• 3 Posts
  • 113 Comments
Joined 2 years ago
cake
Cake day: October 28th, 2024

help-circle





  • The startup landscape is cut-throat capitalism. And yes, Proton is still small enough to be in that space. In a space like that, you have to pick your battles. Proton chose privacy and UX, while foregoing AI ethics. Proton has some of the best UX in the privacy space, and I think that speaks to their good business strategies. From what I’ve seen, other options are not as user-friendly, or not as private.

    Each individual is the same. You have to pick your battles. I’m not saying it’s impossible to choose both privacy and anti-AI. But as you are probably finding with your search for an email service, it becomes very difficult. Be careful not to spread yourself too thin. After all, individuals are also in competition.







  • Because CF has to know the DNS request to ask the name server to resolve it. And CF sells the data to google.

    Oracle doesn’t need to dump the ram. It can see the network packets coming from your device, to Cloudflare.

    It’s a two hop path to the destination: you -> Oracle -> CF -> nameserver. If both Oracle and CF sell data to Google, then it’s the same as both hops colluding, which reveals the entire path.



  • I’m not sure how many proxies you are using here but let’s just take the example we covered earlier. You -> Oracle VPS (ODoH) -> Cloudflare -> DNS Server

    Oracle sells your data, so now Google knows you own that VPS. Cloudflare sells data too, so now Google knows that a ODoH request came from the VPS and requested the name resolution for xxx-website.com. Google connects the dots and knows that you tried to visit xxx-website.com.

    Regardless of what you do, your ip packets have to start from your device and end at the destination server. You can try to make it go through multiple hops (using Tor, multi-hop VPNs, ODoH, etc), but if any single entity has data from every hop, then the entire path can be reconstructed and your device is linked to the destination server. With multi-hop VPNs, you just have to trust the VPN provider. With Tor, hops are picked at random and you just hope that the intermediate servers aren’t colluding.

    Oracle is not a privacy business, and they give away VPS for cheap or free. I wouldn’t be surprised if they sold data of their customers.

    And again, if you are the only one using your VPS proxy server, then all the traffic from that VPS becomes a “fingerprint” of its own that can eventually identify you. This is called pseudonymity. Everybody has their own tastes and preferences after all, and traffic patterns can reveal that. With a Tor or VPN, you can constantly switch proxies, and your traffic is mixed with thousands of others, so extracting a single person’s traffic becomes much harder.