ISP Spying • Hacker News Board

Re: ISP Spying

#131

Post by gcb0 » Sat, Feb 17, 2018, 7:09 PM UTC

madez wrote: post #130

gcb0 wrote: post #129

Earlier quoted context omitted.

absolutely not. gdpr is a nightmare for websites, because of the consent rule. but guess what is the first thing you with a ISP. You sign a contract. done. it's all legal with gdpr or not.

In Recital 43, the GDPR adds a presumption that consent is not freely given if there is “a clear imbalance between the data subject and the controller, in particular where the controller is a public authority.” Importantly, a controller may not make a service conditional upon consent, unless the processing is necessary for the service. Also, data subjects have the right to withdraw given consent.

they had similar wording to the cookie things. you had to say for what feature the cookie would be used, at the time the user was actually starting use of the feature. advertising? logging in? ....in the end everyone just says "to use this website" and use for whatever (but mostly ads)

Re: ISP Spying

#132

Post by pritambaral » Sun, Feb 18, 2018, 3:02 AM UTC

Scottn1 wrote: post #122

etskinner wrote: post #98

Earlier quoted context omitted.

End-to-end encryption like SSL (https) is meant to limit the middle man's ability to 'see everything'. Instead of seeing the details of your Google search, all they see is that you accessed Google at [x] time, and exchanged [y] amount of data. This is why there is such a push for end to end encryption on web traffic, chat apps, etc.

ISP can very easily see what you searched for even with SSL. SSL encrypts the TRAFFIC so they can't see the content of the webpages, But your search terms are right there naked in the URL even though it is https secured. This is unfortunately the case for Google, Bing and even DuckDuckGo. Try it and you can see for yourself. At least DDG offers in their options to scramble the URL but one has to know about that featu…

URLs are not sent in plaintext under HTTPS. Only the hostname is, and only for SNI.

Re: ISP Spying

#133

Post by icc97 » Sun, Feb 18, 2018, 11:00 AM UTC

45h34jh53k4j wrote: post #47

icc97 wrote: post #20

Who didn't think they were being spied on? This is why you used https to hide the full URL, VPN to push the problem to a 3rd party who might care a bit more about privacy and then Tor on top of it all. Here's the good old EFF explanation [0] [0]: https://www.eff.org/pages/tor-and-https

No, dont run Tor over VPN. Its VPN over Tor. Tor provides anonymity, VPN provides privacy. You want anonymity between you and the VPN, and privacy between you and internet hosts. From the OpSec for xyz series: https://grugq.github.io/presentations/Keynote_The_Grugq_-_OP... • TOR connection to a VPN => OK • VPN connection to TOR => GOTO JAIL

This site [0] explicitly says that VPN over Tor is a bad idea. It's quite possible it's wrong. But I don't understand why?

[0]: https://www.expressvpn.com/how-to-use-vpn/tor-vpn

Re: ISP Spying

#134

Post by nerraga » Mon, Feb 26, 2018, 6:22 PM UTC

tinix wrote: post #117

nerraga wrote: post #95

Earlier quoted context omitted.

I picked up a couple of these and I have to say I'm pretty impressed. They're pretty inexpensive little machines and they ship quick from pcengines. I have openbsd on one and ubuntu on the other. I'm using the openbsd one for dns, tftp, and a handful of projects. I was thinking about making the ubuntu one into an ap but I'm not sure about what kind of performance to expect vs my current off the shelf router. Have you…

I have an older APU1C4 with two WLAN cards (WLE200NX) and it's hosting two physical APs and a few virtual ones (diff BSSID/subnet one running at 2.4 ghz other at 5). I just run vanilla Debian on it... The SD card has finally become corrupted over the years, however. When I reboot it, all my changes that were supposedly flushed to disk are lost. Thankfully I only reboot it occasionally when there are critical kernel u…

I installed OpenBSD on my apu and picked up a Ubiquiti AP AC Pro for wifi. I also picked up a couple wifi nics that I'd intended to use with hostapd as you suggested. However, I had some spare amazon pts to throw at the Ubitquiti hardware, so I figured I'd give it a shot. It was all super simple to set up, and I'm more than happy with it so far.

Previously I was using an ASUS RT-N66U with tomato/shibby, but it had been acting a little flaky for a while - 5ghz would stop a few times a week, eth connections would drop, overall wifi connectivity was mediocre at best. The performance was pretty similar before flashing with tomato.

My new solution is likely drawing a little more power, but I've had no problems with it. Also, I'm impressed with OpenBSD's simplicity. I've tinkered with FreeBSD in the past and found it a little complex. OpenBSD has proven to be significantly more straightforward and easy to configure.

Thanks for the encouragement!