4 ms·

What I like about this list, is that it's opinionated and thus terse. Take note that some of these tips are either not considered good practice or even harmful

What I like about this list, is that it's opinionated and thus terse. Take note that some of these tips are either not considered good practice or even harmful depending on your locale. E.g., the data protection standards in the EU are so high, that there's no need to worry about DNS or ISP snooping for advertisements/tracking. This makes using a VPN or using a different DNS less useful. I might even go so far and call it harmful, because you're introducing a party that you don't have such a strong contract with.

newaccoutnas 8y ago
I think the point is more about if you're on uncontrolled wifi (i.e. internet cafes) access points or other nefarious things like mobile providers that rewrite CSP policy (vodafone.pt). These things happen and some safety via a VPN may help.
Hbthegreat 8y ago
That is if every company that is in the chain follows those strict data protection laws. It wouldn't be the first time that bad actors exploited legally protected browsing.
- sc11 8y ago
  The same applies to VPN providers. You're just moving around who you trust.
  - sayno3 8y ago
    VPN's need to be resolved regarding the following points: 1) Currently, only financially gifted people can even afford to consider privacy at this level. 2) Is complete, non-logged privacy even a desirable outcome? 3) Who should be able to request or correlate log data (governments, the company employees)? In its current incarnation, VPNs and security in general only changes who can be easily targeted or prosecuted, much in the same way that residents of poor neighborhoods are routinely arrested/searched for drug use where a rich person just doesn't have to worry about getting caught for the same actions. So paid VPNs contribute to an 'internet ghetto', or more accurately: disproportionate enforcement.
diegoperini 8y ago
> Take note that some of these tips are either not considered good practice or even harmful depending on your locale. ...or even impossible in some cases. * 1.1.1.1 is blocked in Turkey. * Most VPN providers are blocked in Turkey. My personal opinions: * I don't like the promotion of Brave over Firefox. Change my mind if you can. * Stressing the importance of HTTPS (extensions like HTTPS Everywhere) should really be included in this list.

newaccoutnas 8y ago

I think the point is more about if you're on uncontrolled wifi (i.e. internet cafes) access points or other nefarious things like mobile providers that rewrite CSP policy (vodafone.pt). These things happen and some safety via a VPN may help.

Hbthegreat 8y ago

That is if every company that is in the chain follows those strict data protection laws. It wouldn't be the first time that bad actors exploited legally protected browsing.

sc11 8y ago
The same applies to VPN providers. You're just moving around who you trust.
- sayno3 8y ago
  VPN's need to be resolved regarding the following points: 1) Currently, only financially gifted people can even afford to consider privacy at this level. 2) Is complete, non-logged privacy even a desirable outcome? 3) Who should be able to request or correlate log data (governments, the company employees)? In its current incarnation, VPNs and security in general only changes who can be easily targeted or prosecuted, much in the same way that residents of poor neighborhoods are routinely arrested/searched for drug use where a rich person just doesn't have to worry about getting caught for the same actions. So paid VPNs contribute to an 'internet ghetto', or more accurately: disproportionate enforcement.

diegoperini 8y ago

> Take note that some of these tips are either not considered good practice or even harmful depending on your locale. ...or even impossible in some cases. * 1.1.1.1 is blocked in Turkey. * Most VPN providers are blocked in Turkey. My personal opinions: * I don't like the promotion of Brave over Firefox. Change my mind if you can. * Stressing the importance of HTTPS (extensions like HTTPS Everywhere) should really be included in this list.