OP would not recognize a threat model if it bit him in the ass.
Privacy
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
I'll go further than this and say that true security is where everybody has support enough to not want to steal your shit, hack you etc.
Yeah corporations and governments are still a problem, for now, but both of the above parties would be far more secure if they did mutual aid, supported progrms to help the impoverished etc etc.
Basically having a collective approach to security and not such a myopic individualistic one.
what's Anubis?
A tool to slow down web crawlers (instead of making you solve captcha puzzles)
Anubis is so lightweight you'll forget it's there until you look at your hosting bill.
I don't know if they realize this is implying it's onerously expensive, lol.
What's nuts is that what made Anubis' author go down that path was Amazon Bot (I remember precisely because they are the bot that also blew up my logs and thus forced me to take action against LLM scrappers) and... a significant share of the Web is hosted on AWS. So... Amazon is actually probably MAKING money by scrapping, no matter how inefficiently. I already hated Amazon but this is even worst than I imagined. It's probably not by design, to be fair, but it's also probably not something they'll invest into "fixing" as it's making them money. What an absolute human centipede situation.
That amused me, too.
I think it plays fine for the intended audience, though.
For the folks looking into Anubis, that line plays well - because hosting costs are driven up by the kinds of spam bot visits that Anubis slows down.
The hardest online privacy is not operating in a way that just links all your "private" activity because you logged in around enough places to link them together and at least one place somewhere can be linked to your real identity
Pretty sure banks have a pretty good track record of "keeping your money safe". Why the fork would anybody trust banks to keep their money safe if they can't keep your money safe?
I don't really understand why that statement is even on there?
Unless you mean to argue some anonimity point, which I could agree with considering e.g. Monero would be more anonymous than a bank.
But safe? I'd say the bank is quite safe to store money.
any bank that has the capacity to close your account without you explicitly requesting it should not be considered safe.
fucking cip errors deleted my account
whoever invented cip errors should be defenestrated at the earliest convenience
Money in the bank can be seized and frozen for all sorts of reasons. If you're in the USA, then police can charge your money with a crime even if you haven't broken any laws. It's safe until it's not.
Doesn't have to be in the bank either; if you're traveling with your life savings in cash, then if you get pulled over cops are likely to seize that money. Just because fuck you, that's why.
Can confirm. about 15 years ago, my bank account was frozen for 3 weeks for child-support enforcement. Only they weren't talking about my kid or even me. Some dude in Florida with my same first and last name was a deadbeat dad. So they froze my account because apparently, he didn't have a bank account or something.
What's super annoying about it is that we had different middle names, not even close to the same social security number, and not one person even contacted me before my bank account was frozen. I only found out because a check I wrote or something bounced. And I was like, WTF?
I was finally able to talk to enough bank people to clear it up. But it took 3 weeks. I never got an apology for it either. And the fuckers did not refund my insufficient funds fee. I mean, it was only $15 bucks, and it would have cost me more than that in my time to get a refund, but still...
So yeah, even here in the US, banks can suck.
where's the shovel and double-ziplocs to bury your cash, silver, gold, platinum, and palladium? or the zippo to burn your prints off? get on my level, ho
proton VPN
lol. lmao, even.
What's wrong with it?
proton has already shared user details with authorities.
Any compliant commercial service will share user data with authorities - you don't get to operate a company and skip local laws. That's a non argument.
What's important is what "user details" they had on hand to share. If I create my service in such a way that I have zero data about you except some random useless string, I can "hand over all user data" to authorities and it would mean absolutely nothing for your privacy.
except they shared the IP address of an account even though they state "No personal information is required to create your secure email account. By default, we do not keep any IP logs which can be linked to your anonymous email account. Your privacy comes first." on their homepage
It's right there in your copy-paste my dude, "BY DEFAULT".
The jackass(es) who actually was at risk went the extra step to enable IP address logging, which means that when Proton had to comply with a lawful court order, they actually had data to give.
Proton is a company like any other that has to comply with laws in the country they operate in, but unlike a lot of other companies, they don't log data UNLESS YOU ASK THEM TO.
Moral of the story is, like has oft been repeated, know your threat model and plan appropriately.
If I understood correctly from Proton's privacy policy, VPN does not log IP addresses but at least in some circumstances Mail does. This is from their privacy policy:
Due to limitations of the SMTP protocol, we have access to the following email metadata: sender and recipient email addresses, the IP address incoming messages originated from, attachment name, message subject, and message sent and received times.
One thing must be remembered: Even Proton must follow the law and rules.
And those are the limitations created by the fact that email was never meant to be truly secure, not in the way we define and expect security and privacy nowadays at least.
crypto currency
Well, unlike Bitcoin, Monero is actually anonymous, and sometimes you gotta make payments online.
You can't do it privately with your card.
What anubis has to do with privacy or security?
Nothing, op confused anti AI with anti tracking.
It is though, there's a reason Mullvad added DAITA into its protocol.
For starters, it's open source. And I'm not too into the details, but the creator of Anubis even mentioned that they were interested in creating a non-javascript version for privacy.
Google's reCaptcha, to which Anubis is being compared to by OP, is obviously far less private. It's just another mechanism of control and data harvesting for Google. One of the ways that they determine if you're malicious/human or not is to check if you have a Google cookie in your browser and are signed in. Not to mention fingerprinting (hardware and software info), browsing data, AI training ironically enough (the fucking streetlights), etc etc.
Anubis is relevant here because it is more private, among other things.