Is this a secure anonymous web browsing setup?

I feel the following setup is pretty secure and leaves me virtual untraceable while online. I wanted to hear others opinions about this setup and what holes I have.

I am using tor portable on a usb drive. I have java,flash and cookies disabled. I am also using Chaos Computer Club DNS. While browsing I browse all sites through SSL through https://proxy-service.de/ which would make it hard for any of the tor relays to read my traffic even if they were working together. I also use ixquick ssl for all of my searches. https://www.ixquick.com/

So the way I see it is the tor relays cant read any of my traffic because its all encrypted with Proxy-service.de and the only IP that proxy-service.de can see is my tor IP. Leaving my traffic had to trace or sniff. Let me know what you all think or any suggestions.

 

I'd rather trust my ISP than some unknown outfit like proxy-service.de. The operators of this website know everything you do on the web.

The only way to surf real anonymously is to buy a mobile data modem with cash and without registering your address (go to some small second hand electronics shop for it). Then get a prepaid data SIM for it, which you buy in a supermarket at the checkout with cash (usually they don't want to see your ID there). To "charge" your prepaid SIM you buy vouchers at a kiosk or a gas station - of course with cash.

EDIT: The German ixquick.com site is full of orthographic mistakes. That must be some idiots.

 

Hi, re - https://proxy-service.de

Hadn't heard of it before, very briefly tried it, quite fast and pages seemed complete

*

Privacy Policy

Our service may collect information about you during your visit. This document describes the information we collect and how it is used.

Server Access Logs

Our server logs all requests. The data recorded includes information provided by your browser (user agent and referring page) as well as the requested URI, the time and date and your IP address. The data recorded in these logs may be used for detecting and preventing abuse. We may also collate this data for statistical purposes.

Service Logs

The service provided on this website allows access to external, third-party websites. We may record your IP address and the websites you visit. The logs are used primarily for monitoring requests and ensuring no illegal activity is undertaken. Any violations of our terms of use may result in disclosure of the data recorded in our logs to an appropriate third party, which may include your Internet Service Provider (ISP) or local authorities. We may also be required, by law, to provide logs of our service and if requested, such data will be disclosed. We may also use service logs for stastical purposes.

https://proxy-service.de/privacy.php

Terms of Use

You may not use this service for any unlawful activity, including but not limited to viewing illegal content, sharing copyrighted Intellectual Property

*

You may not attempt to gain unauthorised access to any website. You may not use our service to abuse any third-party services that may be available through our website. This includes bypassing any restrictions that other webmasters may have put in place against your IP address and accessing content that is unavailable in your country.

https://proxy-service.de/terms.php

*

So apart from ALL that, no need to be concerned

 

I understand the privacy policy of the site proxy-service.de my question is what would they log? All they could log is my tor IP address if I am using tor. So who cares if they know my tor IP? The point of using proxy-service.de to me is that it is https thus it encrypts all of my traffic so it would be virtually impossible for the tor nodes to spy on my traffic. The only consequence I see is that proxy-service.de would log my tor IP since I have flash,java and cookies disabled it would hard them to know my real IP. Do I pretty much have this correct?

 

Are you sure proxy-service.de doesn't see your real IP if you connect through https to them?

 

This is also good IF YOU DONT WANT TO INSTALL TOR ITSELF

https://tor-proxy.net (Quite fast)

 

@ Dude111

Tried it, thanks

Both, tor-proxy.net-Express [BETA] & JonDonym worked fine and fast TOR was slow to load. All were HTTPS

Showed my IP as 203.145.131.16 NEW DELHI INDIA and gave the usual reasons why to hide it etc. If i was in India that would make sense, except i'm in the UK



Also look at the Welcome page date, 3 1/2 years old ?

 

I guess you didn't read his post -- he is connecting through Tor and then through proxy-service.de. So it doesn't matter if proxy-service.de is a honeypot that sees everything he does, because they will only see his Tor IP address, which itself is not traceable.

OP,

If it were me, I would just bypass proxy-service.de all together and just use TOR.

 

I read that but don't know how https works. My thought was that he might be "tunneling" through the proxies or exchanging IPs between the two parties might happen as a security measure.

 

yes I am sure that proxy-service.de doesn't know my real IP. Tor will hide your IP even on https. So as I said it doesn't matter if they log my tor ip. My understanding in order to find my location with this setup proxy-service.de would have to track down the tor exit node and look at their logs. And if the exit node was working together with other nodes they could try to track where I came from. The chances of this happening are ridiculous in the first place. Even then the tor nodes would have no idea what my traffic was because it is all encrypted by proxy-service.de.

 

Marked if your still hanging around the board is there a possibility you have a writeup on how you accomplished making your webbing experience so secure. For example any tweaks you did to tor to make it run smooth?

You also stated something about Chaos Computer Club DNS is this a down-loadable program or is it just instructions on how to set your DNS?

I was also wondering if your running tor on flash how secure is it really? Unless your running it off a CD?

 

Geolocation is the next big hurdle to overcome.

 

No tweaks made to tor other than in Firefox I have disabled java and flash and I only accept cookies from sites I absolutely have to in order to login etc. I am using the tor browser bundle which can be downloaded here: https://www.torproject.org/torbrowser/
I am running it from a usb drive that is encrypted. As for Chaos Computer Club DNS it is similar to Open DNS without all of the configuration ability. I choose it because it is not based in the country that I originate. It is based out of Germany. For a list of alternative DNS see here: http://wikileaks.org/wiki/Alternative_DNS
There are many from different countries. I also choose proxy-service.de because it is also based out of germany and it is SSL. As I have said in this thread proxy-service.de encrypts my traffic which makes it virtually impossible for the tor nodes to read my traffic.

 

Please explain how this effects my setup? From what I understand you have to have javascript enabled. Which I dont. Just was reading about a geolocation exploit here: http://www.scmagazineuk.com/geoloca...t-can-pinpoint-a-persons-home/article/176333/

It requires java to be enabled though.

Presenting last week at the Black Hat Conference in Las Vegas, Nevada, Samy Kamkar demonstrated how he is able to convince a target to visit a malicious website which uses JavaScript to extract the router's Media Access Control (MAC) address and report the unique identifier. This address is then used with Google location services and the hacker has a map showing the victim's location within a few hundred feet.

 

I'm using the TOR-Bundle which includes FireFox.
I understand that TOR does not allow Java at all.
At least, I could not activate Java or install any Java-PlugIn.

As to safety,
I run the bundle from my HDD.
ExitNodes seem to change every 10 minutes or so - is that configurable?
Presently, I have set my ExitNodes {us} and enabled them with StrictExitNodes 1
Further I am using ISC Bind to handle DNS.
Good enough?