Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You're wary of sites with opt in email list subscription links?

From the site header ABOUT page:

https://thoughtmaybe.com/about/

"Thought Maybe is a 100% independent, autonomous, not-for-profit, self-directed project that exists to inspire action on a whole bunch of issues surrounding modern society, industrial civilisation, globalised dominant culture.

This website does not use nor support corporate “communication networks” such as YouTube, Facebook, Google, Twitter, etc. We think its important to maintain an independent platform for publishing—insofar as it’s possible to do on the Internet of corporate-controlled gateways or ISPs.

We run this project using Open Source Software and embrace the notion of Creative Commons, and supportive sharing.

--

We don’t run advertising on our site because we find it repugnant, compromising and unwanted!

This project is entirely not-for-profit—an open library funded by a small crew of dedicated media activists throughout the world. This freely accessible library is our labour of love project for positive social and political change. Even though it is a hard job, we don’t get paid.

We don’t receive any outside funds of any type, and we don’t receive nor would we accept money from any corporate or government entities. Our vested interest lays solely with humanity and the natural world, not this culture, not this system.

--

This library is independent and autonomous. It is a labour of love run by a small crew of dedicated activists throughout the world. We have no affiliations and are not part of any organisation or group, which means no vested interest, which means we can publish what is needed without interference, censorship or vetoing.

We don’t work with any commercial organisations, religious groups, political parties, etc—we’re entirely independent and self-determined in order to remain effective about what we set out to achieve, which is to cultivate and nurture an effective culture of resistance to the pertinent social and political issues outlined in this library. It is why filmmakers make films, it’s why we do what we do to support getting them seen and acted on. Where it goes from here is up to you…"



I’m wary of “countercultural” sites run by a “small crew” not identified soliciting emails with no privacy policy in place. If it isn’t a honeypot it’s indistinguishable from one. Assuming it isn’t, the email list itself is ambiguous regarding GDPR compliance. It seems counter-intuitive to me that the intended audience would sign up for such an email list under such a cloud of uncertainty. With anonymity comes avoidance of accountability. Why would I visit such a site if I have nothing to gain and so much to lose from interacting with a site whose operators have inscrutable and seemingly paradoxical intentions?

I’ll ask more directly since I was vague before. Are you associated with thoughtmaybe.com? I only ask because you seem to be advocating for using it under the guise of a user or fan of the site, and not as operator or staff of the site; to not identify yourself as staff when commenting on the site could be interpreted as commenting in bad faith. If not then please disregard this paragraph.


The threat model you sound concerned about could easily be mitigated in several ways. Use a proxy/VPN/TOR to visit the site, don't sign up for the email list. Maybe use a spare email address? I'd assume the email list is just alerts for new documentaries. News letters and email sign ups are extremely common?

Why does this site look like a honey pot?

Paradoxical intentions? Can you clarify what by visiting a website, you'd have "so much to lose"? That seems excessively paranoid.

I'm not involved with thoughtmaybe.com - if there were any other website hosting Adam Curtis films, please feel free to share.


My threat model is “if the site gets hacked and the user list gets leaked, who benefits and who is harmed? Certainly not the anonymous operators of the site. I only want for the users what the operators want for themselves.”

I do agree with your remediations by the way. It’s not any one thing that makes me suspicious. It’s the subject matter itself. TLAs will MITM and send you a 0day just to find a specific user if they are known to use a site so it’s more of a concern of visiting single purpose sites or niche sites in general as they don’t benefit nearly so much from your signal remaining hidden in the noise of otherwise innocuous traffic to a benign url such as archive.org or youtube.com.

Now that I mention it, it seems that the only indexer blocked by thoughtmaybe.com’s robots.txt is the one for archive.org. Why that may be is curious but I don’t know how common blocking that specific crawler is so I won’t speculate as to the reasons why.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: