undefined | Better HN

0 pointsauslander7y ago0 comments

No VPN:

- ISP has your name and history. The AdTech knows your IP's history, and most likely your Id.

VPN:

- VPN has your history, but no name (paid via voucher), and is other country's legal entity. My ISP only knows I'm using some VPN service (DoT enabled on my router). The AdTech is missing key identifier, IP, to link your data together (to aggregate).

> ISP your VPN uses which knows everything

Both ISPs know squat, just encrypted traffic from my real IP

0 comments

Godel_unicode7y ago

Do you truly believe that a VPN provider with access to all of your traffic has no idea who you are? If so, you either have truly impressive opsec or are not considering just how much can be gained from traffic analysis.

Leaving aside the giant DNS question, there's SNI to consider as well as the VPN provider knowing your source IP and times of access. Then, because you're on hn, consider what the graph of little-used services you (probably) use says about you. Work VPN/chat/webmail servers? Admin interfaces for side projects you work on? And of course good old fashioned typos in your shell.

dgrove7y ago

And all of your DNS traffic since it's not over TLS

auslanderOP7y ago

Cmon, all DNS queries go via VPN tunnel.

Godel_unicode7y ago

...And are trivially demasked for your VPN provider's ISP by traffic analysis (DNS requests are pretty obvious when transiting a VPN, then wait for the VPN provider to forward the packet).

j / k navigate · click thread line to collapse

0 pointsauslander7y ago0 comments

No VPN:

- ISP has your name and history. The AdTech knows your IP's history, and most likely your Id.

VPN:

> ISP your VPN uses which knows everything

Both ISPs know squat, just encrypted traffic from my real IP

0 comments

Godel_unicode7y ago

dgrove7y ago

And all of your DNS traffic since it's not over TLS

auslanderOP7y ago

Cmon, all DNS queries go via VPN tunnel.

Godel_unicode7y ago

...And are trivially demasked for your VPN provider's ISP by traffic analysis (DNS requests are pretty obvious when transiting a VPN, then wait for the VPN provider to forward the packet).

j / k navigate · click thread line to collapse