EvilZone
Hacking and Security => Anonymity and Privacy => : lucid March 30, 2012, 01:43:13 AM
-
Hey guys I had a question about using Tor. Is it a good idea for me to install privoxy to use with Tor? Or would it be better to use custom proxy settings using the Torbutton. Say Tor followed by an HTTP proxy? It's currently set to using Socks5. Or should just manually configure my browser to chain a few proxies?
Also does anyone here use I2P who can give feedback?
Thanks
-
Like previously said, I do not recommend Tor at all. But if you have to use it, idd use it directly. Not chained up, if you do you will end up with 2kb/s.
Chaining socks4/5 is a much better idea.
-
Thanks. I guess I should refer to your post about 3proxy then.
-
Privoxy or polipo are no more needed to connect to Tor because the finals firefox updates enables a direct communication with tor
And you can use the Tor Browser Bundle (https://www.torproject.org/download/download-easy.html.en) which is an all ine one tool to navigate through tor.
-
Polipo- is a caching proxy this is used to increase speed through caching.
Privoxy- is not a caching proxy. It utilizes customisable filters, to increase your privacy while browsing. ie: change your User Agent String (http://whatsmyuseragent.com/WhatsAUserAgent.asp)(important to have this changed as it leaks information about your os, and browser type), block adds, changes referrer info, force's browser to do a http post rather than get request.
Tor- is a socks chaining service which obfusicates your ip via routing your request through a chain of user owned/operated relay's...
Tor's weakness are:
- unless you also set up a vpn your traffic can be sniffed by the exit (last relay in the chain)
- you are trusting that each relay in your circuit is not keeping logs
- due to the limited amount of relay's (around 2k) it is possible for a single organisation to operate sufficient relay's that you could have a circuit consisting solely of that organisation's relay's therefore compromising your secuity
- torrents are blocked
- has high latency
So to answer your question yes it is a good idea to use privoxy with tor... no you don't need polipo and yes you still need to use privoxy with the tor browser bundle.
Tor should not be used for hacking and illegal activites that can land you jail time it is simply not secure enough to trust your freedom to.
Tor is suitable to use for things like researching topics such as..... compounds & substances, things that go boooom, visiting hacking forums, etc and preventing your traffic from being sniffed at a public hotspot.
You of course should be running "No Scripts", and "Https Everywhere". No scripts has the aility to act like Https Everywhere, however Https Everywhere is updated with rules, No Scripts you have to do that manually.
If you choose not to use the browser supplied in the browser bundle you can use mm3-proxyswitch to put a button on your toolbar for switching between the 2, however make sure you have your browser setup in a way it cannot be dupped into giving your ip, hence defeating the purpose.
-
Polipo- is a caching proxy this is used to increase speed through caching
Privoxy- is not a caching proxy... It has customisable filters to increase your privacy while browsing. ie: change your user agent string (http://whatsmyuseragent.com/WhatsAUserAgent.asp)(important to have this changed as leaks information about your os and browser type), block adds, change refferrer info, force browser to do a http post rather than get request
Tor- is a socks chaining service which obfusicates your ip via routing your request through a chain of user owned/operated relay's... tor's weakness are:
- unless you also set up a vpn your traffic can be sniffed by the exit (last relay in the chain)
- you are trusting that each relay in your circuit is not keeping logs
- due to the limited amount of relay's (around 2k) it is possible for a single organisation to operate sufficient relay's that you could have a circuit consisting solely of that organisation's relay's therefore compromising your secuity
- torrents are blocked
- has high latency
So to answer your question yes it is a good idea to use privoxy with tor... no you don't need polipo and yes you still need to use privoxy with the tor browser bundle
Tor should not be used for hacking and illegal activites that can land you jail time it is simply not secure enough to trust your freedom to.
Tor is suitable to use for things like researching topics such as..... growing/making drugs, making bombs, visiting hacking forums, etc and preventing your traffic from being sniffed at a public hotspot
you of course should be running no scripts and https everywhere.... no scripts has the aility to act like https everywhere however https everywhere is updated with rules... no script you have to do that manually
if you choose not to use the browser supplied in the browser bundle you can use mm3-proxyswitch to put a button on your toolbar for switching between the 2....
I am currently using the tor browser bundle, noscript, and https. I am trying to get privoxy set up currently. Thanks a ton for the big answer. I am not looking to misuse tor
I hope I am not violating any evilzone rules and regs when I say this but the only reason I am using tor is because as I understand, that's the only way to access .onion sites. For some reason however, it's not working anyway. Perhaps the particular ones I am trying to access are down.
-
onions are not part of the ICANN registry. That's why I guess it's not working normally.
-
onions are not part of the ICANN registry. That's why I guess it's not working normally.
Yes but with Tor you are supposed to be able to access sites that aren't registered, or pinged, by regular searches....like .onion sites
-
yupp that's what the tor means - the onion router. Give feedback about it. I'm a n00b so I think I should do something like this as I google about everything !!! And I think it's not good.
@common - +1 for that answer.
-
Polipo- is a caching proxy this is used to increase speed through caching.
Privoxy- is not a caching proxy. It utilizes customisable filters, to increase your privacy while browsing. ie: change your User Agent String (http://whatsmyuseragent.com/WhatsAUserAgent.asp)(important to have this changed as it leaks information about your os, and browser type), block adds, changes referrer info, force's browser to do a http post rather than get request.
Tor- is a socks chaining service which obfusicates your ip via routing your request through a chain of user owned/operated relay's...
Tor's weakness are:
- unless you also set up a vpn your traffic can be sniffed by the exit (last relay in the chain)
- you are trusting that each relay in your circuit is not keeping logs
- due to the limited amount of relay's (around 2k) it is possible for a single organisation to operate sufficient relay's that you could have a circuit consisting solely of that organisation's relay's therefore compromising your secuity
- torrents are blocked
- has high latency
So to answer your question yes it is a good idea to use privoxy with tor... no you don't need polipo and yes you still need to use privoxy with the tor browser bundle.
Tor should not be used for hacking and illegal activites that can land you jail time it is simply not secure enough to trust your freedom to.
Tor is suitable to use for things like researching topics such as..... compounds & substances, things that go boooom, visiting hacking forums, etc and preventing your traffic from being sniffed at a public hotspot.
You of course should be running "No Scripts", and "Https Everywhere". No scripts has the aility to act like Https Everywhere, however Https Everywhere is updated with rules, No Scripts you have to do that manually.
If you choose not to use the browser supplied in the browser bundle you can use mm3-proxyswitch to put a button on your toolbar for switching between the 2, however make sure you have your browser setup in a way it cannot be dupped into giving your ip, hence defeating the purpose.
Is it necessary to get privoxy if I could just manually change my user agent?
-
Privoxy is a powerful tool that serves many purposes other than just changing your user string. I personally use it because of the extent to which i can shape what i transceive.
It is a tool like any other, you gotta understand it's uses and judge for yourself if you require it.
The docmentation is excellent if not boring and time consuming...
If your only fussed about the useragent then there are easier ways....
Not sure about the requirements for accessing hidden services I have no need...