diff options
Diffstat (limited to 'content/entry/private-online-shopping.md')
-rw-r--r-- | content/entry/private-online-shopping.md | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/content/entry/private-online-shopping.md b/content/entry/private-online-shopping.md index 91668be..c9f2e50 100644 --- a/content/entry/private-online-shopping.md +++ b/content/entry/private-online-shopping.md @@ -52,10 +52,10 @@ The bad news is the marketplace might still require a phone number. The good new Since marketplaces don't verify the number, you can make one up. The marketplace will probably only text it details of your order. I don't know of an online marketplace that forces buyers to verify their phone number. If you run across one, my advice is find a different marketplace. There's plenty out there. ## Browser Fingerprinting and IP Address -If you made it this far, then you've managed to not explicitly give out any personal information. Unfortunately, because the web is a privacy disaster, this isn't enough. There are dozens of other ways to leak your identity without it being obvious. For example, many online shopping sites have proprietary Javascript and cookies which facilitate tracking buyers across the web. Your IP address is also identifying information which can be used to deanonymize your purchases. But do not fear, for Tor Browser is here! +If you made it this far, then you've managed to not explicitly give out any personal information. Unfortunately, because the web is a privacy disaster, this isn't enough. There are dozens of other ways to leak your identity without it being obvious. For example, many online shopping sites have proprietary JavaScript and cookies which facilitate tracking buyers across the web. Your IP address is also identifying information which can be used to deanonymize your purchases. But do not fear, for Tor Browser is here! ### Mitigation - Use Tor Browser -The best way to avoid browser fingerprinting and leaking your IP address is installing Tor Browser[2]. Tor Browser protects you from browser fingerprinting while making it very hard for the site to figure out your real IP address. Use Tor Browser on the highest security setting that doesn't break site functionality. If "safest" mode breaks the website, try "safer". If "safer" mode breaks the site, use "standard". I also recommend using the LibreJS[3] addon to prevent proprietary Javascript analytics scripts from running in your browser. +The best way to avoid browser fingerprinting and leaking your IP address is installing Tor Browser[2]. Tor Browser protects you from browser fingerprinting while making it very hard for the site to figure out your real IP address. Use Tor Browser on the highest security setting that doesn't break site functionality. If "safest" mode breaks the website, try "safer". If "safer" mode breaks the site, use "standard". I also recommend using the LibreJS[3] addon to prevent proprietary JavaScript analytics scripts from running in your browser. ## Tor is Blocked If you can't access the site on the "standard" security setting in Tor Browser, then it probably blocks Tor exit nodes. Some sites do allow you to browse while using Tor, but won't let you purchase anything. You just have to find out which ones are Tor friendly and which aren't by trial and error. If a site isn't Tor-friendly, all is not lost. There is still hope with Proxychains. @@ -83,9 +83,9 @@ I wish I could say that's all because it feels like the overhead for making a pr Any payment system that identifies you can't be used for privacy. Until something like GNU Taler[5] becomes popular, we're left with 1 option that offers real payment anonymity: cryptocurrency. ### Mitigation - Monero -Since most places require some form of ID verification to buy cryptocurrency and cryptocurrency ledgers allow transactions to be easily traced, no cryptocurrency is suited for an anonymous purchase, except for 1: Monero[6] or XMR. It's so private that the IRS is offering $625,000 to anyone who can crack it[7]. You can acquire Monero through centralized or peer-to-peer exchanges. The great thing about Monero is you don't need to acquire it anonymously to make an anonymous purchase with it. Coins are untraceable and transactions are unlinkable. Feel free to acquire the Monero however is most convenient for you. Localmonero.co is a solid option that doesn't require any identification or proprietary Javascript and it has a Tor onion service. Just remember to store the coins on the Monero wallet on your own machine, not on an exchange. Also I recommend proxying the Monero client through Tor to prevent transactions being linked to your IP address. +Since most places require some form of ID verification to buy cryptocurrency and cryptocurrency ledgers allow transactions to be easily traced, no cryptocurrency is suited for an anonymous purchase, except for 1: Monero[6] or XMR. It's so private that the IRS is offering $625,000 to anyone who can crack it[7]. You can acquire Monero through centralized or peer-to-peer exchanges. The great thing about Monero is you don't need to acquire it anonymously to make an anonymous purchase with it. Coins are untraceable and transactions are unlinkable. Feel free to acquire the Monero however is most convenient for you. Localmonero.co is a solid option that doesn't require any identification or proprietary JavaScript and it has a Tor onion service. Just remember to store the coins on the Monero wallet on your own machine, not on an exchange. Also I recommend proxying the Monero client through Tor to prevent transactions being linked to your IP address. -Unfortunately few online stores actually accept Monero. Bitcoin still reigns supreme. Luckily there are coin swap services online that accept Monero and pay out Bitcoin. Kilos' KSwap[8] (WARNING: NSFW) is one example. It requires no sign up, no Javascript and it's a Tor onion service. +Unfortunately few online stores actually accept Monero. Bitcoin still reigns supreme. Luckily there are coin swap services online that accept Monero and pay out Bitcoin. Kilos' KSwap[8] (WARNING: NSFW) is one example. It requires no sign up, no JavaScript and it's a Tor onion service. The hidden fees are of course embedded in the exchange rate. When you go to buy Monero, you're going to take a hit and when you pay to convert it to Bitcoin, you're going to take a hit. In the end, you may end up paying 20% more than you otherwise would have had you just bought the item with a debit card. That's not even including the costs involved in a mailbox service. But that's just the price of your privacy if you insist on buying online. There's no easy way around it. |