ah yes. unless they are actively listening in am i not safe enough as compared to DPI censorship and network analyzers mandated by the said oppressive government?
6. Own your pipes. ISPs with DPI can undo much of your efforts as they try to monetize you. This might be mitigated by encryption everywhere, but I think you're still subject to the state, which can still identify you if sufficiently motivated. Or alternatively, make it attempts at bypassing identification illegal and prosecute all those who do ("Why do you have something to hide?")
It depends on what services you are exposing. If it's just SSH and HTTP, the risk and difficulties are really low if you follow a few simple rules. The bonus is that you can learn many interesting things in an experiential, personal way.
It entirely depends on how motivated and how much resources they're willing to dedicate to finding you. They're probably not going to go to great lengths to catch a single copyright violation, so simple precautions may be good enough.
If you're a legit threat to national security, then yeah, they're probably going to find you no matter what you do.
Only use your private key with Tinfoil Hat Linux on an offline air-gapped computer: http://tinfoilhat.shmoo.com/
I recommend disconnecting your monitor and only receiving output by having it blinked out at you through your capslock light on your keyboard. Bonus points if you can get your hands on some TEMPEST hardened hardware, and/or tamper-resistant hardware.
Anything less will leave you vulnerable to the black helicopters!
Note: I'm joking obviously, but this is something to take seriously.
If you can access using this so can others when you cross borders, are stopped by police, have spying spouse, etc. Those are real and sometimes fatal threat models.
They're still going to be able to see exactly what you are doing, they probably have all that data indexed and easily searchable by keyword. So it wont matter if you visit hundreds of random websites, they will still be a record of the exact the sites you are trying to hide from them. But I applaud your creativity and cleverness. Hiding via obscurity is not proper security. You would be better off buying a cheap vps and creating your own private vpn over ssh for web browsing.
reply