In many ways, we're past the point of no return. So-called ubiquitous technical surveillance is largely the norm, often encroaching by design beyond the boundaries of expected decency.
Informational terrorism, a dysphemism that describes the manner by which certain data is abused to "re-rank content" for a "personalized experience," is encoded into the DNA of certain large tech companies.
By snakepit 2 hours ago
Eh, defeatist attitude. It isn't that hard to anonymize and obfuscate your data.
The issue is everyone is willing to trade convenience for security.
The point of no return is an individual choice.
By chneu a minute ago
> we're past the point of no return
The ideal would have been a security-first (privacy-first) industry and supply chain. The ideal never was going to happen, anymore than the early educational ideals of the television industry.
Ergo we are not past the point of no return. That point never existed. We are right where we should expect to be, with most people victimised by the industry and the supply chain, and with a small percentage of people working in security/privacy education to mitigate unsafe practices.
Seatbelts and airbags exist. Smoking is banned in many public settings. It took a senseless amount of carnage to achieve these measures.
We just haven't achieved the requisite amount of privacy carnage. Yet.
By heresie-dabord an hour ago
Yes. The only question left is when does the terror begin? And it will--it will be our own governments clamping down on all of us. The digital norm globally will be China under the CCP. That is the future for all of us unless we turn it off, but we won't because humans are stupid.
By lisbbb an hour ago
> The digital norm globally will be China under the CCP.
It never ends with these morons. The "digital norm" was the norm well before china. Few years ago morons were whining about chinese "social credit" when "social credit" existed pretty much everywhere. Now these idiots are whining about surveillance as if china pioneered it.
You can spot these idiots because they can't help using "ccp". These idiots claim china copies and steals everything and yet they refuse to give china the credit of stealing and copying "social credit" and "mass surveillance".
By hearsathought 41 minutes ago
The terrorism is already occurring, it's merely exported to other people
> Server Logs
> Like all web services, our servers may log:
> IP addresses of visitors
> Request timestamps
> User agent strings
> These logs are used for security and debugging purposes and are not linked to your account.
I agree 100%. I went ahead and disabled all logging in Apache just now. Will update the privacy page to reflect this within the hour.
By ybceo 9 hours ago
Does it matter, when CF is collecting all that already before people even reach your site?
By sdoering 2 hours ago
Shouldn't you have spent some time to think through basic things like this before trying to write an opinion piece on anonymity? Certainly it shows a lack of depth of understanding.
By drink_machine 9 hours ago
The privacy crowd seems to be incapable of grey areas. Are all these the same thing? Are they all the same severity of problem?
- A web site logs traffic in a sort of defacto way, but no one actually reviews the traffic, and it's not sent to 3rd parties.
- A government website uses a standard framework and that framework loads a google subdomain. In principle, Google could use this to track you but there's no evidence that this actually happens.
- A website tracks user sessions so they can improve UI but don't sell that data to 3rd parties.
- A website has many 3rd party domains, many of which are tracking domains.
- Facebook knows exactly who you are and sells your information to real-time-bidding ad services.
- Your cell phone's 3G connection must in principle triangulate you for the cell phone to function, but the resolution here is fuzzy.
- You use Android and even when your GPS is turned "off" Google is still getting extremely high resolution of your location at all times and absolutely using that information to target you.
A LOT of the privacy folks would put all those examples in the same category, and it absolutely drives me up a wall. It's purity-seeking at the expense of any meaningful distinction, or any meaningful investigation that actually allows uses to make informed decisions about their privacy.
By everdrive an hour ago
I disagree. Like I said earlier :
Web server logs were not tied to user credentials in any way, they were used for debugging purposes and could not have been used to identify users.
By ybceo 9 hours ago
You disagree and yet you agreed 100% and made the change. I thought the point the preceding parent comment is making is that you should have thought of that beforehand. Yet you seemed to already come to a judgement about it yet then quickly agreed to reverse yourself.
Sounds like a clear "lack of a depth of understanding" to me.
By pear01 4 hours ago
From your faq: "We maintain zero logs of your activities. We don't track IP addresses, …"
Front page says "zero logs"
Some logs, including specifically datapoints you have promised not to log, but you mean well (?) is pretty different from zero logs
By procaryote 8 hours ago
Fwiw, zero logs in that context is usually in the relation to requests through the VPN, whereas this discussion is about requests on their homepage? Or did I misunderstand something here?
By ffsm8 4 hours ago
I have a static IP address; and most connections tend to have long-lived leases anyways. It can easily be used to identify me, even if you don't explicitly tie it to my account.
By organsnyder 2 hours ago
A snake oil salesman is always going to disagree with criticism of his product.
By drink_machine 9 hours ago
I went ahead and took action on the criticism as soon as I saw the parent comment. All apache access logs are piped to /dev/null now.
I'm not here to debate, the reason I posted here is to hear what people thought and see how I could improve my platform based on the criticism.
By ybceo 8 hours ago
The whole thing is behind cloudflare!
By ljlolel 8 hours ago
Anonymity is responsibility of a visitor in any case. If the visitor's anonymity depends on some website not storing logs, the visitor lost already.
By megous 8 hours ago
Your browser knows more about you than you do. When accessing a website, anonymous or not, it sends a fingerprint so to speak to that site and its ad network. It’s there that your anonymity ceases and you are identified, classified, segmented, and fed more “How to stay safe online” ads. There’s no escaping it. Chromium is not to be trusted.
By reactordev 42 minutes ago
in 2025, can small and medium businesses afford to be exposed to the world wild web? You don't need to be a major site these days to be DDosed on the regular
By bossyTeacher 4 hours ago
Who gets ddosed on the regular? Spam is a regular problem, but I have never encountered a ddos on a business website.
By V__ 4 hours ago
Baseless fear mongering. I've had webservers raw-dogging the Internet for about 25 years. Nothing of any consequence has happened. Hasn't happened to anyone I know, either. Anecdata yes, but people are making it sound like running a webserver is like connecting a Windows XP machine to the internet - instant pwnage. It isn't.
I've been DDoS'ed exactly once. In 2003 I got into a pointless internet argument on IRC, and my home connection got hammered, which of course made me lose the argument by default. I activated my backup ISDN, so my Diablo 2 game was barely interrupted.
By encom 4 hours ago
>I've had webservers
But have those webservers supported a small or medium-sized business?
By hollerith 4 hours ago
Despite what Cloudflare wants you to think, yes, yes they can.
Also you can sue whoever DDoSes you and put them in jail. It's easier than it used to be, since the internet is heavily surveilled now. The malicious actors with really good anonymity aren't wasting it attacking a nobody.
By immibis 3 hours ago
Are you allowed to do that in US? I see the company is located in the USA, can companies disable logging just like that?
(Asking because I really don't know)
By mk89 8 hours ago
I don't know either, but I would guess there are no laws that says internet service operators must log anything.
But, banks and financial services now must obey "know your customer" laws so it's not beyond imagination that similar laws could be applied to websites and ISPs operating in a particular country.
By SoftTalker 42 minutes ago
In most countries the law doesn't say you have to log everything about your users, but it does say that if you log it and the police ask for it then you have to give the data to them.
By immibis 8 hours ago
I think you mean if a court asks for it. And they have to ask for something you actually have
By singpolyma3 4 hours ago
That's why companies that actually care about privacy (I think there are only two - Mullvad and Signal?) make a point of not ever capturing the data to begin with, and deleting what they do capture as soon as possible.
By immibis 3 hours ago
> That's already a huge breach in comparison to mullvad privacy page.
And the "3 data points, that's it" of the blog post
By afro88 9 hours ago
Those data points refer to what is stored in the database and is tied to your 32 character credential.
Web server logs were not tied to user credentials in any way.
By ybceo 9 hours ago
IPs are PII. They can be tied to an identity.
By kevin_thibedeau 3 hours ago
Even user agents are often specific enough to be considered PII.
By organsnyder 2 hours ago
I mean technically yes but I find THAT kind of logging utterly benign.
By IlikeKitties 9 hours ago
They're good enough for fingerprinting and matching against other logs.
Also:
> // What we DON'T collect:
> - IP addresses (not logged, not stored, not tracked)
> - Usage patterns (no analytics, no telemetry, nothing)
> - Device fingerprints (your browser, your business)
so, I've read one blog from this company, and already they're lying or incompetent
By procaryote 9 hours ago
i hate to point it out, but that was written by an llm that probably wasn't prompted precisely enough to not make up comforting thoughts like that
By tensegrist 8 hours ago
Indeed, the whole thing reads like it was written by an LLM.
By pxc 3 hours ago
I know it’s a different context, but with this catchy title, I can’t resist pointing out that anonymity also doesn’t mean anything.
You can have cryptocurrencies in your wallet, (on most chains) you are anonymous but have no privacy, your transaction history can be accessed by anyone.
It’s all fine and dandy, you can enjoy your anonymity, about as long as you make your first transaction.
You might be anonymous, but basically you hand over your full transaction history and balance anytime you pay for a coffee or tshirt.
By serial_dev 2 hours ago
The term pseudonymous should be more popular. A crypto id is a pseudonym, right? In the sense that it is a consistent identity you have, just, not one that is initially tied to the identity you were born with.
Social media handles are usually pseudonymous at most.
I wonder where the figure of anonymity is. With writing style analysis, correlating pseudonyms is probably pretty easy these days. Maybe we’ll all start writing our ideas into LLMs and have them do the talking…
By bee_rider an hour ago
you typically don't have one wallet and you (should at least attempt to) never reuse them either.
By kachapopopow 2 hours ago
Do you mean a wallet per transaction?
And if you simply have multiple wallets and try and maintain the appearance of being disconnected, can you move funds between them without establishing a connection that unmasks you?
By wood_spirit 2 hours ago
well the idea is to obscure it to someone looking from the outside, give enough information it can still be traced - but that's usually only possible by infosec agencies which is typically what they have access to already with normal banks.
to clarify: it can be hard to prove that two crypto addresses are the same people
By kachapopopow an hour ago
There's a whole industry of commercially available products that analyze blockchains transactions for the purpose of tracing them. Anyone can simply buy these services. It is functionally accurate enough to find and prosecute criminals.
By kube-system an hour ago
> It is functionally accurate enough to find and prosecute criminals.
Is that a high bar? I mean, you could have said that about forensic fiber analysis—and then it was revealed that the entire history of the field was just expert witnesses lying their asses off for whatever conclusion law enforcement wanted. It turns out that to prosecute criminals, being complex enough that expert witnesses can provide a smoke screen to rationalize law enforcement targeting that is actually based on prejudice and not concrete facts can be sufficient.
By dragonwriter 44 minutes ago
Let’s say you need three transactions a week, that’s 150 a year. How do you get the right amount of funds into these wallets? How will you get your money out? How will they not be able to track you anyway? As far as I know, you just make the identifiable wallets one hop away.
Again, I’m assuming traditional “old school” non-privacy cryptocurrencies.
By serial_dev 2 hours ago
There are tumbling services, where you for a fee can mix upp your transaction with lots of other users transactions to make it less obvious you where the one that transfered the credit to your burner wallet.
Kepp in mind, tumblers have also been found to keep logs that ended upp in law enforcement.
By gunalx an hour ago
Well by design you receive crypto currency in different wallets to begin with and what funds to use, well that's simple - whatever wallet has enough cryptocurrency to cover the transaction.
By kachapopopow an hour ago
Speaking of mullvad. I recently learned about mullvad browser, which is basically tor browser minus connecting via the your network. This is interesting because the tor project has put the most effort into fingerprinting resistance. If you care about privacy and you have a customized browser, you're likely uniquely finger printable [1]. If you don't want to connect via tor, there's no excuse not to use the mullvad browser. (Doesn't require you to use mullvad VPN; comes with the mullvad plugin, disabled by default, to optionally use mullvad encrypted DNS. Last point, I wrote to the tor project and asked "is it possible to use tor browser minus tor network", and they responded "that's the mullvad browser", so this isn't just my recommendation)
Unlinking one's identity from one's activity is only getting harder as surveillance gets more and more pervasive. Effective OPSEC essentially turns one's life into a living hell and it's only getting hotter with time.
By matheusmoreira an hour ago
Thank you, op, for bringing sanity to this whole thing.
Relatedly, this is why I think every "new" social media service that isn't Mastodon is barking up the most wrong tree with "take everything with you," you're essentially helping to build an even harder to erase social history.
Mastodon's individual server model, like email's, is better PRECISELY because each node is a point of "failure." That makes erasure easier. Which is good.
By jrm4 4 hours ago
That's not true. Mastodon replicates all your posts to a bunch of other servers you don't control by design, which makes them harder to erase.
It's no worse than normal internet publishing, but it doesn't magically solve the erasure question.
By immibis 3 hours ago
Any business that isn’t willing to be as anonymous as Mullvad, I assume has a compromised business model that I don’t really like. Assuming there aren’t obvious reasons for needing the data, like tax filing, or various regulatory requirements.
I don’t understand why any company would want the liability of holding on to any personal data if it wasn’t vital to the operations of the business, considering all the data breaches we’ve seen over the past decade or so. It also means they can avoid all the lawyers writing complicated and confusing privacy policies, or cookie approval pop-ups.
By al_borland 11 hours ago
What I'd really like to see is more honesty: "we store X because feature Y needs it, here's the risk we're accepting," instead of pretending every service needs emails, analytics, and cookies by default
By eleveriven 6 hours ago
> I don’t understand why any company would want the liability of holding on to any personal data if it wasn’t vital to the operations of the business, considering all the data breaches we’ve seen over the past decade or so.
They're OK with the liability exactly because of this very sentence. As you said, there's so many data breaches... so where are the company-ending fines and managers/execs going to prison?
By martin-t 11 hours ago
Here in Japan the government cracks down on it hard. There are fines for every n users exposed and in extreme cases a company can be forced to stop trading for a period of days or weeks. Companies are so scared of this happening to them that a significant portion of orientation for new employees is spent on it. I don't have stats on how effective it is, but I do know that the public is less willing to accept it as they tend to elsewhere.
By tjpnz 10 hours ago
Is this true? KADOKAWA had a massive hack last year that leaked a large amount of sensitive user data and as far as I know has faced no legal repercussions. Obviously they took a decent financial and reputational hit, but that was just an effect of the hack itself, not any government intervention.
By Hakkin 10 hours ago
Wow good for them. I wish we took it that seriously in North America.
By PacificSpecific 10 hours ago
GDPR has fines:
Up to EUR 10,000,000 or up to 2% of the total worldwide annual turnover of the preceding financial year, whichever is higher; applies to infringements such as controller and processor obligations, security of processing, record-keeping, and breach notification duties.
Up to EUR 20,000,000 or up to 4% of the total worldwide annual turnover of the preceding financial year, whichever is higher; applies to infringements of basic principles for processing, data subjects’ rights, and unlawful transfers of personal data to third countries or international organisations.
By sixtyj 10 hours ago
Sure, in principle. Have you heard of any company that suffered any significant hardship (say, stock price plummeting, personnel reductions, bankruptcy) because of one of these fines?
By tsimionescu 9 hours ago
Specific to the UK, there's a list of enforcement actions that the Information Commissioners Office (ICO) have taken:
Some went to prison, some were fined £14M and it's a mixture of small fry and big fry.
By jamiecurle 7 hours ago
These fines aren’t something you’re responsible for paying by merely being breached. These are imposed for misconduct in data handling.
It’s not very hard to handle customer data in a legally compliant way, that’s why you don’t see companies deciding against retaining data.
You can do everything right and still have a data breach, and in that case nobody is fining you.
By dangus 9 hours ago
Infra engineer here. The obvious reasons for needing the data is debugging. I collect logs, metrics, traces, and errors from everywhere, including clients. All of these come with identifying information including the associated user. From the perspective of this thread this is a huge amount of data although it's pretty modest compared to the wider industry.
This data is the tool we have to identify and fix bugs. It is considered a failing on our end if a user has to report an issue to us. Mullvad is in an ideal situation to not need this data because their customers are technical, identical, and stateless.
It's not my department but I think we would get laughed out of the room if we told our users that we couldn't do password resets or support SSO let alone the whole forgetting your 'credential' means losing all your data thing.
By Spivak 9 hours ago
> Mullvad is in an ideal situation to not need this data because their customers are technical, identical, and stateless.
A lot of companies could be in similar situations, but choose not to be.
All of retail, for example. Target does significant amounts of data collection to track their customers. This is a choice. They could let users simply buy things, pay for them, and store nothing. This used to be the business model. For online orders, they could purge everything after the return window passed. The order data shouldn’t be needed after that. For brick and mortar, it should be a very straightforward business. However, I’m routinely asked for my zip code or phone number when I check out at stores. Loyalty cards are also a way to incentivize customers to give up this data (https://xkcd.com/2006/).
TVs are another big one. They are all “smart” now, and collect significant amounts of data. I don’t know anyone who would be upset with a simple screen that just let you change inputs and brightness settings, and let people plug stuff into it. Nothing needs to be collected or phone home.
A lot of the logs that are collected in the name of troubleshooting and bug fixing exist because the products are over-complicated or not thoroughly tested before release. The ability to update things later lowers the bar for release and gives a pass for adding all this complexity that users don’t really want. There is a lot of complexity in the smart TV that they might want logs for, but none of it improves the user experience, it’s all in support of the real business model that’s hidden from the user.
By al_borland 3 hours ago
>Any business that isn’t willing to be as anonymous as Mullvad, I assume has a compromised business model that I don’t really like
Well, that's like 99% of the businesses out there. Mind listing of some of the businesses you like aside from obvious mullvad?
By bossyTeacher 4 hours ago
I wish I had a list, as you said, they are in short supply. If there is a site out there that catalogs simple straightforward business that don’t compromise a customers ability to be anonymous, I’d like it very much.
A HN user posted about a site they made for faxing documents the other day. It’s a good example of how I think most things should be setup in many cases. You pay a fee and it sends a fax, that is very simple to understand. There are no accounts and the documents are only stored long enough to fulfill the service.
You can imagine how most “modern” sites would handle faxing. Make an account, link a credit card, provide your address to validate the credit card. Then store all the faxes that were sent, claiming it’s for easy reference. Meanwhile it’s running OCR on them in the background to build a profile with a wealth of personal data. After all, people don’t tend to fax trivial things. In addition to the profits from the user, they are making a killing on selling data to advertisers… but those details are hidden away in legalese of the fine print in a policy no one actually reads.
By al_borland 3 hours ago
@ybceo As long as you use Cloudflare to verify users [fingerprints] and traffic between users and your service is decrypted at Cloudflare side, I am afraid it difficult to take these anonymity claims seriously.
Please do not to rely on fingerprinters or CDNs that does TLS-termination for you.
By o999 2 hours ago
"Please unblock challenges.cloudflare.com to proceed."
talk about anonymity but uses cloudflare. you threw away your tls and allow cloudflare to sit in the middle of the user and your web page. you're a hypocrite.
By made3 2 hours ago
Hypocrisy is a moral failing but also a somewhat pedantic one -- has this person condemned these activities or merely lamented them?
By uoaei 2 hours ago
What scares me is that the more privacy oriented you are, the easier you are to fingerprint. At what point does privacy mean blending in with the crowd and not sticking out?
By theturtletalks 11 hours ago
> At what point does privacy mean blending in with the crowd and not sticking out?
It's basically rule number one. Tor is all about making all users look like the same user. The so called anonymity set. They all look the same, so you can't tell them apart from each other.
> Do not look back; you are never completely alone.
> Go with the flow, blend in.
> Vary your pattern and stay within your cover.
By matheusmoreira an hour ago
I read here that most of the Tor exit nodes are operated by governments and governments are using parallel construction to keep that information out of legal documents.
By theturtletalks 31 minutes ago
You're thinking about browser fingerprinting (client-side), but my post is about service-level anonymity (server-side).
Browser fingerprinting: "Your unique combination of extensions/settings makes you identifiable among other users."
Service anonymity: "There are no other users to compare you against because we don't collect identifying data."
When you sign up with just a random 32-char string, there's nothing to fingerprint. No email to correlate. No IP logs to analyze. No usage patterns to build a profile from.
Fingerprinting matters when services collect behavioral data. We architected our way out of having that data to begin with.
By ybceo 10 hours ago
>When you sign up with just a random 32-char string...
There's STILL a browser fingerprint, IP logs to analyze, usage patterns to build a profile from. You may claim you don't collect it, but users need to take your word for it. This is just pseudonymity, which (as many BTC users found out) only gets you halfway there. Real anonymity is way harder, often impossible.
Don't get me wrong, it's good to see organisations that care about privacy and in fact this blog post encouraged me to consider your services in the future. We have some use cases for that at work.
Though by using cloudflare you're NOT putting your money where your mouth is.
By integralid 10 hours ago
I was going to say making the platform open source might solve this problem, but then users would have to trust that we are actually running the open source version and not some fork with logging and tracking. This would be an interesting problem / paradox to try to crack.
But you are 100% right, I will look into alternatives for Cloudflare, which we are using because it seems like the cloud hosting industry LOVES to DDoS new players.
By ybceo 10 hours ago
With open source software + reproducible system image builds + TPM + secure boot + remote attestation you could technically achieve some level of certainty that the server is running the software that you expect, but that's not enough.
The operator can passively log the network traffic which allows for de-anonymization and you would need to design your application-layer such that the operator couldn't selectively route your traffic to a non-compliant server.
By dns_snek 5 hours ago
There are self-hostable solutions for DDoS protection, try Anubis for example.
By o999 2 hours ago
I wonder if it would be possible to allow people to ssh into the edge servers with enough access to verify no access logs are stored but not enough to cause any problems. Admit i have not thought it through but would be cool having people verify the live environment while running.
By mazone 6 hours ago
You can't really verify anything in this way. SSH is just a protocol, you're trusting the SSH server to give you a shell inside the real production environment instead of giving you a shell inside some elaborate simulation of a production environment. It's about as trustworthy as a policy page saying "we don't keep logs".
By dns_snek 6 hours ago
Blending in with the crowd doesn't work. If you use Chrome on Windows you're part of a very large group and "don't stick out". But it's also very easy to fingerprint so you're also part of the "theturtletalks" group with the size of one.
There's a point where "privacy" flips into distinctiveness
By eleveriven 6 hours ago
Reminds me of this guy who used Tor to send a fake bomb threat to his school but he was the only person on the whole campus connecting to Tor.
By anal_reactor 9 hours ago
"...the only person on the whole campus connecting to Tor."
Talk about doubly stupid, first sending the threat, second using Tor on campus. I often wonder what goes (or doesn't go) through the mind of such people.
By hilbert42 2 hours ago
There were 4 people, but he confessed when questioned.
I guess the lesson there is that if you don't want to be convicted of a crime, don't confess to a crime? They won't give you a lighter sentence for confessing.
By immibis 7 hours ago
> I guess the lesson there is that if you don't want to be convicted of a crime, don't confess to a crime? They won't give you a lighter sentence for confessing.
Ever hear of moral integrity?
Unless the penalty is unjust (say, execution for a minor crime), a just man will confess and accept his punishment as right as just. He himself will want justice to be done and will want to pay for his crime.
A remorseful murderer knows he deserves death. He might ask for mercy, but failing that, he will accept the penalty with dignity and grace.
By lo_zamoyski 4 hours ago
This is the kind of value a population can collectively hold until they look around and see the culture doesn't value it anymore. Moral integrity stopped being a cultural value that mattered here before I was even born, if it ever really did matter for anyone except the "common" man.
By DangitBobby 4 hours ago
Whatever you smoke, share it.
By anal_reactor 4 hours ago
This seems like the wrong end of the system to fix the problem. Someone saying "we don't log your IP address" isn't something you can easily verify, so the promise doesn't mean much because if they suck they're just going to lie about it.
What you need instead is to make it easy and common for people to use browsers that resist fingerprinting, VPNs/Tor, custom email addresses per-account, etc. Because then instead of claiming to not log your information, they simply do not have it.
The biggest thing we need is a better way to pay someone over the internet without them knowing who you are.
By AnthonyMouse 8 hours ago
"The biggest thing we need is a better way to pay someone over the internet without them knowing who you are."
I've been saying that for years. Buy a prepaid card for cash at say the supermarket with xyz value on it and a unique email address included (an anonymous debit card with email). That is every new card you buy would have a different disposable email address that would expire when the card is empty.
Such a scheme could also be used to donate micro payments to opensource projects, ad-free Youtubers, etc. and do so anonymously. Moreover, it would make payments easier thus overcome the "requires effort to do" resistance when it comes to donating. Making donating super easy would I reckon greatly increase the income for all those on the receiving end.
However I can't see it happening, governments would outlaw it claiming it'd be used to transfer money for nefarious purposes, money laundering etc.
The major reason I don't donate to good/charitable causes is that I cannot do so anonymously.
Shame really.
By hilbert42 2 hours ago
> The biggest thing we need is a better way to pay someone over the internet without them knowing who you are.
Cryptocurrency?
By HelloUsername 8 hours ago
That's what I thought. I think an open source crypto payment gateway that "just works" could probably make it more prevalent. (Is there any?)
By wseqyrku 6 hours ago
Isn't that pretty much table stakes for being a cryptocurrency? Run a node (they're all open source), publish your address, and you're all set up to receive payments in that currency.
Every one I've tried "just works". The trick is getting people to join you.
By __MatrixMan__ 3 hours ago
If it was made easy and common for ordinary people to use.
By AnthonyMouse 8 hours ago
True. For 99% of the people mining it yourself of demanding getting paid in crypto is not viable. That means you go to an exchange, and all you do is then logged at this government regulated exchange.
I suppose you could engage in some cloak and dagger exchange at night, but again, the 99% won't do that. The ones who do, are most likely capable of setting up their own services, anonymously, so they don't need to have a commercial, for-profit as their middleman.
By abc123abc123 7 hours ago
There is no such thing as anonymity. With the number of bits required to ID a person and the fact that you are leaking such bits all the time you can simply forget about anonymity.
Many people online seem to think that they are anonymous and so were emboldened to do stuff that they might not have done if they had realized this. They continued to feel extremely good at this right up until the knock on the door.
By jacquesm 10 hours ago
> realized
Most UK and Australian writers would spell it "realised" so there's a bit right there.
Even if you include no personal information, there is information in writing style.
Stylometry is the study of this. Yes, there's also adversarial stylometry - distorting your writing style to fool an analysis. It's probably effective now, but that could change overnight and every archived post that every OSINT organisation has collected is deanomynised.
Yeah you can say "I change my style". But there's some bits that don't have false positives. If I EVER say "praise the omminsiah" I'm definetly au fait in 40k memes. If I ever say au fait I'm a person who has at least a rough idea of what it means. There's no false positive here, so if you can just find about 29 undeniable uncorrelated bits that are known to not have false positives ... a more advanced analysis could exploit this in a more continuous way (e.g. the likelihood of it being a false positive). I should shut up now.
By wisty 9 hours ago
"Stylometry is the study of this."
It's as old as history. In the days super-abbreviated telegrams (words were costly) you could even get two for the price of one--the author and the Morse code operator who actually sent the telegram. He could be recognized by his Morse fist, other Morse operators on the network would recognize him by the style of his sending even though they were only listening to dots and dashes,
By hilbert42 an hour ago
Well there's anonymity from authorities, and there's anonymity from garden variety lunatics.
There exists a grey area between not getting away with nefarious activities, and not having your life ruined by a lynch mob because you didn't approve their preferred CoC on a hobby project or some other perceived injustice.
By schmuckonwheels 9 hours ago
Is there? The government apparatus that's meant to investigate these crimes is the same one elected by the mob.
If you find yourself a member of any group a campaign can mobilize the mob against, that entire investigatory apparatus can be turned against you.
Without privacy, we are doomed to endless purity purges.
By pona-a 6 hours ago
> Stripe customer ID and payment method ID
Wouldnt this information allow for the authorities to just go to Stripe and ask the relevant information there? Sure, you don't store exact personally identifying info, but you store a breadcrumb that can lead whoever has the power to request that information to trace back to the end user
By ____mr____ 3 hours ago
> And for those who need traditional payments? We support Stripe. Because pragmatism matters. But we don't pretend that credit card payments are anonymous. We're honest about the trade-offs.
I think this paragraph is clear enough about that?
By g947o 3 hours ago
Maybe ironically - just going on the title because I can't read the rest as a result - it's behind a cloudflare gate.
By duskdozer 10 hours ago
>Here's how the average "privacy-focused" service actually works:
> ...
>5. Confirm identity for "fraud prevention" (now we have your ID)
I can't tell whether OP is being hyperbolic but it's certainly not representative of the average "privacy-focused" service I've came across. The typical service only asks for an email and maybe billing information (can be prepaid card or crypto). The only exception is protonmail, which might require SMS verification[1], but given the problem of email spam I'm sympathetic, and it's bypassble by paying. It's certainly not the "average" service, and no service asked to "Confirm identity".
Sadly, everybody using a browser from a massive ad company and an idp (not to mention a company with an interest in crawling the entire web for AI at the same time site owners are dealing with better scrapers) means the entire web will be login-only over time.
By CalRobert 10 hours ago
The irony is that the same companies pushing us toward login-only everything are also the ones best positioned to survive it
By eleveriven 6 hours ago
We're quite a few years into this period of technology. At a certain point, these "AI is going to kill the web!" predictions either need to come true or just be dismissed as false.
By squigz 6 hours ago
I don't see how those points bolster your conclusion. These pressures predate AI by over a decade and haven't forced a significant tidal change in the way the internet is used.
By bigyabai 9 hours ago
According to article, the whole authorization system is flawed. But we haven’t invent a new one and the one we’ve got never meant to be private, it is just a way to separate users from each other. We need something unique, a "primary key" for our DB, and that’s email or phone or username that has to be stored somewhere. A server, someone else’s computer, call it what you want. It has good privacy between users, but the admin can see everything, because otherwise management of the service would be impossible.
There is no anonymity, there is always someone you have to trust in the chain of WAN networking (DNS,ISP,VPN). If you want anonymity and privacy, you selfhost (examining the code is also a prerequisite). There is no other way to do it.
By mnls 9 hours ago
> but the admin can see everything, because otherwise management of the service would be impossible.
It depends on what service you’re offering. There are many cases where you can have end-to-end encryption so that you can know who your users are, host their data but cannot do anything with it.
By wrxd 9 hours ago
> If you use our servers for illegal activity, law enforcement can still investigate. They just can't start with "who owns this account" because we can't answer that question.
You're going to have a tussle with law enforcement, and you're going to lose. Your service will last < 2 years because you will not be able to afford the lawyers you need to defend against even one muscle move by the government.
Good luck!
By titzer 3 hours ago
Why? That's kind of the whole point of this: they can cooperate entirely and give them everything they have. You think they'll get into legal trouble because they aren't gathering data?
By kyrofa 3 hours ago
You ever heard of the phrase “show me the man and I’ll show you the crime”? These guys are gonna discover what that means really quickly.
By ls612 an hour ago
There are a number of companies/products that operate under this principle (mullvad and signal come to mind). Are you saying all of those are futile and misleading? Or are you saying that you expect they all have significant money and legal teams to defend against a crooked cop's thirst for vengeance for not responding the way they wanted during an investigation?
By kyrofa an hour ago
I’m saying it’s only a matter of time before they get Pavel Durov’ed.
By ls612 21 minutes ago
No, this is a brilliantly original way to prevent legal action that has never been previously conceived of in the history of the internet.
By svnt 3 hours ago
Good old "we can't decrypt your laptop but we can repeatedly smash your head into the table until you start cooperating"
By stodor89 3 hours ago
The onion link for the site appears to be broken.
By dtj1123 an hour ago
The problem with this in our current society is that staying anonymous becomes your whole identity. I have a friend who for the longest time didn’t use Venmo, Uber, etc. because of privacy reasons, but the lifestyle was just not sustainable. Ultimately convenience killed privacy.
By basket_horse 4 hours ago
I guess those are just examples and there are much more significant things, because Venmo and Uber seem far from indispensable.
>Ultimately convenience killed privacy.
By design, unfortunately.
By duskdozer 2 hours ago
We have to choose where anonymity is worth the tradeoffs, but it's still quite possible to live without Venmo, Uber, etc.
By stvltvs 3 hours ago
I’m fine with no account recovery but they would definitely need a major warning about that at sign up time so users can take extra care to save their info.
By bilsbie 3 hours ago
Even if you don't want to live entirely on the anonymous web, it's useful to see how many products claim privacy while being structurally incapable of delivering it
By eleveriven 6 hours ago
So my understanding is, what Mullvad is to VPNs, and what Tarsnap is to S3 (kinda), Servury is to entire VMs. It's a prepaid model, you get an account identifier, and that's basically it.
This is very cool. I have wondered for a very long time why such a site does not exist. What pops to mind is that you could get better unit economics reselling really small VMs to the privacy obsessed. I know some netizens who would pay a dollar a month for, say, a tiny NetBSD VM and 64 MB of RAM to serve their tiny static demoscene website of yore. There are some real wizards of there.
Not sure if that's in your roadmap but definitely something to consider in this space.
By hiAndrewQuinn 8 hours ago
the only way is “anonymity by design”. history showed us that “don’t be evil” does not work if the entity can change its mind unilaterally.
be confident that the service is not keeping logs? JÁ!
By qwertyuiop12 9 hours ago
One difference with Mullvad is VPN traffic is ephemeral. Here, a VPS has a persistent disk attached, that could contain identifying information (if it is necessary to do useful work).
By DerSaidin 9 hours ago
And, also not very funny, those corps never tell in advance which data they "require". They grab my mail on "the first page" of the registration form. Then, on "the second page", they ask for my phone and my address. Should I decide to agree to this, they will finally tell me on "the third page", that they only support credit card, no PayPal, no direct payment via Bank ...
By nilslindemann 9 hours ago
It's a bit ironic the page is protected by Cloudflare. So, all of our traffic is going through some other company to log and track before it gets to you, eh?
By bitbasher 6 hours ago
I don’t know what’s wrong with these comments. This is the kind of smart design we want to see and everyone is doing nitpicking.
Can we have just better things or are we going to reject everything that’s not perfect and by doing so concede the whole point and just give up?
Well done OP for the right approach and your business. This has always been my design (when possible) to approach data security. When you don’t have data you don’t have to worry about its security.
Best of luck, ignore the naysayers.
By BloondAndDoom 2 hours ago
I like the idea of this but I'm a certain this article is AI generated.
By joemazerino 2 hours ago
Glad I had to do a Cloudflare turnstile captcha to see this page
By pogue 9 hours ago
What I was wondering after reading the article: How does Mulvad actually decouple banking data from the account ID? Or is it as simple as verify transaction once but never log?
By Prunkton 9 hours ago
You can pay with an envelope of cash, so they don't need your banking data to begin with.
By pxc 3 hours ago
Perhaps so, but that's damn difficult or very risky for all but a very select few.
By hilbert42 an hour ago
I think they remove the invoice after a month. You can also, send them cash in an envelope
By stanislavb 9 hours ago
So there's no subscription thing going on, you just manually pay invoices?
I once spent an entire year issuing chargebacks on AWS charges coming from god knows what AWS account. Most likely some client project I forgot about and didn't have the login to anymore, who knows. Makes me think about that - for a service where you can't login if you lose the credentials, how do you cancel a subscription? In my case I had to eventually just cancel the credit card and get a new number.
By komali2 9 hours ago
No subscription. It’s pay as you go. You top up $X and you get X months. That’s it. If your month expires, it expires. Just top off and you’re good to go.
By deafpolygon 8 hours ago
I would much rather have privacy with e2e encryption than have anonymity. The way that works is a direct connection between two parties without use of a central server, like webRTC.
By austin-cheney 10 hours ago
Nice ad you bought! Oh wait
By heliumtera 32 minutes ago
Yet another promotional post of Mullvad team. Nice story, but I don't buy it.
Email is fine when it is an option. Mullvad have even option to pay with a credit card & PayPal. That's more sensitive data than Email.
By vitonsky 12 minutes ago
This was authored using an LLM, wasn't it. The style is unmistakable. Stop wasting our time with this slop.
By sloppppp 10 hours ago
Here's the thing. It's not just x, it's hyperbole y. Hyperbole. Y.
By politelemon 10 hours ago
Yeeeep. I'm very disappointed because the subject matter is important.
By abnercoimbre 9 hours ago
thank you. absurd no other comments noticed
By 152334H 4 hours ago
tl;dr
“Privacy” = the data is private i.e. only on your devices. Or if the raw data is public but encrypted and the key is private, I think that qualifies.
“Anonymity” = the data is public but not linked to its owner’s identity.
If you’re sharing your data with a website (e.g. storing it unencrypted), but they promise not to leak it, the data is only “private” between you and them…which doesn’t mean much, because they may not (and sometimes cannot) keep that promise. But if the website doesn’t attribute the data except to a randomly-generated identifier (or e.g. RSA public key), the data is anonymous. That’s the article.
Although a server does provide real privacy if it stores user data encrypted and doesn’t store the key, and you can verify this if you have the client’s unobfuscated source.
Also note that anonymity is less secure than privacy because the information provides clues to the owner. e.g. if it’s a detailed report on a niche topic with a specific bias and one person is known to be super interested in that topic with that bias, or if it contains parts of the owner’s PII. But it’s much better than nothing.
By armchairhacker 10 hours ago
Europe is currently being tormented by this exact contradiction: on one hand, it has the GDPR—the world's strictest privacy law, supposedly protecting personal data; on the other, a flood of new regulations under the banners of "child safety," "counter-terrorism," and "anti-money laundering" are systematically strangling real anonymity.
By guuger 9 hours ago
> "privacy" has become the most abused word in tech
Ideally, an argument about privacy would start with its notion of privacy.
Smells like it was written by an LLM so I stopped reading.
By photon_garden 2 hours ago
> Privacy is Marketing. Anonymity is Architecture.
But in order to read the article you need to enable JS. What a joke.
By vladyslavfox 8 hours ago
Exactly. I run sans JS by default. At least this warns me to either avoid the site or to take the risk (browser button--red for JS block, green unblock).
By hilbert42 an hour ago
it's 2025. chances are you had peeps in class/uni who are now in the Stasi networks of informants and/or in some more or less obscure agency or more or less related private company so your anonymity only works from birth and even then only if you are lucky or your family "gets it" and has resources and brains beyond.
some people believe supply chain attacks are rare and hard to pull off and expensive and only valuable in extreme cases but if you ever worked at a local delivery service or pharmacy or something other where people and the necessary machines are being aggregated in some basements or even backrooms for all use cases from all times for wholesale forgery and fiddling with people, you know that the situation is ugly, not bad. throw in the many coders, network engineers and hardware specialists with ties to above entities and bombaclat, Jahmunkey, we fucked!
"privacy" or not sharing your space with a creepy room mate, and reading the internet without adds ar3 parallel
running three flavors of the same off brand browser, each optimised for different segments of online content is what seems to be the minimum.
they are so desperate to sell me something,
(a truck) that it's wild, as it is one of the few monitisable things I consistently look for (parts, service procedures), the ,
pause, when I do certain searches gives me time to predict that yes, the machinery is grinding hard, and will ,shortly, triumphantly, produce, a ,truck.
By metalman 9 hours ago
Good luck guys, you will surely attract the attention of Feds very quickly.
By derelicta 4 hours ago
hyperbolic.
anonymity in your product could be a sensible design choice that your customers could value. fine. go nuts.
but in general? hard disagree. anonymity is fragile and can't be guaranteed, privacy is a legal obligation which can actually be enforced if push comes to shove.
also that page reads like slop : it's not X, it's Y. blah blah blah. this is a marketing piece trying to go viral.
By vpribish an hour ago
Is this a joke?
By fithisux 8 hours ago
How tf are you supposed to provide working authentication without storing the email somewhere? Should i just disable password resets and tell the users to fuck off if they forget theirs? Cant even use passkeys as they make users identifiable too.
By zwnow 9 hours ago
How do passkeys make users identifiable beyond being a random token? I recall FIDO shared hardware key serial numbers with websites, but at least on Firefox, it prompts you to deny it.
By pona-a 6 hours ago
In that case one could argue emails dont make users identifiable either, if the addresses dont contain any meaningful names
By zwnow 4 hours ago
Users need to have hard memorization or record of a paraphrase, same as a crypto wallet. Or just use web3 for auth, that can work well if users have decent opsec.
By K0balt 9 hours ago
That’s a trade off if you don’t want the service to know who you are
By wrxd 9 hours ago
The battle on privacy/anonymity/whatever is lost. Get over it. What we need is a new social paradigm where everyone is happy despite the lack of privacy.
By anal_reactor 9 hours ago
Please provide your full legal name (include any other names you go by), occupation and place of employment, phone number[s], email address[es], usernames on other social media accounts, eye color, height, weight, list of any health conditions. That's just to start, then we can start going over more info.
By duskdozer 8 hours ago
Suk Mai Dik, living in Yo Momma's Trailer, employed as Yo Momma's Pimp.
Sorry but I just couldn't resist hehehe.
By anal_reactor 7 hours ago
> The battle on X is lost. Get over it. What we need is a new social paradigm where everyone is happy despite the lack of X.
Where have I heard this before?
By titzer 3 hours ago
Betamax is obviously the better standard.
By anal_reactor 2 hours ago
What's your definition of privacy?
By specialist 3 hours ago
Everybody says I should be ok having no privacy and yet frown upon me posting photos of the poop I take on Instagram.
By pooper 9 hours ago
Yes, exactly, that's what I'm talking about. Imagine a world where it's completely acceptable to post poop on Instagram, and people who don't want to look at it simply tick "don't display poop". The thing is, the "if you have nothing to hide then you have nothing to fear" argument IS true, under assumption that others would be understanding and compassionate to your intentions. Which is exactly the opposite of the legal/societal system we currently have.
What I'm trying to say is that the core issue is "people aren't trustworthy" and "we need privacy" is a bandaid on the former problem. If we manage to create a society where people are trustworthy, the need of privacy will disappear.
By anal_reactor 7 hours ago
The core problem is that people have (and will always have) divergent goals, and a large subset of people see no problem in using coercive and even violent means to ensure that their own “team” wins. This is human nature and cannot be remedied.
By iamnothere 5 hours ago
The thing is, same logic applies to other entities that form groups, like cells in an organism, or ants in a colony.
By anal_reactor 4 hours ago
Then the government is overturned by a totalitarian clique that declares displaying poop punishable by death, and this includes any past display of poop. Suddenly you find yourself here
unsafe { anal_reactor }
By WesolyKubeczek 5 hours ago
The very premise is false, privacy does mean something, and anonymity doesn't really exists. This is an advertisement.
By p4bl0 9 hours ago
I agree, privacy still means a lot. It's a term that's been co-opted by the large tech companies which operate with impunity. It will has meaning that cannot change.
The post also misunderstands privacy
> Privacy is when they promise to protect your data.
Privacy is about you controlling your data. Promises are simply social contracts.
By politelemon 9 hours ago
Apparently neither does spelling. "anymore" -> "any more"
By mnw21cam 9 hours ago
I didn't think anyone [not any one] could be more pedantic than I am. Damn it.
By hilbert42 an hour ago
D@mn, I believed you were thinking that no one (not noone) could be more pedantic than you.
By snakepit 2 hours ago
By chneu a minute ago
By heresie-dabord an hour ago
By lisbbb an hour ago
By hearsathought 41 minutes ago
By pcthrowaway 30 minutes ago
By mk89 9 hours ago
By ybceo 9 hours ago
By sdoering 2 hours ago
By drink_machine 9 hours ago
By everdrive an hour ago
By ybceo 9 hours ago
By pear01 4 hours ago
By procaryote 8 hours ago
By ffsm8 4 hours ago
By organsnyder 2 hours ago
By drink_machine 9 hours ago
By ybceo 8 hours ago
By ljlolel 8 hours ago
By megous 8 hours ago
By reactordev 42 minutes ago
By bossyTeacher 4 hours ago
By V__ 4 hours ago
By encom 4 hours ago
By hollerith 4 hours ago
By immibis 3 hours ago
By mk89 8 hours ago
By SoftTalker 42 minutes ago
By immibis 8 hours ago
By singpolyma3 4 hours ago
By immibis 3 hours ago
By afro88 9 hours ago
By ybceo 9 hours ago
By kevin_thibedeau 3 hours ago
By organsnyder 2 hours ago
By IlikeKitties 9 hours ago
By procaryote 9 hours ago
By tensegrist 8 hours ago
By pxc 3 hours ago
By serial_dev 2 hours ago
By bee_rider an hour ago
By kachapopopow 2 hours ago
By wood_spirit 2 hours ago
By kachapopopow an hour ago
By kube-system an hour ago
By dragonwriter 44 minutes ago
By serial_dev 2 hours ago
By gunalx an hour ago
By kachapopopow an hour ago
By bfkwlfkjf 8 hours ago
By basedrum 2 hours ago
By eleveriven 6 hours ago
By matheusmoreira an hour ago
By jrm4 4 hours ago
By immibis 3 hours ago
By al_borland 11 hours ago
By eleveriven 6 hours ago
By martin-t 11 hours ago
By tjpnz 10 hours ago
By Hakkin 10 hours ago
By PacificSpecific 10 hours ago
By sixtyj 10 hours ago
By tsimionescu 9 hours ago
By jamiecurle 7 hours ago
By dangus 9 hours ago
By Spivak 9 hours ago
By al_borland 3 hours ago
By bossyTeacher 4 hours ago
By al_borland 3 hours ago
By o999 2 hours ago
By made3 2 hours ago
By uoaei 2 hours ago
By theturtletalks 11 hours ago
By matheusmoreira an hour ago
By theturtletalks 31 minutes ago
By ybceo 10 hours ago
By integralid 10 hours ago
By ybceo 10 hours ago
By dns_snek 5 hours ago
By o999 2 hours ago
By mazone 6 hours ago
By dns_snek 6 hours ago
By bauruine 9 hours ago
By bfkwlfkjf 8 hours ago
By eleveriven 6 hours ago
By anal_reactor 9 hours ago
By hilbert42 2 hours ago
By immibis 7 hours ago
By lo_zamoyski 4 hours ago
By DangitBobby 4 hours ago
By anal_reactor 4 hours ago
By AnthonyMouse 8 hours ago
By hilbert42 2 hours ago
By HelloUsername 8 hours ago
By wseqyrku 6 hours ago
By __MatrixMan__ 3 hours ago
By AnthonyMouse 8 hours ago
By abc123abc123 7 hours ago
By jacquesm 10 hours ago
By wisty 9 hours ago
By hilbert42 an hour ago
By schmuckonwheels 9 hours ago
By pona-a 6 hours ago
By ____mr____ 3 hours ago
By g947o 3 hours ago
By duskdozer 10 hours ago
By gruez 3 hours ago
By zie 2 hours ago
By CalRobert 10 hours ago
By eleveriven 6 hours ago
By squigz 6 hours ago
By bigyabai 9 hours ago
By mnls 9 hours ago
By wrxd 9 hours ago
By titzer 3 hours ago
By kyrofa 3 hours ago
By ls612 an hour ago
By kyrofa an hour ago
By ls612 21 minutes ago
By svnt 3 hours ago
By stodor89 3 hours ago
By dtj1123 an hour ago
By basket_horse 4 hours ago
By duskdozer 2 hours ago
By stvltvs 3 hours ago
By bilsbie 3 hours ago
By eleveriven 6 hours ago
By hiAndrewQuinn 8 hours ago
By qwertyuiop12 9 hours ago
By DerSaidin 9 hours ago
By nilslindemann 9 hours ago
By bitbasher 6 hours ago
By BloondAndDoom 2 hours ago
By joemazerino 2 hours ago
By pogue 9 hours ago
By Prunkton 9 hours ago
By pxc 3 hours ago
By hilbert42 an hour ago
By stanislavb 9 hours ago
By komali2 9 hours ago
By deafpolygon 8 hours ago
By austin-cheney 10 hours ago
By heliumtera 32 minutes ago
By vitonsky 12 minutes ago
By sloppppp 10 hours ago
By politelemon 10 hours ago
By abnercoimbre 9 hours ago
By 152334H 4 hours ago
By armchairhacker 10 hours ago
By guuger 9 hours ago
By specialist 3 hours ago
By undeniablemess 2 hours ago
By photon_garden 2 hours ago
By vladyslavfox 8 hours ago
By hilbert42 an hour ago
By bobbyschmidd 7 hours ago
By metalman 9 hours ago
By derelicta 4 hours ago
By vpribish an hour ago
By fithisux 8 hours ago
By zwnow 9 hours ago
By pona-a 6 hours ago
By zwnow 4 hours ago
By K0balt 9 hours ago
By wrxd 9 hours ago
By anal_reactor 9 hours ago
By duskdozer 8 hours ago
By anal_reactor 7 hours ago
By titzer 3 hours ago
By anal_reactor 2 hours ago
By specialist 3 hours ago
By pooper 9 hours ago
By anal_reactor 7 hours ago
By iamnothere 5 hours ago
By anal_reactor 4 hours ago
By WesolyKubeczek 5 hours ago
By p4bl0 9 hours ago
By politelemon 9 hours ago
By mnw21cam 9 hours ago
By hilbert42 an hour ago
By jaclaz 7 minutes ago
By kleiba 9 hours ago
By IanCal 9 hours ago