Hacker News new | ask | show | jobs
by SCHiM 4127 days ago
I've always browsed in a sandbox only, since the revelations however I also bought a couple of vps and now tunnel my traffic through one of the servers. This is a very cheap measure, 15$ a month, that probably increases your privacy but also attracts more attention to yourself. A more inconspicuous solution is probably a public vpn service, but those servers are not under your control and you won't be able to make sure that the service does what the advertisements promise.

I don't bother much with email encryption or pgp, I've written down email as a loss in the privacy department and don't bother with trying/hoping my emails are private. So my gmail/hotmail/yahoo inboxes are for fluffy stuff only that doesn't really matter.

Mostly if I need to securely communicate with someone it will be on a private irc server where everybody has his/her own certificates and I can check to see if the server is untouched etc.

2 comments

"NSA has VPNs in Vulcan death grip" http://arstechnica.com/tech-policy/2014/12/nsa-has-vpns-in-v...

This again leads to the disempowerment issue, each measure seems to have been systematically either compromised or weakened. I look forward to new solutions such as the Dark Mail Alliance. The issue i have is that any solution needs to be very 'consumer friendly' as unless both parties are using a secure system taking extra measures is almost pointless. eg. i take steps to chose an email provider who doesn't share their data, or is outside of the NSA/GCHQ jurisdiction but then i have to send an email to an @gmail address i know that those steps i have taken are compromised by the other party.

Yes, that's exactly why I don't expect email to be secure!

Even if you were to completely own your own infrastructure for the first two hops (your computer and router). And manage all those services yourself you'd still be exposed the moment your email needed to be forwarded to a user who hasn't gone through those steps.

As for the death grip. This is pure speculation on my part, but if they can decrypt/de-cloak your traffic it's probably because they hacked/infiltrated/bribed the services as opposed to breaking the crypto. So here's me hoping that my setup is relatively safe even if it's not anonymous.

What do you use to browse in a sandbox?