Avoiding The Botnet - Impossible? > 자유게시판

• 목록
• 답변
• 글쓰기
• 게시판 리스트 옵션
  • 수정
  • 삭제

Contact me for suggestions or questions! I reply to everyone.

Avoiding "The Botnet" - not possible?

Introduction

People as of late fear an increasing number of typically about escaping what I will call "The Botnet" in this article - only a "meme" means of describing mass surveillance. Websites have been created describing spyware and options to it. Replacements for social providers, on the spot messaging, VoIP, and so forth. already exist. You should utilize anonymizers like the TOR network or a VPN to hide out of your ISP. There are ways to privately share information and host web sites as properly. But are all those effective - and extra importantly - is that this the core of the botnet - or perhaps we're going after this totally the mistaken way?

Existing ways of combatting The Botnet - and why they're ineffective

VPNs

These are proxies that route ALL site visitors (not simply HTTP) by their servers. There are lots of them claiming to be 'no log', but it is straightforward to seek out examples the place folks bought ratted out by these, like https://www.wipeyourdata.com/other-data-erasing/no-logs-earthvpn-user-arrested-after-police-finds-logs/ (archive). Even assuming the 'no log' coverage is true, the government might nonetheless possibly legally power the supplier to trace someone (at the very least in sure international locations where that is allowed). If that is not an option, there's always the previous raid them and steal the servers (archive) tactic. After all, VPN site visitors can be simply blocked on the ISP or webpage degree.

VoIP, social, IM, and so on.

Simply suffers from lack of utilization - so if you would like to truly attain anyone, it is Facebook, Skype, and so forth. Much of the generally beneficial "safe and non-public" IM software has various points (Signal and Telegram require a phone number; Keybase has had a security audit which found many points; Matrix protocol has simply had a security issue found (archive)). TOR-based messengers depend on the safety of the TOR community, which is analyzed beneath. Server-based ones, on the other hand, rely on the safety of servers controlled by people you don't know. And as usual, it's all going by means of the enemy's networks.

File sharing, internet hosting...

All regular internet hosting / file sharing providers have big lists of what's allowed and what is not. Even my present host reserves the best to suspend, block or cancel access to any and all Services, in the event that they decide something contradicts their checklist. And naturally, copyright holders can declare one thing is violating theirs, and also you get your shit deleted then. Rom websites have been getting taken down not too long ago for example. There are also 'good hosts' like autistici.org, but who's to say the government will not ultimately take them down if they host a lot stuff they don't love? So long as we're using their networks, nothing is secure. Push comes to shove they usually raid the servers. Even Freedom Hosting went down eventually.

Operating programs

Alternatives to Windows are available, but you'll come across Microsoft's system sooner or later - whether or not at a relative's home, college (they've deals with these), or someplace else. Not that Linux is all that nice both in the botnet division - big corporations like Mozilla or Red Hat (by systemd), nonetheless affect it in unfavourable ways. It will happen in any society during which deals based mostly on profit and / or control are prevalent.

The TOR Illusion

The TOR community allegedly means that you can browse the Internet anonymously. It works like three proxies linked collectively except encrypted, so a "proxy" (known as the TOR node) can't see the contents of the previous, solely the vacation spot. However, the last node does see unencrypted visitors - so we hit a roadblock already before we started. The primary node also sees your IP, however not the contents of your request.

What are some other issues with TOR? Well, a lot of internet sites merely block it, or otherwise attempt to make its utilization inconvenient. Since the checklist of exit nodes is public, any website proprietor can simply do it. So you might be planning to "anonymize your shopping", but then understand it is simply unsuitable for on a regular basis usage. Much more so when you intend to truly work together with the websites you are visiting - forums, imageboards, markets, file download web sites, and many others. all famously hate TOR. If push comes to shove, ISPs may very simply block all TOR traffic as properly - in fact this has already happened in Venezuela for instance - https://www.accessnow.org/venezuela-blocks-tor/ (archive).

What about the so-referred to as hidden providers - exclusive to the TOR network? Well, most of them are defunct and it is exhausting to search out one that really works - and in case you do, principally you just see some scraps. In my country, I used to be solely able to find ONE onion discussion board that I may really hook up with, and it did not have very a lot exercise. Their servers are additionally routinely raided (see Freedom Hosting) and their homeowners jailed.

There are many ways of figuring out TOR users anyway - browser fingerprinting, stylometry, or even people sharing their personal knowledge while on TOR. Operation Onymous (archive) was very profitable (although type of overstated by the feds - the amount of seized websites had been "only" 27 - right here is a listing). An already famous case of a man sending a bomb threat utilizing TOR may be read right here: https://www.bestvpn.com/privacy-information/harvard-bomb-menace-student-caught-utilizing-guerrilla-mail-tor/ (archive). They acquired him because he was the one particular person using TOR on that exact community at the time. The FBI has even paid a university to deanonymize TOR users (archive), and that is how Silk Road 2.0's owner might be locked up. That is just what we learn about - more assaults are absolutely in use or preparation.

TOR nonetheless relies on its encryption, and if that is ever broken - say goodbye to your anonymity, since all the traffic is saved for possible future decryption. Though the TOR community does use Perfect Forward Secrecy, which should guarantee the security of the encryption keys (without a direct attack in your system) - cracking the actual ciphers remains to be a chance:

Quantum computing makes this doubtless, too. Another thing that's completely required for the security of TOR (that by some means nobody is speaking about) are the nine trusted-by-default directory authorities. If a few of these are ever compromised (maybe that is already the case?) all of TOR's benefits go out the window. This situation has been analyzed in depth right here.

Even the praised TOR Browser will not be completely protected - for instance, simply utilizing different buttons in your window supervisor can expose a unique screen decision (TBB version 8.5.3, latest as of writing). The first theme is Murrine, second - Default XHDPI, if you wish to affirm.

After all, this alone might be not enough to deanonymize you - however many more issues surely exist, waiting to be found. Put a couple of together and also you would possibly simply end up uncovered. Conclusion? TOR is just not the panacea. Does that imply you should not use it? No, of course. Use something that is available to improve your privateness and anonymity - just realize it isn't a magic spell, and doesn't strike on the core of the botnet.

Inventing extra darknets does not do anything

I don't care whether or not it is i2p or nym. I do not care how superior they seem at first - weaknesses will be found eventually, like they had been for TOR. All of them depend on encryption that shall be damaged ultimately. And they are all going by the enemy's networks. A meshnet has a too high barrier for entry (both expertise and price), and does not protect in opposition to states who've decided that promoting meshnet units shall be banned, or those which have access to CCTV AI to detect who's utilizing them, those who can compromise them on the manufacturing stage, the ones who can put an Alexa in your apartment by default to listen to what you are doing at all times, the ones who can delete you from existence by zeroing your bank account or throwing you into prison or doing any of the myriad of things that having access to the bodily infrastructure lets them. Do you not see now how it all comes right down to the physical infrastructure?

The core of internet surveillance

To derive profit from the Internet's commonest companies (like Facebook, Twitter, IM, website hosting), it's important to deal with their horrible phrases of service and privateness insurance policies. Not solely that, however any packet you send or obtain is bodily going by means of networks that you do not control. ISPs can watch, modify and block them any method they want - and they're topic to authorities whims as effectively. Encryption is at best a brief non-resolution, as defined in the TOR part (they could block all encrypted messages simply for instance - by evaluating them to known languages. If it is not present in any identified language, the packet is trashed. Blocking HTTPs? What was it - port 443? Boom and executed). Maybe some good 'hackers' would study to bypass these blocks, but ultimately, we would be fighting a battle we're certain to lose. Eventually we will should face the truth that...

The real Botnet...is Physical

As stated, servers for the providers we use are owned principally by big corporations (or typically other strangers), whereas ISPs and governments own the networks, so the botnet is bodily, not technological - and the answer, by extension, have to be as well. This is likely to be onerous to see in internet surveillance (which is not even the worst botnet) - however straightforward in something such as CCTV. They come in, mount the cameras, and boom! You're being watched. You're now their property - which they actually admit to. No really - for 30 days (or some other amount), they'll do no matter they need along with your captured movements. And the duration is just claimed...Regardless, you're at their mercy now. In the event that they see you participating in some 'forbidden habits', they can punish you and they do have a proof you did it. And they'll blame you for sins they arbitrarily selected - they actually aren't asking you if one thing must be banned or not. Everything in this society is owned by companies or governments - and so serves their pursuits, not yours. CCTV is just one instance. Drones, killer robots, no matter you can think of - and never necessarily technological. Schools, hospitals, airports (remember the patdowns?) - you haven't any management of any of these. And that is The real Botnet. If we wish to destroy web surveillance, we're going to have to take over not solely the preferred services' servers (hey, we are able to have a Facebook that respects the user - no, actually!) but also the ISPs - Physically - since presumably we cannot spy on or censor ourselves...And with that, hopefully we are able to bury the other botnets as effectively.

The Fake Botnet Fighter

The guy sitting in his condominium wearing a hoodie, operating a fully libre ThinkPad, unbreakable Qubes OS, TOR for all connections, rigorously avoiding all stylometry and sharing any personal knowledge in any respect, encrypting his stuff with a one time pad three times, and worrying whether or not some botnet hasn't slipped in anyway. He has no telephone or only uses "burner phones" and pays with bitcoins. After which...he finally has to return out of his house, and has his face recorded by a CCTV camera a hundred occasions. This guy must be revered for his dedication, however he's useless for a revolution. You can't fight The Botnet using tech only.

All of your tech solutions...will ultimately fall!

It's inevitable. And everytime it follows the identical script - some nation or ISP blocks TOR or VPNs, or torrent websites get taken down, or Facebook / Twitter / YouTube implement yet another way of censorship, or any of the myriad of different issues you possibly can think of. People then freak out and scramble for extra technological options that are only band-aids. Then, in the event that they discover one, they continue their comfy life whereas the cuffs get tighter. I imply, are you able to imagine that, in 20 years, it is possible for you to to use the Internet as freely as in the present day? Impossible - they will keep cracking down on all the pieces until the 'solutions' are too tough or not even viable anymore. If we controlled the infrastructure, we could not only delete all logging ISP-huge, but additionally fix all the problems with FB / YT / other malicious service suppliers. In fact, you cannot take over similar to that - the web of slavery is just too deep - if we just barged in, the police, media and so on. would get involved, and that could be the top of it. A full-scale revolution is our solely option - and we should use the time throughout which we are able to fairly freely speak on the web to plan for it. Then we might repair not only "The Botnet", but most of the opposite issues of society.

But what about decentralization?

Hiding or moving the problem. The "federated situations" at all times undergo from lack of exercise, unreliability / brief-livedness (hey, why aren't all of us hosting our personal shit? That's proper...), and being subject to the whim of an internet stranger as a substitute of a giant corpo. Or take torrents. How many seeds does your favourite anime sequence have? How about one thing much less widespread, like video sport soundtracks? People also get notices from their ISPs (VPN / TOR is just moving the issue again) if they did not like their torrenting; some are apparently fined (archive). And naturally, torrent sites nonetheless get taken down or compromised (archive). Mesh networks? Yeah, like anybody's going to bother. Even when there theoretically was a decentralized solution price shit, the governments might merely resolve to kill off the whole Internet as soon as they can not management individuals by it. Or install backdoors within the encryption algorithms or any one of the gadgets that are used for the meshnet. Again, our enemies have bigger assets / affect than us. Therefore, even decentralization would be temporary in the end - we are going to need their infrastructure ultimately. In that case, we may additionally take control of something like YouTube or MEGA and keep their popularity and all of the content material, however change design / policies / TOS, so that users are guaranteed basic respect, privateness and freedom.

We need the bodily!

If I did not make my level clear sufficient earlier, properly, I'll now. Everything goes again to the physical! We can't keep pretending that putting digital bandages over physical wounds works. The issue is contained in the routers, the processors, the datacenters, the wires. The capitalist system that advantages from collecting data. And the authorized system that allows and justifies abuses. We'd like our personal factories, our own cities - which might be designed with privateness and respect in mind.

We are all cucks

We all join by way of ISPs, having to signal contracts that won't have our best interests in mind, e.g banning hosting or WiFi sharing. Those ISPs might also accumulate data, share or promote it wherever, give it to the feds, inject advertisements, block protocols, censor "misinformation", or do literally anything else - and we can't stop it. To supply our computer systems, we depend on companies that combine malicious stuff like Intel IME or Microsoft Pluton into the components. Though we would use open techniques for ourselves, Windows is still all over the place at institutions. And people open programs (e.g Linux) are more and more being taken over by corporations, anyway. We rely on Twitter or Facebook for outreach, hoping they aren't going to kick us out for "misinformation". And those corporations are so big, that even nationwide governments or political events are subservient to their whims. We depend on YouTube for hosting videos, and feel sensible and cunning once we wear a condom like Invidious, however the company upstream can break the condom at any time. And so we toil fixing the frontends every time our masters resolve to change one thing. Even our FOSS is hosted on a service ran by the biggest anti-FOSS company, funnily enough. We rely on donation platforms like PayPal or GoFundMe that may block our funds if they resolve we're undesirable. We hunt down ad networks so as to add to our filter lists, solely to be foiled many times by the advertisers and trackers. We expect our darknets will save us, when all of them nonetheless undergo the enemy's networks and may be simply blocked. We're fucking cucks! I mean, have a look at this man and tell me he is not completely embarassing. Or look at all the folks complaining about YouTube's removing of the dislike depend.

You'll be able to uncuck yourself individually as much as the level of maybe 80% if you're actually expert / determined. But it's going to take a whole lot of sacrifice and isn't going to achieve 100%, anyway. It is usually going to turn out to be more and more more durable as time goes on and each newly invented technology additionally turns into apart of the identical slavery scheme. I'm so bored with playing the whack-a-mole recreation with evil. Let's sort out it at its cores. What we're doing in the present day are band-help fixes over stuff that exists solely because evil individuals are presently in charge. Yet we are all just deluding ourselves by the band-aids. How can you merely set up an adblocker and overlook about what it represents? The only reason adverts exist is as a result of they earn revenue for the companies that display them. Yet folks fortunately swallow the capitalist bedrock of society whereas offloading its prices onto the (most) people who do not set up an adblocker. This is of course all going to come back crashing down soon, for example when grass or sky advertisements grow to be extra frequent. The same applies to closed source software - organizations like the FSF whine and whine concerning the evils of it, but love the revenue motive that births it - or they even welcome the companies into FOSS and pretend they won't have a destructive impact there. See? It's cuckery all the best way down even when "solutions" are involved. How about cryptocurrency? You may barely purchase something for it and are still most likely going to need a checking account simply to dwell. And in lots of places, it is extremely inconvenient to make use of crypto with how arduous it's to get it anonymously (the crucial benefit). It is all also dependent on the infrastructure of the Internet and electricity. As I mentioned earlier than, we have to arrange a society with the values we care about (privacy, anonymity, freedom of speech, and others) baked in, as a substitute of placed on high as afterthoughts. It is not just in regards to the profit motive - that's only one example. Power and management are motivations in themselves for some folks. And so you've the spying, censorship, and so forth for the purpose of maintaining energy. So we have now to maneuver the dimensions of energy in the direction of our side, however I really feel like every thing in this society is set up to forestall that. For instance, folks consider things like:

- The legislation is the regulation, you gotta comply with it. Vote higher if you do not like it!- A non-public firm can do whatever it wants with out consequence. Vote with your toes / dollar!- Property rights are sacred. Don't you dare deface those advertisements or destroy these CCTV cameras!- Profit motive is superb, rewards "merit" and "creates innovation". The choice is communism, and that is bad and killed gorillions of individuals!

The powerful unfold the memes that keep the ability of their palms, while the plebs repeat them and consider them as in the event that they themselves benefitted from those concepts. If that is not the final word cuckery, I don't know what is. But additionally it is cucked to think we are able to resolve all our problems by typing away at our keyboards whereas ceding all physical territory to the forces of the dark.

Society wants sane defaults

We won't expect your secretary or plumber to turn out to be an skilled in technology and fish out Monero, self-internet hosting and mesh devices from the sea of deadly sharks. Just like we shouldn't need to grow to be experts in nutrition simply so we will pick out the few foods that will not make us sick. But the theme of this report is tech, so that is what we'll stick to. Anyway, the peak of ethics in society can be reached only when a daily particular person can simply jump into the popular selections and be rewarded with ease of use, anonymity, privacy, freedom of speech, good performance, etc. When the Windowses, YouTubes, Discords, Facebooks, financial institution accounts or their future equivalents, ISPs usually are not making an attempt to abuse us at all times and are a minimum of mildly ethical. Imagine all the wasted manpower on those now! Imagine all the infrastructure that could be repurposed for good, whereas we have to do with breadcrumbs... These institutions have to either be regulated to hell, reformed by insiders, or burned down and replaced with one thing better. How precisely that goes to occur, I have no idea. But the defaults need to turn into sane for our society to be sane, too. Maybe then our present band-aids of darknets and crypto won't be so needed. After all, I'm not delusional enough to think that a "one product to rule them all" will be created, so there'll nonetheless be a spot for fans to roll their very own setups. But at the very least the fundamentals ought to be able to be ensured for the normies. And so, can we answer the title's query of whether or not Avoiding The Botnet is unattainable? Well, with the current mindset this would be an empathic Yes. But with correct elementary modifications to how the world works, we can in actual fact bury The Botnet. And let's end on this good note.

If you have any type of concerns pertaining to where and ways to use https://xfans.tube/, you could contact us at our own web-page.