Re: Me - Tor - VPN - Internet?
On Thu, 2010-10-07 at 21:26 -0700, Robert Ransom wrote: On Thu, 7 Oct 2010 23:58:28 -0400 grarpamp grarp...@gmail.com wrote: a free VPN There are VPN providers that will let you pay anonymously. Among others, I would be interested in reading posts containing lists of VPN providers that offer one or more of these two services. Thanks. No -- put them on the Hidden Wiki. Finding *that* is left as an exercise for the reader. Do you mean the first one, which is dead? Or the second one, which is also dead? Or the last one I was aware of, which is this: http://kpvz7ki2v5agwt35.onion/wiki/index.php/Main_Page signature.asc Description: This is a digitally signed message part
Re: Me - Tor - VPN - Internet?
On Thu, Oct 7, 2010 at 5:19 AM, John Brooks spec...@dereferenced.net wrote: On Wed, Oct 6, 2010 at 9:11 PM, Load Bear loadbear...@gmail.com wrote: I am aware of that limitation. However, I am currently less concerned about eavesdroppers between a given VPN and the destination than I am about Tor exit-node eavesdroppers. Knowing the limitations involved, do you know of some method to accomplish my expressed goal? Assuming it's not a free VPN, you also run the risk of being identified by your billing information. If it is free, I would say that there is just as much if not more risk of your traffic being used maliciously. There are VPN providers that will let you pay anonymously. However, if you're taking anonymity on the Internet seriously, using a VPN as the last and only line of defense carries all kinds of risks: Traffic analysis (Let's look at all traffic going in and out of this VPN server and match the traffic), single point of failure in form of the VPN provider (Do you trust him not to keep logs and sell them to the next highest bidder?) and some more. From an academic point of view, there isn't much anonymity to gain from a VPN. You could run Tor on top of the VPN to gain anonymity. That sounds technically possible even though I haven't tried it -- but I don't see much benefit here unless you're living in a country that blocks the public Tor nodes and most bridges. Best, /C *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Me - Tor - VPN - Internet?
a free VPN There are VPN providers that will let you pay anonymously. Among others, I would be interested in reading posts containing lists of VPN providers that offer one or more of these two services. Thanks. *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Me - Tor - VPN - Internet?
On Thu, 7 Oct 2010 23:58:28 -0400 grarpamp grarp...@gmail.com wrote: a free VPN There are VPN providers that will let you pay anonymously. Among others, I would be interested in reading posts containing lists of VPN providers that offer one or more of these two services. Thanks. No -- put them on the Hidden Wiki. Finding *that* is left as an exercise for the reader. Robert Ransom signature.asc Description: PGP signature
Me - Tor - VPN - Internet?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - From what I have read, it is at least theoretically possible for someone running a Tor exit node to monitor any plaintext, non-SSL/https connections that are passed through that node. The solution that seems to be usually suggested is to always use end-to-end encryption, such as https. However, some sites do not support https. I have also noticed that there exist some free VPN services which can be used reasonably anonymously, such as ItsHidden. Thus, I was wondering - is there an easy way to, for lack of a better description, chain proxies, so that the traffic between myself and the VPN is anonymized through Tor, and my traffic between Tor and the internet is encrypted through the VPN? - -- LOADBEAR,8,1;RUN -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkytNwIACgkQ8Li/YMVVHuZGCgCgqcGoIEXD13bs3Vb8YklIiMuo gZsAn312Q69Nr0I6ODHR+AQ+xkkGStOm =r2iJ -END PGP SIGNATURE- *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Me - Tor - VPN - Internet?
On Wed, Oct 6, 2010 at 8:57 PM, Load Bear loadbear...@gmail.com wrote: I have also noticed that there exist some free VPN services which can be used reasonably anonymously, such as ItsHidden. Thus, I was wondering - is there an easy way to, for lack of a better description, chain proxies, so that the traffic between myself and the VPN is anonymized through Tor, and my traffic between Tor and the internet is encrypted through the VPN? Then the traffic between the VPN and the actual destination won't be encrypted, so the VPN sees everything you do. Same problem, different place. There is no way you can encrypt traffic sent to a destination that doesn't know how to decrypt it. - John Brooks
Re: Me - Tor - VPN - Internet?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2010/10/06 11:02 PM, John Brooks wrote: On Wed, Oct 6, 2010 at 8:57 PM, Load Bear loadbear...@gmail.com wrote: I have also noticed that there exist some free VPN services which can be used reasonably anonymously, such as ItsHidden. Thus, I was wondering - is there an easy way to, for lack of a better description, chain proxies, so that the traffic between myself and the VPN is anonymized through Tor, and my traffic between Tor and the internet is encrypted through the VPN? Then the traffic between the VPN and the actual destination won't be encrypted, so the VPN sees everything you do. Same problem, different place. There is no way you can encrypt traffic sent to a destination that doesn't know how to decrypt it. I am aware of that limitation. However, I am currently less concerned about eavesdroppers between a given VPN and the destination than I am about Tor exit-node eavesdroppers. Knowing the limitations involved, do you know of some method to accomplish my expressed goal? - -- LOADBEAR,8,1;RUN -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkytOlEACgkQ8Li/YMVVHub8FACgg/j/wu+SQFa/vJ40x6Yc5xQq p3YAn1Rrw2g8KtiycWn2AbOK5fmLMpBo =AtlC -END PGP SIGNATURE- *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
Re: Me - Tor - VPN - Internet?
On Wed, Oct 6, 2010 at 9:11 PM, Load Bear loadbear...@gmail.com wrote: I am aware of that limitation. However, I am currently less concerned about eavesdroppers between a given VPN and the destination than I am about Tor exit-node eavesdroppers. Knowing the limitations involved, do you know of some method to accomplish my expressed goal? Assuming it's not a free VPN, you also run the risk of being identified by your billing information. If it is free, I would say that there is just as much if not more risk of your traffic being used maliciously. You would need to find VPN software that uses TCP and will allow you to send it through SOCKS. I don't know of any, but perhaps somebody else does. - John Brooks *** To unsubscribe, send an e-mail to majord...@torproject.org with unsubscribe or-talkin the body. http://archives.seul.org/or/talk/
