11mo ago

Active combat against surveillance instead of passive defense

Examples of passive defenses against surveillance:

Privacy Badger
uBlock Origin
Using open source Linux rather than Microsoft Windows
etc.

But why not actively combat surveillance instead of passively defending against it? Examples of active combat:

We must poison the data of those who are violating our privacy. Let us waste their time, increase their data storage costs, and waste their processing power. Let them drown in an ocean of data. Let them search for tiny needles in huge haystacks, with no way to distinguish between needles and hay.

Some ideas:

Sending fake data to Google Analytics (How does Google Analytics prevent fake data attacks against an entity's traffic?)
Create fake contacts lists to mislead those who are building social network graphs.
Encrypt lots of worthless data, store them in the cloud or send them by email. If the encrypted data is intercepted by any nosy entity, they will have to waste storage space while waiting to be able to break the encryption.

What are some other possible methods?

Let us turn the tables on those who have been violating our privacy. Why do we have to be on the defense? Let us waste their resources in the same way that they are wasting ours!

11 comments

I would instead recommend running a tor relay or i2p node. That way you have encrypted traffic and are helping others and further legitimizing privacy by its everyday use

Some superficial thoughts, please correct me if I'm wrong. Isn't AdNauseam generating more traffic to ads, thus increasing their value in terms of metrics? Also, do people really think that agencies like NSA, which are capable of extremely sophisticated surveillance, can be disrupted by random text in emails? These tools sound like a waste of time to me.
- I think all 3 are likely detectable.
  AdNauseam is my favorite though, and probably currently the least detectable. It purposefully costs advertisers the money they bid against each other for clicks. Though, if abuse of it becomes too high, I think Google would very likely separate out users they have detected as likely bots. Though, for people who do not browse the internet very often, there might not be very much data to be confident they’re a bot.
  I really don’t like that modern advertising is based on highly invasive spying. A billboard is a nuisance, but someone watching everything I do online is a stalker.
  edit: It’s about making predictions about behavior worse. An issue is that advertising has conversions or sales, which most fake clicks will not become conversions… but part of it is just creating data that might cause predictions against other people for content they don’t desire. (resulting in less impactful advertising)

This would help them to improve the algorithms and make it worse. An active defense could be to keep the ads visible and boycott the announcers, so that they lose more money when they pay for advertising.
- Adv effectiveness is a fraud anyway, so they wouldn't care nor notice it.

I like the sentiment. The challenge is that those who violate privacy benefit financially, while those who defend against it are just trying to protect themselves. To go on the offensive requires effort and know-how without any corresponding financial or personal benefit. A spite based effort sounds appealing but wouldn't be sustainable.

Not to be a defeatist, but unless a significant share of internet users does this, the effect would be at most negligible.
- Not true. I run ad campaigns and pay upwards of 1$ a click most times. AdNauseum hurts like hell.
  Please use it :)
  
  Is it possible for you to somehow quantify traffic originating from AdNauseum? If so, how?
  
  Love this answer

oh yeah. never use real information unless you have to. remember how the blues brothers address was wrigley field?

11 comments