Nyms are not enough. GitHub can still log your IP, which they will then take to your ISP and snatch you.
Means you should only use GitHub over Tor. And, as someone who does exactly that, I can attest that it's a pain.
Plus, you better use Tor for every service where you use that nym (SN, Nostr, Shitter), because you can be sure they will check them all fishing for your real IP.
This is why Jack has been pushing so hard for a Nostr implementation of Github.
We need an open source, relay-based system for hosting open source repositories.
reply
There was issue about GitHub over Tor for JoinMarket in the past actually. https://github.com/JoinMarket-Org/joinmarket-clientserver/issues/1302
reply
Good points. Do VPNs like Mullvad solve this? It seems like decentralized git alternatives are also necessary now.
reply
No, they don't. Your privacy rests at the behest of the VPN company. Even Mullvad, who don't collect personal info from you, could be tracing your entry IP and hand over that information to the authorities.
Don't use VPNs for identity privacy!
VPNs are for:
  • working around Netflix's region-locked content
  • securing communication from eavesdroppers (content privacy)
And I don't get that one about Git alternatives. Git is perfectly decentralized, perhaps you meant GitHub?
reply
Thanks! Yeah, I meant GitHub.
I guess Satoshi is the ultimate example to aspire to. Whatever he did to remain pseudonymous seems to have worked.
reply
And, as someone who does exactly that, I can attest that it's a pain.
Using Tor for almost everything... I agree, it's a pain and it's a way to understand how fuck up is "the internet" today. Be safe out there!
reply