XPost: alt.privacy, alt.comp.networking.routers   
   From: invalid@invalid.invalid   
      
   Am Sun, 24 Oct 2021 18:33:02 +0000   
   schrieb Robin Goodfellow :   
      
      
   > Regarding VPN or TOR, he is mostly gaming, I think, neither of which   
   > really lends itself to TOR (at least not the Tor Browser Bundle   
   > anyway).   
   > I'm sure there is a way to set up the entire system on TOR/Socks   
   > but I've tried that about 10 or 15 years ago and it was miserable   
   > (privoxy and all that) to do.   
   It works, but tor has high latency and because of that isn't capable   
   for real time communication like gaming.   
      
   > The VPN he's using are the free vpns, which, as you may know,   
   > aren't all that reliable (and which don't have many locales   
   > inside the USA usually).   
   >   
   > If I understand your suggestion correctly, we can set up an entire   
   > computer to run nothing but TOR/SOCKS, which is what the kid can   
   > connect to directly from his desktop (but he also wants to use   
   > his phone cellular, apparently).   
      
      
   Much harder because Google and Apple are bad companies restricting what   
   users can do and restrict proxy usage to web browsers only. As I know   
   Android only supports an HTTP proxy, so you would need an HTTP/SOCKS   
   proxy connector too.   
      
      
   > I'm working on figuring out how adding "VPN" to a router works,   
   That would be a solution. The kid is then directly connected via the   
   VPN and the VPN router creates the VPN tunnel.   
      
   > I think the VPN router "might" replace your "TOR/SOCKS computer" in   
   > the suggested scenario (as I don't have an extra PC to give the kid).   
   Yes, makes it much easier.   
      
   > If I understand VPN routers, we still need to pay for a reliable VPN   
   > service but after that, the school will only see the (faked) MAC   
   > address of the VPN router for _all_ his traffic (whether it's Wi-Fi   
   > or Ethernet from his phone or from his desktop or from his laptop).   
   True. They only see that VPN routers interface to them and the metadata.   
   > And, if I understand it correctly, _all_ that traffic will be   
   > connected to a single IP address (of the VPN) and it will all   
   > be encrypted.   
   Depends on the VPN operator. Some use IPv4-NAT, some give you public   
   IPv4 addresses.   
   IPv6 is normally global, so every device gets its own global IPv6   
   address.   
      
   > The school will know he's using VPN, and they'll know all the   
   > metadata of the size and timing of the packets, but that's it   
   > (am I correct?)   
   True   
   > If that's a good plan (lowest cost, best compromise on privacy),   
   > then all I need to do now is find a tutorial for setting up   
   > dd-wrt as a VPN router. I think I need to flash another "bin" file   
   > (after the initial "chk" file though - but I don't know which one).   
   You nee a router that a) supports dd-wrt and is able to flash foreign   
   firmware. There are many models that support that, but some   
   manufactures create barriers to do so, for my TP Link I needed to set   
   up a TFTP server and use the recovery feature of that device to install   
   a foreign (non TP link) firmware on it.   
   > In theory, does this sound like a low-cost plan that "can" work?   
   > 1. I put VPN on the extra router & set the MAC to look like a PC   
   > 2. I set dd-wrt to always log into a (paid?) public VPN service   
   > 3. The kid connects _everything_ to that VPN router   
   Sound ok   
   > Does _that_ approach give the kid the privacy he is asking for?   
      
   It gives you protection against surveillance from the scholl, but   
   nothing else.   
   Also think about locking the computer when not using and encrypting all   
   hard disks to ensure nobody can gain access to the data/manipulate the   
   computer this way.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)