How to get maximum privacy from ISP without a vpn or proxy ?
from dating1999@lemmy.ca to privacy@lemmy.ml on 23 Jul 11:41
https://lemmy.ca/post/48462284

My question is simple! How to get maximum (Possible) privacy from ISP in case someone can’t or don’t want to use a vpn ?

Fir example, In some case tor browser is enough for many but they still need from a privacy from isp on other activities on mobile.

#privacy

threaded - newest

shortwavesurfer@lemmy.zip on 23 Jul 11:45 next collapse

Switch DNS to a provider that supports DoH or DoT is about the only thing you can really do.

Without using a VPN or proxy, your ISP is going to be able to do DPI and know what connections you make. There really is no way around that.

sunzu2@thebrainbin.org on 23 Jul 18:27 collapse

Can't they still do DPI on VPN network to know what yoke re doing, ie watching netflix, pornhub and playing cod

cmgvd3lw@discuss.tchncs.de on 23 Jul 18:42 next collapse

What to you mean? If the packets are encrypted they can’t do DPI and get where the actual source is.

KeepFlying@lemmy.world on 23 Jul 19:17 collapse

I think they might be able to guess that you’re watching a video based on the traffic patterns, but unlikely they can tell what site it’s coming from.

truthfultemporarily@feddit.org on 23 Jul 11:47 next collapse

The only thing you gain from VPN is that the target server does not know your IP.

HTTPS is safe anyway and as such also the content of what you do.

The only other way you may leak information are DNS queries.

dating1999@lemmy.ca on 23 Jul 11:50 next collapse

What to do about dns queries? In the privacyguides video i saw when we use a encrypted dns isp only see the ip address. So queries are hidden right ?

truthfultemporarily@feddit.org on 23 Jul 12:14 collapse

The queries are known to the DNS provider. Only thing is to use one you trust.

tjoa@feddit.org on 23 Jul 15:05 collapse

Couldn’t you run a DNS resolver that pings the authoritative servers directly? Yes initial requests will be slower

truthfultemporarily@feddit.org on 23 Jul 15:34 collapse

Who says the authoritative servers aren’t logging requests?

tjoa@feddit.org on 23 Jul 22:38 collapse

True but it seems to me that it’s an advantage to have your IP logged in this more decentralized way. most resolvers also cache the answers so it would be only logged the first time you visit a website.

alyx@reddthat.com on 23 Jul 12:55 next collapse

without encrypted client hello (which isn’t really adopted) the hostname ist submitted in plaintext, unencrypted. so the ISP can totally see which websites you‘re going to, even it you use a secure dns server

truthfultemporarily@feddit.org on 23 Jul 13:15 collapse

That should only happen with SNI, no?

irotsoma@lemmy.blahaj.zone on 28 Jul 21:27 collapse

The only thing you gain from VPN is that the target server does not know your IP.

Not necessarily true. A VPN also prevents the ISP from collecting data on all of your connections. Currently ISPs (in the US at least) collect and sell what sites you visit even if they can’t see the data due to HTTPS. Additionally, some have implemented, but then removed due to backlash but may implement again some day, MitM attacks on HTTPS connections in order to insert ads. Using a trusted DNS server that they don’t also intercept can help avoid this, though. With a VPN the ISP won’t see any of this, only the connection to the VPN server and have no way to insert themselves as long as they don’t intercept the VPN connection itself before it’s established.

xiao@sh.itjust.works on 23 Jul 11:57 next collapse

It does not answer the question but this application has been useful to me in the past.

invizible.net/en/

InviZible Pro combines the strengths of Tor, DNSCrypt, and Purple I2P to provide a comprehensive solution for online privacy, security, and anonymity.

To start using InviZible Pro, all you need is any Android phone. Just run all three modules and enjoy safe and comfortable internet surfing. However, if you want to get full control over the application and your internet connection – no problem! Provided access to a large number of both simple and professional settings. You can flexibly configure InviZible Pro itself, as well as its modules – Tor, DNSCrypt, Purple I2P and Firewall to satisfy the most non-standard requirements.

InviZible Pro is an all-in-one application. After installation, you can remove all of your VPN applications and ad blockers. In most cases, InviZible Pro works better, more stable, faster than free VPNs. It does not contain ads, bloatware code and does not spy upon the users.

Boomkop3@reddthat.com on 23 Jul 12:06 next collapse

  1. private, secure dns, so they don’t know the domains you’re visiting
  2. https everywhere, so they can’t see any of the data you’re sending or receiving

All that’s left is what ip’s you’re connecting to. Which is useless half the time, especially since most websites are behind cloudflare or some other anti-ddos proxy already.

Also, don’t use the web browser that came with your phone. Some manufacturers and isp’s might enjoy adding tracking into those. Some, like Apple, even got caught not encrypting amy of that.

Side note:

  • https everywhere is pretty much the standard in modern web browsers
  • an adblocker can still help a lot in blocking trackers
  • a secure dns you can find in your browser settings
greyfox@lemmy.world on 23 Jul 17:33 collapse

Even with https if you aren’t on TLS 1.3 the SNI (server name indicator) is not encrypted so the hostname you are trying to access would be visible to your ISP.

Forcing your browser to only use TLS1.3 would fix that but who knows how many sites it would break.

Boomkop3@reddthat.com on 23 Jul 19:50 collapse

Oh, good catch! I have to say I don’t usually look at what specific tls version websites use. I’ll be paying attention to this for a bit

autonomoususer@lemmy.world on 23 Jul 13:25 next collapse

Orbot

Zerush@lemmy.ml on 23 Jul 15:26 next collapse

With Portmaster on desktop, InviZible Pro on mobile, using an privacy Search engine (eg.Andisearch, Startpage, Mojeek, Metager, etc.), an ad and trackerblocker and common sense.

lock@lemmy.ml on 25 Jul 06:32 collapse

If you want the most privacy focused ISP, check out Cape. You can view the post I made about this company.

dating1999@lemmy.ca on 27 Jul 03:55 collapse

Am living in india and it seems cape have no service in india.