News for hackers. Stuff that matters.
Re:How to leak to the press by hackcasual on Friday January 27, 2017 @12:15PM (#13501037)
They can log the domain you connected to, not the URL you visited
Re:How to leak to the press by jvdh on Friday January 27, 2017 @12:21PM (#13501087)
Although with most TLS implementations they will see the size of your transfers, thus still giving away which URL you visited....
Re:How to leak to the press by mi100hael on Friday January 27, 2017 @02:29PM (#13501940)
Idea: HTTP server module that appends a minimal amount of hidden random garbage data (as a comment or similar) to each response so no two responses have the same fingerprint.
Re:How to leak to the press by moonlighter on Friday January 27, 2017 @02:39PM (#13502005)
user btown answered that elsewhere here in this thread: "https://github.com/technion/mod_randpad (an Nginx module that injects padding as a comment into returned HTML documents) is likely the correct layer to add random padding; the performance hit would be negligible."
Re:How to leak to the press by tyrust on Friday January 27, 2017 @12:24PM (#13501103)
If this is the first (and only) time someone visited the domain around the time of a leak, it may be a little suspicious.
Re:How to leak to the press by UnoriginalGuy on Friday January 27, 2017 @12:39PM (#13501205)
Then use public WiFi.