Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Thai Database Leaks 8.3B Internet Records

rainbowtabl.es

Post reply on HN
Print view View original

21–30 of 79 posts

Re: Thai Database Leaks 8.3B Internet Records

#24

Post by TeMPOraL »

baicunko wrote: post #5

This is something that the average user fails to understand. One thing is saying I don't care they check on what I visit but once you aggregate enough information, it can become something of a "Big Brother". With enough DNS data I can assure you I can see when you leave to work, get back, determine the moment when you leave for vacation and no one is home, etc.

Related: there's no such thing as "anonymized data", there's only "anonymized until correlated with enough other datasets".

Re: Thai Database Leaks 8.3B Internet Records

#25

Post by bigiain »

jgaa wrote: post #17
lisk1 wrote: post #7

Solution for this is to tunnel the traffic through encrypted connection to servers in countries that respect persons privacy(if that is true nowadays). The easiest way is to use WireGuard, easy to set up uses only one port and have clients for many devices.

> ... countries that respect persons privacy May be a long time ago, in a galaxy far away, such a thing once existed. It's a sweet thought though.

You don't even need that to be useful though.

In my tinpot banana republic (Australia) ISP metadata retention is required by law, and warrantless access to that is granted to organisations involved in fighting terrorism, child abuse, and other serious crimes - and those agencies include local councils, animal control, the taxi commission, and various horse racing oversight organisations... :sigh:

Even moving your meta data to a different legal jurisdiction makes it less likely to be abused. My local nosy dog catcher is unlikely to attempt to get hold of any useful internet meta data when my ISP hands over their records and say "Ahhh, yes - bigiain's metadata here shows about 2TB of bandwidth for May, all to the ip address of a VPN endpoint in Belize... I can look up the Belize police phone number for you, do you speak creole?"

Re: Thai Database Leaks 8.3B Internet Records

#26

Post by Narkov »

Dolores12 wrote: post #22

AIS is mobile operator hence assign you random IP from the pool every time you reconnect to the network. IP address could be used by many different users during a day, definitely not a household as author states. Looks like useless data for me.

Sessions on mobile networks can last for many days and even weeks. The data is far from useless and could be used to enhance or append to other data sources.

Re: Thai Database Leaks 8.3B Internet Records

#27

Post by sirn »

Dolores12 wrote: post #22

AIS is mobile operator hence assign you random IP from the pool every time you reconnect to the network. IP address could be used by many different users during a day, definitely not a household as author states. Looks like useless data for me.

They also have residential internet (AIS Fibre) and also own another ISP (CS Loxinfo). CS Loxinfo used to use their own DNS servers and such, but have switched to use the same infrastructure as AIS Fibre (sharing IP address pool and all) since 2019 or so.

Also AIS mobile is IPv6 (2001:44c8:4400::/44) with CG-NAT since 2017. IIRC they were giving out /64 to every mobile client, but I'm not sure how long does /64 assignment lasts.

Re: Thai Database Leaks 8.3B Internet Records

#28

Post by cm2187 »

a012 wrote: post #23
cm2187 wrote: post #20

There is a special place in hell for software developers who write server software with no authentication by default.

Some of them might respond with something similar to "if you know what you are doing". Probably, security is someone else's job.

Every single one of their customer is a customer that one day installed it for the first time and didn't know what they were doing because they didn't know the product.

And with the complexity of modern software, imagine if the defaults in the whole software stack all the way down to the OS and hardware were open by default. You would need to be an expert in security to set up anything. Thanks god everyone else goes secure by default.

Re: Thai Database Leaks 8.3B Internet Records

#29

Post by encom »

cbg0 wrote: post #14
encom wrote: post #9

Earlier quoted context omitted.

Have you been able to find a trustworthy public DoT resolver? I really want to use uncensoreddns.org, but availability has been a little flaky in the past. I'm not sure about Quad9. Google and CloudFlare are obviously out of the question. What else is there?

> Have you been able to find a trustworthy public DoT resolver? It really depends what you view as being "trustworthy". Outside of the US good enough? Or do you want non 5/9/14-Eyes? ( https://en.wikipedia.org/wiki/UKUSA_Agreement#9_Eyes,_14_Eye... )

Let's start with "not Google-levels of creepy" and work up from there. I want someone who's not harvesting data, or engaging in censorship.

Re: Thai Database Leaks 8.3B Internet Records

#30

Post by 0817527930 »

shp0ngle wrote: post #10
cbg0 wrote: post #2

> To be clear: DoH and/or DoT would have stopped the gathering of DNS query data in this case. It's simple to set up, and it's just a smart thing to do for anyone concerned about their privacy. Actually, for most people that are not technically savvy this is definitely not an easy thing to set up, nor are they even aware that DoH/DoT exist. Unless this feature starts being turned on by default in routers and popular…

DoH just moves the logging from Thai telecom and moves it to Cloudflare (or, whoever you set up as your DoH server, but most likely Cloudflare), no? I trust CF much more than my ISP, but it makes the potential leak much worse... edit: On the other hand, DoH makes DNS requests independent of ISP, which is nice. ISPs are often monopoly by nature.

Could be interesting to use a list of DoH servers and pick one at random for each DNS query.
Post reply on HN