EvilZone
Hacking and Security => Anonymity and Privacy => : proxx October 14, 2012, 09:15:14 AM
-
Its been bothering me for a long time.
Im am one of those people who doesnt like google on single bit.
Im not that old but old enough to watch google take over the internet.
Buying youtube, google adds all over the web, googleapis required for A LOT of things.
Google is everywhere , they sniffed my routers MAC address with their streetview stuff.
They break privacy rules worldwide and get away with it.
So then there is me as an idividual.
I like security stuff, i like privacy , I dont like google.
Ignoring google and not using it is becoming increasingly harder.
Sure I use noscript and my FF installation is bloated with addons to do similar things.
(No refferer for example, its an easy mistake)
But than what happens;
An interesting conference , a good sec related video etc etc.
....Youtube.... sigh.
Eventhough I try to keep it off as much as possible google will have a profile.
How do you handle this?
Do you care?
Any tips and tricks beyond the usual suspects?
Thanks,
Proxx
-
Noone any opinion about this?
-
Fuck you! Google 4 evar!
http://www.thechurchofgoogle.org/ (http://www.thechurchofgoogle.org/)
-
Fuck you! Google 4 evar!
http://www.thechurchofgoogle.org/ (http://www.thechurchofgoogle.org/)
+1
http://www.thechurchofgoogle.org/Scripture/Proof_Google_Is_God.html
-
I also have a FF bloated with privacy add ons. A good one is TrackMeNot if you haven't heard of it. Instead of trying to hide and anonymize you it does the opposite. It essentially spams google with false searches. For example right now if I look at the bottom of my screen I can see that I am apparently searching 'bloomberg forming'. Not sure how effective it is but if you trust your add ons then I'd say this one is a good one.
It truly is very hard to not use Google. I sometimes use Ixquick. Try that. It doesn't necessarily turn up as many results as google but it's a way to avoid it. Plus it doesn't send your IP to your ISP.
-
It seems like it's pretty much impossible to be completely private and use modern day facilities at the same time. I like the what lucid said about track me not, instead of doing the near impossible task of getting google to not know about you, it give false information about you.
+1
http://www.thechurchofgoogle.org/Scripture/Proof_Google_Is_God.html (http://www.thechurchofgoogle.org/Scripture/Proof_Google_Is_God.html)
Nice to see you back skidiot :) but this link seems pretty accurate. I don't know if I should be scared or not... xD
-
Thanks for the replies :)
I also have trackmenot installed.
Lol my FF takes a shitload of time to load thanks to the bloat.
Its unbelieveable that im unable to watch the national news without googleapis.
Ever heard of the umbrella corp?
I think this is as close as 'we' have ever been.
-
We are definitley on our way. I'm assuming you already know about things like browser spoofing and VPNs and whatnot, otherwise I'm not sure there's a better way to avoid it other than, well, not using Google.
Try this link anyway. You might find some stuff interesting even though it IS a tad dated.
Uber leet anonymity page (http://billstclair.com/matrix/)
-
For all my searching ive resorted to startpage.com << BEST fucking search engine ever.
Use google results and doesnt log/track anything, also there is a free proxy service included.
The problem imo is that google will continue to take over the rest of the web, they bought youtube.
Planning on using something like google money, google bla bla google this that.
There will be a point where you as an individual will be isolated.
This might not be the case just yet, but imagine google buying paypal, news corps, facebook.
All that kinda jazz.
Soon they will have more money than any enitity on the planet.
What they already posses is THE largest database of just about anything.
The know what ppl do, want etc etc.
If you are an idiot and logged into google and visit any website youll be tracked.
Same goes for facebook as on all these pages there are these idiotic social plugins (cough)
To be honest im scared, whats happening might be a one way ticket to complete absense of privacy altogether.
If we havnt reached this station yet.
What is also bothering me , is the complete lack of care from the users.
Sure the might not be educated enough or maybe the actually dont care.
Their complete life including ... uhm everything.. is on fcking facebook.
Funny is that they do close the curtains when the sun goes down.
Which imo is the same thing.
Weird place, this world.. internet thing.
proxx
-
First of all,
What is also bothering me , is the complete lack of care from the users.
Welcome to earth, where people don't give a shit about things that matter.
Second,
For all my searching ive resorted to startpage.com << BEST fucking search engine ever.
This seems to be the exact same thing as Ixquick. The only apparent difference is the name. Check it out.
https://www.ixquick.com/ (https://www.ixquick.com/)
EDIT: I just noticed that Start page seems to provide more results. Fuck me for being unobservant :o In that case, Thanks! I will now make this my homepage. I liked Ixquick except for the obvious lack of results. This is much better.
-
I just noticed that Start page seems to provide more results. Fuck me for being unobservant :o In that case, Thanks! I will now make this my homepage. I liked Ixquick except for the obvious lack of results. This is much better.
AFAIK startpage is made by the ixquick guys...
I use google things (search engine,mail,calendar) a lot on my day-to-day life, just when it comes to IT-Security I'm using a proxy (http://www.fastest-webproxy.com/), temp-mail-services (https://www.guerrillamail.com/),etc...
Easier and faster for daily things than handling lots of apps,but still enough to be anonymous for "more illeagal" things...
Also if there are two profiles of you it's harder to know for the others wich one is you (tough both are you)...
-
Yeah, it drives me crazy, I just switched over to Mozilla Firefox, I don't want Google monitoring my every move, or Facebook. I really, really, try to be anonymous online, but in this day in age, it can be quite a challenge. *sigh* I'm sure Google and Facebook have government spies on their websites
-
I use these FF add-ons.
1.) No Script
2.) DoNotTrackMe
3.) MaskMe
4.) SelfDestructingCookies
5.) HTTPSEverywhere
6.) Better Privacy
7.) AdBlock Plus
8.) Ghostery
9.) UserAgent Switcher
-
I use a couple of those listed including "no-refferer"
https://en.wikipedia.org/wiki/HTTP_referer
The whole damn point is that even when I like to watch the national news online I have to enable google scripts.
There is no escaping without sacrifice I guess.
It not that I care about them knowing I watch the news, I mean thats fine but the element of choice is removed.
-
I've been using Startpage exclusively since 2010. It took a while to break off the Google habit, but I eventually did. I still find myself using Google from time to time (last time was 3 weeks ago). Obviously I'm talking about the search engine. Since Google has become a conglomerate, it's pretty difficult to fully avoid all of their services.
I have a whole bunch of privacy add-ons, but the ones I mainly use are anonymoX, IPfuck, TrackMeNot and HTTPS-Everywhere.
-
A bit of a necro, but I feel I have a lot to add.
I use DuckDuckGo to avoid google as a search engine, and ghostery to avoid anylitics.
But that's not my main issue.
My main issue is how easy it is to fake google searches to look like they're from another person's computer. I wrote an article about this a while back (I can post a link if anyone wants), demonstrating how to use CSRF to make a google search. I made a proof of concept forum post that searched google for "3vilp4wn is awesome" whenever someone loads the page. So far it has been seen about 1086 times, enough to make "3vilp4wn is awesome" the *only* autocomplete for "3vilp". That doesn't seem like a big issue, but google searches have been used as evidence in court. I could make you search google for anything I want, just by you having loaded this page. Think about that for a second. In fact, you just searched google for "3vilp4wn is awesome" right now, just because of this:
(https://encrypted.google.com/search?q=3vilp4wn+is+awesome)
But I could have had you searching for child porn, downloading pirated content, looking up how to make a bomb, or any number of illegal things.
Compared to that, most of my other issues with google are minor.
-
In fact, you just searched google for "3vilp4wn is awesome" right now, just because of this:
[i.m.g.]https://encrypted.google.com/search?q=3vilp4wn+is+awesome[/i.m.g.]
But I could have had you searching for child porn, downloading pirated content, looking up how to make a bomb, or any number of illegal things.
This is awesome. But in court, couldn't someone use this to demonstrate that google searches aren't reliable as evidence?
P.S.: I altered the tags in my quote so that everyone can see what's happening behind the curtains.
-
This is awesome. But in court, couldn't someone use this to demonstrate that google searches aren't reliable as evidence?
P.S.: I altered the tags in my quote so that everyone can see what's happening behind the curtains.
Thats already already happened, Google searches were used as "Evidence" in CP cases and the defence argued that the evidence was unreliable as searches can be spoofed (* I believe also CSRF *)
-
Well, I don't know about recently, but I know that google searches have been used as evidence in court to convict someone. I don't think spoofing ever came up, because people are stupid like that :P
Point is: It shouldn't be allowed, but it is.
Now google could just fix the whole thing by using a CSRF token, but I don't think that they see an issue with spoofed searches, because google would *never* share your data, right? Right?
-
Now google could just fix the whole thing by using a CSRF token, but I don't think that they see an issue with spoofed searches, because google would *never* share your data, right? Right?
Of course not thats like suggesting governments lie to the public or Paypal knowingly breaks the law by withholding peoples money for 21 days as "Pending" but doesnt pass on the interest from the money its holding...
-
i had to go for the irony of this.
http://www.youtube.com/watch?v=-M05IEIetV8 (http://www.youtube.com/watch?v=-M05IEIetV8)
2600 hope conference. speaker Steve Rambam. "Privacy is dead, get over it"
Have to say first time i watched it a few years back i learned a lot, but he does talk about a lot of things, some that brushes this. Anyway As near as i can tell the other thing no one has really mentioned on this kind of thing is WHAT is done with the databases. That is that they are sold. Not only does google sell this information, it BUYS it too. meaning even if your using other sites to view your streaming media, their is a good chance someone is going to buy that data. The only real way to get around this (aside from all the add ons) is to either live in a cave or acting like a paranoid luni. by that i mean using every single protection possible(add-ons, proxies, etc) at all times even for something as simple as a search at startpage. Otherwise information about you is being stored, and even then SOME is still being stored by your ISP(such as you got to X proxy first). At the end of the day data is so cheap now that it costs effectively nothing to store everything about you, forever.
because of this i tend to look at it more along these lines: Do i want to hide this information? maybe its a search that could be misconstrued, a book that you KNOW is being watched, or ofc actual illegal activities. If one or more of those criteria are met, then sure to me go all bat shit crazy and enable everything you can, and do all that you can to protect yourself.
Otherwise go with a "stand down" approach, leave on what you want(this will obviously vary person to person, and pc to pc/connection to connection for speed purposes). Personally this machine is so god damn awful i run nothing more than ABP, was forced into chrome away from FF(the memory leak causes the browser to crash about every hour. grrr).
At the same time my normal habits are severely restricted on this machine, the worst that could be found on me is that i come to sites like this, which doesnt bother me. The irony here is that i KNOW im on a watch list. anyone with my prior clearance/job is. however because of that job, its something i would/should normally be interested in, so i dont give a damn if in some file somewhere on some hard-drive in some bunker their is a record i visit sites like this. Anyway i dont know if im even on topic any more so i guess ill go bother someone elses thread.
-
Main thing I don't like about using google is they store all queries in DBs, tool I use to counter this phenomenon (Moxie Marlinspike tool): googlesharing
-
It's too late for me. Too much info on me has already been stored. :(
-
evilzone() { evilzone | evilzone & }; evilzone
Enter all of the above into a linux terminal to see what evilzone() does.
It crashes your pc..
-
It crashes your pc..
Wrong. It's a fork bomb, if you kill it quick, it won't.
-
It crashes your pc..
LOL its funny to see comments about a signature in a random thread without any relation or reason :D
:D
-
People falling for classic shell fork bombs is amusing. I still think the original colon one is the best.
-
People falling for classic shell fork bombs is amusing. I still think the original colon one is the best.
Of course its the best, but more people will try it when there is evilzone() intead of :()
Also it is easier and more clear for people to understand how it works when they realize that the : is just a name and not some special character that does something special.
Anyway, if someone doesn't know what a fork bomb does, then this code will look strange to them and before trying it they probably will save their work anyway :)
If not its not my fault if someone looses data and unsaved work because of this as people have to learn to be more careful and take precautions before doing anything that they do not know the result of. :)
Anyway, back to the topic of Anonimity and privacy please. This is not a random topic and I have a feeling that someone with a red or blue name might leave a message here soon if we continue off topic discussions :D
-
Thanks for this threat (:
I wasn't sure about every privacy destruction google does and did.
-
If you don't block google and ads you are working for free for companies (also making yourself more vulnerable). That simple.
If you are interested in safe browsing (here comes the difference between people - the ones who care and the coward) you need to learn about it. Check JonDonym page, learn about tor, vpn, proxies, learn how and what information your browser sends - what does an http header conatin, how browsers unique ID works... and so on.
Secure browsers are really the basics for hackers.