Internet privacy, security, age restrictions, VPNs and backups

[Samson]

GitHub - ValdikSS/GoodbyeDPI: GoodbyeDPI — Deep Packet Inspection circumvention utility (for Windows)

GoodbyeDPI — Deep Packet Inspection circumvention utility (for Windows) - ValdikSS/GoodbyeDPI

github.com

An interesting option would be for service providers to go over to DNS over HTTPS in friendly domains. Again I do not really understand it, but I think it is a new way of doing domain name resolution that allows a far greater degree of privacy and control and could really help in these situations.

The info megacorps did not like it, so there must be something to it.

Spoiler From 2019: British ISPs fight to make the web less secure :

British broadband providers are fighting a technology that's designed to make internet connections more secure to prop up their own, outdated content filtering systems.

The British ISPs' trade body, the Internet Service Providers Association (ISPA), dubbed Mozilla a "villain" for supporting DNS-over-HTTPS (DoH). The technology replaces the current, insecure DNS system, which leaves consumers open to snooping and man-in-the-middle attacks that could result in computers being infected with malware when a user attempts to visit a legitimate site.

However, British broadband providers are launching a rearguard action against DoH because it knocks out their ability to track users' surfing habits and operate the filters that prevent them visiting blacklisted websites, such as those hosting child abuse images identified by the Internet Watch Foundation (IWF), or copyright infringements.

 

[Manfred Belheim]

At least the Hamster Forum is back up.

 

[IglooDame]

VPNs are great (ideal, even) for hiding one's origin IP and for ensuring one isn't "overheard" on untrusted wifi or other local connectivity (once upon a time, most hotel internet was via RJ45 jacks in each room), but nowadays with pervasive HTTPS the latter seems less necessary.

I'm about to spool up ProtonVPN purely because I'm already paying Proton for pro email and why not, but I've never particularly worried about anonymity as far as my ISP or destination sites correlating my source IP.

Edited to add:
Though I do gather that living in a state/country without any parental-access BS has enabled me to have that lack of concern. And nowadays I'm generally "public enough" with my life generally and careful enough with other personal security to warrant leaving that particular layer out.

 

[Samson]

If anyone is interested in payments processors which are less restrictive https://conjured.ink/ are a collective designing and building the software needed for folks who aren't techies to basically self host without feeling like they're self-hosting. Because you shouldn't need to be a sysadmin to free yourself from the yoke of restrictive payment processors.

Register if you are interested, they are not there yet. If anyone fancies helping they also need that.

 

[Clubber Lang]

One Week of the Online Safety Act: Cyber Experts Weigh In

The conversation around the UK's Online Safety Act has transformed over the past week. Since it came into force last Friday (25th July 2025), there has been a l

www.itsecurityguru.org

 

[ls612]

I use Proton for my VPN because I’m already in their app ecosystem. That said in the US it’s still mostly unnecessary to use a VPN.

 

[Manfred Belheim]

I just googled stuff about using flash cartridges with a Commodore 64, clicked on the link to a reddit thread in r/c64, and was greeted with a pop-up telling me there may be mature content, and then redirected to a page to upload a "selfie" or submit a scan of my passport. I've already had the same thing with a retrogame Discord server because one of the channels was flagged as "mature", even though it's just adults talking. I'm obviously not going to be submitting photos of myself or scans of my official identification to any and all sites all over the internet. This is just crazy and I can't see how these regulations can remain in force for long.

 

[EnglishEdward]

I dare say there will likely be a lot of photographs of Keir Starmer submitted.

 

[Clubber Lang]

Ya paperz pleaze

After the UK, online age verification is landing in the EU

Five EU countries are set to test an age verification app to protect children online

www.techradar.com

Five EU countries are set to test an age verification censorship and survelliance app

Denmark, Greece, Spain, France, and Italy are the first to test the technical solution unveiled by the European Commission on July 14, 2025.

 

[Samson]

Ya paperz pleaze

After the UK, online age verification is landing in the EU

Five EU countries are set to test an age verification app to protect children online

www.techradar.com

The tech media is again doing the work of the fascists by not pointing out the rubbish they are talking:

> As the European Commission explains on its website, the age verification blueprint enables users to prove they are over 18 "without revealing any other personal information."
>
> "It is based on open-source technology and designed to be robust, user-friendly, privacy-preserving, and fully interoperable with future European Digital Identity Wallets," the Commission explains.

It very much does not enables users to prove they are over 18 "without revealing any other personal information." It does not work unless you sign a contract with the biggest threat to personal privacy that gives them the technical and legal right to full access to your hardware. It only runs on insecure compromised systems. This should be highlighted every time this comes up.

EU age verification app to ban any Android system not licensed by Google

The EU is currently developing a whitelabel app to perform privacy-preserving (at least in theory) age verification to be adopted and personalized in the coming months by member states. The app is open source and available here: https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui.

Problem is, the app is planning to include remote attestation feature to verify the integrity of the app: https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui?tab=readme-ov-file#disclaimer. This is supposed to provide assurance to the age verification service that the app being used is authentic and running on a genuine operating system. Genuine in the case of Android means:

• The operating system was licensed by Google
• The app was downloaded from the Play Store (thus requiring a Google account)
• Device security checks have passed

While there is value to verify device security, this strongly ties the app to many Google properties and services, because those checks won't pass on an aftermarket Android OS, even those which increase security significantly like GrapheneOS, because the app plans to use Google "Play Integrity", which only allows Google licensed systems instead of the standard Android attestation feature to verify systems.

This also means that even though you can compile the app, you won't be able to use it, because it won't come from the Play Store and thus the age verification service will reject it.

The issue has been raised here https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui/issues/10 but no response from team members as of now.

 

[Clubber Lang]

Like dominoes...

Spotify

Spotify Threatens to Delete Accounts That Fail Digital ID Checks

Spotify’s move risks turning casual listeners into scanned data points under the guise of safety compliance.

reclaimthenet.org

X-Box

Xbox is rolling out age verification in the UK with some social features blocked for young users, and no, you can't use Death Stranding to get around this one

It may even begin rolling out to more countries.

www.pcgamer.com

GTA

Grand Theft Auto: the blood-soaked British success story testing Labour’s mettle

The video game’s cornucopia of gangland vice risks a head-on collision with new online safety laws

www.telegraph.co.uk

You-tube

YouTube is turning over age verification to AI

YouTube will start using machine learning to determine whether viewers should be on a teen account.

www.engadget.com

 

[Broken_Erika]

Apparently, Discords age verification selfie feature can be tricked using Garry's Mod.

 

[Clubber Lang]

Banning VPNs to protect kids? Good luck with that

Analysis: UK's Online Safety Act kicks off about as well as everyone expected

www.theregister.com

 

[Clubber Lang]

‘This is serious’: Starmer orders move towards digital ID...

Scheme aims to tackle illegal immigration and crime despite past concern over civil liberties

observer.co.uk

 

[Angst]

sadly i can't provide a perspective against this. protecting kids is nice and all, but uploading such sensitive information to private companies, face scanning and such, is completely f insane

the tea hack was mentioned, but it's also significant because tea's privacy protections (ironically) were absolutely abysmal. i don't work in security myself, but know someone intimately who does, and as a general rule, private corp security is absolute crap. this is generally awful and as such policies like this are completely reality-detached