Connecting to a targeted wifi router screws you?

K8y

If someone is tageted for their political beliefs by an unjust gov, I assume 1) their wifi router can be subpoenad to see all internet traffic, correct?

Related to this, 2) if one gets a new pixel and sets it up connecting to that same surveiled personal wifi, did you essentially just screw your privacy? 3) I assume they could see the new phone is connected to your wifi, and possibly its IMEI?

Probably9857

K8y 1) their wifi router can be subpoenad to see all internet traffic, correct?

Yes, but I think it is more likely they would request that data from the ISP.

K8y 2) if one gets a new pixel and sets it up connecting to that same surveiled personal wifi, did you essentially just screw your privacy?

No. Connecting to a WiFi network reveals very little data about your device.

K8y 3) I assume they could see the new phone is connected to your wifi, and possibly its IMEI?

They would see a MAC address (randomized by default in GOS), and possibly a device name (like Pixel 9a) . I think that's about it. Certainly not IMEI.

MetropleX

K8y if the country you are based in has laws compelling ISPs to log use of their services then connecting via that ISPs equipment and using the default DNS settings as providing on that access point will allow your ISP to see which website are being visited from a specific customer and their AP. To protect against this you can use a recursive DNS provider such as Quad9 or use a VPN using their default DNS configuration. The VPN option depends on your trusting the no logs policy of your VPN provider, currently the most recommended providers by our community are Mullvad, Proton and IVPN.

K8y

Probably9857 thanks. Is it best to set up a new Gos phone at a public wifi so it doesn't connect to you at all? Is this a thing people do in the Gos community that helps?

Probably9857

K8y Is it best to set up a new Gos phone at a public wifi so it doesn't connect to you at all? Is this a thing people do in the Gos community that helps?

What's "best" will depend on your threat model & your personal tolerance for risk vs inconvenience.

It is a thing that some people do. Personally I think it is overkill for most. But if it makes you feel better, then by all means. There is no real downside anyway.

K8y

Probably9857 I suppose the only downside is you are open to attacks using public wifi??

Maybe a vpn would secure you when you download Gos on a public McDonalds wifi...?

Probably9857

K8y you are open to attacks using public wifi??

I'm not sure what sort of attacks you have in mind here. Before HTTPS was widely used, this was a legitimate concern. That was 10 or 20 years ago. Now, not so much. Add a VPN, and I really don't think you have anything to worry about.

indigomadelin

MetropleX To protect against this you can use a recursive DNS provider such as Quad9

DNS communication is still not encrypted if you use 9.9.9.9. It's recommended to utilize DoH or DoT. If you want to prevent your ISP from monitoring your DNS queries, the protocol matters more than the provider (Quad9, Cloudflare, Google, NextDNS, AdGuard).

GrouchyGrape

MetropleX using the default DNS settings as providing on that access point will allow your ISP to see which website are being visited from a specific customer and their AP.

Just going to add that many ISPs no longer rely on you using them for DNS anymore. They'll still track the sites you visit through reverse IP:port lookup. At least in the USA.

raccoondad

indigomadelin If you want to prevent your ISP from monitoring your DNS queries

Doesn't really protect much if you query the DNS then immediately go and start a TCP session with the website w/ TLS

indigomadelin

raccoondad True. Except encrypted SNI.

raccoondad

indigomadelin True. Except encrypted SNI.

Even then, a lot of sites have unique public IP addresses