3 ms·

You can just not save the info. Not surprised that web developers have no concept of not saving everything anymore, but it is technically feasible. In many case

You can just not save the info. Not surprised that web developers have no concept of not saving everything anymore, but it is technically feasible. In many cases the IP wouldn't even reach your service and you only see it in the log of some load balancer or other proxy. How fleeting those logs are is a matter of choice. You can come up with an excuse, depending on the service it might be laborious to get an IP on a running live system that doesn't otherwise care about connection information. Depending on the truthfulness of that you might make yourself guilty of impeding investigations though.

yunohn 5y ago
> Not surprised that web developers have no concept of not saving everything anymore Your contempt for web devs seems to correlate with your lack of understanding of how the web works. Responses like yours make me cringe, in how uninformed they are, despite trying to sound smart. IP addresses can and will be exposed in any situation that a user connects to a service - it’s a fundamental property of the web. You cannot tell Government agencies, esp. when they have a 3-country-approved warrant, that “we don’t know how to”. If you terminate a connection at the load balancer, they will make you monitor it. If that’s not owned by you, they will send the warrant onto your cloud provider or whoever.
- raxxorrax 5y ago
  I have no contempt for web devs beyond those that implement invasive tracking against their users. I could setup a service that masks any clients IP address towards my service with no problem. If a client connects through TOR or similar network I would not be the wiser either. So apart from just not logging connection attempts, there are other tricks. Of course that doesn't work if law enforcement is knocking on your door and forcing you to do that. But there are still mechanisms that would allow IPs to be hidden. The state cannot know the intricacies of the mechanisms your service employs. protonmail.com could point to a server in Timbuktu that makes any request in delegation for a client to hide IPs. This privacy arms race is pure idiocy though and the problem is legislation and lacking control and supervision of police forces within European countries that decided they should be so afraid to call one emergency legislation after another for more than two decades.
  - yunohn 5y ago
    You are mixing around client and server side ideas, so I’m still convinced that you don’t know how web services work. You also don’t seem to understand the gravity of an international criminal warrant, and counter with ideas of “paying a provider in Timbuktu to mask IPs”. I don’t like feeding trolls, so I’ll stop replying now.
    - raxxorrax 5y ago
      I also see the gravity in an international warrant issued for squatting. Be that as it may, have a nice day. Still, just for technicalities: Any proxy server hides your IP. VPN, Tor, McDonalds Wifi...

yunohn 5y ago

> Not surprised that web developers have no concept of not saving everything anymore Your contempt for web devs seems to correlate with your lack of understanding of how the web works. Responses like yours make me cringe, in how uninformed they are, despite trying to sound smart. IP addresses can and will be exposed in any situation that a user connects to a service - it’s a fundamental property of the web. You cannot tell Government agencies, esp. when they have a 3-country-approved warrant, that “we don’t know how to”. If you terminate a connection at the load balancer, they will make you monitor it. If that’s not owned by you, they will send the warrant onto your cloud provider or whoever.

raxxorrax 5y ago
I have no contempt for web devs beyond those that implement invasive tracking against their users. I could setup a service that masks any clients IP address towards my service with no problem. If a client connects through TOR or similar network I would not be the wiser either. So apart from just not logging connection attempts, there are other tricks. Of course that doesn't work if law enforcement is knocking on your door and forcing you to do that. But there are still mechanisms that would allow IPs to be hidden. The state cannot know the intricacies of the mechanisms your service employs. protonmail.com could point to a server in Timbuktu that makes any request in delegation for a client to hide IPs. This privacy arms race is pure idiocy though and the problem is legislation and lacking control and supervision of police forces within European countries that decided they should be so afraid to call one emergency legislation after another for more than two decades.
- yunohn 5y ago
  You are mixing around client and server side ideas, so I’m still convinced that you don’t know how web services work. You also don’t seem to understand the gravity of an international criminal warrant, and counter with ideas of “paying a provider in Timbuktu to mask IPs”. I don’t like feeding trolls, so I’ll stop replying now.
  - raxxorrax 5y ago
    I also see the gravity in an international warrant issued for squatting. Be that as it may, have a nice day. Still, just for technicalities: Any proxy server hides your IP. VPN, Tor, McDonalds Wifi...