On 12/22/10 08:38, Praedor Atrebates wrote: > I have always been disturbed by the fact that javascript or flash > can sidestep tor and give away your real IP. Is there truly no way > to control one's own computer so that any and ALL traffic that goes > out to the ethernet port or wlan gets directed through tor no matter > what? Can any combination of software and hardware prevent software > on one's own computer from acting the way someone else wants rather > than as the owner wants? I would love to be able to use javascript > and flash (some site require one or the other or both to be > functional) and know that ANY traffic that exits my own system WILL > be directed through the tor network. > >
Any and ALL suggests a machine that allows only HTTP/S activity to/from a TOR process; to/from a TOR entry node; all other traffic (e.g. UDP from some sneaky plugin) is blocked. An iptables script or Windows firewall could do that. Presumably a second script would be invoked for normal operation. Alternatively, VMs dedicated to TOR applications could achieve your goal, plus protect your box if something grabs your e.g. browser and tries to sniff around. HTH *********************************************************************** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talk in the body. http://archives.seul.org/or/talk/