Re:How to leak to the press
by hackcasual on Friday January 27, 2017 @12:15PM
(#13501037)
They can log the domain you connected to, not the URL you visited
[ Parent
| on HN ]
Although with most TLS implementations they will see the size of your transfers, thus still giving away which URL you visited....
Idea: HTTP server module that appends a minimal amount of hidden random garbage data (as a comment or similar) to each response so no two responses have the same fingerprint.
Re:How to leak to the press
by moonlighter on Friday January 27, 2017 @02:39PM
(#13502005)
user btown answered that elsewhere here in this thread:
"https://github.com/technion/mod_randpad (an Nginx module that injects padding as a comment into returned HTML documents) is likely the correct layer to add random padding; the performance hit would be negligible."
If this is the first (and only) time someone visited the domain around the time of a leak, it may be a little suspicious.
Re:How to leak to the press
by UnoriginalGuy on Friday January 27, 2017 @12:39PM
(#13501205)
Then use public WiFi.