Hacker News new | ask | show | jobs
by DyslexicAtheist 3022 days ago
(x) Don't use public DNS such as google (or the DNS provided by your ISP such as Vodafone). Look for an anonymous non-logging service preferably outside Turkey

(x) Tor is is one of many layers for anonymity to circumvent blocking. Don't "just" install the tor-browser or tor-proxy on your system but run tails from a clean machine. If you know what you're doing you might want to help others by isolating whole networks using PORTALofPi to guarantee no DNS-leaks. Pro-Tip: build a LEDE based device and share your design with the community so others can benefit and give you input (because you will make mistakes).

(x) Don't use mobile internet if you don't know what you're doing (those who know what they're doing don't use mobile phones for critical comms)

(x) Use burner phones with anonymous SIM cards and aggressive hardware based compartmentalization. Check this article for good OpSec/compartmentalization tips (second half of the article after the discussion on browsers that looks dated).

(x) Despite popular claim VPNs don't give you anonymity. They shift the trust from your ISP to the VPN. If you pay for a VPN service by credit card consider what the payment provider knows about you.

see https://www.linkedin.com/pulse/vodafone-blocks-protonmail-tu...

1 comments

>Look for an anonymous non-logging service preferably outside Turkey

what's the point? DNS isn't encrypted, so it's trivial to log/intercept your queries.

You could run DNSCrypt and use a server that supports it:

https://servers.opennic.org/

I guess it's harder to monitor all DNS traffic in the entire country than asking the ISP to give records for a specific user.
DNS over VPN is encrypted (at least until the VPN server)