monoculture.

I get that you disagree with his choice, as do I. But please recognize that we've built this company together over 17 years. To suggest that you know better than me that he wants to create a monoculture at our workplace is ridiculous.

I'm not sure why you're arguing this point though. It seems we both believe he made the wrong choice?

kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
I was acknowledging gpvos position, as well as that of others, and then stating my own position on the matter. I as an individual understand that there are people who see this party as left-wing or right-wing. That doesn't mean I agree. I as an individual don't approve of this party or its rhetoric. Others do. None of this is Mullvad's official position.

Mullvad only concerns itself with its mission. Our customers and employees represent a wide spectrum of opinions. You may not like some of them. Regardless, Mullvad's position is that privacy is a universal right, regardless of political affiliation.

> I understand how awkward the position you're in must be

Yes. Thank you.

kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
Indeed. It matters to me. In fact, most of my political opinions have atrophied, or rather I have self-censored. Daniel believes that is not the right trade-off to make in this case. I understand his point of view, and disagree.
kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
Thank you. :)
kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
Of course. Sorry to hear you're leaving. Thank you for the compliment.
kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
Hi. I get what you mean. I made that post with limited time. Sorry to hear you're leaving.
kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
Consider GWB's "Every nation, in every region, now has a decision to make. Either you are with us, or you are with the terrorists." For and against are not always the only options. Sometimes there are nuances, or other concerns.

Daniel made this decision as a private individual. Some of his colleagues (including me) dislike it as private individuals.

I recognize that the amount as well as his position of power within the company (co-founder, co-owner, co-CEO) make people who disapprove more uncomfortable than if it had been a much lower amount from a regular employee.

However, as others have argued, what would happen if Mullvad started weighing in on politics unrelated to its mission?

Better to see Mullvad almost like a force of nature: Mullvad believes privacy is a universal right. You might disagree but at least it's consistent, and I'd argue that's one path to trustworthiness - you know how we're likely to treat you as a customer. (equally, regardless of your political affiliation)

Obviously everyone is free to make their own choice on whether they like this stance or not.

kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
I'm sorry to hear that. Yes, Daniel and I own 50% each.

> obviously Berntsson has every right to his opinions and to express them

Indeed.

> and I also appreciate that someone can have control over an opinionated company and run it for one particular set of reasons but not for other causes that someone believes in

That is exactly the case.

> but in the end I just don't want my money supporting anti-people causes.

As is your right. Daniel made his choice and now you make yours, as a number of other people in this thread has done. Some believe this party is left-wing, others right-wing. Some approve of it, others don't. Personally I don't, and as I've said elsewhere in this thread I wish he hadn't donated. As do many of our colleagues. To be fair though, there are also colleagues who do seem to approve. And then there are those who don't seem to care either way.

Still, I'm glad you recognize the possibility that Daniel and I are able to keep our personal opinions separate from the mission of our company. This is something we live in our daily work as well. As a workplace I'm glad we're not a monoculture of 100% like-minded individuals.

kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
I'm sorry to hear you'll be leaving us.

To answer your question, we started building this organization in the summer of 2008 for idealistic reasons, and we are still idealists who think privacy is fundamental to a civilized society.

The best strategy for achieving societal impact through entrepreneurship is consistent, long-term, and value-based ownership. For us, this disqualifies taking outside investment, either through venture capital or going public. Mullvad has instead been growing organically without outside investments.

Our principles have withstood the test of time. Our conviction has remained unchanged through multiple serious offers of acquisition and outside investment. Words are cheap of course, but consistent action over the course of almost two decades is not.

Mullvad is about privacy. Neither Daniel nor I have used Mullvad's brand to promote our personal opinions.

kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
I'm sorry to hear that. I'm not defending his choice, but consider reading Daniel's rationale in the Flamman article. There's also his blog [1], which explains some of his views. I know he doesn't share all of Örebropartiets views, but I should let him provide that nuance.

As I said in another comment, speaking for myself, I don’t like that he made this donation and I know this view is shared by many of my colleagues.

[1]: https://dberntsson.info

kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
Allow me to provide some nuance.

I cannot speak for Daniel. I know there are some policies he likes and there are things he doesn’t like. Personally I am not a fan.

This morning Daniel explained his rationale to most of the company. Speaking for myself, I don’t like that he made this donation and I know this view is shared by many of my colleagues. Speaking as the co-CEO of Mullvad, we will continue to protect the universal right to privacy. People should feel safe using Mullvad regardless of their political affiliation.

kfreds··on The CEO of Mullvad is the main financer of the Swedish Örebro party
Hi,

Mullvad has two owners, founders, and CEOs - Daniel Berntsson, and me, Fredrik Strömberg. All posts I've seen yesterday and today, including the newspaper articles, talk about Mullvad as if Daniel is the single owner, founder and CEO. It should be obvious that Daniel's private donation to a political party is not part of Mullvad's values or mission.

If you have any questions, comments or concerns you're welcome to comment on this thread, or email our customer support.

See below for the response you'll get from support:

-----

Mullvad is a political company. We fight for freedom of speech, freedom of information and the right to privacy. These are firmly held values of the founders of Mullvad.

Mullvad protects the right for people to express things we don't agree with. We protect the right of everyone to access views we don't agree with.

We also live these values by being tolerant in our daily work. Everyone is welcome to collaborate with Mullvad if they share these narrow core values. As employees, contractors, customers, suppliers, lobbyists, campaign partners or whatever it might be. No matter what their other opinions are and no matter whether the founders or anyone else in Mullvad dislike them. The founders themselves fundamentally disagree on several important issues.

This is what allows us to advance our common causes. Being in a tolerant and intellectually open environment is also liberating and promotes truth seeking.

The more people do this, the better a place the world will be.

It should be obvious that Daniel's private donation to a political party is not part of Mullvad's values or mission, in the same way that someone's opinions on animal rights, taxes or public healthcare policy isn't.

That said, if you no longer want to be a Mullvad customer for philosophical reasons, we think it's important to honor that. In that case, reach out to support.

kfreds··on Mullvad exit IPs are surprisingly identifying
I'm not sure what you mean by "Oof". We don't have a dedicated security team because security and privacy are integral to all aspects of our service. It doesn't make sense to centralise it.

As for our support team they are responsive and experienced. Several of them have worked with us for many years and do offensive security research in their free time.

Unlike many organisations we don't see customer support as a cost center, just like we don't see security as a cost center. Our support team represent our customers, and as a consequence contribute a lot to how we prioritise our roadmap.

kfreds··on Mullvad exit IPs are surprisingly identifying
As far as I can tell they did not, and I've asked both our operations and support teams. I will update this post if I am mistaken.

Edit: In hindsight I regret making this comment. It was unnecessary, but removing it now would look weird.

kfreds··on Mullvad exit IPs are surprisingly identifying
I work at Mullvad. (co-CEO, co-founder)

Some aspects of the described behavior are as we intended and some are not. The cause is not exactly as described in the blog post. As for mitigation, we are already testing a patch of the unintended behavior on a subset of our infrastructure. If any of you try to reproduce the blog post's findings you may get confusing results throughout the day.

We will also re-evaluate whether the intended behaviors are acceptable or not. Some of this is a trade-off between multiple aspects of privacy, and multiple aspects of user experience.

Please note that this is my current understanding, which may change. I was only made aware of this an hour ago, and most of that time was spent talking with Ops, considering what to do immediately, and writing this post.

Finally, for those of you who do security research: when you find a security or privacy issue, please consider notifying the maintainer/vendor before publishing your findings, even if you intend to publish right away.

kfreds··on Understanding the Go Runtime: The Memory Allocator
Jesus talks and articles have been very helpful to me.

Three years ago I had no idea how the Go runtime worked, but I very much wanted to learn more. I’m not a software engineer in the conventional sense, so reading the Go source was not a realistic option.

Jesus talks and articles inspired me to learn more. Today I feel comfortable with all stages of the general compiler pipeline. In the past few months I have studied the calculi of the lambda cube, Martin-Lof type theory, Horn-clause-based instruction selection, algorithms for register allocation, Milner’s CCS vs pi-calculus, which structures in compilers and kernels map to digraphs, and so on.

Jesus talks are an excellent onboarding ramp.

kfreds··on Lennart Poettering, Christian Brauner founded a new company
Well, it comes down to what trust assumptions you're OK with. Reproducible reduces trust in the build environment, but you still need to ensure authenticity of the source somehow. Verified boot, measured boot, repro builds, local/remote attestation, and transparency logging provide different things. Combined they form the possibility of a sort of authentication mechanism between a server and client. However, all of the concepts are useful by themselves.
kfreds··on Lennart Poettering, Christian Brauner founded a new company
I just want more trustworthy systems. This particular concept of combining reproducible builds, remote attestation and transparency logs is something I came up with in 2018. My colleagues and I started working on it, took a detour into hardware (tillitis.se) and kind of got stuck on the transparency part (sigsum.org, transparency.dev, witness-network.org).

Then we discovered snapshot.debian.org wasn't feeling well, so that was another (important) detour.

Part of me wish we had focused more on getting System Transparency in its entirety in production at Mullvad. On the other hand I certainly don't regret us creating Tillitis TKey, Sigsum, taking care of Debian Snapshot service, and several other things.

Now, six years later, systemd and other projects have gotten a long way to building several of the things we need for ST. It doesn't make sense to do double work, so I want to seize the moment and make sure we coordinate.

kfreds··on Lennart Poettering, Christian Brauner founded a new company
Hi David. Great! I actually wasn't planning on going due to other things, but this is worth re-arranging my schedule a bit. See you later this week. Please email me your contact details.

As I mentioned above, we've followed systemd's development in recent years with great interest, as well as that of some other projects. When I started(*) the System Transparency project it was very much a research project.

Today, almost seven years later, I think there's a great opportunity for us to reduce our maintenance burden by re-architecting on top of systemd, and some other things. That way we can focus on other things. There's still a lot of work to do on standardizing transparency building blocks, the witness ecosystem(**), and building an authentication mechanism for system transparency that weaves it all together.

I'm more than happy to share my notes with you. Best case you build exactly what we want. Then we don't have to do it. :)

*: https://mullvad.net/en/blog/system-transparency-future

**: https://witness-network.org

kfreds··on Lennart Poettering, Christian Brauner founded a new company
1. Are reproducible builds and transparency logging part of your concept?

2. Are you looking for pilot customers?

← PreviousPage 2 of 11Next →