[aspenmayer]

I’m wary of “countercultural” sites run by a “small crew” not identified soliciting emails with no privacy policy in place. If it isn’t a honeypot it’s indistinguishable from one. Assuming it isn’t, the email list itself is ambiguous regarding GDPR compliance. It seems counter-intuitive to me that the intended audience would sign up for such an email list under such a cloud of uncertainty. With anonymity comes avoidance of accountability. Why would I visit such a site if I have nothing to gain and so much to lose from interacting with a site whose operators have inscrutable and seemingly paradoxical intentions?

I’ll ask more directly since I was vague before. Are you associated with thoughtmaybe.com? I only ask because you seem to be advocating for using it under the guise of a user or fan of the site, and not as operator or staff of the site; to not identify yourself as staff when commenting on the site could be interpreted as commenting in bad faith. If not then please disregard this paragraph.

[nosuchthing]

The threat model you sound concerned about could easily be mitigated in several ways. Use a proxy/VPN/TOR to visit the site, don't sign up for the email list. Maybe use a spare email address? I'd assume the email list is just alerts for new documentaries. News letters and email sign ups are extremely common?

Why does this site look like a honey pot?

Paradoxical intentions? Can you clarify what by visiting a website, you'd have "so much to lose"? That seems excessively paranoid.

I'm not involved with thoughtmaybe.com - if there were any other website hosting Adam Curtis films, please feel free to share.

[aspenmayer]

My threat model is “if the site gets hacked and the user list gets leaked, who benefits and who is harmed? Certainly not the anonymous operators of the site. I only want for the users what the operators want for themselves.”

I do agree with your remediations by the way. It’s not any one thing that makes me suspicious. It’s the subject matter itself. TLAs will MITM and send you a 0day just to find a specific user if they are known to use a site so it’s more of a concern of visiting single purpose sites or niche sites in general as they don’t benefit nearly so much from your signal remaining hidden in the noise of otherwise innocuous traffic to a benign url such as archive.org or youtube.com.

Now that I mention it, it seems that the only indexer blocked by thoughtmaybe.com’s robots.txt is the one for archive.org. Why that may be is curious but I don’t know how common blocking that specific crawler is so I won’t speculate as to the reasons why.