Your VPS Provider Can Still Betray You, Monero or Not
Sam Bent
[{'start': '0.200', 'end': '2.633', 'text': "What's up everyone?\nI hope you're all doing well today."}, {'start': '2.633', 'end': '6.466', 'text': 'So I wanted to tell you about a subject\nthat I wanted to talk about'}, {'start': '6.466', 'end': '9.466', 'text': "for a little while now,\nbut really just haven't had the time."}, {'start': '9.500', 'end': '13.033', 'text': "And that's,\nbasically paying for VPNs with Monero."}, {'start': '13.166', 'end': '17.066', 'text': "It might make you feel like,\nknow you're checking that privacy box"}, {'start': '17.066', 'end': '21.600', 'text': 'or whatever, but depending on both\nyou and your adversary, that very well'}, {'start': '21.600', 'end': '26.466', 'text': 'could be a pretty big illusion\nand dangerous.'}, {'start': '26.466', 'end': '31.500', 'text': "If you're assuming that financial\nanonymity equals total operational"}, {'start': '31.500', 'end': '32.166', 'text': 'security.'}, {'start': '32.166', 'end': '35.866', 'text': "However, if you're not doing it correctly,\nit does it."}, {'start': '36.033', 'end': '41.400', 'text': 'Now, Monero is decisive when it comes\nto hiding transactional data.'}, {'start': '41.700', 'end': '45.900', 'text': 'It obscures the sender, receiver\nand the amount.'}, {'start': '45.933', 'end': '51.000', 'text': 'But the moment that you connect\nthat VPS to the internet,'}, {'start': '51.000', 'end': '54.933', 'text': 'especially through the clearing\nthat you introduce a list of attack'}, {'start': '54.933', 'end': '58.533', 'text': "services that Monero\nabsolutely doesn't cover at all."}, {'start': '58.933', 'end': '60.466', 'text': "And unless you're running"}, {'start': '60.466', 'end': '64.133', 'text': 'that box physically on infrastructure\nthat you actually control,'}, {'start': '64.633', 'end': '69.466', 'text': "you're completely depending\non a third party to not betray you"}, {'start': '69.633', 'end': '73.700', 'text': 'and not screw up at all\nand not get subpoenaed.'}, {'start': '74.533', 'end': '79.933', 'text': 'All of that equals up to a fairly large\nblind spot altogether.'}, {'start': '80.266', 'end': '84.633', 'text': "Now, I'm citing Monero here\nbecause in my opinion,"}, {'start': '85.200', 'end': '88.200', 'text': "and to my knowledge, it's the best."}, {'start': '88.433', 'end': '90.933', 'text': "And I'm such a fan, in fact,"}, {'start': '90.933', 'end': '94.466', 'text': "that I've had it\ntattooed on me for a long time."}, {'start': '94.666', 'end': '96.000', 'text': 'Like a really long time.'}, {'start': '96.000', 'end': '99.066', 'text': 'Like when I got it,\nit was worth like $10 a coin.'}, {'start': '99.200', 'end': '101.766', 'text': 'So Monero is the problem.'}, {'start': '101.766', 'end': '106.633', 'text': "It's arguably the most privacy\npreserving cryptocurrency"}, {'start': '107.533', 'end': '109.933', 'text': 'that actually is in existence.'}, {'start': '109.933', 'end': '113.333', 'text': 'What really breaks\nyour OpSec is in Monero.'}, {'start': '113.366', 'end': '115.766', 'text': "I mention it because it's really strong."}, {'start': '115.766', 'end': '119.066', 'text': "It's actually the infrastructure\nthat you have hanging around."}, {'start': '119.533', 'end': '122.533', 'text': 'So for example, when you buy a VPN,'}, {'start': '122.966', 'end': '127.733', 'text': "even if you pay in Monero,\nyou're still subject to the provider's"}, {'start': '127.900', 'end': '132.733', 'text': 'ability\nto do things like log and retain metadata.'}, {'start': '132.833', 'end': '136.700', 'text': 'And this includes things like IP address\nconnections, timestamps,'}, {'start': '136.766', 'end': '140.366', 'text': 'traffic volumes,\nand behavioral patterns as well.'}, {'start': '140.433', 'end': '145.666', 'text': "So even if they claim not to actually log,\nwhich you can't actually verify"}, {'start': '145.666', 'end': '149.733', 'text': 'unless you control the logging stack.'}, {'start': '149.733', 'end': '153.633', 'text': 'you have to assume that they do,\njust by default.'}, {'start': '154.066', 'end': '157.233', 'text': 'And the same goes with VPNs\nor any other infrastructure'}, {'start': '157.233', 'end': '160.633', 'text': "that you're essentially renting for a fee."}, {'start': '161.166', 'end': '165.200', 'text': 'Timing analysis\nbecomes a massive enemy of yours,'}, {'start': '165.200', 'end': '169.233', 'text': "and if you're using that VPN\nto run a monero node,"}, {'start': '169.433', 'end': '173.466', 'text': "for example, or like anything\nthat's blockchain related,"}, {'start': '173.533', 'end': '177.466', 'text': 'the provider sees the network patterns\nevery time your VP actually'}, {'start': '177.700', 'end': '180.700', 'text': 'sinks to the network or relays'}, {'start': '180.700', 'end': '184.200', 'text': 'a transaction, they see a machine'}, {'start': '184.200', 'end': '187.200', 'text': "that's pulling down blockchain data"}, {'start': '187.233', 'end': '190.733', 'text': 'in a specific and recognizable way, and.'}, {'start': '190.933', 'end': '194.033', 'text': 'Now combine\nthat with timestamp correlation'}, {'start': '194.333', 'end': '196.333', 'text': 'and they can start\nto actually fingerprint you,'}, {'start': '196.333', 'end': '200.600', 'text': 'especially if you connect\nconstantly from the same IP range'}, {'start': '200.600', 'end': '204.533', 'text': 'or do it on a regular basis\nor the same time intervals.'}, {'start': '204.533', 'end': '204.966', 'text': 'Right.'}, {'start': '204.966', 'end': '209.200', 'text': 'So operators of remote Monero nodes\nalready know'}, {'start': '209.533', 'end': '214.000', 'text': 'the IP addresses from which, transaction\nactually originates.'}, {'start': '214.000', 'end': '220.200', 'text': 'The transaction itself remains opaque,\nbut the node receiving it is exposed.'}, {'start': '220.200', 'end': '225.233', 'text': "The logic extends to any VPS,\nso most you're actually using"}, {'start': '225.500', 'end': '229.033', 'text': 'if you connect to the VPS\nto initiate a transaction'}, {'start': '229.466', 'end': '234.033', 'text': 'or sync your node,\nyou leak at the network level.'}, {'start': '234.433', 'end': '236.633', 'text': "You're not leaking what you're doing."}, {'start': '236.633', 'end': '239.633', 'text': "You're leaking\nthat you're doing something."}, {'start': '239.966', 'end': '242.933', 'text': "When you're doing it and where from."}, {'start': '242.933', 'end': '246.133', 'text': 'And if the host logs that data voluntarily'}, {'start': '246.133', 'end': '250.400', 'text': 'or under coercion,\nit builds a profile over time and'}, {'start': '251.400', 'end': '253.500', 'text': 'you become predictable.'}, {'start': '253.500', 'end': '256.266', 'text': "So that's not privacy right."}, {'start': '256.266', 'end': '257.100', 'text': 'Like dang.'}, {'start': '257.100', 'end': '260.033', 'text': "It's it's delayed exposure\nI guess you would say."}, {'start': '260.033', 'end': '265.700', 'text': "So you don't actually own the VPS\nthat you rent right."}, {'start': '265.800', 'end': '266.566', 'text': 'You lease it.'}, {'start': '266.566', 'end': '269.966', 'text': 'The provider owns\nthe hardware controls the hypervisor'}, {'start': '270.333', 'end': '273.333', 'text': 'and they can see whatever they want\nto see.'}, {'start': '273.333', 'end': '276.233', 'text': "Like full disk encryption doesn't help."}, {'start': '276.233', 'end': '279.300', 'text': 'Once the system is decrypted in Ram.'}, {'start': '279.300', 'end': '284.633', 'text': 'So like they can snapshot your storage,\ninspect memory in real time,'}, {'start': '285.266', 'end': '287.933', 'text': 'or do things like inject debugging'}, {'start': '287.933', 'end': '291.100', 'text': 'tools at a hypervisor level.'}, {'start': '291.100', 'end': '295.966', 'text': 'They can extract\nSSH keys, wallet files, or session tokens'}, {'start': '296.066', 'end': '299.266', 'text': 'If they run a compromised kernel\nor if preloaded'}, {'start': '299.266', 'end': '302.266', 'text': "malicious modules,\nnone of which you'll actually know"}, {'start': '303.066', 'end': '306.966', 'text': "unless you're running\nlike a hardened distro"}, {'start': '306.966', 'end': '310.633', 'text': 'on a locked down hypervisor\nthat you actually control.'}, {'start': '311.033', 'end': '312.866', 'text': 'The root is in your root.'}, {'start': '312.866', 'end': '314.700', 'text': "It's theirs. That"}, {'start': '315.766', 'end': '317.666', 'text': "that's kind of the point."}, {'start': '317.666', 'end': '321.366', 'text': "And there's a lot more to this\nand we'll get into that."}, {'start': '321.366', 'end': '324.366', 'text': "But that's the overall point\nthat I want to make."}, {'start': '324.966', 'end': '328.100', 'text': 'So you have side channel attacks as well.'}, {'start': '328.100', 'end': '331.766', 'text': "these VPS environments\naren't physically isolated."}, {'start': '332.233', 'end': '336.666', 'text': "So you're sharing the CPU cache,\nRam channels,"}, {'start': '337.033', 'end': '341.800', 'text': 'and even kernel modules\nwith other customers on the same node.'}, {'start': '342.133', 'end': '345.600', 'text': 'Now, Specter and Meltdown were massive'}, {'start': '345.600', 'end': '348.866', 'text': 'vulnerabilities that hit in 2018.'}, {'start': '349.333', 'end': '353.966', 'text': 'They exposed how modern CPUs\ntrying to be smart'}, {'start': '354.433', 'end': '359.166', 'text': "by guessing what code\nthey'll need to run next."}, {'start': '359.166', 'end': '362.600', 'text': "Kind of like an I'm\ntrying to guess a response"}, {'start': '362.866', 'end': '366.666', 'text': 'as as it goes through a trick\nthat was called speculative execution.'}, {'start': '367.100', 'end': '369.000', 'text': 'you can see where this is headed, right?'}, {'start': '369.000', 'end': '371.900', 'text': 'That guesswork leaks data, other programs'}, {'start': '371.900', 'end': '375.733', 'text': "running on the same machine,\nlike someone else's VPNs"}, {'start': '376.766', 'end': '378.866', 'text': 'can tap into that guesswork'}, {'start': '378.866', 'end': '382.466', 'text': "and read memory that they shouldn't\nbe able to actually see."}, {'start': '382.600', 'end': '385.500', 'text': "in a simple way of putting it,\nyou're supposedly"}, {'start': '385.500', 'end': '390.033', 'text': 'private data\ncan bleed over to a stranger session'}, {'start': '390.333', 'end': '394.733', 'text': 'just because the CPU is trying\nto be fast, basically.'}, {'start': '395.400', 'end': '400.933', 'text': 'So then we fast forward\nand in 2020, researchers ended up pushing'}, {'start': '400.933', 'end': '401.866', 'text': 'it even further.'}, {'start': '401.866', 'end': '403.800', 'text': 'They used a technique\nthat they called prime'}, {'start': '403.800', 'end': '409.266', 'text': "and probe to carry out a cross-VM\ncache attack, So here's how this works."}, {'start': '409.333', 'end': '414.966', 'text': 'The attacker runs, specifically crafted\ncode on their own VPNs hosted on the same'}, {'start': '414.966', 'end': '419.900', 'text': 'physical machine is yours\nis this code deliberately fills specific'}, {'start': '419.900', 'end': '424.433', 'text': "sections of the CPU's shared memory\ncache with data that they control?"}, {'start': '424.433', 'end': '427.500', 'text': "Basically, what they're doing\nis they're priming the cache."}, {'start': '427.766', 'end': '433.933', 'text': 'They sit and wait,\nand when your VPS runs its own processes,'}, {'start': '434.066', 'end': '437.133', 'text': 'it inevitably uses the same cache space.'}, {'start': '437.333', 'end': '441.100', 'text': 'Some of the attackers\ndata gets evicted or overwritten.'}, {'start': '441.300', 'end': '443.666', 'text': 'As your instructions use the CPU.'}, {'start': '443.666', 'end': '446.866', 'text': 'The attacker then probes the cache,\nmeasuring'}, {'start': '446.866', 'end': '450.166', 'text': 'how long it takes to access each section.'}, {'start': '450.166', 'end': '450.666', 'text': 'slower.'}, {'start': '450.666', 'end': '453.266', 'text': 'Access\nmeans that the spot was overwritten.'}, {'start': '453.266', 'end': '457.600', 'text': 'From that alone,\nthey can infer which parts of memory'}, {'start': '457.833', 'end': '461.900', 'text': 'you used and in what order and when.'}, {'start': '463.433', 'end': '466.433', 'text': 'So that tells them how your process is.'}, {'start': '466.433', 'end': '471.600', 'text': 'Behave like tell them watching your shadow\nto figure out where you are.'}, {'start': '471.766', 'end': '473.866', 'text': "There's no malware involved in this."}, {'start': '473.866', 'end': '478.466', 'text': "There's no it's like no code execution\ninside your actual own environment."}, {'start': '478.833', 'end': '481.833', 'text': 'Just passive observation'}, {'start': '481.933', 'end': '484.933', 'text': 'of hardware behavior, essentially.'}, {'start': '485.133', 'end': '487.933', 'text': 'And over time, it builds a fingerprint'}, {'start': '487.933', 'end': '491.366', 'text': 'of your system\nand your systems habits by default.'}, {'start': '491.666', 'end': '494.666', 'text': "And if you're on a shared VP hardware,"}, {'start': '494.900', 'end': '497.633', 'text': 'then this happens all silently.'}, {'start': '497.633', 'end': '504.066', 'text': "There's no logs or alerts or even evidence\nthat someone else was even watching."}, {'start': '504.066', 'end': '508.933', 'text': "So, we also have to layer\nin legal exposure because it's pretty big."}, {'start': '509.300', 'end': '512.500', 'text': 'Most VPS providers\noperate in jurisdictions'}, {'start': '513.000', 'end': '515.700', 'text': 'with hostile surveillance laws.'}, {'start': '515.700', 'end': '519.666', 'text': 'So for example, the US, the UK,\nthe Netherlands ones'}, {'start': '519.666', 'end': '524.400', 'text': 'like these countries\ngo way beyond data retention laws, right?'}, {'start': '524.400', 'end': '528.500', 'text': 'Like they have actual gag orders\nand providers can be forced'}, {'start': '528.733', 'end': '532.466', 'text': 'to start logging without actually\nnotifying any of the users.'}, {'start': '532.766', 'end': '536.133', 'text': "And if you're doing something\nthat triggers law enforcement"}, {'start': '536.400', 'end': '539.466', 'text': 'interest alone, running,'}, {'start': '540.433', 'end': '541.300', 'text': 'running a hidden'}, {'start': '541.300', 'end': '546.466', 'text': "service or, an arrow mixer like\nyou may never know that you're actually"}, {'start': '546.466', 'end': '549.900', 'text': 'being flagged until your infrastructure\nis actually seized.'}, {'start': '550.333', 'end': '554.100', 'text': 'And that seizure\nmight not even come with a knock.'}, {'start': '554.100', 'end': '557.166', 'text': 'It could be just a silent tap\non your traffic'}, {'start': '557.466', 'end': '561.933', 'text': 'or some, like a full image\nbackup of your entire VM.'}, {'start': '562.333', 'end': '568.166', 'text': "So these providers,\nthey're not built to protect you."}, {'start': '568.533', 'end': '571.766', 'text': 'They are built to comply.'}, {'start': '572.166', 'end': '574.700', 'text': 'Right. Like remember that.'}, {'start': '574.700', 'end': '579.666', 'text': 'And your VPN providers, no different\nbut the majority of VPN providers,'}, {'start': '579.666', 'end': '584.800', 'text': "I don't give advice on VPN providers\nbecause I'm not a regular YouTuber."}, {'start': '585.500', 'end': '589.700', 'text': "Even if the VPS provider isn't\nactively working with law enforcement,"}, {'start': '590.166', 'end': '595.500', 'text': "there's still a risk that your server\ncould be compromised in some way."}, {'start': '595.600', 'end': '596.000', 'text': 'Right?'}, {'start': '596.000', 'end': '599.066', 'text': "And that risk doesn't require a warrant."}, {'start': '599.100', 'end': '603.900', 'text': 'It could come from a malicious employee\ninside the company, or from a government'}, {'start': '603.900', 'end': '607.700', 'text': "that gained access to the provider's\nback end."}, {'start': '608.033', 'end': '611.900', 'text': 'Once inside, they could absolutely install\nmonitoring tools'}, {'start': '611.900', 'end': '615.166', 'text': 'or inject code without your knowledge and'}, {'start': '616.233', 'end': '618.200', 'text': 'I think really to'}, {'start': '618.200', 'end': '623.433', 'text': 'see how dangerous that is, like,\nlook at the report that chain analysis.'}, {'start': '623.433', 'end': '626.433', 'text': 'Did they rand Tampered Monero nodes.'}, {'start': '626.533', 'end': '629.333', 'text': "Not like they didn't\nbreak Monero's encryption,"}, {'start': '629.333', 'end': '632.700', 'text': 'but just to observe how transactions\nmove across the network.'}, {'start': '632.933', 'end': '637.266', 'text': 'And they use timing patterns\nand data volume and network'}, {'start': '637.266', 'end': '641.066', 'text': 'behavior to try and piece together\nwho is doing what.'}, {'start': '641.500', 'end': '644.866', 'text': 'Because the goal was to try\nto break Minero, which they failed at,'}, {'start': '644.866', 'end': '646.166', 'text': "but it's end of the story."}, {'start': '646.166', 'end': '648.600', 'text': "But that kind of attack\ndoesn't just apply to Minero."}, {'start': '648.600', 'end': '652.700', 'text': "It's a blueprint of sorts\nfor how surveillance works"}, {'start': '652.733', 'end': '656.466', 'text': 'in generalities, like when the target'}, {'start': '656.466', 'end': '659.466', 'text': "is using infrastructure\nthat they don't actually control."}, {'start': '659.533', 'end': '664.000', 'text': "So if you're running anything\nsensitive on a VPS whether it's a crypto"}, {'start': '664.000', 'end': '669.933', 'text': 'node, a messaging relay, or even\njust a scraper, pulling darknet data,'}, {'start': '671.466', 'end': '672.933', 'text': "you're somewhat vulnerable to"}, {'start': '672.933', 'end': '676.733', 'text': 'the same kind of passive surveillance,\nright?'}, {'start': '676.766', 'end': '680.266', 'text': 'Like you think that your server is locked\ndown, but'}, {'start': '681.633', 'end': '685.133', 'text': "it's on a machine\nthat anyone has access to."}, {'start': '685.133', 'end': '687.666', 'text': 'Really? Because someone else owns it.'}, {'start': '687.666', 'end': '691.266', 'text': 'They can log every connection it makes,'}, {'start': '691.466', 'end': '696.333', 'text': 'like every packet that gets sent\nand every pattern that informs.'}, {'start': '696.333', 'end': '697.900', 'text': "And the devil's in the details."}, {'start': '697.900', 'end': '700.900', 'text': 'atomic swaps can also carry similar risks.'}, {'start': '701.900', 'end': '702.800', 'text': 'These are great tools.'}, {'start': '702.800', 'end': '708.533', 'text': 'So, like they let you Swap Bitcoin form\nMonero without centralized intermediaries.'}, {'start': '708.533', 'end': '711.533', 'text': 'but many implementations'}, {'start': '711.633', 'end': '715.866', 'text': 'to some degree leak metadata\nspecifically like ports, relays,'}, {'start': '716.066', 'end': '719.766', 'text': 'relay behavior,\nand transactional sequencing,'}, {'start': '719.900', 'end': '721.800', 'text': 'all that kind of stuff\ncan be fingerprinted.'}, {'start': '721.800', 'end': '726.500', 'text': 'Like, you run those services from a VPS\nand you expose yourself.'}, {'start': '726.500', 'end': '732.300', 'text': 'The host can track the packet frequency,\ndestination entropy, even banner behavior.'}, {'start': '732.400', 'end': '738.366', 'text': "So none of this is theory, but it's more\nhow forensics actually works."}, {'start': '738.366', 'end': '741.466', 'text': "And all of this isn't\nthe end of the world."}, {'start': '741.466', 'end': '743.133', 'text': "Like, that's one thing I want to clarify."}, {'start': '743.133', 'end': '748.500', 'text': 'Monero gives you the strongest foundation\nthat you can really have to start from.'}, {'start': '748.500', 'end': '752.333', 'text': "The problem isn't that Monero fails\nbecause it doesn't like it."}, {'start': '752.533', 'end': '757.666', 'text': "It's that most users\ndon't walk down the layers around it"}, {'start': '757.666', 'end': '761.466', 'text': 'and the other thing to keep in mind is\nthere are mitigations like'}, {'start': '761.800', 'end': '763.000', 'text': 'run your own node.'}, {'start': '763.000', 'end': '764.866', 'text': "I can't stress that enough."}, {'start': '764.866', 'end': '767.400', 'text': 'This is hands down the best solution.'}, {'start': '767.400', 'end': '770.966', 'text': "Don't like outsource\nconsensus to third parties."}, {'start': '771.366', 'end': '776.966', 'text': "If you can't, the next best thing\nis using a remote node over Tor,"}, {'start': '777.400', 'end': '781.000', 'text': "preferably one\nthat's hosted as a dot onion service,"}, {'start': '781.400', 'end': '786.266', 'text': 'and that alone cuts out the clear\nnet exposure that you will have.'}, {'start': '786.533', 'end': '790.333', 'text': 'So, avoid storing\nanything persistent on the VPNs.'}, {'start': '790.700', 'end': '794.433', 'text': "Don't leave stuff\nlike wallets, keys, logs."}, {'start': '795.166', 'end': '796.700', 'text': 'any history behind.'}, {'start': '796.700', 'end': '799.233', 'text': 'Treat it like a burner.'}, {'start': '799.233', 'end': '803.866', 'text': 'And really,\nif you really have to use a VPS pick'}, {'start': '803.866', 'end': '807.600', 'text': "one that's privacy\nrespecting and general friendly."}, {'start': '808.033', 'end': '809.866', 'text': 'Obviously, I could name a few.'}, {'start': '809.866', 'end': '815.933', 'text': "I'm not going to because I dislike\nnaming specific products or brands."}, {'start': '816.266', 'end': '818.766', 'text': "Because I don't want\nto give an illusion of safety."}, {'start': '818.766', 'end': '820.133', 'text': "I think that's important."}, {'start': '820.133', 'end': '823.133', 'text': 'You should assume feds run all of them.'}, {'start': '823.366', 'end': '825.633', 'text': 'for all I know, they do. Like, do you'}, {'start': '826.600', 'end': '827.333', 'text': 'do you see the'}, {'start': '827.333', 'end': '830.800', 'text': 'like is a do\nyou see a point like use tor to access it.'}, {'start': '831.200', 'end': '836.066', 'text': 'If you can use a Multi-Hop\nVPN like, chain to access it.'}, {'start': '836.066', 'end': '841.100', 'text': 'If you have no other possible choice,\njust keep everything encrypted.'}, {'start': '841.233', 'end': '844.600', 'text': 'Disk, memory, communication, everything.'}, {'start': '844.600', 'end': '847.833', 'text': "Don't reuse IPS if it can be avoided."}, {'start': '847.833', 'end': '851.033', 'text': "Don't trust assurances on websites."}, {'start': '851.300', 'end': '853.333', 'text': 'Validate the setup yourself.'}, {'start': '853.333', 'end': '857.066', 'text': "Assume that you'll be targeted and build\naccordingly."}, {'start': '857.266', 'end': '861.133', 'text': 'Like historically,\nthis is where people typically get burned.'}, {'start': '861.433', 'end': '864.633', 'text': 'Great example of\nthis is Freedom hosting in 2013.'}, {'start': '864.966', 'end': '870.033', 'text': 'Was a like VPS\nlike set up and hosted Tor hidden services'}, {'start': '870.300', 'end': '874.033', 'text': 'and allowed anyone to rent from them\nand I mean anyone.'}, {'start': '874.466', 'end': '876.766', 'text': "Like if you look it up,\nyou'll see what I mean."}, {'start': '876.766', 'end': '880.200', 'text': 'The FBI ended up using browser zero days.'}, {'start': '880.233', 'end': '885.400', 'text': 'they also exploited infrastructure\ncentralization and predictability'}, {'start': '886.066', 'end': '890.666', 'text': 'logs, single point of failure\nclearnet admin access'}, {'start': '891.300', 'end': '894.400', 'text': 'all of that kind of stuff, is a major,\nmajor issue.'}, {'start': '894.400', 'end': '895.466', 'text': 'And a major red flag.'}, {'start': '896.933', 'end': '899.933', 'text': 'But that same exposure exists today.'}, {'start': '900.000', 'end': '905.000', 'text': "And if you don't control that machine,\nyou're going to have the same problems."}, {'start': '905.633', 'end': '909.700', 'text': 'So like yeah, paying with Monero\nabsolutely strips'}, {'start': '910.033', 'end': '912.066', 'text': 'your name off that invoice.'}, {'start': '912.066', 'end': '914.333', 'text': "But it doesn't protect your IP."}, {'start': '914.333', 'end': '918.633', 'text': "It doesn't erase your logs, doesn't harden\nsomeone else's hardware."}, {'start': '918.933', 'end': '921.933', 'text': 'That part is still on you.'}, {'start': '922.500', 'end': '924.933', 'text': 'Monero definitely protects'}, {'start': '924.933', 'end': '927.933', 'text': 'the actual transaction layer,'}, {'start': '928.066', 'end': '932.866', 'text': 'but the infrastructure is still our job.'}, {'start': '933.000', 'end': '934.833', 'text': 'Your job, my job.'}, {'start': '934.833', 'end': '939.900', 'text': 'luckily, things like the ability\nto host your own node exist and are free.'}, {'start': '940.400', 'end': '944.266', 'text': "So build it, control it,\nand don't outsource"}, {'start': '944.266', 'end': '949.033', 'text': 'your OpSec for convenience\nif it can possibly be avoided.'}, {'start': '950.333', 'end': '952.666', 'text': "Thank you for watching till the end\nand I'll see you in the next video."}]