this post was submitted on 06 Aug 2023
163 points (94.5% liked)
Privacy
29831 readers
646 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 4 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Yup. An ISP could potentially gain some information based on the IPs you're hitting and the number/frequency of packets sent and received, but that would take serious logging and analysis on their part. It's much easier to collect data through DNS requests.
@just_browsing
@cow DPI would probably be easier.
Deep packet inspection by definition requires the ability to see inside the packet, which if using HTTPS wouldn't be possible for your ISP.
They can still see the destination IP, return IP, and port number, but that's it. It would take a ton of storage to log all of that packet data though, and it'd be difficult to come up with a way not to double count it if it's going through multiple hops on the ISP network.
Logging DNS requests on the DNS server would be a much easier way of collecting that data if they wanted it. I know cloudflare collects aggregate DNS query data through their public DNS server, and Google likely does too.
@just_browsing I was just bullshitting. Sure, they would need a proxy of sorts and a certificate to open your packages if you use HTTPS. I suppose the only thing that can help with carrier surveillance is a good VPN or TOR. But even then, the VPN provider is a problem in and of itself.