Online Privacy view correction needed

In need of having my own personal view of online privacy corrected.

I understand that using privacy focused VPN’s like Mullvad and TOR provide the privacy and anonymity but I have a nagging question that I don’t see being openly discussed.

Understanding that Snowden exposed the level of “spying” taking place on US (and World?) online activity, my question is; How truly private or anonymous is TOR or VPN’s like Mullvad.

I would think that countries like the US would never actually allow those tools to be used if they don’t have some way of capturing and “seeing” what the transactions are.

(I hope my question is understandable and hope to get a better reference to how true these approaches of TOR and VPN’s are to privacy and anonymity)

Tor isn’t a VPN (and shouldn’t be all caps)

The US government is not (yet) a monolith. There are various parties within all pushing for their share of power to effect their own goals. Some within the government would want VPNs to be banned. Some don’t care. Some would oppose banning them. Tor was created by the US government, originally, as a way to allow spies to remain anonymous while in other countries, and released to the public because it was useless for that purpose if only spies used it. Users within the public were required for spies to properly blend into the noise.

Those who would seek to ban such tools do not have a large enough share of power to just do it. Such is the way of politics.

Tor’s threat model does not protect or even attempt to protect against a global passive adversary (someone who can observe all internet traffic in the world without interfering with its delivery). There are currently no known organizations with such abilities, but the NSA could be considered close.

VPNs are much weaker, and could likely also be deanonymized by someone with access to the netflows of the VPN server, barring other mitigations like multihop or e.g. Mullvad’s DAITA, and of course you must trust the provider itself.

Either will at least protect you from being identified via IP address by the individual internet services you connect to through them, however.

The United States cannot censor Tor because it was created by the country’s own military. That is why the CIA (Central Intelligence Agency) exists; they probably use Tor or another non-public service for their highly complex communications.

Tor simply isn’t anonymous; it’s luck at its core. What does that mean? No matter how many “nodes” there are and its technology, the United States knows very well how said technology is built and its unknown vulnerabilities, which the public is unaware of, and as such, they are exploited for high-level espionage.
If that weren’t enough, they themselves even have infiltrated nodes in the network.

A VPN like Mullvad, for example, is useful for what it was designed for; it doesn’t offer anonymity, but rather, certain privacy and security at the network level.

People who sometimes need these tools, like a VPN, do so more to watch movies when the website is blocked in said country, among other things, depending on the case.

Now, if we talk about a high level, like an independent investigator, for example, who is being unjustly pursued by the authorities, what Tor or a VPN does is delay the adversaries in their search if they haven’t located you yet. When using Tor or a VPN (or another type), with the local ISP network and the systems (physical cameras, satellites, police, etc.), you have to be lucky that they haven’t detected you.
Once detected, whatever the method may be, they already know how to proceed against the investigator and their options are drastically reduced (for the investigator).

It all depends on whether the nodes used aren’t “infected,” whether the VPN used can defend you in emergency situations (pursuits), etc.

Understanding the above, the answer is: it’s a matter of luck and your needs.
Don’t be fooled where a provider mentions the word: “guaranteed,” at a minimum.

Tor:

Mullvad:

The obvious technical difference is that Mullvad VPN is centralized to Mullvad itself, whereas the Tor network is decentralized among Tor relay operators, so trust is theorectically distributed in the latter model.

They’re trying to ban VPNs and in some cases are doing exactly that:

To me, this indicates that it works :stuck_out_tongue: