News for hackers. Stuff that matters.

anon_trader

Re:IPv6 just turned 30 and still hasn't taken over the world on Friday January 02, 2026 @12:25PM (#46467094)
> There’s no way in which IPv6 is less private than IPv4

With IPv4 behind CGNAT you share an address with hundreds of other users. This won't protect you against a targeted subpoena, but tracking companies typically don't have this kind of power, so they have to resort to other fingerprinting options.

On the other hand, an IPv6 address is effectively a unique, and somewhat persistent, tracking ID, 48/56/64-bit long (ISP dependent), concatenated with some random garbage. And of course every advertiser, every tracking company and their dog know which part is random garbage; you are not going to fool anyone by rotating it with privacy extensions.

Re:GenAI could make KYC effectively useless on Tuesday January 09, 2024 @12:08PM (#38928629)
I guess this will just mean even more mandatory apps with hardware-backed backdoor crap like SafetyNet et al., in the hopeless witch hunt for emulators. And of course, installing a custom ROM or otherwise degoogling will be considered criminal-like behavior not long from now.

Look at the payment card industry: the whole system is fundamentally broken by design and has zero meaningful privacy and security since its inception, yet it somehow survives, decade by decade, with more and more layers of bureaucratic band-aid.

Re:The Bond villain compliance strategy on Saturday November 25, 2023 @10:46AM (#38414210)
There is a difference between "evil" and "ineffective", and while I agree with the more controversial "evil" part, my point was to emphasize the "ineffective" part of it.

I won't go into further details even under anonymous account, but I have some first-hand experience dealing with compliance from various financial institutions, I have a general idea of what they ask, what they do NOT ask, and all of this feels much like IP address logging or so-called "chain analysis": it may work against unprepared people (mostly those who "have nothing to hide"), but is almost trivially bypassable by any semi-motivated attacker.

Mostly it's because incentives are completely off. These people are not the police; their top priority is to cover their asses with enough paperwork, not actively engage in yet another anti-whatever crusade.

Re:The Bond villain compliance strategy on Saturday November 25, 2023 @10:25AM (#38414070)
Thank you.

I preferred to register a throwaway for obvious privacy reasons, immediately got shadowbanned, and while I refrained from posting the actual article link [1] that I mentioned, that did not really help.

[1] (Russian) https://vc.ru/relife/928248-50-bankov-kotorye-chashche-vsego...