OP I did a master's thesis on censorship circumvention. What's your threat model? Just on vacation looking for love (but not getting robbed or murdered?) Indus

OP I did a master's thesis on censorship circumvention. What's your threat model? Just on vacation looking for love (but not getting robbed or murdered?) Industrial espionage? Or are you in that special set of folks who has to wonder if some literal bitch from the Stasi or whatever is gonna show up to your date with a cute little .25 ACP to cap you with because you made the wrong choices in the primary? What happens when you use Tor over that VPN and taint your anonymous traffic with the rest?[0] I know of at least one case this is probably how he was caught, but he was a literally pedophile who was busted for uploading child abuse imagery to the darkweb and in the same "friend circle" as Matthew Falder. (I worry I gave out to much advice public boards over the years as I did my... OSINT... so no citations today so go enjoy the challenge if you wanna piece that one together) Anyways, to get back on topic: if you are worried about DNS sniffing, tweak your firefox so it uses 1.1.1.1 and https only[1]. Cloudflare skeeves me out because it's a central location and every time I talk Mike Nelson, he says something incredibly offensive about women, claims he can't talk long because he is driving... then shits his pants. (It's really bizarre he has such a prominent position with behavior like that.) Back when I last... Delved... into these topics someone questioned my integrity and refused to help me set that up -- eventually I spoke to their help desk (Township I think? Maybe county?), who realized I wasn't trying to hack their infrastructure and guided me through the issue with their captive portal, but for future reference if some of your terminals are still running goddamn Internet Explored or... laughs Netscape... I'm the least of your problems and you should just say yes sir, no sir or resign on the spot if you're going to even give the slightest HINT you are not my ally in an actual emergency, hence the Mike Nelson meme) Anyways to get back to VPNs: HTTPS is a thing now so use Firefox HTTPS only mode since the EFF sucks at auditing their own code and in general you want to simplify your extension rig to reduce fingerprintability. (Fuck HTTPS everywhere) (And if anyone reading this is still thinking you're obstructing people you know nothing about is some kind of cool unicorn riot style act of protest and reading these posts: Congrats! You obstructed a domestic violence victim tracking down the worst people on the planet at their township library during breaks studying for an OSCP attempt made with the last of their emergency fund, you deserve to watch WPXI every morning and go white as a ghost regardless of race, creed, or social class because folks like me are spending the holiday weekend in all black debating if we should leave the country as our code compiles) [0] https://web.archive.org/web/20211120193211/https://matt.traudt.xyz/posts/vpn-tor-not-mRikAa4h/ https://web.archive.org/web/20211120193211/https://matt.trau... [1] https://support.mozilla.org/en-US/kb/https-only-prefs https://support.mozilla.org/en-US/kb/https-only-prefs