NymVPN (Nym)

[nym-product]

Hi @Wings

@Wings

In terms of real world performance, what are the maximum download and upload speeds currently attainable both for Fast Mode and Anonymous Mode?

The performance will depend on multiple factors. Remember that 1.NymVPN is designed with privacy in mind, and 2. is multi-hop by default (2 or 5 servers). Thus it can’t offer the same performance as 1-hop centralized VPNs. With a good connection and good choice of nodes, you can expect 200 to 300 Mbps on the dVPN mode, with reasonable latency. With the mixnet, speeds are lower than 1 Mbps. This mode is intended for maximum privacy and best-suited for use cases such as messaging.

@Wings

What security protocols and accountability layers are in place to ensure that decentralized user nodes can’t be compromised by bad actors?

Nodes can (and will be) compromised by bad actors. Limiting bad actors is done by actively managing our community of operators, and making full use of the staking mechanisms described in the “Reward sharing for mixnets” article (“costs” to setup a node + reputation system based on staking). Limiting the impact of bad actors is done by being multi-hop (so one node doesn’t see both your IP address and the destination of your traffic – which is not the case of single-hop VPNs). Users can also limit that by frequently rotating the nodes they use.

In the future we plan to include mechanisms to detect active attacks and penalize/exclude nodes found to engage in active malicious behavior, as well as to limit opportunities for passive (undetectable) malicious behavior through the use of secure hardware.

@Wings

Does Nym work with firewall applications like Portmaster and Simplewall for Windows? Portmaster offers system wide DNS filtering and per-app entry and exit node control via the SPN, but doesn’t play well with most third party VPN’s.

I’d need to get back to you on this one.

@Wings

NymConnect doesn’t support many apps and looks neglected on the Github page. Is there a way to use Nym on Windows and Android having it protect internet traffic for ALL apps, not just the web browser?

As shared by @privacyisconsent, NymConnect (which worked with a short app allowlist - Telegram and a few crypto wallets) is deprecated. It is now replaced by NymVPN (which provides a multi-purpose VPN-like experience covering your full device traffic).

@Wings

both offer multi-hop/decentralized/anonymized services. In what ways is Nym better or worse or justifiably different than these other players in the market?

These are all great services which we vastly respect. While they offer a multi-hop solution, they are more multi-party / “bi-centralized” than decentralized (as in, both entry and exits are centralized, and you need to trust them not to collude). We don’t believe they are “anonymized” either, unless you pay with cash (paying with a crypto doesn’t provide anonymity). Nym aims to unlink users payment data from their network usage, thanks to the “zk-nyms” (zero-knowledge access credentials, which are already live). This property is valid across all payment methods! I.e. one may know that you are a NymVPN user, but cannot trace that to your online activities.

@Wings

With the uncertain future of privacy in Switzerland, what plans or options does Nym have if the proposed changes to the OSCPT pass?

You can check Nym’s position on our Blog: Online privacy and digital integrity under threat / Nym Our Ops / Legal people are actively following the matter together with Proton, Threema and others.

@Wings

In a market that’s increasingly consolidated, any written reassurances of no future Skiff-like exit plans/acquisition buyouts? If not, why not?

There are no such plans. The goal is to get the network self-sustainable, with various apps (starting with NymVPN) and SDK integrations paying for its usage.