Hi all. I heard that Tor can provide certain level of anonymous on the web. I've read some on the Tor and other website but think I still not get it right. So is Tor + https - script - plugin = better privacy? And the problem is, a lot of websites don't have https. I installed TBB + Privoxy that somebody recommend, run it and try http://whatismyipaddress.com/. It saw my ip without any problem. Is it my setting problem or there is another way for visiting non https websites? Thanks a lot.
It's easy. TOR itself will offer you anonymity (the server you connect to will not know who you are). HTTPS will offer you a degree of confidentiality (nobody will be able to read your data until it arrives at destination).
Thanks for the reply. But if it provides anonymity then how can this website http://whatismyipaddress.com/ tells my ip?
I believe that there is an error in your configuration. I always set up TOR manually, so I don't know what kind of errors can show up when configuring Tor Browser Bundle. Still, first thing to check is if you are using the browser from TBB, and not your normal browser and if you set up the proxy correctly. TBB comes with its own proxy, and if you tried to install Privoxy separately this might lead to problems.
Did you download the TBB and then alter it in any way? You should not alter it. From what I understand it is constantly under development and does not need to be changed or altered. Altering it can bust it. Maybe you could uninstall it and re-install it without altering it in any way. If you do this it will not show your true IP address.
Yes don't fiddle with the settings, it's designed by full time programmers who know what their doing. Errors happen though, if you find one sign up to tor-talk mailing lists and make a post.
Thanks guys. I disabled Privoxy and it is working fine now. In fact Tor does mention about that and also Privoxy/Polipo: https://www.torproject.org/docs/faq.html.en#TBBPolipo However, it goes back to the original question - what about DNS leak if I just use TOR?
Unless you know what you're doing, it's best to stick with a well-established solution such as TBB or Tails. And it's best not to mess with them.
There are ways to use just TOR and have no leak whatsoever, but I also think it's better to use TBB for starters. After you will figure out more about how TOR and proxies work, you could try to set it up manually, but for now I think it's safer to use the default setup.