6 ms·
>>Edit: I wonder how imprudent it was of me to not use a VPN'd account to write this comment. Unless they can hack HN servers to check its logs, I don't see ho
by CryptoPunk 5y ago
>>Edit: I wonder how imprudent it was of me to not use a VPN'd account to write this comment.
Unless they can hack HN servers to check its logs, I don't see how they'd track down the IP from where your comment was submitted from.
- qart 5y agoThey don't hack. The send legal notices to the companies. They have sent legal notices to get people on Google, Facebook, etc. I still wrote my comment assuming that HN is obscure enough for them not to be aware of it.
- josephcsible 5y agoWhy would a site hosted outside of India respond to a legal notice from India?
- qart 5y agoThe usual reason is that if they don't, the website gets banned in India.
- nsomaru 5y agoCould be posting from inside India?
- CryptoPunk 5y agoGiven HN uses HTTPS, there's no way they can determine how a particular user is interacting with HN just by monitoring the data being routed by India-based internet switches.
- bostik 5y agoI would say that depends on how intensely you are being watched. Traffic analysis and timestamp correlation are a powerful tool. Small traffic bursts going out, slightly larger ones coming in: surfing, reading the front page. (Or new post page.) Small traffic burst going out, lots of traffic coming in: loading an active topic thread page. Slightly bigger traffic burst going out, lots of traffic coming back in: posting a comment to an active, non-trivial thread. Number of packets (and total outgoing bytes) are useful for bucketing the size of the comment posted. Short comments should fit into a single payload packet. Longer comments obviously have their payload split across multiple packets, and by counting the total bytes sent, you have a decent estimate to the size of the comment posted. Combine comment timestamps with their lengths and you can infer quite a bit.
- atatatat 5y agoMetadata defines the difference between security and privacy. HTTPS is a great first-base — it is not enough.
- crossroadsguy 5y agoAre you saying HN doesn’t log IPs? @dang, you don’t?
- darkhorse22 5y agoHN logs IPs.
- darkhorse23 5y agoHN logs IPs.
- darkhorse24 5y agoHN logs IPs.