Anonymous Servers - Incontrovertable proof Tor+privoxy Not anonymous on ssl connections

This is Interesting: Free IT Magazines  
Home > Archive > Anonymous Servers > March 2005 > Incontrovertable proof Tor+privoxy Not anonymous on ssl connections





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Incontrovertable proof Tor+privoxy Not anonymous on ssl connections
notborn@yesterday.org

2005-03-06, 8:45 pm

I now have proof that Tor + Privoxy does not give a fully
anonymous connection on ssl connects. But since the rest
of the a*holes in this group never answer MY posts, I'm not
going to give the evidence. Only to say that do not trust
that combination to protect your anonymity when connection
ssl to websites. Have a nice day. (And I don't care if you
call me a troll, because I know the reason I am posting-to
desseminate the truth.




A.Melon

2005-03-07, 5:45 pm

On 7 Mar 2005, notborn@yesterday.org wrote:
>I now have proof that Tor + Privoxy does not give a fully
>anonymous connection on ssl connects. But since the rest
>of the a*holes in this group never answer MY posts, I'm not
>going to give the evidence. Only to say that do not trust
>that combination to protect your anonymity when connection
>ssl to websites. Have a nice day. (And I don't care if you
>call me a troll, because I know the reason I am posting-to
>desseminate the truth.
>


As long as you have setup your browser so that SSL connects also go
through the proxy, it will be anonymous. A lot of people forget to do
that and just set a proxy for http connections.

If you've set up Privoxy to block your User-Agent header for example
then Privoxy will be unable to do that over an SSL connection. It won't
be able to block ads either. The SSL encryption is between your browser
and the server, so Privoxy can't modify anything as it can't see the
actual text; it just passes it unmodified.

That doesn't remove your anonymity though, unless you've set your User-
Agent header to contain your name, address, phone number and favorite
color. The connection still goes through a set of tor nodes like
before.

Just remember to set your browser to use Privoxy for SSL too and you're
fine.

Anonymous via Panta Rhei

2005-03-08, 2:45 am

In article <0MW1WXKB38417.8641435185@anonymous.poster>,
notborn@yesterday.org wrote:
>I now have proof that Tor + Privoxy does not give a fully
>anonymous connection on ssl connects. But since the rest
>of the a*holes in this group never answer MY posts, I'm not
>going to give the evidence. Only to say that do not trust
>that combination to protect your anonymity when connection
>ssl to websites. Have a nice day. (And I don't care if you
>call me a troll, because I know the reason I am posting-to
>desseminate the truth.


OH GOODY! Another goobah with a mission, claiming that something is leaking
information. Next comes the "Tor + Privoxy Blows Your privacy" campaign

if you have "Proof", then either post it or shut the XXXX up.


~~~~~~~~~~~~~~~~~~~~~
This message was posted via one or more anonymous remailing services.
The original sender is unknown. Any address shown in the From header
is unverified. You need a valid hashcash token to post to groups other
than alt.test and alt.anonymous.messages. Visit www.panta-rhei.dyndns.org
for abuse and hashcash info.




Thomas J. Boschloo

2005-03-12, 7:45 am

-----BEGIN PGP SIGNED MESSAGE-----

notborn@yesterday.org wrote:
> I now have proof that Tor + Privoxy does not give a fully
> anonymous connection on ssl connects. But since the rest
> of the a*holes in this group never answer MY posts, I'm not
> going to give the evidence.


You're Daniel Joseph Min by any chance? Your posts are just annoying and
off topic here..

Thomas
- --
"It is of course well known that careless talk costs lives, but the full
scale of the problem is not always appreciated." - DNA, THHGTTG Chapter 31
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iQB5AwUBQjLWJwEP2l8iXKAJAQGcSQMfQw8nx1Qw
1c7jzFYE0gXG7xDAXpJFG8qM
N1avaWtfDvrk+HltagTFVYPX0Oitz8XFE6QPhy3Z
lT+/AuBCA0H1LngKddMP3Yho
X+TKwvso1FO7H2owiTUi2rOM1bXxKpC2TbKXkw==

=Fq0A
-----END PGP SIGNATURE-----
Italy Anonymous Remailer

2005-03-12, 5:45 pm

On Sat, 12 Mar 2005, "Thomas J. Boschloo" <nospam@hccnet.nl.invalid> wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>
>notborn@yesterday.org wrote:
>
>You're Daniel Joseph Min by any chance? Your posts are just annoying and
>off topic here..
>
>Thomas


I second that opinion.









Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com