Hacker News new | ask | show | jobs
by _exec 3254 days ago
[Part II]

We use the 2nd Amendment (Cryptography is still classified as munitions by the State Department) to protect your 1st Amendment rights on the Internet. Yet we cannot protect you against alphabet soup agencies such as the NSA and the FSB. It's not that our hands are tied, it's that this isn't the 1990s anymore and cyberwarfare and cybercrime are a nation-state ping-pong game. They are above our threat model, they are one layer of abstraction above us legally speaking, and we do not have contingency plans against them. If anything, being an American non-profit NGO, they are required to protect us as we are an American legal entity. From our experience whatever data they are seeking (depending on importance), they will obtain one way or another. We are not statists either; we simply think a well-calibrated threat model is paramount to running a venture like ours. Last but not least, they themselves may be users of our service to conduct their job online discretely. Note that we are not here to fight the man on your behalf. If you use our service to send bomb threats to universities, we will hunt you down.

What we do protect you against is "Snoopy". Snoopy could be your ISP DJ'ing your DNS requests. Snoopy could be your housemates snooping on the Wifi network or running a rogue AP attack. Snoopy could be your boss or employer blocking certain websites. Snoopy could be services that are georestricted to certain areas for no reason at all. We offer quasi-bulletproof anonymity and privacy on the Internet. Snoopy could be your university banning services like Spotify. Snoopy could be the rest of the world charging Australia 30%+ extra on all services / products because Australia is a continent. Snoopy could be your mobile service provider obstructing VoIP or Skype traffic on their data network. Snoopy could also be your TV provider not happy with your Netflix technicolored bits traversing their wires, and so must be throttled down. We are anti-DPI yet use DPI as well for the benefit of our users (QoS for instance).