3 ms·

This sounds like private relay. I love it! Really love the increasing ecosystem around protecting people from their current network. Who knows what airports and

This sounds like private relay. I love it! Really love the increasing ecosystem around protecting people from their current network. Who knows what airports and coffeeshops are doing with your traffic analytics anyways.

gruez 3y ago
>Who knows what airports and coffeeshops are doing with your traffic analytics anyways. There's not much you can mine. Most traffic nowadays is encrypted so all you get is the domain. For most people this basically translates to what apps you use (eg. facebook or reddit) and possibly what company you work for (eg. if you connect to your company's mail server).
- j16sdiz 3y ago
  It tell more than that. Access to www.apple.com (with "www", so it is a browser)? Maybe I can push you an AD for iPhone 15 protective case.
- lxgr 3y ago
  > Most traffic nowadays is encrypted so all you get is the domain. That can be still quite interesting for advertisers, and if you think about home ISPs rather than public Wi-Fi networks, you could easily imagine your ISP also supplying your demographic range and rough location to advertisers. Even from purely public IP geolocation information alone, I'm able to pinpoint my IPv4 and IPv6 to my ZIP code (which spans only a couple of blocks). IPv6 allows tracking individual devices on a network persistently as well, i.e. distinguishing between people in a household.
- pcl 3y ago
  Did you see this recent disclosure? https://news.ycombinator.com/item?id=37495256 https://news.ycombinator.com/item?id=37495256
  - gruez 3y ago
    1. That's also something that a vpn/proxy isn't going to solve, so I'm not sure what the relevance to this discussion is 2. If you're at a location that the attacker controls, there's a much more straightforward attack that doesn't even need wifi: recording your keystrokes with hidden cameras
lxgr 3y ago
> Who knows what airports and coffeeshops are doing with your traffic analytics anyways. I'm much less concerned about coffeeshops and airports (where I spend only a few hours per year, and modern OSes use MAC address randomization) than I am about my home and mobile ISPs.
- kylehotchkiss 3y ago
  Mobile ones are the worst and probably what inspired apple to implement private relay to begin with. I hope they provide it for third party apps soon.
housemusicfan 3y ago
Yes we should all be worried about the local coffee shop who can barely make payroll manipulating our network traffic. Fortunately we can now proxy all traffic through an internet advertising company, with credentials tying it to our identity. We should all consider ourselves fortunate this option now exists. Who knows what Sally's doing with my DNS queries in exchange for a cappuccino. Might as well have Google hoover it all up so they can keep us safe.
- kylehotchkiss 3y ago
  It’s not the coffeeshop, it’s the Wi-Fi vendor that gives them some perks for implementing some sort of wall on the network. Like when you join the network and have to click through to get access, that’s a vendor that could be data mining
  - housemusicfan 3y ago
    How is that any different or of more concern than any other ISP in existence? And the solution is to route all traffic through Google - an advertising company quite literally renowned for its data mining habits and abilities.

gruez 3y ago

>Who knows what airports and coffeeshops are doing with your traffic analytics anyways. There's not much you can mine. Most traffic nowadays is encrypted so all you get is the domain. For most people this basically translates to what apps you use (eg. facebook or reddit) and possibly what company you work for (eg. if you connect to your company's mail server).

j16sdiz 3y ago
It tell more than that. Access to www.apple.com (with "www", so it is a browser)? Maybe I can push you an AD for iPhone 15 protective case.
lxgr 3y ago
> Most traffic nowadays is encrypted so all you get is the domain. That can be still quite interesting for advertisers, and if you think about home ISPs rather than public Wi-Fi networks, you could easily imagine your ISP also supplying your demographic range and rough location to advertisers. Even from purely public IP geolocation information alone, I'm able to pinpoint my IPv4 and IPv6 to my ZIP code (which spans only a couple of blocks). IPv6 allows tracking individual devices on a network persistently as well, i.e. distinguishing between people in a household.
pcl 3y ago
Did you see this recent disclosure? https://news.ycombinator.com/item?id=37495256 https://news.ycombinator.com/item?id=37495256
- gruez 3y ago
  1. That's also something that a vpn/proxy isn't going to solve, so I'm not sure what the relevance to this discussion is 2. If you're at a location that the attacker controls, there's a much more straightforward attack that doesn't even need wifi: recording your keystrokes with hidden cameras

lxgr 3y ago

> Who knows what airports and coffeeshops are doing with your traffic analytics anyways. I'm much less concerned about coffeeshops and airports (where I spend only a few hours per year, and modern OSes use MAC address randomization) than I am about my home and mobile ISPs.

kylehotchkiss 3y ago
Mobile ones are the worst and probably what inspired apple to implement private relay to begin with. I hope they provide it for third party apps soon.

housemusicfan 3y ago

Yes we should all be worried about the local coffee shop who can barely make payroll manipulating our network traffic. Fortunately we can now proxy all traffic through an internet advertising company, with credentials tying it to our identity. We should all consider ourselves fortunate this option now exists. Who knows what Sally's doing with my DNS queries in exchange for a cappuccino. Might as well have Google hoover it all up so they can keep us safe.

kylehotchkiss 3y ago
It’s not the coffeeshop, it’s the Wi-Fi vendor that gives them some perks for implementing some sort of wall on the network. Like when you join the network and have to click through to get access, that’s a vendor that could be data mining
- housemusicfan 3y ago
  How is that any different or of more concern than any other ISP in existence? And the solution is to route all traffic through Google - an advertising company quite literally renowned for its data mining habits and abilities.