A solution for your threat model is for the whistleblower to set up a proxy on some cloud server. For example, here are instructions for how to set up &#x27;Your own proxy and VPN on Amazon EC2&#x27; - <a href="https:&#x2F;&#x2F;en.wikibooks.org&#x2F;wiki&#x2F;How_to_Protect_your_Internet_Anonymity_and_Privacy&#x2F;Your_own_proxy_and_VPN_on_Amazon_EC2" rel="nofollow">https:&#x2F;&#x2F;en.wikibooks.org&#x2F;wiki&#x2F;How_to_Protect_your_Internet_A...</a> . Problem solved, no, for the problem envisioned in your model?<p>You write &#x27;the founder logs on to join the conversation ... with only the throwaway and CEO participating&#x27;. Why does the founder even want to &#x27;join the conversation&#x27;? The supposed reason is to prevent overreaction, but there are naysayers and doubters and even those who lie about a company for the &#x27;lulz&#x27;, so it would be odd to see a founder jump on this one criticism and not all of the others.<p>The tradeoff is a chance of finding the IP address of a user&#x27;s NAT&#x27;ed machine [1] among all of the <i>readers</i> (which is larger than the <i>commenters</i>) vs. the bigger downside of drawing attention to the thread. More people read a thread if there are comments, and I&#x27;ll bet that some people will track posting by founders of darling companies.<p>If there is a thread, then why doesn&#x27;t the founder let all the company&#x27;s fans downvote and chastise the whisteblower for being an anonymous liar? And in any case, the more readers, the less useful the IP&#x2F;geo tracking data.<p>The &quot;only interact with stories it has created&quot; has a big limitation. If there is a big thread, then the founder would post a response to the company&#x27;s blog, and someone will post a new story &quot;<i>X responds</i>&quot;. Our whistleblower would be unable to comment on this new thread.<p>[1] It would be better for our founder to use the Geolocation API than IP address. But our intrepid whistleblower even with Tor must be careful to strip geo and other identifying information from images, and other thing beyond what HN can hope to do, to be really safe.