Suspect can’t be compelled to reveal “64-character” password, court rules

Re:Suspect can’t be compelled to reveal “64-character” passw... by AYBABTME on Sunday November 24, 2019 @02:28AM (#21618970)

That simple solution is basically impossible to pull off. I can't think of any cloud provider that'll let you sign off without having any identifying details about you. They'll need a payment method to begin with, and unless you usurp someone's identity and use stolen cards, you won't be able to anonymously pay for the hosting. Just getting an email account via Tor without providing any identification is hard.

Every step along the path of doing something anonymously online is difficult. There's nothing simple about it.

[ Parent | on HN ]

Re:Suspect can’t be compelled to reveal “64-character” passw... by syshum on Sunday November 24, 2019 @06:15AM (#21619695)

>They'll need a payment method to begin with,

Cryptocurrency, Visa/Master Card Gift Cards, "Free" Hosting (things like GitHub Pages), Free Cloud Storage Accounts....

[ Parent | on HN ]

Re:Suspect can’t be compelled to reveal “64-character” passw... by AYBABTME on Sunday November 24, 2019 @07:16AM (#21619950)

Most of these free things will still require some ID before letting you store any data. Using gift cards will flag and probably lock your account for further review before you can publish anything or use any resources. Same if you created your account or logged in from a known Tor or VPN IP address. Same if you pay in cryptocurrency.

There's probably ways to do it, but I wager they're not "simple" at all. All these companies usually are required by law to make sure they can trace their customers in one way or another (Know Your Customer) and are further incentivized to prevent anonymous usage because such usage is usually done by abusive actors who'll cause problems to the platform.

I'd be very curious to see someone who did it, write up the steps they took (that anyone else could take) to actually host anything online in a truly anonymous and _simple_ manner.

[ Parent | on HN ]

Re:Suspect can’t be compelled to reveal “64-character” passw... by syshum on Sunday November 24, 2019 @08:22AM (#21620252)

I am aware of zero "Know your customer" laws in the US for web hosting, email or other services like that

Know your customer is a banking law that banks have to follow for money laundering purposes

[ Parent | on HN ]

Re:Suspect can’t be compelled to reveal “64-character” passw... by AYBABTME on Sunday November 24, 2019 @09:37PM (#21625003)

I might be thinking of the wrong thing, but the payment gateways will need to know who the payer is, and the service provider doing the payment will need to ensure the payment isn't fraudulent (or be exposed to chargebacks), which means the service provider in the end needs to validate your ID, or someone in the chain will in any case.

I'm not pretending to know every platform out there and every laws, but I think it's fair to say that accomplishing the things GP said is not simple, and that most service provider will need some form of ID somehow. Even ProtonMail will require you to make a payment or provide your phone number if you try to create an account from Tor.

[ Parent | on HN ]

Re:Suspect can’t be compelled to reveal “64-character” passw... by TomMarius on Sunday November 24, 2019 @02:47AM (#21619026)

You don't know any because you did not try to google any. There are many. But yeah, it's not simple for everyone, I agree.

[ Parent | on HN ]