Conversation

Notices

1. AlligatorAnonymous (neimzr4luzerz@shitposter.club)'s status on Thursday, 30-Mar-2017 10:31:35 UTC AlligatorAnonymous
   Why do people assume VPN's will save you? https://shitposter.club/notice/2212560
   All ISPs need to do is trace your VPN certificate and re-trace the packets by time and size to know what you are doing online.
   • Hallå Kitteh repeated this.
   • Aven (aven@sealion.club)'s status on Thursday, 30-Mar-2017 15:06:38 UTC Aven

     in reply to
     @neimzr4luzerz  I didn't know about this, wow.  It could be obfuscated, though, like if the VPN somehow bundled the packets together or added randomized delay and padding.
     Hallå Kitteh likes this.
     Hallå Kitteh repeated this.
   • Hallå Kitteh (clacke@social.heldscal.la)'s status on Thursday, 30-Mar-2017 19:13:24 UTC Hallå Kitteh

     in reply to

     • Aven
     @aven @neimzr4luzerz Exactly. And even without any traffic obfuscation, no single ISP can trace your activity, only someone like the NSA monitoring all the ISP:s can do that. And your VPN provider, obviously.
   • AlligatorAnonymous (neimzr4luzerz@shitposter.club)'s status on Friday, 31-Mar-2017 00:47:48 UTC AlligatorAnonymous

     in reply to

     • Hallå Kitteh
     • Aven
     @clacke @aven Anyone in ECHELON, which that party has increased. Seriously, rogue and illegal activities are often sold at large to other countries to bypass blame on responsible parties. E.g. Sell you USA internet histor to GCHQ, and get it back.
     Hallå Kitteh likes this.
     Hallå Kitteh repeated this.
   • Christmas Personified as a Catgirl (moonman@shitposter.club)'s status on Friday, 31-Mar-2017 00:59:28 UTC Christmas Personified as a Catgirl

     in reply to

     • Hallå Kitteh
     • Aven
     @clacke @neimzr4luzerz @aven Also, there's already no law preventing a VPN from selling your traffic data :-D
     Hallå Kitteh likes this.
     Hallå Kitteh repeated this.
   • AlligatorAnonymous (neimzr4luzerz@shitposter.club)'s status on Friday, 31-Mar-2017 01:01:33 UTC AlligatorAnonymous

     in reply to

     • Christmas Personified as a Catgirl
     • Hallå Kitteh
     • Aven
     @moonman @aven @clacke I always forget to remind people of that: even you VPN can technically sell you out, even from clerical error! The latter has happen too often! IIRC too there was a ECHO technique that any peer in the same VPN can identify all users connected to the node: NSA et alters where completely taking advantage of that exploit, and was discovered a few months back
     Hallå Kitteh likes this.
     Hallå Kitteh repeated this.
   • Christmas Personified as a Catgirl (moonman@shitposter.club)'s status on Friday, 31-Mar-2017 01:04:49 UTC Christmas Personified as a Catgirl

     in reply to

     • Hallå Kitteh
     • Aven
     @neimzr4luzerz @aven @clacke a surprising number of VPN services don't also tunnel your DNS by default
     Hallå Kitteh likes this.
     Hallå Kitteh repeated this.
   • AlligatorAnonymous (neimzr4luzerz@shitposter.club)'s status on Friday, 31-Mar-2017 01:05:23 UTC AlligatorAnonymous

     in reply to

     • Christmas Personified as a Catgirl
     • Hallå Kitteh
     • Aven
     @moonman @aven @clacke And found it! https://torrentfreak.com/huge-security-flaw-can-expose-vpn-users-real-ip-adresses-151126/
     https://shitposter.club/url/550403
     It was port forwarding!
     So State parties can, and do pwn privately owned and trustworthy VPN providers al the time.
     Hallå Kitteh repeated this.
   • AlligatorAnonymous (neimzr4luzerz@shitposter.club)'s status on Friday, 31-Mar-2017 01:12:48 UTC AlligatorAnonymous

     in reply to

     • Christmas Personified as a Catgirl
     • Aven
     @moonman @aven @clackedon't tell them about DNS poisoning or MitS techniques, bro. dnscrypt, or btfo.
     Hallå Kitteh likes this.
     Hallå Kitteh repeated this.
   • Christmas Personified as a Catgirl (moonman@shitposter.club)'s status on Friday, 31-Mar-2017 01:20:14 UTC Christmas Personified as a Catgirl

     in reply to

     • Aven
     @neimzr4luzerz @aven as I have mentioned before, you can use Tor as a DNS resolver (but you want to put it upstream of a caching one)
     Hallå Kitteh likes this.
     Hallå Kitteh repeated this.
   • AlligatorAnonymous (neimzr4luzerz@shitposter.club)'s status on Friday, 31-Mar-2017 01:22:58 UTC AlligatorAnonymous

     in reply to

     • Christmas Personified as a Catgirl
     • Aven
     @moonman @aven @clacke you are assuming the exit nodes are safe to yield correct DNS queries. Which anyone, I mean anyone, can poison.
     Hallå Kitteh likes this.
     Hallå Kitteh repeated this.
   • Christmas Personified as a Catgirl (moonman@shitposter.club)'s status on Friday, 31-Mar-2017 01:38:01 UTC Christmas Personified as a Catgirl

     in reply to

     • Aven
     @neimzr4luzerz @aven it's a challenge because your local dns is less likely to be opportunistically poisioning dns, it would have to be targeted. whereas the tor exit node doing the resolution wouldn't be targeted but has a much higher chance of opportunistic poisoning.
     Hallå Kitteh likes this.
     Hallå Kitteh repeated this.
   • Christmas Personified as a Catgirl (moonman@shitposter.club)'s status on Friday, 31-Mar-2017 01:43:58 UTC Christmas Personified as a Catgirl

     in reply to

     • Christmas Personified as a Catgirl
     • Aven
     @aven @neimzr4luzerz I should also mention that exit nodes are constantly monitored for misbehavior, the longer-lasting the exit node is, the less likely it is to be poisoning dns. malicious exit nodes on Tor tend to be short-lived.
     Hallå Kitteh likes this.
     Hallå Kitteh repeated this.
   • Christmas Personified as a Catgirl (moonman@shitposter.club)'s status on Friday, 31-Mar-2017 01:45:02 UTC Christmas Personified as a Catgirl

     • Hallå Kitteh
     • Aven
     @neimzr4luzerz @aven @clacke I ran an exit node quite a while ago and had to deal with this because upstream of me my shitty ISP was serving ads instead of nxdomain
     Hallå Kitteh likes this.
     Hallå Kitteh repeated this.
   • Christmas Personified as a Catgirl (moonman@shitposter.club)'s status on Friday, 31-Mar-2017 02:12:39 UTC Christmas Personified as a Catgirl

     • Arnold Judas Rimmer
     @neimzr4luzerz @ajr
     >genome soldiers are already a thing.
     link nao
     Hallå Kitteh likes this.
     Hallå Kitteh repeated this.
   • AlligatorAnonymous (neimzr4luzerz@shitposter.club)'s status on Friday, 31-Mar-2017 02:15:51 UTC AlligatorAnonymous

     in reply to

     • Christmas Personified as a Catgirl
     • Arnold Judas Rimmer
     @moonman @ajr http://www.activistpost.com/2015/10/darpa-genetically-modified-humans-for-a-super-soldier-army.html
     North Korea and China are already using CRISPR to advance trials. This technique as not only revolutionized genome experimentation, we are already transplanting cross species parts: http://news.nationalgeographic.com/2017/01/human-pig-hybrid-embryo-chimera-organs-health-science/
     Hallå Kitteh repeated this.
   • somercet (somercet@shitposter.club)'s status on Friday, 31-Mar-2017 03:03:23 UTC somercet

     in reply to

     • Christmas Personified as a Catgirl
     • Arnold Judas Rimmer
     Well, that screenshot shrieks, "Journalistic integrity!"
     @neimzr4luzerz @moonman @ajr https://www.youtube.com/watch?v=kUZn1Rh0HO8
     Hallå Kitteh likes this.
     Hallå Kitteh repeated this.
   • Hallå Kitteh (clacke@social.heldscal.la)'s status on Friday, 31-Mar-2017 13:20:32 UTC Hallå Kitteh

     in reply to

     • Aven
     @neimzr4luzerz @aven They still call it ECHELON? That name rings so much 90s to me. It's back when you were still considered a bit paranoid for thinking a global surveillance network could exist.
   • Hallå Kitteh (clacke@social.heldscal.la)'s status on Friday, 31-Mar-2017 13:24:52 UTC Hallå Kitteh

     in reply to

     • Christmas Personified as a Catgirl
     • Aven
     @neimzr4luzerz @moonman @aven This sounds somewhat similar to a problem we had at one of my previous employers where externally exposed services couldn't be accessed when on the VPN, because the VPN bridge mixed up which IP address it should forward from. The result was that you tried to connect to the service over the VPN, but it would send reply packets to your internet IP number.
   • Hallå Kitteh (clacke@social.heldscal.la)'s status on Friday, 31-Mar-2017 13:30:16 UTC Hallå Kitteh

     in reply to

     • Christmas Personified as a Catgirl
     • Arnold Judas Rimmer
     @neimzr4luzerz @moonman @ajr Not mentioning the epic Universal Soldier movie franchise in that article is a Big Fail.
   • AlligatorAnonymous (neimzr4luzerz@shitposter.club)'s status on Saturday, 01-Apr-2017 08:58:50 UTC AlligatorAnonymous

     in reply to

     • Christmas Personified as a Catgirl
     • Hallå Kitteh
     • Aven
     @clacke @moonman @aven And now we have CJDNS's Hyperboria. Please, join and automate as many devices as possible. The likelyhood of an Internet shutdown, is eminent, Even if it's not Europe or North America.
     Hallå Kitteh repeated this.
   • Hallå Kitteh (clacke@social.heldscal.la)'s status on Saturday, 01-Apr-2017 09:24:56 UTC Hallå Kitteh

     in reply to

     • Christmas Personified as a Catgirl
     • Aven
     @neimzr4luzerz @moonman @aven Hyperboria is cool, but mainly for circumventing the NAT disease.
     
     No internet, no Hyperboria.
   • Constance Variable (lambadalambda@social.heldscal.la)'s status on Saturday, 01-Apr-2017 09:25:20 UTC Constance Variable

     in reply to

     • Christmas Personified as a Catgirl
     • Hallå Kitteh
     • Aven
     @neimzr4luzerz @aven @clacke @moonman cjdns really is nice. I need to set up peering again.
     Hallå Kitteh likes this.
     Hallå Kitteh repeated this.
   • Constance Variable (lambadalambda@social.heldscal.la)'s status on Saturday, 01-Apr-2017 09:26:19 UTC Constance Variable

     in reply to

     • Christmas Personified as a Catgirl
     • Hallå Kitteh
     • Aven
     @clacke @aven @moonman @neimzr4luzerz I have freifunk here in Berlin, meshnet through WiFi. I'm connecting to a church tower across the Spree.
     Hallå Kitteh likes this.
     Hallå Kitteh repeated this.
   • Hallå Kitteh (clacke@social.heldscal.la)'s status on Saturday, 01-Apr-2017 09:27:47 UTC Hallå Kitteh

     in reply to

     • Christmas Personified as a Catgirl
     • Constance Variable
     • Aven
     @lambadalambda @moonman @aven @neimzr4luzerz That is awesome. But unless that mesh goes all the way to the next country, you're still using an ISP and Hyperboria/cjdns doesn't help against internet shutdowns.
   • Constance Variable (lambadalambda@social.heldscal.la)'s status on Saturday, 01-Apr-2017 09:29:02 UTC Constance Variable

     in reply to

     • Christmas Personified as a Catgirl
     • Hallå Kitteh
     • Aven
     @clacke @aven @moonman @neimzr4luzerz true, but it's a start.
     Hallå Kitteh repeated this.
   • Hallå Kitteh (clacke@social.heldscal.la)'s status on Saturday, 01-Apr-2017 09:32:07 UTC Hallå Kitteh

     in reply to

     • Christmas Personified as a Catgirl
     • Constance Variable
     • Aven
     @lambadalambda @moonman @aven @neimzr4luzerz I'm all for it, don't get me wrong. Both cjdns and meshing all the things. Only reminding everyone not to misrepresent the attack scenario, just like the OP of this thread.
   • AlligatorAnonymous (neimzr4luzerz@shitposter.club)'s status on Saturday, 01-Apr-2017 09:46:40 UTC AlligatorAnonymous

     in reply to

     • Christmas Personified as a Catgirl
     • Hallå Kitteh
     • Aven
     @clacke @moonman @aven But you still have your [local] mesh!
     Hallå Kitteh likes this.
     Hallå Kitteh repeated this.
   • AlligatorAnonymous (neimzr4luzerz@shitposter.club)'s status on Saturday, 01-Apr-2017 09:54:45 UTC AlligatorAnonymous

     in reply to

     • Christmas Personified as a Catgirl
     • Constance Variable
     • Hallå Kitteh
     • Aven
     @clacke @moonman @lambadalambda @aven That only means it's time to [illegal] lay fiber. Or 802.22 & Li-Fi.
     Hallå Kitteh repeated this.
   • Hallå Kitteh (clacke@social.heldscal.la)'s status on Saturday, 01-Apr-2017 10:33:20 UTC Hallå Kitteh

     in reply to

     • Christmas Personified as a Catgirl
     • Aven
     @neimzr4luzerz @moonman @aven True! If community networks would have a lot of valuable local information, that would be awesome and reduce dependence on the internet. Not sure that's happening today, but would be happy to be educated otherwise.
   • Hallå Kitteh (clacke@social.heldscal.la)'s status on Saturday, 01-Apr-2017 10:35:04 UTC Hallå Kitteh

     in reply to

     • Christmas Personified as a Catgirl
     • Constance Variable
     • Aven
     @neimzr4luzerz @lambadalambda @moonman @aven Laying fiber is not illegal. Digging through shared and private land full of other people's cables and pipes is complicated, that's all.
   • AlligatorAnonymous (neimzr4luzerz@shitposter.club)'s status on Saturday, 01-Apr-2017 10:37:04 UTC AlligatorAnonymous

     in reply to

     • Christmas Personified as a Catgirl
     • Hallå Kitteh
     • Aven
     @clacke @moonman @aven look up meshnet groups in your area, if not, make one. I had good luck in an expedition to Buenos Aires because the people were receptive to installing Cantennas for their first time connecting online ever. At most, many only need local information: weather, traffic, food: basically local news. When you can read the documentary of the Cuban: "El Packete" Or the Package, and how they made their own under meshnet.
     Hallå Kitteh likes this.
     Hallå Kitteh repeated this.
   • AlligatorAnonymous (neimzr4luzerz@shitposter.club)'s status on Saturday, 01-Apr-2017 10:38:07 UTC AlligatorAnonymous

     in reply to

     • Christmas Personified as a Catgirl
     • Constance Variable
     • Hallå Kitteh
     • Aven
     @clacke @moonman @lambadalambda @aven You said cross country, it is highly illegal if the neighboring countries still have legal frictions.
     Hallå Kitteh repeated this.
   • AlligatorAnonymous (neimzr4luzerz@shitposter.club)'s status on Saturday, 01-Apr-2017 10:55:15 UTC AlligatorAnonymous

     in reply to

     • Christmas Personified as a Catgirl
     • Hallå Kitteh
     • Aven
     @moonman @aven @clacke I can't even spell Spanish right: https://en.wikipedia.org/wiki/El_Paquete_Semanal
     Sweden IIRC has plenty groups. 
     Hallå Kitteh likes this.
     Hallå Kitteh repeated this.
   • Hallå Kitteh (clacke@social.heldscal.la)'s status on Saturday, 01-Apr-2017 11:13:24 UTC Hallå Kitteh

     in reply to

     • Christmas Personified as a Catgirl
     • Aven
     @neimzr4luzerz @moonman @aven Very cool! Thanks for making the world better. Have you been to Battle Mesh?
   • Hallå Kitteh (clacke@social.heldscal.la)'s status on Saturday, 01-Apr-2017 11:15:05 UTC Hallå Kitteh

     in reply to

     • Christmas Personified as a Catgirl
     • Constance Variable
     • Aven
     @neimzr4luzerz @lambadalambda @moonman @aven Ok, fair enough. And if you are doing international meshing, radio or fiber, you could probably get in trouble from certain people regardless if what you're doing is legal and the trouble is what's illegal.
   • Hallå Kitteh (clacke@social.heldscal.la)'s status on Saturday, 01-Apr-2017 11:16:28 UTC Hallå Kitteh

     in reply to

     • Christmas Personified as a Catgirl
     • Aven
     @neimzr4luzerz @moonman @aven Cool, haven't heard of El Paquete before.
     
     Sweden has a lot of activists, Telcomix-associated and otherwise, but sadly, from a certain point of view, we also for the most part have brilliant internet and you have to be pretty deeply ideological to have any interest in other models.