Pages: [1]

Author Topic: Proxy question  (Read 4378 times)

0 Members and 2 Guests are viewing this topic.

Offline lucid

  • #Underground
  • Titan
  • **
  • Posts: 2683
  • Cookies: 243
  • psychonaut
    • View Profile
Proxy question
« on: March 30, 2012, 01:43:13 am »
Hey guys I had a question about using Tor. Is it a good idea for me to install privoxy to use with Tor? Or would it be better to use custom proxy settings using the Torbutton. Say Tor followed by an HTTP proxy? It's currently set to using Socks5. Or should just manually configure my browser to chain a few proxies?

Also does anyone here use I2P who can give feedback?

Thanks
« Last Edit: March 30, 2012, 01:45:15 am by LuciD »
Report to moderator   Logged
"Hacking is at least as much about ideas as about computers and technology. We use our skills to open doors that should never have been shut. We open these doors not only for our own benefit but for the benefit of others, too." - Brian the Hacker

Quote
15:04  @Phage : I'm bored of Python

Offline ande

  • Owner
  • Titan
  • *
  • Posts: 2664
  • Cookies: 256
    • View Profile
Re: Proxy question
« Reply #1 on: March 30, 2012, 08:43:53 am »
Like previously said, I do not recommend Tor at all. But if you have to use it, idd use it directly. Not chained up, if you do you will end up with 2kb/s.

Chaining socks4/5 is a much better idea.
Report to moderator   Logged
if($statement) { unless(!$statement) { // Very sure } }
https://evilzone.org/?hack=true

Offline lucid

  • #Underground
  • Titan
  • **
  • Posts: 2683
  • Cookies: 243
  • psychonaut
    • View Profile
Re: Proxy question
« Reply #2 on: March 30, 2012, 07:03:01 pm »
Thanks. I guess I should refer to your post about 3proxy then.
Report to moderator   Logged
"Hacking is at least as much about ideas as about computers and technology. We use our skills to open doors that should never have been shut. We open these doors not only for our own benefit but for the benefit of others, too." - Brian the Hacker

Quote
15:04  @Phage : I'm bored of Python

Offline Xodeskis

  • /dev/null
  • *
  • Posts: 5
  • Cookies: 0
    • View Profile
Re: Proxy question
« Reply #3 on: March 31, 2012, 12:41:24 pm »
Privoxy or polipo are no more needed to connect to Tor because the finals firefox updates enables a direct communication with tor
And you can use the Tor Browser Bundle which is an all ine one tool to navigate through tor.

Report to moderator   Logged

Offline common

  • /dev/null
  • *
  • Posts: 14
  • Cookies: 5
    • View Profile
Re: Proxy question
« Reply #4 on: March 31, 2012, 07:30:36 pm »
Polipo- is a caching proxy this is used to increase speed through caching.

Privoxy- is not a caching proxy. It utilizes customisable filters, to increase your privacy while browsing. ie: change your User Agent String (important to have this changed as it leaks information about your os, and browser type), block adds, changes referrer info, force's browser to do a http post rather than get request.

Tor- is a socks chaining service which obfusicates your ip via routing your request through a chain of user owned/operated relay's...
Tor's weakness are:
   - unless you also set up a vpn your traffic can be sniffed by the exit (last relay in the chain)
   - you are trusting that each relay in your circuit is not keeping logs
   - due to the limited amount of relay's (around 2k) it is possible for a single organisation to operate sufficient relay's that you could have a circuit consisting solely of that organisation's relay's therefore compromising your secuity
   - torrents are blocked
   - has high latency

So to answer your question yes it is a good idea to use privoxy with tor... no you don't need polipo and yes you still need to use privoxy with the tor browser bundle.

Tor should not be used for hacking and illegal activites that can land you jail time it is simply not secure enough to trust your freedom to.
Tor is suitable to use for things like researching topics such as..... compounds & substances, things that go boooom, visiting hacking forums, etc and preventing your traffic from being sniffed at a public hotspot.

You of course should be running "No Scripts", and "Https Everywhere". No scripts has the aility to act like Https Everywhere, however Https Everywhere is updated with rules, No Scripts you have to do that manually.
If you choose not to use the browser supplied in the browser bundle you can use mm3-proxyswitch to put a button on your toolbar for switching between the 2, however make sure you have your browser setup in a way it cannot be dupped into giving your ip, hence defeating the purpose.



« Last Edit: March 31, 2012, 07:46:52 pm by common »
Report to moderator   Logged

Offline lucid

  • #Underground
  • Titan
  • **
  • Posts: 2683
  • Cookies: 243
  • psychonaut
    • View Profile
Re: Proxy question
« Reply #5 on: March 31, 2012, 07:41:43 pm »
Quote from: common on March 31, 2012, 07:30:36 pm
Polipo- is a caching proxy this is used to increase speed through caching

Privoxy- is not a caching proxy... It has customisable filters to increase your privacy while browsing. ie: change your user agent string (important to have this changed as leaks information about your os and browser type), block adds, change refferrer info, force browser to do a http post rather than get request

Tor- is a socks chaining service which obfusicates your ip via routing your request through a chain of user owned/operated relay's... tor's weakness are:
   - unless you also set up a vpn your traffic can be sniffed by the exit (last relay in the chain)
   - you are trusting that each relay in your circuit is not keeping logs
   - due to the limited amount of relay's (around 2k) it is possible for a single organisation to operate sufficient relay's that you could have a circuit consisting solely of that organisation's relay's therefore compromising your secuity
   - torrents are blocked
   - has high latency

So to answer your question yes it is a good idea to use privoxy with tor... no you don't need polipo and yes you still need to use privoxy with the tor browser bundle

Tor should not be used for hacking and illegal activites that can land you jail time it is simply not secure enough to trust your freedom to.
Tor is suitable to use for things like researching topics such as..... growing/making drugs, making bombs, visiting hacking forums, etc and preventing your traffic from being sniffed at a public hotspot

you of course should be running no scripts and https everywhere.... no scripts has the aility to act like https everywhere however https everywhere is updated with rules... no script you have to do that manually
if you choose not to use the browser supplied in the browser bundle you can use mm3-proxyswitch to put a button on your toolbar for switching between the 2....

I am currently using the tor browser bundle, noscript, and https. I am trying to get privoxy set up currently. Thanks a ton for the big answer. I am not looking to misuse tor

I hope I am not violating any evilzone rules and regs when I say this but the only reason I am using tor is because as I understand, that's the only way to access .onion sites. For some reason however, it's not working anyway. Perhaps the particular ones I am trying to access are down.
« Last Edit: March 31, 2012, 07:42:25 pm by LuciD »
Report to moderator   Logged
"Hacking is at least as much about ideas as about computers and technology. We use our skills to open doors that should never have been shut. We open these doors not only for our own benefit but for the benefit of others, too." - Brian the Hacker

Quote
15:04  @Phage : I'm bored of Python

Offline pl0tuS

  • Knight
  • **
  • Posts: 320
  • Cookies: 22
    • View Profile
Re: Proxy question
« Reply #6 on: March 31, 2012, 08:01:45 pm »
onions are not part of the ICANN registry. That's why I guess it's not working normally.
Report to moderator   Logged


--Approved future mod :D --Factionwars

Offline lucid

  • #Underground
  • Titan
  • **
  • Posts: 2683
  • Cookies: 243
  • psychonaut
    • View Profile
Re: Proxy question
« Reply #7 on: March 31, 2012, 08:07:25 pm »
Quote from: pl0tuS on March 31, 2012, 08:01:45 pm
onions are not part of the ICANN registry. That's why I guess it's not working normally.

Yes but with Tor you are supposed to be able to access sites that aren't registered, or pinged, by regular searches....like .onion sites
« Last Edit: March 31, 2012, 08:07:47 pm by LuciD »
Report to moderator   Logged
"Hacking is at least as much about ideas as about computers and technology. We use our skills to open doors that should never have been shut. We open these doors not only for our own benefit but for the benefit of others, too." - Brian the Hacker

Quote
15:04  @Phage : I'm bored of Python

Offline pl0tuS

  • Knight
  • **
  • Posts: 320
  • Cookies: 22
    • View Profile
Re: Proxy question
« Reply #8 on: March 31, 2012, 08:19:59 pm »
yupp that's what the tor means - the onion router. Give feedback about it. I'm a n00b so I think I should do something like this as I google about everything !!! And I think it's not good.

@common - +1 for that answer.
Report to moderator   Logged


--Approved future mod :D --Factionwars

Offline lucid

  • #Underground
  • Titan
  • **
  • Posts: 2683
  • Cookies: 243
  • psychonaut
    • View Profile
Re: Proxy question
« Reply #9 on: March 31, 2012, 08:24:41 pm »
Quote from: common on March 31, 2012, 07:30:36 pm
Polipo- is a caching proxy this is used to increase speed through caching.

Privoxy- is not a caching proxy. It utilizes customisable filters, to increase your privacy while browsing. ie: change your User Agent String (important to have this changed as it leaks information about your os, and browser type), block adds, changes referrer info, force's browser to do a http post rather than get request.

Tor- is a socks chaining service which obfusicates your ip via routing your request through a chain of user owned/operated relay's...
Tor's weakness are:
   - unless you also set up a vpn your traffic can be sniffed by the exit (last relay in the chain)
   - you are trusting that each relay in your circuit is not keeping logs
   - due to the limited amount of relay's (around 2k) it is possible for a single organisation to operate sufficient relay's that you could have a circuit consisting solely of that organisation's relay's therefore compromising your secuity
   - torrents are blocked
   - has high latency

So to answer your question yes it is a good idea to use privoxy with tor... no you don't need polipo and yes you still need to use privoxy with the tor browser bundle.

Tor should not be used for hacking and illegal activites that can land you jail time it is simply not secure enough to trust your freedom to.
Tor is suitable to use for things like researching topics such as..... compounds & substances, things that go boooom, visiting hacking forums, etc and preventing your traffic from being sniffed at a public hotspot.

You of course should be running "No Scripts", and "Https Everywhere". No scripts has the aility to act like Https Everywhere, however Https Everywhere is updated with rules, No Scripts you have to do that manually.
If you choose not to use the browser supplied in the browser bundle you can use mm3-proxyswitch to put a button on your toolbar for switching between the 2, however make sure you have your browser setup in a way it cannot be dupped into giving your ip, hence defeating the purpose.

Is it necessary to get privoxy if I could just manually change my user agent?
Report to moderator   Logged
"Hacking is at least as much about ideas as about computers and technology. We use our skills to open doors that should never have been shut. We open these doors not only for our own benefit but for the benefit of others, too." - Brian the Hacker

Quote
15:04  @Phage : I'm bored of Python

Offline common

  • /dev/null
  • *
  • Posts: 14
  • Cookies: 5
    • View Profile
Re: Proxy question
« Reply #10 on: March 31, 2012, 08:50:59 pm »
Privoxy is a powerful tool that serves many purposes other than just changing your user string. I personally use it because of the extent to which i can shape what i transceive.
It is a tool like any other, you gotta understand it's uses and judge for yourself if you require it.
The docmentation is excellent if not boring and time consuming...

If your only fussed about the useragent then there are easier ways....

Not sure about the requirements for accessing hidden services I have no need...
« Last Edit: March 31, 2012, 09:09:36 pm by common »
Report to moderator   Logged
Pages: [1]