Author Topic: Anonymity  (Read 3984 times)

Offline AltBinzUsenext545Z

  • Contributor
  • ***
  • Posts: 4
Anonymity
« on: December 26, 2018, 10:54:54 am »
I have a question about anonymity:
Is a payed version of alt.binz somnewhat "pesonalized" or "fingerprinted", so that it can be identified by news servers?
I mean, you pay alt.binz through Paypal, so the seller has definetly the real email adresses, then you get a login name and a password. Everytime you logged into the payed version, at least the developer knows that the program is beeing used by this specific user. Are logs getting transfered to the makers of alt.binz?
Maybe someone knows an answer to those questions....

Offline Rdl

  • Administrator
  • *****
  • Posts: 4050
Re: Anonymity
« Reply #1 on: December 26, 2018, 07:21:19 pm »
I have a question about anonymity:
Is a payed version of alt.binz somnewhat "pesonalized" or "fingerprinted"
Yes it is.

Quote from: AltBinzUsenext545Z
so that it can be identified by news servers?
No, news server cannot identify even what news program are you running/using.
And payed version is "pesonalized" or "fingerprinted" so I can enforce those basic 5 rules you agreed to when you donated.

Quote from: AltBinzUsenext545Z
I mean, you pay alt.binz through Paypal, so the seller has definetly the real email adresses, then you get a login name and a password. Everytime you logged into the payed version, at least the developer knows that the program is beeing used by this specific user. Are logs getting transfered to the makers of alt.binz?
You're using terms "seller", developer and then makers. You do know that it's the same one person?
Yes, I do know your paypal email address. I do not know your altbinz password, I do know hash of your username and password. I do not know you usenet login/password.
I do know, when you start/log in into payed version, IP, altbinz version and hash of the used computer/system. Why? Again - enforcing those 5 rules.
And no, logs are not transfered. Why would I need your download logs? I do not care what/if/when you download.

Offline AltBinzUsenext545Z

  • Contributor
  • ***
  • Posts: 4
Re: Anonymity
« Reply #2 on: December 26, 2018, 07:48:52 pm »
Hallo,
first, sorry for the private message and thank you very much for answering my questions! I like your program very much, but suddenly I thought, what if "download logs" would be transfered to you with a fingerprinted version :). Please do not take this personally, it was just a theoretical thinking ;).
Somewhere in the forum I read that you suggested to wireshark the traffic. But its not that easy, because the transfer (I think its just the "version check") is TLS encrypted ;). How should I see whats getting transfered to 92.222.91.121 and 51.255.201.135?

And I fully understand that you need to make sure that people do not share the licence, but what I do not get is, how you do this? The IP of the customer is always changing, especially with a vpn.

Therefore again, thank you for answering my questions :)!
One last thing: How to change the user name in this forum?


Offline Rdl

  • Administrator
  • *****
  • Posts: 4050
Re: Anonymity
« Reply #3 on: December 26, 2018, 08:13:15 pm »
Hallo,
first, sorry for the private message and thank you very much for answering my questions! I like your program very much, but suddenly I thought, what if "download logs" would be transfered to you with a fingerprinted version :). Please do not take this personally, it was just a theoretical thinking ;).
Somewhere in the forum I read that you suggested to wireshark the traffic. But its not that easy, because the transfer (I think its just the "version check") is TLS encrypted ;). How should I see whats getting transfered to 92.222.91.121 and 51.255.201.135?

And I fully understand that you need to make sure that people do not share the licence, but what I do not get is, how you do this? The IP of the customer is always changing, especially with a vpn.

Therefore again, thank you for answering my questions :)!
One last thing: How to change the user name in this forum?
Why would I need "fingerprinted" version to identify you? You identify yourself to authentication servers when you send your altbinz forum username and password hash. On download logs I have nothing to add. Either there is trust or not. If not, best thing would be to switch to something you trust, I will not take it personally :)
Regarding wireshark, try it on 0.44.x versions and bellow, after that both calls to servers are encrypted (authentication call and version check call) and you can only hope I wasn't able to squeeze your few MBs download log into my encrypted 100-200 bytes traffic.
You cannot change your username, I could do it but those kind of requests now fall into this category https://www.altbinz.net/forum/general-talk/important-news-about-accounts/ and I am not willing to do it anymore.