Anonymous Services - Can We Get A List Going And Feedback?

Discussion in 'privacy technology' started by DasFox, Nov 2, 2010.

Thread Status:
Not open for further replies.
  1. apathy

    apathy Registered Member

    Joined:
    Dec 10, 2004
    Posts:
    461
    Location:
    9th Circle of Hell(Florida)
    I think your problem is that you haven't enabled tzo data compression. I had the same problem because it wasn't enabled by default. What OS do you use?
     
  2. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    HEYx942 and Spooony it's great you want to share, but PLEASE RESPECT the post ok?

    This is for a list for Anonymous Services and some feedback as it relates to those services, not going off on wild technological rants...

    Many of your posts are going way off topic in technology, that's great, but please stay on topic.
     
    Last edited: Jul 1, 2011
  3. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825

    Thanks for the find, looks pretty decent, at least they say they're incorporated offshore, but where is the question?

    apathy if you know any of the answers to these questions below please tell us?


    Where are they incorporated?
    Do they have key exchange?
    Can you change your own keys as often as you like?
    Is the communication protected by perfect forward secrecy?
    How often do they switch encryption keys on the stream?
    How do they protect privacy and how do they cooperate with government agencies?

    THANKS

    P.S. Sorry double post by mistake... :(
     
  4. x942

    x942 Guest

    Sorry I was only trying to correct the (common) misunderstanding that was mentioned.

    On topic:

    TOR and i2p are my favorite services. I use some VPNs but not a whole lot. Mainly OpenVPN.
     
  5. caspian

    caspian Registered Member

    Joined:
    Jun 17, 2007
    Posts:
    2,363
    Location:
    Oz
    How can that be done? I mentioned the idea of running a VPN through a JanusPA once but no one commented. I use to have an Iphantom until they discontinued it. I ran Xerobank through it and it worked just fine. But the Iphantom was a hardware device so when I connected the VPN, it had to go through the Iphantom first. At the time I thought it was pretty cool that my ISP would only see me connected to Iphantom but a website would only see Xerobank. Not that it really mattered that my ISP saw Xerobank. I just liked the idea of obscuring my connection.....just because I could. I can't imagine how you could run a VPN through Tor without having a hardware device hooked up to the router.. It must be pretty complicated.

    But I wonder what a VPN service would think? I tried to buy a Xerobank account for a friend one time. I used my real name and the same credit card that my account was associated with. But when I ordered it, I was running XB through the Iphantom. And my order was rejected. I got a message that Xerobank had flagged me as suspicious or something like that. So I just skipped it. But anyway, I would think that it would look especially odd to a VPN provider to have a connection coming to them straight from Tor. Pretty freaky, in fact. And they may not like it.
     
  6. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    Your VPN becomes your Internet connection, so connect to it, then open Tor, bingo, tor routed through the VPN...

    If this is what you're asking?

    Now if you're running Linux and know how to deal with a nice iptables firewall you can lock down the VPN so that everything is only routed over that tunnel and nothing else, this is also how you are protected against a VPN drop.

    I'm writing this reply through an IPsec tunnel, with everything routed over it while connected to Tor.

    Tor is being routed through my ipsec tunnel...

    So if I disconnect from my IPsec Tor is dead it's not going anywhere and I'm not getting back online unless I allow ipv4 traffic or connect to the IPsec again over IPsec traffic....

    Hope this is what you're asking?
     
  7. caspian

    caspian Registered Member

    Joined:
    Jun 17, 2007
    Posts:
    2,363
    Location:
    Oz
    Yes I have done that. I have opened the Tor Browser bundle and Vidalia while connected to a VPN. It works just fine. But he was talking about tunelling the VPN through Tor. Maybe he meant to suggest tunnelling Tor through a VPN.

    That sounds really cool but it is too advanced for me at this point. I had to Google IPsec just to get an idea of what it is. Thanks for the response.
     
  8. x942

    x942 Guest

    @ Above comments (quoting wouldn't work :/):

    To route a VPN through TOR you start TOR on your OS or TAILS then from the network settings you connect to your VPN (I use xerobank as of now). Most of the time (99%) they don't care. I have NEVER received a complaint or have been disconnected. That said if you are doing this I would also use a free VPN or pay with a prepaid credit card and use a fake e-mail.

    Doing this provides an encrypted tunnel that is "bounced" through TOR - This gives you the anonymity of TOR and the encryption/security of a VPN. You could also add a proxy after the VPN to had the fact a VPN has been used.
     
  9. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    I've only been playing in the past with the browser bundle in Linux which starts Vidalia, makes the connection then opens the browser.

    Can you explain this in steps how to do this?

    THANKS
     
  10. x942

    x942 Guest

    This is how I do it:

    1) Start TOR

    2) Connect to TOR network.

    3) Go to your distros/OS's settings/preferences and launch network settings (This may also be under the WiFi management tool in ubuntu).

    4) Select VPN and add the VPN you want to use

    5) Connect to the VPN.

    You have now connected to the VPN Through TOR. The VPN sees TOR's exit nodes IP and TOR exit node can NOT see your data as it is encrypted.:thumb:
     
  11. kareldjag

    kareldjag Registered Member

    Joined:
    Nov 13, 2004
    Posts:
    622
    Location:
    PARIS AND ITS SUBURBS
    hi,

    2 comparisons of VPN providers (in french, so use google translation):

    http://www.mag-securs.com/News/tabi...PN-antiHadopi-et-de-leurs-vulnerabilites.aspx

    http://www.vpnblog.net/comparatif-serveurs-vpn-payants/ (paid vpn, interesting sit in general)

    The VPN business is in vogue in France due to the HADOPI law, even if some projects try to keep it far from money goals like freedomip:
    https://www.freedom-ip.com/

    For information and users who like "made simple tools", there is TORFOX:
    http://www.torfox.org/

    There is a lot of anon/privacy/security services and solutions, but the main question is "for what kind of use and REAL motivations?"

    Rgds
     
  12. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    Thanks for the information but there are website translation services so please use those in the future when making a post, it's not difficult and people expect it. :)

    2 comparisons of VPN providers - (Translated With Yahoo)

    http://babelfish.yahoo.com/translat...lnerabilites.aspx&lp=fr_en&btnTrUrl=Translate

    http://babelfish.yahoo.com/translat...eurs-vpn-payants/&lp=fr_en&btnTrUrl=Translate

    For this link below, what do you mean in vouge? - (Translated With Yahoo)

    http://babelfish.yahoo.com/translat...w.freedom-ip.com/&lp=fr_en&btnTrUrl=Translate

    I don't know why there should be much concern for the Hadopi law unless you are living in France, or is this affecting other parts of the world too?

    https://secure.wikimedia.org/wikipedia/en/wiki/HADOPI_law

    I think I found out where our avenger of the Free VPNs has been hiding Zero3K;

    http://66.196.80.202/babelfish/tran...&trurl=http://bb.s6n.org/viewtopic.php?id=312

    By the way these guys offer free VPN;

    http://66.196.80.202/babelfish/tran...n&trurl=http://bb.s6n.org/viewtopic.php?id=81
     
    Last edited: Jul 3, 2011
  13. SecureSystem

    SecureSystem Registered Member

    Joined:
    Jun 28, 2011
    Posts:
    24
    While i was messing around with port forwarding, I thought of a question.

    Do tor hidden services require port forwarding or all they need is just port 80?

    I prolly will never have any use of hidden services but i m curios from a technical standpoint. browsing through tor's extensive documentation.
     
  14. rudyl

    rudyl Registered Member

    Joined:
    Jul 1, 2011
    Posts:
    30
    You can run hidden services with Tor routed thru VPNs that don't allow port forwarding. You specify localhost port(s) in /etc/tor/torrc and Tor gives you .onion address(es). Port 80 for web and port 22 for SSH, typically.
     
  15. SecureSystem

    SecureSystem Registered Member

    Joined:
    Jun 28, 2011
    Posts:
    24
    but i am reading

    "now you're running a webserver on port 5222"
    "You should also figure out what port you're listening on, because you'll use it below."

    hhmmmmmo_O?? I am confused. Hidden services run with tor already.

    EDIT - I think u r right. Hidden services don't require port forwarding. They work only within the Tor network. BUT I am still confused about the quoted text i posted above. I better read one more time before going to bed. lol
     
    Last edited: Jul 5, 2011
  16. rudyl

    rudyl Registered Member

    Joined:
    Jul 1, 2011
    Posts:
    30
    Port 80 is standard for Apache. It seems that thttpd defaults to 5222. You could run both simultaneously. Each would have its own .onion address. Plus an SSH server for file management, using port 22 with another .onion address.

    That should be "...what port Tor is listening on for which service...". There can be multiple services, each on its own port.
     
  17. SecureSystem

    SecureSystem Registered Member

    Joined:
    Jun 28, 2011
    Posts:
    24
    AAAhhhh. I got it! Appreciate it Rudy. Spread the wisdom. I am gonna try it today. Would u mind if i pm u if any problem arises.
     
  18. rudyl

    rudyl Registered Member

    Joined:
    Jul 1, 2011
    Posts:
    30
    Sure. The Tor installation guides are very clear.

    -https://www.torproject.org/docs/installguide.html.en
     
  19. ccoates

    ccoates Registered Member

    Joined:
    Aug 31, 2010
    Posts:
    16
    Maybe I'm misunderstanding, but I swear the TOR/VPN thing came up before (I even made a post trying to understand it), and the conclusions were that using them together was pointless.

    If you're hiding your surfing from your VPN by using TOR, you'll be exposing your private data to the TOR network (passwords and whatnot). So the only thing this would accomplish is preventing your ISP from knowing you're using TOR, which I guess is useful for the super-paranoid trying to buy themselves extra time, only that your ISP will know you're using a VPN, and VPN services can still be forced to turn over data just like an ISP. So you really haven't accomplished anything.

    Given the vulnerability of your private data and the slow speed of TOR traffic, it seems like you'd be better off using multiple VPN-type services in almost any scenario, if you're just trying to make it a pain in the ass for anyone backtracking your habits.

    If you're trying to make TOR secure by using a VPN through it, your VPN is still going to be seeing all of your data, IPs, or whatever. This seems even more pointless than the above method, since again your major accomplishment is suffering slower speeds via the TOR network. I mean, I guess it would give you security and prevent TOR exit nodes from seeing your passwords and other data in plaintext, but your VPN will still know what you're browsing.

    So in either case, you're either blowing your anonymity or your security by using them together.

    Am I missing something?
     
  20. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    I was talking about it before and an Onion developer told me you're not gaining anything, at least that's what I remember, scroll back through the posts and you should see mention of it here...

    Yeah I'm not so convinced either, taking a trusted VPN source and combining with something as untrusted as TOR...

    If you've got the VPN and you use it, afford it, I say go more multihop VPN, or something along these lines...
     
  21. bryanjoe

    bryanjoe Registered Member

    Joined:
    Feb 23, 2006
    Posts:
    380
  22. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    What I use is still in a testbed/startup mode, so it's not available for anyone this is why I've never discussed what I do, because there's nothing to discuss at the moment and maybe never...

    What I can say to help others is this.

    1. Location is one of the most important factors, because server locations will be governed by those laws, of course some offshore company, offshore in a particular country might be able to get around this.

    2. It seems like the biggest concentration of VPN servers are in the USA and Europe. If anyone can share any other big locations I'd like to read this...

    3. For my personal viewpoint on 1 & 2, at the moment I favor Sweden, because of all the piracy movements in the past and it seems for now Swedish law is fairly relaxed even though they are a part of the European Union, I have not read anything where the EU internet laws are affecting them. Plus I have not seen any other country showing such a big Piracy movement as Sweden has shown the world in the past, which tends to be a positive thing for people wanting their online freedoms...

    4. This might be considered by some off topic but I do not believe it at all to be the case. Terrorism is nothing new, but because of it's past and present, countries like Europe and the USA are stripping away the rights of their citizens so I strongly encourage those looking at a VPN in either country to never forget this fact and realize how it can play against you. Honeypot, some governmental agency, or a black market of it's own, as a possible front for the VPN, or just some hack kids running this...

    Cheers
     
  23. bryanjoe

    bryanjoe Registered Member

    Joined:
    Feb 23, 2006
    Posts:
    380
    great inputs...thanks
     
  24. luciddream

    luciddream Registered Member

    Joined:
    Mar 22, 2007
    Posts:
    2,545
    I've done some considerable research on this subject matter now. I don't think it matters how much you do, the more info. you see the more conflicting info there is = the more confused you get. The bottom line is you have to put your trust somewhere, and you don't know exactly who to trust. You don't really know what info. they're storing about you, or how quick they'll dime you out if pressured. It's their word. I guess it's nice to see some of them say they don't store logs, but then part of me thinks that at least the ones that say they will hand over your info. are being honest anyway. So perhaps that makes them more trustworthy in the end? There's so many variable to consider. It's no wonder nobody has really come up with an answer to that question we all really want to know in the end... "who's the best"? Many are even reluctant to voice their opinions on it, or who they use personally.

    Everybody of course wants the service to be stable and reliable, and a negligible impact on speed. The rest of my criteria is:

    - Ability to use P2P/Torrent programs
    - Unlimited switching
    - Good privacy (ideally, no logging). As mentioned previously, we just have to take their word on this.

    Right now the options I'm looking at are:

    Mullvad
    iVPN
    VPNTunnel
    Anonine
    IPredator

    All seem to have good privacy practices (or at least, claim to). I can't find info. on P2P/Torrents for all of them. I know that Mullvad & iVPN do allow it. Right now Mullvad is the front-runner.

    I'd love to hear info. from people that use any of these services. And any other recommendations. Based on my criteria, what is "the best"?... which is basically a philosophical question here.
     
  25. bryanjoe

    bryanjoe Registered Member

    Joined:
    Feb 23, 2006
    Posts:
    380
    allows cash payment.... send by post
    have not try it...
    maybe will try sending cash for 1 month.. haha
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.