Client isolation doesn’t help. That is just the access point not routing traffic between connected devices. The problem with WiFi is it is a radio signal. Everybody in range can receive 100% of all communication on that network. Just by being in range the attacker can do passive sniffing. No wiretap needed like with cabled networks.

WiFi is encryoed if it uses a password. So any public WiFi without a password can be sniffed by literally every device in range (no need to connect to the WiFi for sniffing). On public WiFi with a password, the radio signal is encrypted but everybody knows the encryption key. So everybody connected to the WiFi can still sniff the traffic of everybody else.

That encryption is only on the WiFi level, so encrypted radio signals, not on the actually traffic level (like TLS/HTTPS etc).

The post office knows who you are sending letters to. They have to know because they have to deliver it. They do not know the content of the letter. They also dont know if the letter will be passed along by the receiver to a different destination.

Your ISP knows you are sending traffic to a VPN but not where proton is sending it to. The VPN knows where you are sending traffic to but not the content of that traffic. So if you browse a website that only serves pirated content, then they knows you are consuming pirated media but not which media.

If the law requires the VPN to report any and all traffic to blacklisted sights then a “no logs policy” would breach that law.

However to make this law work, Italy would have to ban all VPNs and http proxy services outside of Italy. Italy would have to force pretty mutch the whole world to follow this law for it to work.

What happens if you run a tiny server on AWS in the USA to proxy your private traffic. Unless AWS USA is watching all traffic to see if it complies with Italian law there is no way to enforce it.

No, why would it? It will run code in the context of the current user which is absolutely enough to start a new process that will run in the background, download more code from a attacker server and allow remote access. The attacker will only have as much permissions as the user executing the code but that is enough to steal their files, run a keyloggers, steal their sessions for other websites etc.

They can try to escalate to the admin user, but when targeting private victims, all the data that is worth stealing is available to the user and does not require admin privs.

They actually do. To avoid infinite loops. If a URL redirects to the identical URL for more than ~5 times most browsers will refuse to load and show an error instead.

That’s why sites like this will generate new URLs with the same content.

Since no arena is specified I assume it to be the only logical place.

In space! (the winner is brought back to their natural habitat)

Everything else would be unfair to at least one of the parties.

I think the ants would outlast all the animals and insects. They might freeze solid and (some) might survive the unfreezing after the figh. Or they could form a giant ball where the ones in the middle survive. And who cares if 19kg die.

On the other hand, the oak would probalby last weeks and could sprout new leaves and roots again if given proper treatment back on earth.

So … GO TREE!