Hi,

Does anyone know how to browse the web (http protocol) anonymously? I
prefer a plugin working with IE or FireFox.

Thanks in advance.

Il mittente di questo messaggio|The sender address of this
non corrisponde ad un utente   |message is not related to a real
reale ma all'indirizzo fittizio|person but to a fake address of an
di un sistema anonimizzatore   |anonymous system
Per maggiori informazioni      |For more info
https://www.mixmaster.it

[ Post a follow-up to this message ]

George Orwell schreef:
> Hi,
>
> Does anyone know how to browse the web (http protocol) anonymously? I
> prefer a plugin working with IE or FireFox.
>
> Thanks in advance.

http://tor.freehaven.net/

There is a compilation of Firefox with Tor in it. I don't know how up to
date it is kept with new browser exploits. But it should be easy to use.

[ Post a follow-up to this message ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

"Thomas J. Boschloo" <nospam@hccnet.nl> writes:

> George Orwell schreef: 
[vbcol=seagreen] 
[vbcol=seagreen] 
[vbcol=seagreen]
> http://tor.freehaven.net/

Note however that a resourceful adversary can trace Tor browsing or
any other browsing that is "real time", i.e. has low latency.  From
the Tor documentation:

.. for low-latency systems like Tor, end-to-end traffic
correlation attacks [8, 21, 31] allow an attacker who can observe
both ends of a communication to correlate packet timing and volume,
quickly linking the initiator to her destination.

http://tor.eff.org/cvs/tor/doc/desi.../challenges.pdf

To get untraceable anonymity, high random latency and mixing with
other traffic is necessary.  This can be achieved by sending a http
request through a chain of anonymizing remailers to a web-to-mail
gateway with a Reply-To: address that causes the requested page to
show up on alt.anonymous.messages.  Take a full feed of a.a.m at all
times without interruption, and pluck the page from there when it
appears.


-- StealthMonger
<StealthMonger@hod.aarg.net>
<StealthMonger@nym.panta-rhei.eu.org>
<StealthMonger@nym.alias.net>

--
stealthmail: Scripts to hide whether you're doing email, or when,
or with whom.  http://stealthsuite.afflictions.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.8+ <http://mailcrypt.sourceforge.net/>

iD8DBQFHGn/ +DkU5rhlDCl4RAvZ6AKC0TOyloLCyquNmWM5FE88
jhXNZTQCfc3+v
k8EEbxzHGmnv64g4PCVsxgY=
=XuEu
-----END PGP SIGNATURE-----

[ Post a follow-up to this message ]

Thanks a lot both Thomas and Stealthmonger.
My purpose is not to log my real ip-address in various web-forums.
I think Tor serves that purpose well, doesn't it?

On Sun, 21 Oct 2007 01:20:14 +0200 (CEST), StealthMonger
<Use-Author-Supplied-Address-Header@[127.1]> wrote:

>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>"Thomas J. Boschloo" <nospam@hccnet.nl> writes:
> 
> 
> 
> 
>
>Note however that a resourceful adversary can trace Tor browsing or
>any other browsing that is "real time", i.e. has low latency.  From
>the Tor documentation:
>
>   ... for low-latency systems like Tor, end-to-end traffic
>   correlation attacks [8, 21, 31] allow an attacker who can observe
>   both ends of a communication to correlate packet timing and volume,
>   quickly linking the initiator to her destination.
>
>http://tor.eff.org/cvs/tor/doc/desi.../challenges.pdf
>
>To get untraceable anonymity, high random latency and mixing with
>other traffic is necessary.  This can be achieved by sending a http
>request through a chain of anonymizing remailers to a web-to-mail
>gateway with a Reply-To: address that causes the requested page to
>show up on alt.anonymous.messages.  Take a full feed of a.a.m at all
>times without interruption, and pluck the page from there when it
>appears.
>
>
> -- StealthMonger
>	 <StealthMonger@hod.aarg.net>
>	 <StealthMonger@nym.panta-rhei.eu.org>
>	 <StealthMonger@nym.alias.net>
>
> --
>   stealthmail: Scripts to hide whether you're doing email, or when,
>   or with whom.  http://stealthsuite.afflictions.org
>
>-----BEGIN PGP SIGNATURE-----
>Version: GnuPG v1.4.6 (GNU/Linux)
>Comment: Processed by Mailcrypt 3.5.8+ <http://mailcrypt.sourceforge.net/>
>
>iD8DBQFHGn/ +DkU5rhlDCl4RAvZ6AKC0TOyloLCyquNmWM5FE88
jhXNZTQCfc3+v
>k8EEbxzHGmnv64g4PCVsxgY=
>=XuEu
>-----END PGP SIGNATURE-----

Il mittente di questo messaggio|The sender address of this
non corrisponde ad un utente   |message is not related to a real
reale ma all'indirizzo fittizio|person but to a fake address of an
di un sistema anonimizzatore   |anonymous system
Per maggiori informazioni      |For more info
https://www.mixmaster.it

[ Post a follow-up to this message ]

George Orwell schreef:
> Thanks a lot both Thomas and Stealthmonger.
> My purpose is not to log my real ip-address in various web-forums.
> I think Tor serves that purpose well, doesn't it?

It does. But be sure to turn off Javascript, ActiveX, Java, Alexia and
stuff in your browser.

Also see chapter 16 in
http://birdsofafeather.bravehost.com/DrWhoFAQ.txt

Websites can trick your browser into transmitting your real IP through
Tor and you have to be more clever than those sites.

[ Post a follow-up to this message ]

Thomas J. Boschloo schreef:
> George Orwell schreef: 
>
> It does. But be sure to turn off Javascript, ActiveX, Java, Alexia and
> stuff in your browser.
>
> Also see chapter 16 in
> http://birdsofafeather.bravehost.com/DrWhoFAQ.txt
>
> Websites can trick your browser into transmitting your real IP through
> Tor and you have to be more clever than those sites.

Sorry. It was cruel from me to post a link for someone that wants to be
anonymous :-) Here goes:


16.  How do I "cover my tracks" online?

Never surf naked.  Always, always use a proxy.  The easiest method is
to use Tor.  Tor is now bundled together with Vidalia and Privoxy.
it is simple to install and use.  Vidalia is the control panel for
Tor.  However, you can achieve the same by right clicking on the Tor
icon on the Taskbar.  Installing the Vidalia bundle will install both
Tor and a program called Privoxy.  Together these two programs will
protect both your privacy (Privoxy) and anonymity (Tor).  Vidalia
will also install the Torbutton on your FireFox browser.  A very
useful way to enable/disable Tor.

Using Privoxy is necessary because browsers leak your DNS requests
when they use a SOCKS proxy directly, which is bad for your anonymity.
Privoxy also removes certain dangerous headers from your web requests
and blocks obnoxious ad sites like Doubleclick.

[ Post a follow-up to this message ]

Thanks a lot both Thomas and Stealthmonger.
My purpose is not to log my real ip-address in various web-forums.
I think Tor serves that purpose well, doesn't it?

Il mittente di questo messaggio|The sender address of this
non corrisponde ad un utente   |message is not related to a real
reale ma all'indirizzo fittizio|person but to a fake address of an
di un sistema anonimizzatore   |anonymous system
Per maggiori informazioni      |For more info
https://www.mixmaster.it

[ Post a follow-up to this message ]

StealthMonger wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> "Thomas J. Boschloo" <nospam@hccnet.nl> writes:
> 
> 
> 
> 
>
> Note however that a resourceful adversary can trace Tor browsing or
> any other browsing that is "real time", i.e. has low latency.  From
> the Tor documentation:
>
>    ... for low-latency systems like Tor, end-to-end traffic
>    correlation attacks [8, 21, 31] allow an attacker who can observe
>    both ends of a communication to correlate packet timing and volume,
>    quickly linking the initiator to her destination.

How many adversaries have the ability to monitor both their target,
and all 2127 nodes at the same time?

Tor may not be perfect, it may not even be the most hardened way to
obtain information anonymously, but it is truly anonymous and it's the
best game in town for general purpose anonymity hands down.

[ Post a follow-up to this message ]

"Thomas J. Boschloo" <nospam@hccnet.nl> wrote:

> George Orwell schreef: 
>
> It does. But be sure to turn off Javascript, ActiveX, Java, Alexia and
> stuff in your browser.
>
> Also see chapter 16 in
> http://birdsofafeather.bravehost.com/DrWhoFAQ.txt

"Using Privoxy is necessary because browsers leak your DNS requests
when they use a SOCKS proxy directly, which is bad for your anonymity."

False information. Most browsers actually do not leak DNS requests.
Privoxy may be necessary for users of outdated software like you and
Dr. Who, but for most of us it's an unnecessary waste of resources and
an added point of failure.

>
> Websites can trick your browser into transmitting your real IP through
> Tor and you have to be more clever than those sites.

Clever?

Has nothing to do with it. You have to be more informed. Which is why
Dr. Who's FAQ and your inevitable stupidity are so dangerous to people
who don't know any better.

[ Post a follow-up to this message ]

On Tue, 23 Oct 2007 01:53:23 +0200 (CEST), Non scrivetemi wrote:
 
>
> How many adversaries have the ability to monitor both their target,
> and all 2127 nodes at the same time?

Hundreds, a 1,000?

> Tor may not be perfect, it may not even be the most hardened way to
> obtain information anonymously, but it is truly anonymous and it's the
> best game in town for general purpose anonymity hands down.

Brst, yes; truly anonymous, nope.
--
"You can't trust code that you did not totally create yourself"
Ken Thompson "Reflections on Trusting Trust"
http://www.acm.org/classics/sep95/

[ Post a follow-up to this message ]