4 ms·

1) Host in I2P/Freenet/etc only 2) Use anonymous or throwaway email addresses only; never connect from your real IP (see i2pmail, hushmail, and good proxying +

1) Host in I2P/Freenet/etc only 2) Use anonymous or throwaway email addresses only; never connect from your real IP (see i2pmail, hushmail, and good proxying + generic email service) 3) Run your own ad networks, accept payment only in Bitcoins. 4) Encrypt everything vaguely related; all mail to and from your disposable email address should be encrypted, write a script that downloads and empties its contents nightly storing encrypted archives on your machine only. All code and source control and everything else that can be encrypted should be encrypted. See ecryptfs. 5) Profit!

pyre 16y ago
> write a script that downloads and empties its contents > nightly storing encrypted archives on your machine only For bonus points, have the script automatically mount your hidden partition (just stick the password in .netrc) thereby alerting 'them' to the fact that you have one.</sarcasm> The automated script itself can't be encrypted, so you've alerted 'them' to the fact that you're connected to that email account, and pointed them to where the encrypted files are stored (even if they can't access the files themselves).
- cookiecaper 16y ago
  If they learn enough to get physical access to the machine that runs the script then you're already pretty much screwed, obviously. At that point the encryption is merely there to minimize damage. Your machine could be confiscated coincidentally if you're involved in other things that make people angry. In this case, they may just gloss over any content irrelevant to the charges at hand. Anecdotes I've heard seem to corroborate that mode of operation. In such a situation, the email archives and/or the backup script may never come into play anyway. You could also not use a script and do it by hand every day. It's just a trade-off of risks; you either do it manually each day and allow yourself to accidentally forget a day, or get lazy and let it go for weeks, or whatever, and keep that data in the hands of a third-party where you really have no idea what's going on with it, or you can put a script on your machine, where local analysis of your HDD could reveal you. Also, there'd obviously have to be some unencrypted parts of this, but you could probably encrypt the part that contains the actual email address. You can just point a cronjob to a script that decrypts the real script and shreds it to your paranoia's satisfaction when done. If the script can actually run fully automated (i.e., no passphrase needed), then that'd probably be a problem if someone got a hold of your workstation. So it really shouldn't be totally automated, but mostly automated would still be good.
Entlin 16y ago
How about 1) Don't sell ads against stuff you don't own. ?
- cookiecaper 16y ago
  I hope that Google is your first target with this idea.
  - Entlin 16y ago
    You might look into robots.txt and then reconsider your point.
    - cookiecaper 16y ago
      What does that change? Perhaps these content providers should look into a DMCA takedown request and reconsider their position. The target of this raid wasn't hosting any content himself, he was only hosting links that most likely went out to large video sites, where the copyright holder could request a takedown. My understanding is they were simply annoyed at this guy's aggregation of the links and added him to the target list.
      - Entlin 16y ago
        Google respects if I don't want my content indexed. This guy doesn't. I can't believe we're even discussing this stuff. This guy is clearly in criminal backwaters fencing illegal stuff. How can you even remotely vindicate his behavior? "Oh but there is a layer of redirection between him and the actual source of the content" really doesn't cut it in my book.
        technomancy 16y ago
        > How can you even remotely vindicate his behavior? Nobody's defending his behaviour; people are pointing out that the way in which the federal government apprehended him was clearly illegal. There are legal ways to stop him from infringing; let's see more of that.
niktrix 16y ago
they do keep record of logged ips , beware
evgen 16y ago
The problems are that #1 ensures that you will have few users and #3 is diametrically opposed to #5 (unless you can somehow pay your rent or hosting bills in bitcoins...)
- cookiecaper 16y ago
  You can cash out btc for US$ or other currencies pretty easily. See http://mtgox.com http://mtgox.com .

pyre 16y ago

> write a script that downloads and empties its contents > nightly storing encrypted archives on your machine only For bonus points, have the script automatically mount your hidden partition (just stick the password in .netrc) thereby alerting 'them' to the fact that you have one.</sarcasm> The automated script itself can't be encrypted, so you've alerted 'them' to the fact that you're connected to that email account, and pointed them to where the encrypted files are stored (even if they can't access the files themselves).

cookiecaper 16y ago
If they learn enough to get physical access to the machine that runs the script then you're already pretty much screwed, obviously. At that point the encryption is merely there to minimize damage. Your machine could be confiscated coincidentally if you're involved in other things that make people angry. In this case, they may just gloss over any content irrelevant to the charges at hand. Anecdotes I've heard seem to corroborate that mode of operation. In such a situation, the email archives and/or the backup script may never come into play anyway. You could also not use a script and do it by hand every day. It's just a trade-off of risks; you either do it manually each day and allow yourself to accidentally forget a day, or get lazy and let it go for weeks, or whatever, and keep that data in the hands of a third-party where you really have no idea what's going on with it, or you can put a script on your machine, where local analysis of your HDD could reveal you. Also, there'd obviously have to be some unencrypted parts of this, but you could probably encrypt the part that contains the actual email address. You can just point a cronjob to a script that decrypts the real script and shreds it to your paranoia's satisfaction when done. If the script can actually run fully automated (i.e., no passphrase needed), then that'd probably be a problem if someone got a hold of your workstation. So it really shouldn't be totally automated, but mostly automated would still be good.

Entlin 16y ago

How about 1) Don't sell ads against stuff you don't own. ?

cookiecaper 16y ago
I hope that Google is your first target with this idea.
- Entlin 16y ago
  You might look into robots.txt and then reconsider your point.
  - cookiecaper 16y ago
    What does that change? Perhaps these content providers should look into a DMCA takedown request and reconsider their position. The target of this raid wasn't hosting any content himself, he was only hosting links that most likely went out to large video sites, where the copyright holder could request a takedown. My understanding is they were simply annoyed at this guy's aggregation of the links and added him to the target list.
    - Entlin 16y ago
      Google respects if I don't want my content indexed. This guy doesn't. I can't believe we're even discussing this stuff. This guy is clearly in criminal backwaters fencing illegal stuff. How can you even remotely vindicate his behavior? "Oh but there is a layer of redirection between him and the actual source of the content" really doesn't cut it in my book.
      - technomancy 16y ago
        > How can you even remotely vindicate his behavior? Nobody's defending his behaviour; people are pointing out that the way in which the federal government apprehended him was clearly illegal. There are legal ways to stop him from infringing; let's see more of that.

niktrix 16y ago

they do keep record of logged ips , beware

evgen 16y ago

The problems are that #1 ensures that you will have few users and #3 is diametrically opposed to #5 (unless you can somehow pay your rent or hosting bills in bitcoins...)

cookiecaper 16y ago
You can cash out btc for US$ or other currencies pretty easily. See http://mtgox.com http://mtgox.com .