There’s no provider that’s going to be more safe than Hetzner, tbh.
If a provider doesn’t comply, you’ll just get special services raiding their DCs instead.
And if you switch to a VPS provider, you’re even more exposed.
Set up CAA with proper restrictions, enforce CT for your clients and use proper full disk encryption to prevent them from placing implants on your server itself.
Knowing the German government I’m not terribly surprised Hetzner was forced to comply quietly. But still, if they’ll do it for one user, they’ll do it for everyone. Really sucks.
Please do. An unsubstantiated reddit thread does not a story make- but the more people we get to look into it, the more likely someone will corroborate it (or not)
If want something that is immune from law enforcement wiretap warrants, you should avoid basically all hosting and internet service providers.
Read the TOS on virtually every service. There’s some language to say that they will comply with legal requests. The company is not going to fight the government for your $5 account.
Microsoft, Google, Amazon, Facebook, etc all have wiretap and legal discovery tools built into their platforms and have a dedicated team to process wiretaps.
Stop the service and inspect the machine for law violations. I’m ok to that. But proxying the network without a notice is literally spying.
Reverse the case, if a Chinese/Russian provider did this, would you still be OK? It’s funny US and west countries blaming easterns for spying while doing far far more.
The entire term wiretap comes from spying on phone conversations upstream without the target’s knowledge. This is no different.
China and Russia are 1000% doing this and more to anything hosted anywhere under their jurisdiction. The CCP brags about the Great Firewall.
I don’t necessarily agree with any of it, but I am pointing out that changing providers to one who wasn’t in the news is not a way to get around government data collection.
So you’re telling me that blanketing cities in CCTV over the past decade or so has failed to stop crime? And you’re telling me that you need more of it to stop crime?
Most routers can have VLAN functionality if you flash them with custom firmware. You get allllll the settings then. I have a netgear router that now has an FTP server and a bunch of other stuff. All you have to do is make sure the model you buy has a chipset supported by the firmware. Firmwares include:
DD-WRT
Tomato
AdvancedTomato
OpenWRT
Chilifire
Gargoyle
I’m sure someone will come in and say that using a consumer grade router is naff, but in my (somewhat limited) experience working with managed switches in an industrial setting, a custom consumer router is much more feature-rich. Unless you need the IO of a managed switch (ie SFPs) I see no reason to go down that route.
If you are using SFPs, be sure to get the knock off ones that can be programmed - there should be places that sell them and program them at no extra cost. They can literally be 1/10 of the cost of the manufacturer’s own modules.
if the firewall can be updated regularly then sure.
Mikrotik makes perfectly acceptable switches at a reasonable price with a variety of features, vlan compat is pretty common. A MikroTik CSS610-8P-2S+in will give you 2 10 Gb sfp , 8 x 1Gbe with PoE+ and vlans for under 300 bucks.
I’m not OP but that 'tik is almost perfect for me, going along with the RB5009 I already have. Is there something similar that can run RouterOS I wonder?
There definately is something. They have a ton of products. I’d have to look through my list as well. The CSS runs switchos lite, but honestly its fine. I can do CLI configs (brocade, cisco, cisco smb etc) but its whatever.
At my parents house i have been using a Mikrotik RB260GSP since about 2016 on their net. It also runs swos and im not doing anything crazy on it (in fact i never bothered with VLAN’s there though i probably should setup a guest vlan. But its been fine for years now.
privacyguides
Hot
This magazine is from a federated server and may be incomplete. Browse more on the original instance.