News for hackers. Stuff that matters.

A comment on Ansible playbooks for installing OpenVPN, IPsec, Tor, etc. on popular clouds.

Re:Ansible playbooks for installing OpenVPN, IPsec, Tor, etc... by alphapapa on Thursday March 30, 2017 @02:51PM (#13997911)
It almost seems ironic to me to run a personal privacy-protecting server in a cloud VM. If you assume that the "agencies" have access to the "clouds," whether directly through backdoors or through moles, don't you have to assume that they could crawl VMs, detect ones like this that are virtually identical, and automatically install rootkits in them? Or just monitor them by reading memory through the hypervisor? How would you even know if the hypervisor were compromised?
[ Parent | on HN ]
Re:Ansible playbooks for installing OpenVPN, IPsec, Tor, etc... by juliangoldsmith on Thursday March 30, 2017 @03:19PM (#13998111)
This is more likely a response to the recent reversal of FCC privacy rules.

This may not defend against state actors, but will against nosy ISPs.

[ Parent | on HN ]
Re:Ansible playbooks for installing OpenVPN, IPsec, Tor, etc... by danellis on Thursday March 30, 2017 @05:15PM (#13998934)
What about the cloud providers' ISPs?
[ Parent | on HN ]
Re:Ansible playbooks for installing OpenVPN, IPsec, Tor, etc... by juliangoldsmith on Thursday March 30, 2017 @05:23PM (#13998989)
Backbone providers provide services to businesses. If one of them was caught monitoring traffic, their reputation would be destroyed.
[ Parent | on HN ]
Re:Ansible playbooks for installing OpenVPN, IPsec, Tor, etc... by bigbugbag on Friday March 31, 2017 @02:15AM (#14001523)
That's why they go the extra length not to be caught. Even if they wanted to alert a user that he's monitored, wouldn't national security letter come with a gag order forbidding this ?
[ Parent | on HN ]
Re:Ansible playbooks for installing OpenVPN, IPsec, Tor, etc... by juliangoldsmith on Friday March 31, 2017 @09:44AM (#14003668)
We're talking ISPs here, not state actors. If an individual catches the full attention of the NSA, there's not all that much they can do to defend their privacy.
[ Parent | on HN ]
Re:Ansible playbooks for installing OpenVPN, IPsec, Tor, etc... by bigbugbag on Friday March 31, 2017 @02:13AM (#14001512)
Please don't fall for marketing wording, there's no "cloud". It's called a data center. Choose a data center where the authority you want protection from does not have access, outside of US if you want to prevent your data from being among those sold by ISPs.

As usual it depends on the threat model you want to protect from and if you are a high profile target there's not much you can do against a nation state.

[ Parent | on HN ]
Re:Ansible playbooks for installing OpenVPN, IPsec, Tor, etc... by htrp on Thursday March 30, 2017 @04:06PM (#13998457)
This is the Mossad argument on cryptography.... if your adversary is Mossad, they'll just rubber hose cryptanalysis you, if your adversary is not Mossad, a proxy is good enough.
[ Parent | on HN ]
Re:Ansible playbooks for installing OpenVPN, IPsec, Tor, etc... by LeoPanthera on Thursday March 30, 2017 @04:07PM (#13998464)
This is not about defeating "the agencies". This is about protecting your data from your ISP.
[ Parent | on HN ]