Item — HN Reader

hmm, apart from ttl, you can use other tcp fields e.g. windows, tcp-options, packet-length etc. then, from a captured trace run passive os fingerprinting to find out with reasonable certainty the device generating the traffic.

these can/may be manipulated via ip-tables, but then you still have a huge data-volume to account for...

3 comments

Can iPhone just route all your traffic through some encrypted VPN? I've heard there's a port of OpenVPN for iOS — that should be sufficient.

At least you'll be sure telco guys are not inspecting your packets by any means, be it "teethering detection", blocking some kind of traffic, or something more malicious, like profiling your Google searches. (Timing analysis may still apply.)

Not to mention things like adobe checking for updates

Yeah, it is trivial to analyze traffic of somebody else when you are working in FBI with court order...