Benedetto XVI, la Fede cinguettata

quale anonimato?
Qui sono tutti convinti sulla sicurezza di Tor.Francamente dubito che Tor dia davvero questo alto grado di anonimato. Anche perchè, se così fosse, tutti i pedofili ne farebbero uso e resterebbero impuniti.Qualcuno è in grado di dimostrare il contrario? :)

Poche Idee e Ben confuse
I was doing quite a bit of research into tor a while ago to try and increase my anonymity. Here are some of the things I came across and are useful to know.1) Your connection into tor and through tor is encrypted, which means any connection FORCED through tor is not reversible. 2) Your connection out of a tor exit node is encrypted if and only if the site you are connecting to is an encrypted channel (example: SSL). This means if you visit a regular http site or ftp or anything like that... the exit node has the ability to read all the information you are sending. This is the reason the tor browser comes with the HTTPS everywhere addon for FF. This addon needs to be supplemented however, with HTTPS Finder. 3) The flaw in tor is that it doesn't force all outbound internet connections through it or sanitize what applications are sending about your local host through it. I am not sure if tor will ever be able to do that. The metasploit guy is planning to track tor users using the #3 above vulnerability in the tor shield. If you read the article he is basically going to do something akin to an XSS injection on the tor exit node, have you run a java applet which will grab information about your local host and then send it back. This can be mitigated with the Noscript(should disable java,flash, etc) plugin for FF as well as disabling javascript on your browser. Here are some things I found to help increase your anonymity online if you are using tor. You may not need all of them depending on how much you are trying to hide. I tried to put them in order of higher and higher anonymity. The first 6 are easy enough that I recommend everyone do them... 1) Use NoScript addon + disable javascript!2) Get the addons HTTPS Finder and HTTPS Everywhere for FF;3) Always browse with the private browser/incognito feature;4) Don't cache/store cookies for anything more than your current session;5) Change your DNS settings to NOT use your ISP, they are more likely to track what you are doing then other open DNS servers (arguable?); Also, there are still DNS info leaks, tor is working on a TorDNS which will force requests through tor but its still experimental. 6) Spoof your headers, User-agent, referrer, X-Forwarded-For etc...7) Get sockscap v2 (this redirects all applications opened with it that use the winsock.dll to go through your socks proxy) 8) Any scripts you write need to be proxied through tor;9) You can either write a small script or download TorAutoSwitcher and it will allow you to change your identity on tor more frequently. My web crawlers change identity on every internet request;10) SSH tunnel to tor;11) Turn off web images to protect against another type of XSS;12) Only use a text based webrowser like lynx13) Use a VPS/VM to do your browsing through tor;14) Create an alternate identity with as much realistic information as you can. Keep up appearances at all times, never break character. However, don't ever kid yourself into thinking that you are untraceable, given enough resources anyone can be tracked through the internet. The only 100% way to no be tracked is to not use the internet. These steps are merely to require the amount of resources to track you to be even greater; perhaps thwarting a larger % of would be trackers. Personally, I feel the metasploit tracker has good intentions, but we must not forget the path to hell was paved with good intentions. Also, if this is true "Run a patched TOR server. The patches embed a Ruby interpreter into the TOR connection engine and allow arbitrary Ruby scripts to process data before sending it back to the client" sounds like a HUGE backdoor ripe for hacking all tor users...causing a whole shit can worse of worms than any good this patch might do.As always with power and knowledge comes responsibility. Just because you are invisible doesn't mean you should abuse that power. I think the idea of anonymity online is powerful and great and thus requires a lot of responsibility by the user.

Venite qui, pedofili!
Qui vi insegnano come non farvi beccare!Tutti i post parlano di quanto sicuro o non sicuro è quel tal sistema rispetto un altro, vantaggi e svantaggi. Quale posto migliore per imparare a delinquere?

Austriaco, non australiano
come da oggetto, almeno tradurre bene.

Solo reti totalmente anonime
Questo dimostra nuovamente che purtroppo solo le reti totalmente anonime sono sufficientemente resistenti: nel momento esatto in cui si esce su una rete pubblica (internet) qualcuno rischia di pagarne le spese...