Xerobank + Java

[iNF]

Right everyone knows about Xerobank that masks your IP through a proxy right?

I'm trying to get JAVA to also work with it in firefox, however we know Java runs as a seperate application and so I have been trying to use SOCKS to get it to run.

I know from the TOR FAQ that the socks server is on port 9050 but how I make this work with Java??

I had no look so far..

http://img412.imageshack.us/img412/2446/24412383.jpg

Do i need to enter the settings here??

I tried entering 9050 into the socks field, saving the file but TOR is unable to restart and run afterwords, maybe the generator app is creating a corrupt config.ini file??

http://img517.imageshack.us/img517/1153/13627222.jpg

[SteveTX]

java disabled in xbbrowser tor-mode because tor does not have a vpn connection so java can be used as a sidechannel leak.

free solutions:
1. janusvm
2. tor livecd

[iNF]

I still think its possible somehow..

Looks heres a guy doing exactly what I said here using the outpost firewall application..

http://www.outpostfirewall.com/forum...ad.php?t=21988

But i can't seem to get his theory working

[iNF]

In his post he says...

However, Java is a separate program who might be controlled. There's a Java control panel on Windows who might be modified to, instead of use the browser settings, leave the option "Use proxy server" selected. Go to Advanced... and fill these forms:

Quote:
Advanced Network Settings

HTTP: Port: 0
Secure: Port: 0
FTP: Port: 0

Socks: localhost - Port: 9050
That way, if you do that test:

http://ha.ckers.org/weird/tor.cgi

Your Tor IP will be reported twice, instead of the first Tor IP and the second, your Internet Service Provider IP.

That way, Firefox.exe will not try to make direct connections.

There's also another Java test who can't leak your true IP, and instead, reports localhost/127.0.0.1 IP. But this is a flaw in Java. Most of sites out there are using this technique. That doesn't mean they will not find the correct code in the future.

[SteveTX]

Trust me. I wrote the program you are using (torpark/xbbrowser). I disabled java when using tor on purpose.
Java does not respect proxy settings. If you do what he did, it will leak.

If you want to avoid java leaks, you need to either use one of the free solutions i mentioned above, or upgrade to a vpn connection.