Anonymous Services - Can We Get A List Going And Feedback?

Discussion in 'privacy technology' started by DasFox, Nov 2, 2010.

Thread Status:
Not open for further replies.
  1. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    I dug a little looking here on Wilders and didn't notice anything, at least not current and I wanted to ask that we make a list here and give some feedback and discuss the different anonymous services out there.

    The last service I used was Relakks. It seemed to work nice, but I've heard some bad about it, keeping logs, etc., so I'm not to sure about them, but I'm considering using another anonymous vpn service and I'd really like to know what's going on out there over these types of services if anyone really stands out as one of the top services to use?


    BTGuard (Known of them, never used the service)
    http://btguard.com/

    Relakks ( I used them in the past, they seemed good, but I've heard mixed things...)
    https://www.relakks.com/index.php

    Ipredator (Suppose to have something to do with Piratebay?)
    https://www.ipredator.se/?lang=en

    Anonymizer (Heard bad things in the past, wouldn't trust using them)
    http://www.anonymizer.com/

    HideMyNet: (Can't say I know anything)
    http://www.hidemynet.com/

    Xerobank (I actually used the service as a tester given to me by Steve when it began, so back then it was nice, now I don't know, haven't used it since it first started)
    https://xerobank.com/

    As far as Relakks and Ipredator are concerned since they are in Sweden I don't know if this is still a problem for using a Swedish service;

    In June the Swedish parliament passed a controversial surveillance law that gives authorities a mandate to read all email and listen in on all phone calls without warrant or court order. In response to the law, The Pirate Party organized rallies, bloggers and journalists turned into activists, and even Google decided to relocate their servers.

    http://torrentfreak.com/swedes-massively-protest-wiretap-law-080707/

    Random sites I found while surfing, I have no information or knowledge about them.

    Linkideo
    http://www.linkideo.com/

    Perfect Privacy
    http://www.perfect-privacy.com/


    Found an online review section: (Some very interesting reviews, but how credible?)
    http://bestvpnreviews.com/

    Something interesting I read on the Review site;

    PPTP has seen a decline in use. Our recommendation is to switch to OpenVPN.

    So please share what you know and let's get a nice list with some nice input...

    THANKS


    *** P.S. ATTENTION SPECIAL NOTICE SINCE POSTING IN NOVEMBER 1st, 2010! ***

    When I first made this post back in November 1st, 2010, this was not only a personal quest I was on to enrich my own knowledge of these various types of services, but I realized there was a need to increase this knowledge for everyone, since it seems that trying to learn many things as it relates especially to VPNs and all the various providers online, difficult to say the least.

    After all if you've spent any time on Wilders you'll notice the mass amounts of VPN questions because it's just not easy to tell who is worth investing time in trying, let alone worrying about your personal safety.

    So after all this time I have finally realized when approaching a VPN provider for OpenVPN, there is only one question you need to ask this provider to see if they know what they are doing and if they give you back any other answer then leave them and move on to the next one until you find the correct reply.

    Why is this so important above every other question? Because this is the ultimate question and one in which OpenVPN themselves have told me is the recommended way in which to do this and anything less is not good.

    A OpenVPN provider should be providing you 4 files, regardless if they are saying their services are for Windows, Linux, or Apple, every OS is the same when it comes to OpenVPN, they all require the same thing, it doesn't matter.

    You should be getting 4 files;

    Client Cert - (client.crt)
    Ca Cert - (ca.crt)
    Private Client Key - (client.key)
    TLS Auth Key - (ta.key)


    A lot of VPN providers will tell you they only give you a client cert and ca cert with a username and password, forget it, it's not good enough! :thumbd:

    So here's the question you need to ask them;

    1. Does your service provide the client cert, ca cert, private key and tls auth key?

    Do not pick a VPN provider until you find one that says they give you all 4 files, then when you find one, you can consider asking them other questions you might have any concerns for.

    Remember, OpenVPN told me this is what you want, so don't believe anything else a VPN provider might tell you, because I certainly don't, I place my trust in what OpenVPN has told me and so should you!

    Also remember, just because they know what they are doing as far as this question is concerned, it still doesn't mean they are good at everything, or anything, it just means they have this very important part right that you need to know before going any further with them. But the fact that they offer all 4 files, they are probably doing a decent job...

    This is the all important starting pointing from which to judge that service and then take from there! :)
     
    Last edited by a moderator: Feb 14, 2012
  2. CloneRanger

    CloneRanger Registered Member

    Joined:
    Jan 4, 2006
    Posts:
    4,833
  3. vtol

    vtol Registered Member

    Joined:
    Apr 8, 2010
    Posts:
    774
    Location:
    just around the next corner
    http://www.securstar.com/products_ssolo.php = SSH2 Service with AES-256 encryption, leading encryption provider, a bit low on the data volume

    I would reckon it bears down to the location and governing jurisdiction of the vpn/proxy servers, aside from the trustworthiness of the providers.

    http://www.start-vpn.com/ = price/service comparison & user review of various VPN services, perhaps a good starting point

    https://www.proxicate.net/ proxy surfing

    https://ixquick.com = ssl search :thumb:

    http://safe-inet.com/ = triple vpn o_O
     
    Last edited: Nov 2, 2010
  4. LockBox

    LockBox Registered Member

    Joined:
    Nov 20, 2004
    Posts:
    2,275
    Location:
    Here, There and Everywhere
    Different services for different uses. For simple privacy at a cafe or whatever I like AlwaysVPN. It's prepaid but cheap. I buy 10GB at a time ($15) and it lasts forever for just surfing around. OpenVPN and it's very fast.

    I also like JonDonym (The old JAP). Before anybody talks "backdoor" please educate yourself on the facts. They actually proved they walk the walk through the whole ordeal. I trust them implicitly.

    A lot of fly-by-night outfits have come and gone - some marketed brilliantly and some still have services running but offer zero support, no forum and have all but disappeared.

    And don't forget the best for anonymity (not privacy of information!) - Tor.
     
  5. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    JonDonym the old Jap? I'll have to take a look at this.

    By the way, what do you think about using a Planet Labs Proxy?

    Hide My Ass looks really big and a bit impressive...


    THANKS
     
  6. CloneRanger

    CloneRanger Registered Member

    Joined:
    Jan 4, 2006
    Posts:
    4,833
    Tested - https://www.proxicate.net

    Using their Google search bar

    prox.gif

    Hit Google Search & you immediately get taken to Google via HTTP :eek:

    Using their Go bar

    brok.gif

    Cookies tab

    cook.gif

    Also most tabs like facebook etc are shown as broken by Calomel :eek:

    When i revisted the homepage i also got a broken RED indication :eek:

    Something not quite right with that www ? Caution advised
     
  7. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    As LockBox mentioned and someone else to me earlier maybe Tor is really worth looking at.

    I used it about 4 years ago, wasn't doing so hot then, maybe things have changed now.

    I'll have to slap it in my VM and give it a whirl...
     
  8. vasa1

    vasa1 Registered Member

    Joined:
    May 1, 2010
    Posts:
    4,152
  9. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    Never heard of Glype;
    http://www.glype.com/

    But one thing I will say is if you're looking for something free, I just downloaded Tor, I must say it's really improved and I'm using it in Comodo Dragon with the Chrome extension Proxy Switcher and it's pretty darn fast.

    If you want to use it with the bundled Firefox portable you download the Tor Browser Bundle, if you want to use it with another browser you'll need the Vidalia Bundles.

    http://www.torproject.org/download/download.html.en

    Here's the HowTo I found for Chrome and Tor;
    http://www.lifehacker.com.au/2010/08/create-a-tor-button-in-chrome-for-on-demand-anonymous-browsing/

    Here ya go a screen shot of me in action with Dragon and Tor; ;)
    http://img641.imageshack.us/f/15141668.jpg/
     
  10. tobacco

    tobacco Frequent Poster

    Joined:
    Nov 7, 2005
    Posts:
    1,497
    Location:
    British Columbia
  11. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    I'm blown away by the speed I'm getting with Tor through the Dragon browser.

    Boy they have really improved the speeds of Tor, so for now I'm hooked!

    I'm so impressed I wrote a letter to the executive of Tor suggesting that I felt as a professional in IT that it would be in the best interest of the Tor community to have a an Official Tor forum and later IRC to help the growth of this community.

    I also suggested if they can't afford a forum at the moment, maybe Wilders will welcome Tor here to have an Official forum here.
     
  12. tobacco

    tobacco Frequent Poster

    Joined:
    Nov 7, 2005
    Posts:
    1,497
    Location:
    British Columbia
    Did you double check at an ip checker site to make sure it was workino_O :D

    Should be an opening in the Prevx slot shortly :p
     
  13. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    It's a no brainer with the 'Proxy Switcher' extension in Chrome to use and keep it on the loopback with the Tor Port...

    They have their own check; (Congratulations. You are using Tor.) :)
    https://check.torproject.org/

    and of course I always check it against another site too, to make sure...

    Yes it's all good it really works nice! :thumb:

    Prevx, LOL, what they going down the tube?
     
  14. tobacco

    tobacco Frequent Poster

    Joined:
    Nov 7, 2005
    Posts:
    1,497
    Location:
    British Columbia
    Have you not heardo_O :eek:

    Check the big thread in the prevx section.
     
  15. tobacco

    tobacco Frequent Poster

    Joined:
    Nov 7, 2005
    Posts:
    1,497
    Location:
    British Columbia
    And just a reminder that TOR'S strength is "being anonymous", not "privacy".
     
  16. Simon T

    Simon T Lurker

    Joined:
    Sep 20, 2010
    Posts:
    17
    Perfect Privacy is great and keeps the users informed, but has sort of terrible customer support.
     
  17. katio

    katio Guest

    As requested a few words on Tor.

    I've tried to explain some differences between Tor and Xerobank in this thread:
    https://www.wilderssecurity.com/showthread.php?t=277329
    But maybe I didn't get my point across as well as I should have.

    Privacy:
    This is an issue with ALL VPN, SSH, what have you solutions. The way they work is the same: traffic is encrypted on your PC, goes to another Server (or more: "multi hop"), there it's decrypted and sent to a webserver.
    So you've heard of TSL (="https"). This adds another layer of encryption that goes from your PC directly to the final destination. Good, we've cut out any middle man snooping. But there are two flaws:
    TSL is weak. It's based on PKI and this can be fooled quite easily, certificate auhorities are known to give out certificates to just about anybody. A government level attacker can easily make MITM attacks against it (or they just raid the server directly).
    Apart from that most people (well, not here on wilders) don't know how to respond to their browser warnings.
    Second issue, quite a few, big name sites don't encrypt everything. The log in page is on https, the rest not and sometimes cookies are sent in clear.

    The difference between Tor and the other options is that everybody can be an exit node i.e. can snoop traffic. VPN provider can do it too but there is the risk of detection, litigation, losing customers...

    Anonymity:
    Tor has several weakness, some more theoretical. Worst case scenario: a single adversary controls all three hops. I can't tell you how likely that scenario is. For strong anonymity you should browse .onion services only. You go through twice as many hops, the probability decreases accordingly.
    Tor doesn't add padding for example, but VPNs don't either. Basically, against an IX level attacker Tor is stronger than those. But one can still find out a lot about the traffic flow, and even its content, despite encryption. If you really are worried about this, freenet (darknet mode) is the best solution. A low latency network can never be as secure.
    All commercial providers have one flaw in common: They want to provide you anonymity, yet they have to know who you are. They see your IP and they see your destination. They know who you are, where you go and what you do. You can't be anonymous against your own anonymity provider. Now they all promise, we don't keep log, we don't do anything behind your back, but:
    You can't verify that and they can be forced to do so by a powerful (or rich...) attacker. Decentralized networks (Tor, Freenet, i2p and others) don't work like that. They are all built on the presumption that you can trust nobody. But they make following bet: There are more good nodes than bad (and colluding!) nodes out there. As long as that is true, the system works. Let's hope it does because so far no one has come up with something stronger.
     
  18. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    Ok so for all you've said can you now give a simple answer to these questions?

    1. Is Tor safe?
    2. Is Tor secure?
    3. Is Tor private?
    4. Is Tor good anonymity?
    5. Can they find you and know who you are easy using Tor?

    Please don't get to technical if you don't have to, some of the readers might not understand, me included, LOL...

    THANKS
     
  19. CloneRanger

    CloneRanger Registered Member

    Joined:
    Jan 4, 2006
    Posts:
    4,833
    I thought you are IT :D
     
  20. katio

    katio Guest

    Haha, I thought I did explain in simple terms, not using much technical terms and that (except for the padding and IX part - this I just mentioned to demonstrate that there are further weaknesses without going into detail and explaining anything).

    Sorry to disappoint you but there are no simple answers. Pretending there are simple answers would be reckless on my part.

    But with that disclaimer out of the way I'll try so you get a feeling for the topic. I'll use my own terminology, these are very generic terms and we'd really need to define them first. Please tell me if I missed what you meant with a question.

    1: Tor is not "safe to use". It's easy to make mistakes when you are a first timer. Main point: the browser configuration, javascipt and flash or doing personal email over Tor those kind of errors. Torbutton makes it easy, it's a Firefox extension that takes care of configuring the browser to be safe. But you still need to be alert and at the minimum read the warnings on torproject.org
    It's a well tested program, no nasty bugs and it's easy to deinstall.

    2: Tor is secure in the sense that it does what it says on the tin. It's been out a while and any obvious backdoor or glaring security hole would have been detected.

    3: Tor does not add any privacy protection. In fact it decreases your privacy. Instead of the ISP now random people on the internet can see your (plain text = unencrypted) traffic. It's like browsing unsecured wifi in Startbucks (http://www.theregister.co.uk/2010/11/04/firesheep_theatre/)
    But you can protect yourself against it (https, adding VPN on top of tor, gpg encryption) and when you use .onion websites this problem doesn't exist.

    4: yes
    Goverment level agencies can still get you. A very determined attacker with large resources still can get you and there's a whole torrent of side channel attacks (usually requiring physical access to your home/pc).
    But compared to VPN, ssh, proxies it's very strong anonymity. And there's no better alternative out there anyway...

    5:
    as above, if you tell me who "they" is I can tell you more.
     
  21. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    I was just kidding about the technical, more for the newbies, me I'm cool. :)

    1: Tor is not "safe to use", could you explain a little more about this?

    2. Tor is secure, yes I'd hope so for as long as it's been around.

    3. Tor does not add any privacy protection. Well this is nice to know, anyway in which an end-user can add in a layer of privacy while using Tor?

    4. Yes we all hope and believe is good anonymity, that's what they're claiming and it's what we're all hoping. But in that I think people mix in privacy with that batch, so that takes us back to number 3 for some answers...

    5. They, well anyone really, probably your run of the mill hack/hackers, problems you want to avoid like this etc...

    By the way the post and replies aren't just for me, just things I'm asking and saying, etc...


    THANKS
     
  22. katio

    katio Guest

    1: it's not safe because it's easy to make mistakes. Good software is designed to make mistakes hard. I guess the tor bundle does follow this principle. Personally I always set up everything by hand.
    My main worry is about people letting slip their true identity or online IDs that could be used to find out more about them. Like log into your email account, amazon, facebook, ebay, twitter... Someone watching you will find out who you are despite the best anonymity software. This btw applies to all solutions, not just Tor. Therefore I'd say none of them are "safe", i.e. fool-proof.

    3: https://www.eff.org/https-everywhere or NoScript (options -> advanced -> https->behaviour->force sites to use https always, enter them like *example.com* press ENTER *next.com*) For emails you could use GnuPG to encrypt content, I'd only do that in addition to https encrypted email as GPG doesn't encrypt headers containing recipient and subject.

    5: hacker? really? Apart from the fact that I don't like that term I think they are the least of your worries.
    The way they typically work is at the client or server end, not the network level. That means Tor doesn't protect you against anything (well only local network snooping).
    If they attack the server, you can do absolutely nothing about that. Happens all the time, not just injecting malware but stealing your credentials, private data and so on.
    On the client side: If they got in - GAME OVER. Therefore good anonymity starts with host security. Tons of resources here on wilders.
     
  23. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
  24. LockBox

    LockBox Registered Member

    Joined:
    Nov 20, 2004
    Posts:
    2,275
    Location:
    Here, There and Everywhere
    Tor is hassle-free if you run the portable no-install version. It's called the "Tor Browser Bundle." It runs with its own Firefox already configured properly. You only need to confirm that by checking your IP after you start the browser from the TBB folder. It's totally self-contained.

    Tor is definitely about hiding who you are (anonymity)...not the privacy of any information sent through Tor.

    The Tor Browser Bundle Information Page
     
  25. ruinebabine

    ruinebabine Registered Member

    Joined:
    Aug 6, 2007
    Posts:
    1,097
    Location:
    QC
    There is also a new and interesting Best Free Anonymous Surfing Service roundup at
    http://www.techsupportalert.com/best-free-anonymous-surfing-service.htm

    List of products reviewed:

    CyberGhost VPN
    Nice GUI, relatively fast and very secure.
    Registration required, only 1 GB allowance.
    http://cyberghostvpn.com/en
    http://cyberghostvpn.com/en/product/download.html
    0.8 MB 4.5.16.990 Unrestricted Freeware 95 - 7

    proXPN
    Slim, fast, cross-plaform and secure.
    Registration required, GUI could use some work, more servers would be nice. May load on start-up unexpectedly.
    http://proxpn.com/
    http://proxpn.com/download.php
    2.3 MB 2.2.8 Unrestricted Freeware 95 - 7, Macintosh, Windows Mobile, iPhone and iPod Touch

    SecurityKiss
    Slim, fast, lots of servers, secure, 300MB per day.
    Usage cap.
    http://www.securitykiss.com/sk/index.php
    http://www.securitykiss.com/sk/index.php?m=Download
    2.1 MB 0.1.2 Unrestricted Freeware 95 - 7

    Hotspot Shield
    Fast, secure, easy to use and browser independent. Allows access to American services such as Hulu from outside USA.
    Displays adverts on certain browser configurations.
    http://hotspotshield.com/
    http://hotspotshield.com/
    5.3 MB 1.52 Unrestricted Freeware 95 - 7

    Expat Shield
    Fast, secure, easy to use and browser independent. Allows access to UK services such as BBC iPlayer from outside the UK.
    Displays adverts on certain browser configurations.
    http://www.expatshield.com/
    http://www.expatshield.com/
    5.3 MB 1.52 Unrestricted Freeware 95 - 7

    UltraSurf
    Slim, fast, and secure.
    Cannot change default listening port, lack of features.
    http://www.ultrareach.com/
    http://www.ultrareach.com/download_en.htm
    0.5 MB 9.99 Unrestricted Freeware 95 - 7
    Portable version available

    JanusVM
    Highly secure, forces programs to use Tor.
    Requires VMware Player to be installed and running.
    http://www.janusvm.com/
    http://www.janusvm.com/
    42 MB {July-2010} Unrestricted Freeware 95 - 7
    VMWare Player or Server is required

    AdvTor
    Feature rich, highly customisable, can force programs to use Tor.
    It is for advanced users. Speeds fluctuate greatly.
    http://sourceforge.net/projects/advtor/
    http://sourceforge.net/projects/advtor/
    1.8 MB 0.1.0.7b Unrestricted Freeware 95 - 7
    Portable version available

    xB Browser
    Zero-configuration, based on Firefox, works out of the box.
    Speeds vary (generally slow), may not be as secure.
    https://xerobank.com/download/xb-browser/
    https://xerobank.com/download/
    10.4 MB 3.9.10.24 Unrestricted Freeware 95 - 7
    64 Bit version available Portable version available

    JonDo
    Browser and platform independent, very secure.
    It's quite slow.
    http://anonymous-proxy-servers.net/en/index.html
    http://anonymous-proxy-servers.net/en/software.html
    39 MB 00.13.006 Unrestricted Freeware 95 - 7, Macintosh, OS/2, Linux/Unix
    64 Bit version available Portable version available
    Java is required

    Amnesic
    Highly secure sandbox-like environment, no local traces, everything is tunnelled through Tor.
    Changes are not saved automatically, a blank CD-R is required.
    https://amnesia.boum.org/
    https://amnesia.boum.org/download/
    565 MB 0.6 Open-source N/A
    Blank CD-R, VMWare Player or Server is required

    Privatix
    Highly secure sandbox-like environment, no local traces, everything is tunnelled through Tor, Mozile Firefox included.
    Changes are not saved automatically, a blank CD-R is required.
    http://www.mandalka.name/privatix/index.html.en
    http://www.mandalka.name/privatix/download.html.en
    630 MB 10.02.07 Open-source N/A
    Blank CD-R, VMWare Player or Server is required

    Vidalia
    Light, fast.
    May not be as secure.
    https://www.torproject.org/vidalia/
    https://www.torproject.org/vidalia/
    7.01 MB 0.2.9 Unrestricted Freeware 95 - 7
    64 Bit version available Portable version available

    PacketiX VPN
    Secure, ad-free, highly customisable and powerful.
    Speeds depend on your geographic location in relation to Japan.
    http://www.packetix.net/en/
    http://www.packetix.net/en/secure/install/
    14.8 MB 2.20 Build 5350 Unrestricted Freeware 95 - 7, Linux/Unix
    64 Bit version available

    USAIP
    Reasonable speeds, no installation necessary, multi-platform.
    Disconnection every 7 minutes.
    http://www.usaip.eu/en/index.php
    http://www.usaip.eu/en/free_vpn.php
    N/A N/A Unrestricted Freeware 95 - 7, Macintosh, Linux/Unix
    64 Bit version available

    VPN Reactor
    Reasonable speeds, no installation necessary, multi-platform.
    Registration required, monthly activation required, disconnection every 30 minutes.
    https://www.vpnreactor.com/default.aspx
    https://members.vpnreactor.com/signup
    N/A N/A Unrestricted Freeware 95 - 7, Macintosh, Linux/Unix, iPhone and iPod Touch.

    Estrella Roja
    Highly secure sandbox-like environment, no local traces, uses Tor.
    Changes are not saved automatically, you have to manually start Tor.
    http://www.estrellaroja.info/
    http://www.estrellaroja.info/?cat=9
    699 MB 2.8 Open-source N/A
    Blank CD-R, VMWare Player or Server is required
     
Loading...
Thread Status:
Not open for further replies.