diff --git a/servers/anonuse/1.png b/servers/anonuse/1.png new file mode 100644 index 0000000..0114e62 Binary files /dev/null and b/servers/anonuse/1.png differ diff --git a/servers/anonuse/2.png b/servers/anonuse/2.png new file mode 100644 index 0000000..9189a51 Binary files /dev/null and b/servers/anonuse/2.png differ diff --git a/servers/anonuse/3.png b/servers/anonuse/3.png new file mode 100644 index 0000000..b53f339 Binary files /dev/null and b/servers/anonuse/3.png differ diff --git a/servers/anonuse/index.html b/servers/anonuse/index.html index b6f04d0..5771e6c 100644 --- a/servers/anonuse/index.html +++ b/servers/anonuse/index.html @@ -53,7 +53,7 @@
- Previous Page

Robert - 06 / 08 / 24

+ Previous Page

nihilist@mainpc - 2024-08-14

Why isn’t Privacy enough for Anonymous Use?

In this post we are going to see why Privacy is not enough for Anonymous Use, and what can be done about it.

@@ -68,12 +68,16 @@

Why isn’t privacy with a VPN enough?

-

Let’s say that Bob is using an open-source browser and a VPN to access a website. Thinking he is safe, he provides a false name and address when creating an account.

-

It seems like Bob has some privacy, yet his anonymity can still be compromised. The website’s owner notices that Bob provided an inexistent address, which is a violation of the Terms of Service. The owner files a lawsuit, and the court obliges Bob’s VPN provider to deanonymize him.

- -

This situation would have been avoided had Bob used Tor, which reroutes traffic in a way that obscures its origins and destinations, making it nearly impossible to figure out who is connecting to what.

+

Bob is using an open-source browser and a VPN to access a website (in our example youtube), but then he starts thinking that it's enough to start to use that website anonymously, even though they don't allow it. He starts to sign up and mentions a false name and address when creating an account. which infuriates the Youtube employee:

+ +

Bob's current setup is suitable for Private use as he is using open source software, and a VPN, But is it suitable for Anonymous use too ?

+

When you think about it, currently He is anonymous, as he hides his real IP from the destination website, and he didnt deanonymize himself through his actions while on the website. The problem is how expensive is it to deanonymize Bob ?

+

To answer that, let's take the example of a Youtube employee being infuriated that Bob dared to lie about his personal information, and the employee decides to call some corrupt police agents (yes they have very close ties to the authorities) to do their bidding in order to scare the VPN provider into revealing the real IP of whoever connected as Charlie Chaplin on youtube.com, around the time where Bob signed up, in order to deanonymize Bob.

+ +

The end result is that the VPN provider has to give the data they have to the authorities, (which only works if they keep logs!) and reveal Bob's Identity, and that only cost a few pennies to the adversary (here the youtube employee) to deanonymize Bob.

+

Conclusion: Bob's setup is not suitable for Anonymous use, because it is inexpensive for an adversary to deanonymize him.

+

This situation would have been avoided had Bob used Tor, which makes deanonymization attacks as expensive as possible.

-

With Tor, Bob’s identity would be revealed only if he gave it up voluntarily.

@@ -81,7 +85,7 @@ -
+
@@ -96,14 +100,14 @@

My Links

- RSS Feed
Matrix Chat
+ RSS Feed
Matrix Chat

-

About Robert

-

Donate XMR: 871Hun183Cc2yXRmP4cEeUG8uiCkXfZPFQt5WVK6tCgxedWTXrpFGNTi9aRgknjYsh3jCD6iY9eyxMpGdr4xNyDNT7ZrKsK


Website: robertblinov.net


Contact: SimpleX

+

About nihilist

+

Donate XMR: 8AUYjhQeG3D5aodJDtqG499N5jXXM71gYKD8LgSsFB9BUV1o7muLv3DXHoydRTK4SZaaUBq4EAUqpZHLrX2VZLH71Jrd9k8


Contact: nihilist@nowhere.moe (PGP)

@@ -118,5 +122,3 @@ - - diff --git a/servers/encryption/index.html b/servers/encryption/index.html index e49a60f..c173112 100644 --- a/servers/encryption/index.html +++ b/servers/encryption/index.html @@ -119,7 +119,7 @@ The door is closed, the conversation remains between Alice and Bob, their conver
-

Why is Plausible Deniability Vital?



+

Why is Plausible Deniability is Vital?



From a legal standpoint, the only way to be protected against that scenario where you're forced to decrypt your harddrive is to be able to deny the existance of said encrypted volume (Plausible Deniability) . If the encrypted volume does not exist, there is no password to be given for it.

So here we need a technology that can provide us Plausible Deniability. That is what Veracrypt can do for us.