• 2 Posts
  • 77 Comments
Joined 2 years ago
cake
Cake day: June 15th, 2023

help-circle


  • Every wifi device we own that’s connected to wifi and the Internet can be precisely located by the companies involved even when using a VPN.

    If you have an Android phone you’ve probably noticed a prompt at some point asking for your permission to transmit precise location information and enable wifi scanning. Those wifi SSIDs and MAC addresses along with its GPS location is sent back to Google. The combination of all that information is almost as unique as a fingerprint. They can use that along with signal strength of each AP in the area to determine your device’s location with precision. (Google used to allow apps like Maps to be used with wifi scanning turned off, but no more.)

    Your Google stick can’t tell it’s on a VPN directly, but even without GPS Google can still pinpoint its physical location using their database of SSIDs and MAC addresses, and if they want to they can determine you’re using a VPN by comparing that to the expected location of your IP address. There probably aren’t enough people doing this right now to make it worth the trouble to detect your VPN, but IMO it’s just a matter of time before they decide it is.

    I also expect that Google sells that information to every company willing to pay for it, so almost every single wifi enabled device can be precisely located if it can transmit data to the Internet.

    We live in a scary time.





  • OpenWRT is amazingly flexible and would be a great place to start.

    I switched from DD-WRT last year and have been amazed how good OpenWRT is. There are thousands of software packages that allow you to do pretty much anything you can think of on inexpensive hardware. Used Netgear R7800s are available for less than $50 on ebay or there are plenty of newer hardware options if you want to spend more. Those thousands of downloadable software packages include Wireguard and Adguard Home, plus there are OpenWRT integrations for Home Assistant. The forum is full of people who are happy to help newcomers.

    I started by running OpenWRT in a virtual machine to get familiar with the UI and moved on to a live installation. Highly recommended, especially if you enjoy learning.








  • Sounds like my laptop will be plenty fast for some time to come.

    This platform doesn’t use much power to begin with, but I do run TLP using a battery profile despite the fact it’s always plugged in. My intent is to lower the power consumption a bit further and extend battery run time if the power fails. There’s no noticeable impact on application performance. If you’re running Linux maybe it will work on your hardware.



  • If I’m understanding what you want to do, I have this set up on an OpenWRT router with multiple remote endpoints used for different devices. Our phones go to a hosted Wireguard server in one city, PCs to an OpenWRT router in a different location, and IOT devices that aren’t blocked and guest devices exit access the Internet locally. With some additional work you should also be able to have remote devices connected via WG exit wherever you like.

    Policy Based Routing on OpenWRT makes this possible and it should be doable as long as the devices you want to allow to exit the remote server are included in that server’s “Allowed IPs” setting. (Maybe there’s a way around that, but I haven’t had to deal with it.)