Privacy

50825 readers

1470 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 6 years ago

MODERATORS

SHOULD you use vpn and tor? (sh.itjust.works)

submitted 3 days ago* (last edited 3 days ago) by lemmingsareawesome@sh.itjust.works to c/privacy@lemmy.ml

19 comments fedilink hide all child comments

asking for the kind that vpn hides tor and not the other way

i have a framework with whonix in qubes using tor browser (real one i think not brave) and idk if im safe.

i want to use wifi in public (food places and schools) and be hard to spy on and not have anything blocked (videos are blocked). my home network is also phoning home because my family is using a google wireless access point (cant change it they dont like having internet down for more than 5 seconds)

would vpn and tor fix this? should i pick just one? or is there a better way? (all things have to be on device since you cant change someone elses network)

you are viewing a single comment's thread
view the rest of the comments

[–] Tenderizer78@lemmy.ml 2 points 3 days ago (1 children)

They can see the timing and packet size for your requests to the VPN server, as well as what your VPN provider is. On the VPN's end they can see what sites the users (collectively) are visiting, the packet sizes, and the timing. That information alone is enough to identify who is doing what with reasonable accuracy.

This is before issues of using the government's massive resources to brute-force encryption, possible government backdoors in VPN servers, and browser fingerprinting.

There are various steps that can be taken to mitigate this, and this of course assuming the government has access to the ISP's metadata from both your network and the server's network (not a stretch, but not necessarily guaranteed).

[–] hirihit640@sh.itjust.works 4 points 2 days ago (1 children)

A VPN is basically just a replacement ISP. They see everything your ISP traditionally sees.

Many ISPs are already selling your traffic data. So if you trust that your VPN isn't selling that data, then you'll be more private using them. And if the VPN is in a different country, then your government is less likely to be able to force the VPN to give up data.

You can defend against timing attacks and other traffic correlation attacks too, using techniques like cover traffic.

[–] lemmingsareawesome@sh.itjust.works 1 points 2 days ago (1 children)

cover it with what?

[–] hirihit640@sh.itjust.works 2 points 1 day ago

Are you asking what cover traffic is? It's just adding extra traffic to obfuscate the real traffic. There's many ways to do this, you can look it up online