That is true. But I wasn’t debating about this specific case, but rather the generalized statement.
The comment I replied to implies “If there is a warrant, it is always legitimate and you have to follow it, because a lawyer said so”. That is not true and if it were the world would quickly go to shit, which I pointed out.
Read the blog by the guy behind cock.li , he refused multiple illegitimate warrants so far.
What matters is the jurisdiction of the service, not the one of the warrant author, otherwise china would have already warranted all data of all other world citizens lol
To make it absolutely clear:
Your VPS has an ip. All your traffil will go through it if you set it up as a VPN. So your behaviour patterns will be tied to that one IP. You will be the only one on that VPN.
A commercial VPN has many users at the same time on a given Server. So the traffic and behaviour that comes from that servers IP will produce garbage data for analysis.
You could selfhost a VPN on your VPS and let others use it for free somehow to obfuscate your behaviour and patterns, but you as the VPS owner will have to deal with legal stuff then.
Huh? I thought the whole point of a VPN is to encrypt all traffic between my PC and the VPN server. Please be so kind and educate me on anything I have a misconception of:
For example, I use Safing Portmaster and I have set it up in a way where all the packets have to go through their VPN and if they don’t, they get dropped before they leave my PC.
Before that I was running openvpn with a killswitch, which I thought besically did the same, it had a tunnel to the VPN server and if it is down, no packet leaves the PC.
Is that not how VPNs normally work?
What do you mean by “properly configured”
Here is a screenshot of the default Tor Browser, installed from the repos, no config changes made. As you can see, creepjs can detect that I am using Linux.
Obviously, if you disable js, then the site doesn’t work. Not sure if there are ways to detect the OS without javascript.
One common way to analyze the OS if all else fails is to look which fonts are installed. This is done by rendering thousands of divs with some text out of sight of the user. Each div with a different font. If the div width changes compared to the default, you know a font is installed. Different OS have different sets of fonts by default. Not sure if flatpak/flatseal (or other containerization methods) could protect against that. Technically you can install the exact set of Windows fonts and uninstall all Linux fonts, but I’d expect some linux app breakage and general uglyness.
An online search I did for how to completely hide the OS without breaking most websites did not result in anything except runnjng the browser in a Windows VM.
EDIT:
Per default tor has a linux useragent. And I can’t seem to change it with the useragent switcher or with about config override. So yeah… even better.
:D
I went to a startup bootcamp years ago and I quite liked it - I’ve learned a lot about my strenghts and weaknesses and thought about what I actually want to do in my life.
The startup methodology part was really boring though and didn’t align with my values at all, so I just ignored the instructions and did my own thing.
All the people here are talking around the bush.
Nobody mentions a solution.
One that worked for me is mycelium . It has multiple ways for exchanging crypto, one of them is a local personal market. (Balance > Buy/Sell bitcoin > Mycelium Marketplace)
But the rates are obviously worse than the regulated market, where you have to jump through hoops. But that is also in the app.
Anonymized user info is sold on open markets and can be de-anonymized through fingerprinting and various other techbiques.
You can find some interestinf info on it here, even though the core of the article is on a somewhat unrelated topic.
https://www.wired.com/story/how-pentagon-learned-targeted-ads-to-find-targets-and-vladimir-putin/
there is libreddit with multiple public instances, for example https://libreddit.lunar.icu
No clue how long it will take until they block that as well, but for now it works with VPN.
You can use a browser plugin for automatically redirecting.
At the radiology clinic where my dad worked, they had a trial with image recognition trained on detecting stuff in MRI images. The AI would draw a red cirlce around every suspicious place it detected.
What they noticed is that the doctors started to only look at the red cirlces and would miss a lot more of the non-obvious nuances. Which resulted in more completely wrong diagnosis and a lower diagnosis quality overall.
So I doubt that it will fix stupid for now. Even if it is implemented as a sanity check review, after the doctor has done his work, they might get more sloppy when relying on the AI check to catch their oversight.
Afaik the best way to improve quality of a doctors work is longer education and more worktime per patient. Or more rigorous processes where multiple doctors have to give their independent analysis on any patient. But any of that is too expensive for profit oriented commercial clinics.
Sadly it is more economically viable to diagnose as quickly as possible, let some patients die due to errors and fight a lawsuit, then to employ twice as many highly skilled doctors.
It doesn’t change the intended meaning but it can change the interpreted one.
For example when I write “I love to give my data to Google /s” you can be sure that I actually do not love to give my data to Google, whereas leaving out the ‘/s’ I could have meant it sincerely (for example, because I want targeted ads, perfectly tailored to my needs).
This example clearly illustrates the totally opposite interpreted meaning.
But in the case of the comment we are discussing, disclosing the sarcasm makes no difference to either side of the conversation (the sender and the readers)
I more or less agree with you.
Do you know of an alternative service, which is easy to use, allows a private whois entry, but gives you the ownership of the domain?
Before njalla, I tried domain.com and I couldn’t get the domain in 2 days after ordering it, so I cancelled. (they wrote an email saying that they are reviewing my order and will get back to me in 24h, which they didn’t).
I just want to pay and get a domain without the hoops and without giving them my personal address and phone number.
created by the pirate bay founder Peter Sunde.
I had a great experience with the service so far, no hoops to jump through, no obfuscated pricing, no personal data.
Their VPN and Server options are very pricey, but the domain prices are great.
I may have misunderstood your question. If you are looking specifically for a top level domain, I think .org is a decent one, as it is hosted by a non profit organization (even though there were some sellout debates in 2020)
I suggest Mycelium https://wallet.mycelium.com/
It’s the best one for anonymity, which I have found so far.
I see what you mean, but I think that point is pretty inherent.
Most if not all countries have similar laws related to getting user data from ISPs by making them log it for some time. And people can only use the ISPs from their country.
On the other hand no country can force their law on a VPN provider from a different jurisdiction, yet people worldwide can use those VPN providers.
I have a friend who works for a German ISP.
He personally has set up a system which automatically provides all the data requested by the police, without checking whether the request is formal and valid.
I rather trust a VPN provider from a jurisdiction where logging any user data is not required by law. Or an SPN, where even if logging has to be enabled by law, it is technologically impossibe to extract a user’s activity from the data.
However, many clients and servers supporting TLS (including browsers and web servers) are not configured to implement such restrictions. In practice, unless a web service uses Diffie–Hellman key exchange to implement forward secrecy, all of the encrypted web traffic to and from that service can be decrypted by a third party if it obtains the server’s master (private) key; e.g., by means of a court order.
Same page, security.
So in the context of OPs example of watching revolutionary content, where it is in the governments interest to protect itself against, one could consider some parts of the TLS protected web compromised.
Again, it doesn’t matter where the warrant fomes from. What matters is where it goes to.
And that detail is pretty important, while being completely left out. They say:
But yes it is, depending on the jurisdiction.