Mullvad's Exit IPs Enable Unexpected User Fingerprinting

Mullvad's exit IP assignment uses deterministic, seed-based random number generation rather than true randomization, resulting in only 284 observable IP combinations across all users. This severe limitation enables attackers to fingerprint and identify individual Mullvad users despite the VPN's privacy-first positioning. The discovery exposes how implementation flaws can critically undermine the security guarantees privacy tools promise.