ProxyHam is a “hardware proxy” that puts you a mile away from your IP address using a 900MHz radio connection
This Online Anonymity Box Puts You a Mile Away From Your IP Address — In the game of anonymity-versus-surveillance online, the discovery of the user's IP address usually means game over.
Context & Ripple Effects
ProxyHam attacks the oldest weakness in online anonymity — the IP address — not with software but with hardware: a 900MHz radio link that physically separates the machine doing your browsing from the network whose address gets logged. It arrived the same summer researchers were building HORNET, a faster Tor alternative, as part of a broader push to make attribution harder.
The device never got its moment: weeks after this write-up, development and its DEF Con talk were abruptly cancelled and existing units destroyed. But its core idea — borrowing someone else's location so your traffic looks like theirs — resurfaced a decade later in software form, when researchers found cybercriminals shifting from bulletproof hosts to residential proxies that disguise malicious traffic as ordinary home activity.
First-order effects
- Users who buy a ProxyHam unit get IP-address separation by physics rather than trust in a VPN operator — the same property Hola's users lost when it was revealed to be selling their bandwidth into a botnet.
- Anyone attributing activity to an IP geolocation now faces a device designed to break that assumption at the link layer, before any server-side log is written.
Second-order effects
- ProxyHam's one-user-per-radio model proved commercially fragile; the demand it surfaced migrated to rented residential-proxy networks built from consumer devices, culminating in nation-state hackers using preinstalled software on low-cost home devices for the same disguise at scale.
- Defenders' response has been camouflage on both sides of the arms race — Tor's WebTunnel bridge hides censorship circumvention inside HTTPS traffic, mirroring how proxies hide attack traffic inside normal browsing.
Third-order effects
- If the pattern holds, IP addresses stop functioning as a reliable identity or location signal for security decisions, forcing attribution and fraud systems toward higher-layer signals — device fingerprints, behavioral data, and ultimately proof-of-personhood schemes.
- Anonymity infrastructure keeps bifurcating: open tools like Tor serve censored users while criminal-grade versions of the same technique industrialize inside botnets, pressuring regulators to treat residential-device networks as critical infrastructure.
The trend: IP-location obfuscation has evolved from hobbyist hardware like ProxyHam into commoditized residential-proxy networks operated by criminals and nation-states alike.