• @[email protected]
    link
    fedilink
    9
    edit-2
    3 years ago

    So moving on from the threat of deportation to China we now have

    We have taken steps to ensure that we never store a full IP address (we now truncate it before hashing or discard it entirely)

    That’s an inclusive or. When is it discarded? How can they say ‘never’ if they are ordered to store the full IP address? Deep packet inspection one step before their ‘steps’ would remove any protection they pretend they can give.

    Even so, onwards:

    Hashing an IP4 address is ridiculous, they are still widely used, they know the hashing algorithm and they know all the possible addresses.

    How long would it take anyone to run all 4 byte combinations to make a rainbow table?

    How far do they truncate it? How can a /24 or /16 be considered anonymous, there aren’t that many audacity users?

    Not only all that, everybody knows the hashing algorithm as it’s open source. (Maybe they won’t open source the ‘telemetry’ server code, on further thought).

    Nobody is this stupid, this is them trolling the public at this point.