5 ms·
Have to be careful with this or may end up with a no-knock warrant served on your home at 3:00 am for whatever illegal things someone you shared your IP address
by 300bps 6y ago
Have to be careful with this or may end up with a no-knock warrant served on your home at 3:00 am for whatever illegal things someone you shared your IP address with.
- xur17 6y agoI really wish there was a way around this, I'd love to offer free wifi, but don't want to deal with illegal content that might flow through it. I've considered using something like PIA that claims they don't log, but not sure if that would help.
- throwaway888abc 6y agoValid points. Technically: Pairing this with unmetered VPS (Scaleway) for VPN could be good solution Hotspot Client -> Hotspot -> Wireguard VPN -> Scaleway VPS That way the client always has hidden your ip and traffic encrypted. $3/month for 200/Mb https://www.scaleway.com/en/virtual-instances/development/ https://www.scaleway.com/en/virtual-instances/development/
- iptrans 6y agoIgnoring everything else, this will add a lot of latency, unless OP is located close to Scaleway’s DC.
- throwaway888abc 6y agoFully aware. Still, high latency internet for free is better than no internet access at all. Another solution can be registration form and tracking end user private IPs assigned (Ipam) for such any legal issues.
- linsomniac 6y agoMaaaaybe... My old company, everyone worked remote and we set up a VPN to our data center as the default route. One of my employees did some benchmarking comparing the VPN to our data center vs. without VPN. He found that it was faster to use Comcast to our data center, and then using their InterNAP optimized transit. I want to say it was something like 30% faster on average, but I don't have specific numbers and they'd be ~8 years old now anyway.
- iptrans 6y agoScaleway’s data centers are in Europe :) Even Comcast will be able to beat that.
- deleted 6y ago[deleted]
- tomp 6y agoCouldn't you just block all unencrypted connections? Probably also useful from a user privacy standpoint.
- zelly 6y agoThat solves eavesdropping, but you still could have someone that submits threats to .gov entities with your IP and have men in black raid your house at 5 AM.
- deleted 6y ago[deleted]
- IvyMike 6y agoRoute the wifi traffic all through Tor. You can even get this prepackaged for you by using something like https://learn.adafruit.com/onion-pi/overview https://learn.adafruit.com/onion-pi/overview
- zelly 6y agoThis is the only workable solution for giving away WiFi to others. But then no one would use it because every site will captcha you to death if it can even load. It's terrible but the U.S. legal system forces everyone to subscribe to ISPs individually.
- linsomniac 6y agoThat is a really good idea!
- blaser-waffle 6y agoThere are tons of solutions for semi-open wifi for custmers, e.g. Sonicwall or Meraki firewalls and filter rules, etc. Many of them are Out of the Box solutions too, and are plainly advertised as SMB / coffee shop solutions. Set em up, turn on filtering, log stuff, turn over any records if/when law enforcement asks. You could probably hack something together that costs less, but that's adds overhead and wastes time; you need just enough to prove you're doing diligence and keep out of the low hanging fruit. Log everything, and if the fuzz asks for records be able to hand them over.
- koala_man 6y agoIt's sad that we live in a society where this is a concern, because I really love and appreciate having open wifi when I'm traveling or moving. I've run an open network to try to normalize it for the past decade, and I hope others are willing to do the same.
- copperx 6y agoHow do Starbucks and restaurants deal with this? I'm pretty sure keeping good logs (for a long time) is all they do. Am I wrong?
- blaser-waffle 6y agoThey have corporate firewalls and/or traffic routed through filtering orgs. Head over to your local starbucks and try to go to questionable sites, is probable you'll be blocked. Chances are good they're logging too, and they have cameras and in a lot of cases credit/debit card info too, so they can correlate things. Mom and Pop shops are a different story, but most of the places around me are using Meraki boxes -- I recognize the log in prompt. And broadly speaking, the cops realize that coffeeshops are going to have wifi and aren't explicitly putting up Tor nodes or trying to be an ISP, so they'll cut them slack if they can provide what deets they can. Usually they have insurance and lawyers to CYA on top of this.