TOR/ANONIMITY ONLINE

[Guest]

I'm not a regular visitor of the security and legal issues department, so this might be a double post.
TOR is a tool for anonymising web browsing and publishing.

From their website:

"Tor: anonymity online

Tor is a toolset for a wide range of organizations and people that want to improve their safety and security on the Internet. Using Tor can help you anonymize web browsing and publishing, instant messaging, IRC, SSH, and other applications that use the TCP protocol. Tor also provides a platform on which software developers can build new applications with built-in anonymity, safety, and privacy features.

Tor aims to defend against traffic analysis, a form of network surveillance that threatens personal anonymity and privacy, confidential business activities and relationships, and state security. Communications are bounced around a distributed network of servers called onion routers, protecting you from websites that build profiles of your interests, local eavesdroppers that read your data or learn what sites you visit, and even the onion routers themselves."


It can be found at TOR . Hope this is of some use to you guys.

Greetings,

Matsuva

 

[Guest]

I use TOR...it slows me down a bit...and my Google home page may be from a foreign country sometimes.

 

[pmorris]

make sure you are running Tor+privoxy

 

[etrusco]

I disable Javascript and trash all cookies before connecting too...

And, by the way, I sign up to any forum with a disposable email account that I have setup using TOR too.

A bit paranoid? well, I just care for my privacy

 

[m@rg]

i have /use tor only when im signed in or uploading images or posting

should i keep tor on always, even just to browse the forums ?

 

[HappyHemphog]

i have /use tor only when im signed in or uploading images or posting

should i keep tor on always, even just to browse the forums ?

Everytime you request a page from a website, your IP is sent to the web server. If said webserver is logging IPs, then your IP would show up just by browsing to the site.

So yes, anytime you visit a site you don't want to leave footprints at, turn your TOR on. Yes it slows your connection, but that's not near as slow as from jail.

 

[Guest]

I disable Javascript and trash all cookies before connecting too...

And, by the way, I sign up to any forum with a disposable email account that I have setup using TOR too.

A bit paranoid? well, I just care for my privacy

Very good idea..I had not thought of that....the email thing...

 

[hamstring]

I would love to load pictures but I am too parnoid.

I have both Tor & Privoxy loaded and Tor says it is running in my System/Startup Tray(not sure what it is called) and Privoxy shows up there too but it does not seem to do anything. I know it is not working .

Do I have to have firefox also?
I read the help file does anyone have any advice?

 

[HappyHemphog]

I would love to load pictures but I am too parnoid.

I have both Tor & Privoxy loaded and Tor says it is running in my System/Startup Tray(not sure what it is called) and Privoxy shows up there too but it does not seem to do anything. I know it is not working .

Do I have to have firefox also?
I read the help file does anyone have any advice?

You need to configure your specific browser to use Privoxy/Tor. You can find instructions on how to configure your browser at the Tor website.

 

[Guest]

I would love to load pictures but I am too parnoid.

I have both Tor & Privoxy loaded and Tor says it is running in my System/Startup Tray(not sure what it is called) and Privoxy shows up there too but it does not seem to do anything. I know it is not working .

Do I have to have firefox also?
I read the help file does anyone have any advice?

Yeah, you need to use Firefox, and then go get the "Vidalia" package...
I am quite sure mine works..

 

[beej]

I just downloaded the newest package of TOR/Vadalia/Privoxy. It used to seem a little bit hard to get it working with my browser. The latest version makes it very easy.

Privoxy is already configured to forward packets to TOR. All you have to do once it is installed is go to your IE/Firefox options and set the HTTP proxy to 127.0.0.1, port 8118.

For those who don't know, 127.0.0.1 is your localhost, or the computer you are sitting at. Privoxy listens for connections on 8118 on your localhost then forwards those packets to TOR.

You have to run Privoxy to be able to surf anonymously. TOR doesn't support http connections by itself, therefor Privoxy must be used to request the webpage you want to go to.

I hope this helps some of you out. Its really easy to setup and really works. I test my connection by going to www.dslreports.com. They have broadband tests there that show the closest connection to your ISP. IE: My ISPs main servers are located in Texas, so I get a test server in Texas as my closest one. When I use Privoxy, it lists California as the closest, most likely because the TOR connection is overseas. Also, like granma said before, your Google page may show up as Google Deutschland.

 

[m@rg]

quote --british bulldog
"My thinking is that if I make a direct connection to icmag (with http), then my ISP could evesdrop on me, but if I use a proxy server, icmag won't know what my true IP is, but both my ISP and the proxy admin will be able to see my posts.

So, that's less secure than just connecting straight to icmag, who are not bothered about me posting about growing anyway, lol"



and i know that when using tor ,the data is encrypted until the last hop, which could be intercepted by any one who knows what they are doing
ANYone can set up a tor server and have data flying through there pc s...........

no one is 100% safe when posting online

 

[HappyHemphog]

and i know that when using tor ,the data is encrypted until the last hop, which could be intercepted by any one who knows what they are doing
ANYone can set up a tor server and have data flying through there pc s...........

no one is 100% safe when posting online

Actually, the data is only encrypted BETWEEN Tor nodes. From your PC to first node is not and a tap at your ISP will still reveal any information about you. But if the PoPo is snooping at your ISP, you were ALREADY screwed.

From the last node to the server your requesting data from is unencrypted as well, but only the CONTENT of the data will reveal anything about you. At this point the IP address being reported at recorded at the destination webserver will be that of the last Tor node.

What this means is that unless the PoPo is already on to you at your ISP, nothing at the website your visiting will reveal anything about you UNLESS YOU INCLUDE IT IN THE CONTENT of your traffic. i.e. Don't freaking post your address or phone number because THAT can be read on the webserver your visiting. But that's true whether or not you use TOR.

If you want TRUE protection, you need to visit a website that will accept encrypted traffic and decrypt at the server and then start encrypting all your outgoing messages.

Let me try a postal analogy...

Imagine sending letters to people but you write the message on the OUTSIDE of the envelope. That's what normal email is like. Any server that your email passes through can read it simply by looking at it.

Now, using TOR is the equivalent of taking your letter to the post office and handing it to the clerk for them to insert into an envelope, seal it and send it off without a visible return address. When it reaches the destination post office, the clerk there opens the letter then contacts you to pick it up. The clerk only knows that the letter came via the Post but can learn a lot by reading it before you pick it up. So as long as you don't write anything in that letter that can be used to identify you, your fairly safe.

The optimal solution would be to write your message in code, seal in an envelope and send off with no return address. The only person that will actually see message is the recipient and even then they will need to decode the message.

Now, that last option is the equivalent of end-to-end encryption of your internet traffic and is the ONLY way to be 99% sure of privacy. The reason I don't say 100% is there is ALWAYS a point of failure where your message could be intercepted by someone with the computing power to crack the encryption.

I only wish someone would start a secure online MJ forum where traffic is encrypted end-to-end. I'd even be willing to PAY for access to such a site.

Be safe!
Hempy

 

[m@rg]

thanks ,very usefull
so, do people use tor etc to cover their backs incase of icmags servers ever getting in wrong hands
or just always, for public annomity

 

[boroboro]

Tor links are actually encrypted to a certain degree as soon as they leave your browser. See the Tor website for an overview. I've confirmed this using a packet sniffer like Ethereal / Wireshark.

I'm not saying it's bulletproof encryption, but you can't scan through the packets looking for plain text names, IP addresses, websites, or content.

BTW, the browser Opera makes it very easy to switch in and out of the slow but secure Tor/Privoxy mode -- just hit the keys F12 - x.

 

[etrusco]

Actually, the data is only encrypted BETWEEN Tor nodes. From your PC to first node is not and a tap at your ISP ...

Actually, that's wrong.
Traffic between you and the first node IS encripted.

see:
http://tor.eff.org/overview.html

 

[avgjoe]

Any1 know of any confirmed cases of some1 getting busted on this site or others due to their internet activity?

Seems like if big bro got interested enough and if ISPs played along it would be quite easy to do. It seems like the only busts I ever hear about from net activity are kiddie porn related.

any known documented or suspected cases?

thanks.

 

[opt1c]

if you can sacrifice the speed than why not... it works really well for how easy it is to setup... try using a specific browser just for icmag... that's what i do

haven't heard of anyone getting busted but it's one less thing to be paranoid about, if you're a paranoid sort of person that is.

 

[ninfan77]

avgjoe, yes some kid was busted recently, but thats because he was posting pictures of himself on myspace/facebook with all his grow/weed stuff.

 

[Gunnarguchi]

I newer login at cannabis related sites and forums without using TOR.
I might visit them without but i never do it without TOR when i need to login.
I also use Encrypted Hushmail for anything regarding Cannabis

Recently a Danish MJ forum decided to block the use og TOR because of some disagreement between the head admin and some former users.
That ment i cant visit it either, but ill i mo case sacrifice security.

Better safe then sorry and in jail.

Not later than yesterday the cops busted a Danish skunk facility with 1900 plants and lamps etc
http://nyhederne.tv2.dk/politik/article.php/id-9389021.html
text in danish