|
Home > Archive > Anonymous Servers > March 2006 > MAJOR BUG! w/Tor-Privoxy! ANON-FAILURE!
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
MAJOR BUG! w/Tor-Privoxy! ANON-FAILURE!
|
|
| Jack Blivins 2006-03-25, 9:53 am |
| I recently set up the Tor/Privoxy package that puts the
little onion down on the taskbar.
I tested it and it seemed OK, just like previous
installations of the separate programs.
I'm using it with the latest Firefox.
I noticed that sometimes when activated as a proxy, the
little Privoxy logo stayed blue and didn't show the
clockwise rotational activity that signals the
Tor/Privoxy working properly. Other times, it would be
green but also not showing the rotational activity.
Tonight I discovered that this package is
intermittantly NOT anonymizing and is passing the
originating IP to the site, and that it will NEVER
anonymize to certain sites!
I show that it's working and anonymizing properly when
I link to an IP test site, but whenI I went to
www.safe-mail.net, a high security webmail site in
Israel, the Privoxy signal doesn't go and webmail
posted from my account there=20
NOTE: Sender is not responsible for any content below
this line.
| |
|
| -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On Fri, 24 Mar 2006 02:04:43 -0600, Jack Blivins wrote in
Message-Id: <w4adnfFL6-WGNb7ZnZ2dnUVZ_vadnZ2d@teksavvy.com>:
Dear Jack/Charles/Eeelbash (Sigh),
> Tonight I discovered that this package is
> intermittantly NOT anonymizing and is passing the
> originating IP to the site, and that it will NEVER
> anonymize to certain sites!
Tor cannot work in the manner you descibe. Your browser talks to
Privoxy, Privoxy talks to your Tor client and then your Tor client talks
to Tor servers. Providing that chain of events happens, Tor either
works or it does not. There is no scope for it to selectively bypass
all the Tor servers and dish up your IP address at a destination.
>
> I show that it's working and anonymizing properly when
> I link to an IP test site, but whenI I went to
> www.safe-mail.net, a high security webmail site in
> Israel, the Privoxy signal doesn't go and webmail
> posted from my account there=20
Have you got Javascript / Flash enabled?
Try loading the NoScript plugin for Firefox, it's excellent.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iQEVAwUBRCOuf2oLu9HNUqmMAQoJjwgAlidLOgYa
e7ydFTApKUESb/CwJ3wDwIES
Bp303vcJjfXDG4RqNUxFwOvsIUZjTdTgRG0uY6Zw
NCPLn3yZXUiVN/k26Npc/KKn
GOy/gLBmPHF0X/D6GSVK/B3YrxOv8WjvY9+KK59OJwNIw65YYtiO/Wj7GNADcvJx
zSEuGdvheIYRp1aDcAiOEsL61S7FBqk5A6nMezxK
rO+NntRpud5LDNG0YAB6eUxp
i8BbwvTVKgwPIBdLLCz9X9VSx5t5/wc2K4rCZFO7274Cq1zH5ooF0ZLd8xkM3TCT
OvGgzGwxVOSuq8GoBe4O9bo3vC4bp0HdMg5wO/f6cDd90qqedWH5EQ==
=WVlX
-----END PGP SIGNATURE-----
--
pub 1024D/8ED57743 2003-07-08 Bananasplit Operator
Key fingerprint = 796F 67E0 E890 A0BB BDAE EBB4 94A6 7A09 8ED5 7743
uid Admin <admin.bananasplit.info>
| |
| Anonymous 2006-03-25, 9:53 am |
| From: Zax <flee...@bananasplit.info> writes:
> Tor cannot work in the manner you descibe. Your
> browser talks to Privoxy, Privoxy talks to your
> Tor client and then your Tor client talks to Tor
> servers. Providing that chain of events happens,
> Tor either works or it does not. There is no scope
> for it to selectively bypass all the Tor servers
> and dish up your IP address at a destination.
Pay close attention: That's EXACTLY what's happening.
I have no idea how www.safe-mail.net is doing it, but
they are blocking the function of Tor/Privoxy at my end.
I have been testing it for the past hour.
It is 100% consistent.
It is 100% "selective."
> Have you got Javascript / Flash enabled?
Initially I did, then turned it off. It made no difference.
> Try loading the NoScript plugin for Firefox, it's excellent.
I just did. It made no difference. This site still defeats
Tor/Privoxy. I do not know how. All other sites I've tested
are processed normally.
Not to get utterly paranoid, but I was doing a bit of honeytrap
traffic on this Israeli site a while back, dummy encrypted
traffic to Gaza and Azerbaijan.
That may explain something -- or not.
| |
| Thrasher Remailer 2006-03-25, 9:53 am |
| In article <e00apv$asf$1@bananasplit.info>
Zax <fleegle@bananasplit.info> wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> On Fri, 24 Mar 2006 02:04:43 -0600, Jack Blivins wrote in
> Message-Id: <w4adnfFL6-WGNb7ZnZ2dnUVZ_vadnZ2d@teksavvy.com>:
>
> Dear Jack/Charles/Eeelbash (Sigh),
>
>
> Tor cannot work in the manner you descibe. Your browser talks to
> Privoxy, Privoxy talks to your Tor client and then your Tor client talks
> to Tor servers. Providing that chain of events happens, Tor either
> works or it does not. There is no scope for it to selectively bypass
> all the Tor servers and dish up your IP address at a destination.
Unless he hasn't selected Tor for SSL connections in Firefox. That would then
give the appearance of selectivly bypassing certain sites - those requiring SSL.
| |
| Anonymous 2006-03-25, 9:53 am |
| In article <DW4TI5SU38800.1417939815@anonymous.poster>
Anonymous <Use-Author-Supplied-Address@[127.1]> wrote:
>
>
> Pay close attention: That's EXACTLY what's happening.
No, you pay close attention. safe-mail.net uses HTTPS. You only have proxying
set up for HTTP. Set it up for HTTPS too and euphoria will be yours.
| |
| Thrasher Remailer 2006-03-25, 9:53 am |
| On Fri, 24 Mar 2006, Anonymous <nobody@invalid.org> wrote:
>In article <DW4TI5SU38800.1417939815@anonymous.poster>
>Anonymous <Use-Author-Supplied-Address@[127.1]> wrote:
>
>No, you pay close attention. safe-mail.net uses HTTPS. You only have proxying
>set up for HTTP. Set it up for HTTPS too and euphoria will be yours.
Save your breath. This is some kid who thinks he's busted TOR/Privoxy
"cheating", selectively sending IP numbers depite the fact that it's
technically impossible.
|
|
|
|
|