groet

joined 1 year ago
[–] groet@feddit.de 10 points 6 months ago (1 children)

What do you gain by doing this? I trust both proton and mullvad to not fuck up their encryption so attackers can't read your traffic even through one VPN. The second one doesn't offer additional security here.

In your setup, proton will only know you use mullvad but not know which sites you visit in the end. Mullvad knows everything just the same as without proton. So the outer VPN doesnt add privacy either.

If you are suspected of a crime, forcing mullvad to disclose your identity/IP is enough and proton doesn't help.

If you are worried about traffic correlation analysis, then yes 2 VPNs will help. But honestly for normal usage I don't see the point of 2 VPNs.

And about the DoS fear. Just do it the other way round? Mullvad on the router, proton on the device? From protons perspective you produce the same amount of traffic, it just comes from a mullvad server. The outer VPN is the one where you have increased traffic due to 2 VPNs. But I am pretty sure neither will be a problem and tunneling a VPN through a VPN is not a TOS violation

[–] groet@feddit.de 11 points 6 months ago (6 children)

You DONT want to turn it off. Digital forensics work WAAAAAAY better if you have a memory dump of the system. And all the memory is lost if you turn it off. Even if the virus ran 10h ago and the program has long stoped running, there will most likely still be traces in the RAM. Like a hard drive, simply deleting something in RAM doesn't mean it is gone. As long as that specific area was not written over later it will still hold the same contenta. You can sometimes find memory that belonged to a virus days or even weeks after the infection if the system was never shut down. There is so much information in ram that is lost when the power is turned off.

You want to 1: quarantine from network (don't pull the cable at the system, but firewall it at the switch if possible) 2: take a full copy of the RAM 2.5: read out bitlocker keys if the drive is encrypted. 3: turn off and take a bitwise copy of the hard drive or just send the drive + memory dump to the forensics team. 4: get coffee

[–] groet@feddit.de 13 points 6 months ago

There is a famous experiment , where a person gets 100$, and have to offer an arbitrary percentage of that to a stranger. If the stranger declines, both get nothing.

From the strangers perspective, getting offered even 1$ is a win, but the vast majority rejected anything below 30%

[–] groet@feddit.de 2 points 6 months ago
[–] groet@feddit.de 8 points 6 months ago (1 children)

By design nothing in the chain can be altered. But of course you could have a block indicating "person X is now person Y". But you can always read that Y was at some point X (and at what point the change happened). That would not be good, as it would be a public ledger of all trans people. It would also make things like witness protection impossible because inserting a block "today in 2024, person W was born in 1974" is very suspicious

[–] groet@feddit.de 19 points 6 months ago (2 children)

Yeah the bird is on a flat roof maybe a garage or something similar on the same height or slightly below the window

[–] groet@feddit.de 6 points 6 months ago* (last edited 6 months ago) (4 children)

~~> energy equals mass~~

~~That doesn't mean energy has a weight.~~

~~It means it is physically possible to transition energy to mass and vice versa. Sunlight hitting the earth does not add any weight.~~

Edit: turns out that part was wrong

Also, earth radiates heat out to space. At a rate of (aaaaaaaaalmost, because of the greenhouse effect) 100% of the energy we get from the sun. If it didn't, earth would be a few million degrees hot by now...

[–] groet@feddit.de 23 points 6 months ago (1 children)

Aperture has employees? They are volunteers!

[–] groet@feddit.de 1 points 7 months ago (1 children)

If you want any system to connect to you, you need to open a port. You don't need to do that for outgoing connections (the OS and your router will automatically open ports for the return connection). So if everybody connects to one central system, nobody needs to (explicitly) open any ports (except for the central connection point)

[–] groet@feddit.de 6 points 7 months ago (7 children)

Most VPNs use UDP. So set up a wireguard, tailscale or openvpn.

But you still need to "open up the firewall". UDP still works on ports the same way as TCP. I do agree however, that exposing a VPN port is more secure than exposing a port for a game server, as you don't know about the security of that server software.

[–] groet@feddit.de 28 points 7 months ago (4 children)

That works for humans too:

"DON'T THINK ABOUT GIRAFFES!"

[–] groet@feddit.de 40 points 7 months ago (3 children)

Exactly. Bilbo had the ring for 50+ years and he never used it to get more money fame or power. Because neither interested him. He used it in the end to disappear because he wanted his peace and solitude.

view more: next ›