What are some things we can do to hide data from ISPs? VPNs seem good but cost quite a bit and requires us to trust them.

Would it be a good idea to block all outboundHTTP traffic?

rent a vps and install wireguard... now you have to trust the VPS' ISP...

buy your own ISP... now you have to trust your upstream ISP...

buy AT&T or Verizon to be safe...

or both

Do Linux servers usually have anti-virus? If yes, what kinds?

@JohnZhau No. Anti-Virus is snake oil

@MechMK1 Holy crap! Which one is that???

Oh, must be taxes... here in the US the base model is $999, although I'm still hoping that you're looking at one of the higher-end models...

@ConorMancone Yes, one of the higher end models with upgraded CPU, RAM and SSD

I sat down to get working again after breakfast and had a tab in my browser opened to guacamole.apache.org I don't remember opening this. It could be that I clicked a link to read about this and so opened it and just forgot... but I think this may be a sign that I've been hacked

How do I get the virus off of my computer? If it helps the browser was running in a Debian VM. Should I factory reset my machine? Or just throw it out and buy a new one? How can I verify that malicious firmware wasn't installed on my SSD/CPU/RAM/Motherboard/Dongle/Keyboard/USB Cable?

I ran netstat on my computer and see traffic leaving on ports 80 and 443. Clearly the virus is communicating with a C&C server.... should I assume the worst and also change my social security number and cancel all my credit cards and bank accounts?

@ConorMancone the lowest end model in Brazil is 1800 EUR

@ThoriumBR Wow! Why is it so much more expensive?

tariffs, mostly... even if 1 USD is about BRL 5.5, we usually grab the USD price and add a zero to it...

as the Real is devaluating, soon we will multiply prices by 15...

every time Sony/MS/Nintendo launches a new console, it's more expensive to buy it here than to fly to Miami, rent a hotel for 2 days, buy the console there, and fly back

if you buy 2 or 3 consoles, you can even fly your family with you

I never did this, but some people here keep an eye on air tickets close to Apple lauches, and fly there to buy a macbook, iphones and such when they are just available, and resell here for a huge markup

... I don't even know what to say to that ...

Sounds clever

I bought my blackberry pearl doing something like that. I got 2 on ebay, sold one, and it paid for both plus the shipping, the taxes, and I had some left over...

Nice

Hi all, I have a question. Many guides imply that key-based authentication's ultimate benefit is the ease from having to enter passwords several times... but I believe that's primarily the benefit of the ssh-agent and not the key-based authentication itself. Because one might use a tool like ssh-agent for keeping passwords in memory instead of passphrases. Is that right?

@aderchox key-based authentication for SSH?

@ConorMancone Hi, Yes

The ultimate benefit of key-based authentication for SSH is that an SSH key has no chance of ever being guessed via bruteforce, while a password does.

Yes that's what I believe too after searching about it

The fact that SSH keys are also easier is a happy convenience, although note that many people also secure their SSH key by embedding a password in it so that you must enter a password to use the key, so convenience obviously isn't the end-goal

Pardon it's not clear for me, are you referring to passphrases by saying "embedding a password in it"?

Yes, sorry

NP! Thanks a lot.

@ConorMancone Have you considered changing your name and moving to a different street address? Also, try putting yourself up for adoption to change your mother's maiden name. And don't forget to call your ISP and ask for a new IP address.

@ConorMancone Honest question: if somebody is smart enough to run a browser inside a Debian VM, would they really overreact to a forgotten web page like that?

and get a bone marrow donation to change your blood DNA. usually helps.

Ooh, I saw something like that in Dr. Who once... It totally works.

@FireQuacker It's not about "Smart". It's about level of paranoia and different trust levels, which are completely different issue than "smart". Although to be fair my comments may have been overly snarky. We get a lot of questions like that though... :)

@ThoriumBR lol, now I want to use that one in the future but it would probably be rude...

Great post on HN: news.ycombinator.com/item?id=23390966 - "Ask HN: How does your company manage its encryption keys?"

Abandon all hope, yee who watch this video