66
Honeypots (lemmy.ml)
submitted 2 days ago by QuestionMark@lemmy.ml to c/privacy@lemmy.ml

Are there any services which you believe are honeypots?

top 35 comments
sorted by: hot top controversial new old
[-] ATS1312@lemmy.dbzer0.com 2 points 14 hours ago

Age Verification.

[-] surph_ninja@lemmy.world 2 points 1 day ago

There’s been a few stories outing the feds as running most illegal porn sites on the dark net.

[-] Agosagror@lemmy.dbzer0.com 3 points 1 day ago

Discord is 100% I'm only unsure if it's NSA or CCP

[-] ki9@lemmy.gf4.pw 5 points 1 day ago

Closed source apps

[-] comrade_twisty@feddit.org 61 points 2 days ago

There was speculation that the NSA is deeply involved in Cloudflare, which wouldn’t be a surprise at all.

In fact all US services are probably infiltrated one way or another.

[-] bjoern_tantau@swg-empire.de 14 points 2 days ago

Even if Cloudflare wasn't a honeypot I would put in as many agents as possible as a three letter agency.

[-] Scrollone@feddit.it 5 points 2 days ago

Yeah exactly. How can Cloudflare stay in business with such a huge free service? That's why.

[-] autonomoususer@lemmy.world 3 points 2 days ago* (last edited 2 days ago)

That's not a honeypot. What would anyone think is private about Cloudflare?

[-] comrade_twisty@feddit.org 5 points 2 days ago

If you use their DNS they see every domain you visit.

[-] autonomoususer@lemmy.world 1 points 2 days ago* (last edited 2 days ago)

Internet providers see internet traffic. Are they all honeypots too?

[-] eleitl@lemmy.zip 6 points 2 days ago

That's why you should use a VPN or anonymizing traffic mixers.

[-] irmadlad@lemmy.world 4 points 2 days ago* (last edited 2 days ago)

Encrypt your DNS. Use only DNSEC servers. TLS 1.3, Secure SNI. Use a VPN with double hop proxy.

The issue is not all servers support TLS 1.3 and Secure SNI, so you are at the mercy of that particular server. Truth be known, there is probably zero ways to be totally secure, private, and anonymous, but that shouldn't deter you from locking down what you can. However, if your threat model is hiding from a government, then unplugging is probably your best bet.

People I talk to about security, anonymity, and privacy always ask me 'Are you hiding from the government?' which is rather hilarious to me. I send them tax forms every year. I vote once every four years and in local elections. We are in touch. If I were a person of interest, they'd come visit. However, there is absolutely no requirement to over share....with anyone.

https://www.cloudflare.com/ssl/encrypted-sni

[-] smiletolerantly@awful.systems 2 points 1 day ago

Please beware that DNS over TLS is transport protection; the dns server itself of course still sees and knows everything.

[-] eleitl@lemmy.zip 1 points 1 day ago
[-] smiletolerantly@awful.systems 2 points 1 day ago

That's great.

[-] technocrit@lemmy.dbzer0.com 19 points 2 days ago
[-] cerebralhawks@lemmy.dbzer0.com 27 points 2 days ago

Anything by Meta (Facebook, Instagram, WhatsApp). Facebook literally got people killed by volunteering their location data to a tyrannical government in a third world country. Don't think they won't do that to Americans.

Android (the mobile OS) kind of is. The only reason Google bought the hobby project to put Linux on smartphones was because they could collect more data with it than they could with Gmail. You can get a Pixel device and install GrapheneOS on it, but not even 1% of Android users are turning off telemetry (which only anonymises it), let alone installing custom firmware that doesn't have it. I'm not saying iOS isn't — because it's not open source, we don't know — but I am saying Android definitely is. And I don't just mean Pixels — to use the Android brand, Google requires certain things of OEMs like Samsung, from having Gmail and/or Chrome on the main home screen, to having Google Play Services, which does the data collecting, installed. (I'm pretty sure the Play Store actually requires it. Forks that don't use the Android branding, like Amazon's Fire OS, don't have this restriction, but Amazon probably has plenty of other crap in theirs.)

Now, I never said Android was a honeypot, and it may not be. But Google was just sued for antitrust, and they made a deal to keep Chrome and Android under their banner. We don't know what the terms of that deal are. I would consider both of them to be compromised by bad actors (potentially they always were since Google was selling the data). Don't think so much about who you call (though that can be valuable) but like, your Maps data, anything you put in Health (like if you're female, like if you miss two or more periods but not eight or nine and then start back up again, I'm sure the GOP would love to know that — for the dense fellas, it could mean she got pregnant and then terminated it, or the pregnancy failed somehow). Tim Cook's advice of "get your mom an iPhone" doesn't sound so far fetched now. Your sister, too. Heck, specifically regarding Health, Samsung put out an update last year, maybe the year before — that is, before the current administration — saying if you keep using Health, they can sell your information to whoever they want. Either agree and keep using it, or disagree and they delete your data. At this point, no stock Android phone can be trusted to keep your information private. It's different if you use GrapheneOS, but that requires buying a Pixel, putting money in Google's pocket. The Pixel 10 is what, about as powerful as an iPhone 11? A 12 maybe? And it costs the same as an iPhone 16. You decide. Personally I don't think it looks like a very good deal.

[-] autonomoususer@lemmy.world 4 points 2 days ago* (last edited 2 days ago)

We know WhatsApp and others fail to include a libre software license text file. We do not control them. They are not honeypots. They are scams!

[-] 0x01@lemmy.ml 24 points 2 days ago
[-] besselj@lemmy.ca 13 points 2 days ago

Especially those developed/maintained within US jurisdiction

[-] autonomoususer@lemmy.world 15 points 2 days ago* (last edited 2 days ago)

Scams? Yeah, almost all of them.

Honeypots? No, always too blatant.

[-] DrunkAnRoot@sh.itjust.works 6 points 2 days ago
[-] besselj@lemmy.ca 13 points 2 days ago

This privacy-centric US phone carrier may or may not be a honeypot, but seems too good to be true. https://www.cape.co/

[-] specialwall@midwest.social 4 points 2 days ago

To be fair, it is $100/mo, so there is a premium for their privacy benefits.

[-] autonomoususer@lemmy.world 8 points 2 days ago* (last edited 2 days ago)

All the others are worse.

If they are all honeypots, does calling them honeypots still mean anything?

[-] goldkiddo@feddit.it 5 points 2 days ago
[-] ATS1312@lemmy.dbzer0.com 1 points 14 hours ago

I'm open to listen for a rationale.

Oh wait, proton turned over email metadata when subpoenaed:

https://www.techspot.com/news/102981-proton-mail-provided-user-data-led-arrest-spain.html

[-] SteleTrovilo@beehaw.org 2 points 1 day ago

ProtonMail, or the Steam game compatibility layer?

[-] TaviRider@reddthat.com 8 points 2 days ago

ANOM wasn’t until it was, and then it shut down. I recommend the Darknet Diaries episode to hear the story.

[-] autonomoususer@lemmy.world 2 points 2 days ago

Anom failed to include a libre software license text file. We never controlled it. That's not a honeypot. It's a scam.

[-] TaviRider@reddthat.com 5 points 2 days ago

Stingray phone trackers and similar IMSI catchers are a kind of honeypot.

[-] infjarchninja@lemmy.ml 4 points 2 days ago
[-] folaht@lemmy.ml 3 points 2 days ago

Signal? I don't trust anything that's not part of the fediverse.

[-] Vendetta9076@sh.itjust.works 3 points 1 day ago

So you've built a fediverse operating system?

Also the fediverse by definition isnt private. What are you talking about.

[-] autonomoususer@lemmy.world 3 points 2 days ago* (last edited 2 days ago)

It's not social media. Why choose the worse way to decentralise it?

this post was submitted on 05 Sep 2025
66 points (100.0% liked)

Privacy

41525 readers
341 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS