They explained why they dont pay for audits in a forum post and I agreed with their reasoning, which if I remember correctly was something like:
If we paid for an audit, there’s no way you’d know we didn’t enable logging, etc, right after the auditors left.
It really is just a game of trust when it comes down to it and they feel the most trustworthy to me, but if lack of an audit changes your mind that’s okay.
I think what they say makes sense. I read it the opposite way: How do I know any service with an audit really is as described the day after the audit concludes?
Most audits (as far as I’m aware) will tell the company maybe a week in advance that they are coming in to do the audit, so it’a not like surprise visits I don’t think.
I 100% think it comes down to trust (and some accountability being that their code is open source). Audits feel like a gamed system.
And being open source is a way of showing what they are doing.
Eg: You buy a sub and just connect through wireguard. You aren’t touching any AirVPN code (unless you want to use their client, which is not written in C, but you can just use the official wireguard client or any other tool to connect).
Same goes for any provider as far as I’m aware. Am I wrong?
Maybe I misread your comment, I thought you were talking about AirVPN vs Mullvad.
Anyways the C code in that repo looks like it’s just libraries they have vendored in, not specifically stuff they are writing (which a lot of apps do, but usually dont include directly in their repos), but I could be wrong didn’t look that hard.
And you can still always use a different client (I know you can with AirVPN, I assume ivpn is the same).
Use AirVPN. It’s activist led from the start.
Sadly it does not have independent audits.
They explained why they dont pay for audits in a forum post and I agreed with their reasoning, which if I remember correctly was something like:
If we paid for an audit, there’s no way you’d know we didn’t enable logging, etc, right after the auditors left.
It really is just a game of trust when it comes down to it and they feel the most trustworthy to me, but if lack of an audit changes your mind that’s okay.
That’s just so bad, “we won’t show what we’re doing because it’s tiresome to cover it up” is what I read here.
If you want to look at the thread I was referring to (looked it up): https://airvpn.org/forums/topic/56799-audits/
I think what they say makes sense. I read it the opposite way: How do I know any service with an audit really is as described the day after the audit concludes?
Most audits (as far as I’m aware) will tell the company maybe a week in advance that they are coming in to do the audit, so it’a not like surprise visits I don’t think.
I 100% think it comes down to trust (and some accountability being that their code is open source). Audits feel like a gamed system.
And being open source is a way of showing what they are doing.
And written in C instead of Rust, which makes the lack of audits even more terrifying.
What of theirs is written in C?
Eg: You buy a sub and just connect through wireguard. You aren’t touching any AirVPN code (unless you want to use their client, which is not written in C, but you can just use the official wireguard client or any other tool to connect).
Same goes for any provider as far as I’m aware. Am I wrong?
https://github.com/ivpn/android-app
Maybe I misread your comment, I thought you were talking about AirVPN vs Mullvad.
Anyways the C code in that repo looks like it’s just libraries they have vendored in, not specifically stuff they are writing (which a lot of apps do, but usually dont include directly in their repos), but I could be wrong didn’t look that hard.
And you can still always use a different client (I know you can with AirVPN, I assume ivpn is the same).
Found the weak developer 😎.
Ah yes, because Rust is Holy and everything must be written in it or it’s inherently untrustworthy
No thank you.
– Frost
shouldn’t you be helping unfuck Rust core utils at ubuntu or something?
and it does not allow italian users because of Piracy Shield
Can you elaborate on that?
https://torrentfreak.com/airvpn-stops-serving-italians-due-to-piracy-shield-blocking-requirements-240206/