What happened to HTTPS?

[trademanny]

I was able to use HTTPS (encrypted) to browse this site before. Since this morning it is no longer available -- anyone else?

My ISP recently sent a letter to subscribers saying they were going to 'monitor internet usage to better target advertising'


HTTPS, please come back!

 

[raygun]

yeah???bump

 

[DIGITALHIPPY]

https never worked on this site for me...
but it wouldnt stop anyone from monitoring your useage.

 

[EasyBakeIndica]

DH is right, https won't keep an ISP from seeing where you go.

Try proxies. (www.pagewash.com)

 

[trademanny]

https never worked on this site for me...
but it wouldnt stop anyone from monitoring your useage.

The certificate was expired, but it still worked. Also, it sure as hell would stop them from monitoring usage. All they could see is the IP I was hitting, not the full URL.

They can think I'm on www.icmag.com all day long, but they don't need to know what threads I read or post -- which https would encrypt.

 

[EasyBakeIndica]

You're the only one bitching.

Everyone else uses their own proxy server.

Don't expect others to make your life easier.

 

[trademanny]

You're the only one bitching.

Everyone else uses their own proxy server.

Don't expect others to make your life easier.

..and you're fooling yourself if you think using a proxy protects you. I'm not trying to be a dick, but trust me, I make a very good living consulting on this stuff for banks and other large companies.

Your connection to the proxy is unencrypted, and goes via your ISP. The -ONLY- thing a proxy will protect you against is having your IP address exposed in the event icmag was taken down for whatever reason.

 

[~fvk~]

I used to use Tor to browse this site... That was until I started getting hacked by the people who were relaying for me. Also, there were a couple times when some really fucked up pictures and shit were embedded into the background of IC. This only happened when using the Vidalia package... I got scripted and caught a trojan after navigating to a page on Seedbay too... After kicking the shit to the curb, I've never had a problem. Considering that ISPs can still see what you're doing, I figured it just wasn't worth it on top of the other shit that was occurring too.

 

[trademanny]

I used to use Tor to browse this site... That was until I started getting hacked by the people who were relaying for me. Also, there were a couple times when some really fucked up pictures and shit were embedded into the background of IC. This only happened when using the Vidalia package... I got scripted and caught a trojan after navigating to a page on Seedbay too... After kicking the shit to the curb, I've never had a problem. Considering that ISPs can still see what you're doing, I figured it just wasn't worth it on top of the other shit that was occurring too.

Tor is what I use now as it is completely encrypted. Your ISP can't see shit except encrypted crap going from you to the whoever is relaying. Only problem is I always end up relaying through some 3rd world country with one dialup circuit for the whole population so it is slow as piss.

I don't care if they see I'm on icmag, but as I said, I don't need them knowing which forums or msgs I'm reading, what msgs I'm posting, pictures, etc.

HTTPS would take care of that.

 

[~fvk~]

Yeah, I didn't know about that encryption part. I don't care though, I'm never using tor again. The shit that was embedded into the page of IC was not cool at all...

I always blocked my connections in the US and usually ended up with fuckers in Germany. I'm assuming it was them who were playing these games...

 

[EasyBakeIndica]

I make a very good living consulting on this stuff for banks and other large companies.

I have no doubt that you are able to make a living working on computers, but you don't know what you're talking about.

"Your connection to the proxy is unencrypted, and goes via your ISP. The -ONLY- thing a proxy will protect you against is having your IP address exposed in the event icmag was taken down for whatever reason."

(7 hours later...)

"Tor is what I use now as it is completely encrypted. Your ISP can't see shit except encrypted crap going from you to the whoever is relaying."

You contradicted yourself. Does Tor keep your ISP from seeing what websites you visit, or not?

 

[trademanny]

I have no doubt that you are able to make a living working on computers, but you don't know what you're talking about.

Ok, I don't have a clue, I'm just some Geek Squad PC tech right?

Why are you fighting me on this? We're all supposed to be on the same team here... I am asking this for the good of the group.

I really didn't want to have to do this, but now I get to tell you that you don't know what you're talking about -- TOR IS NOT A PROXY! Tor is an encrypted peer-to-peer network and it is accessed via a proxy (Privoxy) running on your local machine.

How did I contradict myself? A HTTP or SOCKS proxy will NOT hide anything from anyone except icmag. If you use an HTTP or SOCKS proxy (without Tor), you are obscuring your source IP address from the end website only. Your ISP will still be able to see the URLs you are attempting to access as your connection to the proxy itself is unencrypted.

As I just said, Tor has a proxy process that runs on your local machine. Your web browser connects, unencrypted, to the Privoxy process running on your local machine. The connection then follows the encypted tunnel over the Tor network, where it comes out via the Tor relay unencrypted and follows regular routing to the website. Using Tor, you have obscured where you are connecting to from your ISP, as well as the source IP address from icmag. It is seemingly the 'best of the both worlds', however, using Tor is a tremendous bottleneck. (Which brings me back to where we started -- if we had HTTPS enabled, the information that I care about (threads/posts/etc) would be obscured from your ISP and anyone else.) (furthermore, HTTPS -was- enabled until just the other day)

Like I said previously, I'm not trying to be a dick, this is not a selfish question I am asking, nor am I asking anyone to 'do anything for me'. I don't understand what I asked for that has aggravated you. If Tor works for you, great, if random proxies work for you, great. Neither are a good solution for me, unfortunately. Tor is a bottleneck and random proxies are a completely false sense of security.

So tell me again how I am incorrect?

*hugs*

trademanny

 

[EasyBakeIndica]

Nice attempt at digging yourself out of that hole. Tor is a proxy service. You proved yourself wrong.

If you knew anything, you would understand that HTTPS does nothing to keep your ISP from seeing where you go. It's a secured port (443). If anything, your IP records would be easier to trace through that port, because it a highly sensitive commercial channel (with much less traffic than unsecured ports). Since this forum has no commercial trade, it makes no sense to have HTTPS.

HTTPS was not created as a way to surf the internet anonymously. It was created as a way to make sure commercial servers run a secured port and can be held accountable. It's consumer protection, that's all.

You piss me off because you have made no real contribution to this site, other than bitching. (My guess is that you're just doing this as a way to reach 50 posts, then we won't have to worry about you anymore.)

If you're honestly worried about an ISP spying on you, call them and bitch. You pay them, so they have to listen to you. Since you're such a computer guru, you should have no trouble finding a better ISP, if they won't listen.

ICMAG owes you nothing. If you have complaints, you can e-mail a webmaster, but stop spreading a bunch of disinformation in public forums.

 

[trademanny]

Nice attempt at digging yourself out of that hole. Tor is a proxy service. You proved yourself wrong.

Tor is a peer to peer network created by the EFF. Privoxy is the software that allows you to interface with it as an HTTP proxy. As you're probably using a 'made for end-users' package like Vidalia, you obviously don't understand the internal workings of it, and I'm not going to waste time and bandwidth trying to teach you, but check out the website. "Tor is a network of virtual tunnels...." Go ahead, argue with the authors now too..

If you knew anything, you would understand that HTTPS does nothing to keep your ISP from seeing where you go. It's a secured port (443). If anything, your IP records would be easier to trace through that port, because it a highly sensitive commercial channel (with much less traffic than unsecured ports). Since this forum has no commercial trade, it makes no sense to have HTTPS.

If you had read my posts, I was only concerned with the CONTENT being encrypted, vs them knowing the site I visit.

HTTPS was not created as a way to surf the internet anonymously. It was created as a way to make sure commercial servers run a secured port and can be held accountable. It's consumer protection, that's all.

Anonymity was never the intention here. Protecting data from prying eyes has been the goal since post #1. (Similar to how consumers use it for protection, yes)

You piss me off because you have made no real contribution to this site, other than bitching. (My guess is that you're just doing this as a way to reach 50 posts, then we won't have to worry about you anymore.)

BITCHING? Give me a break! Read my initial post and tell me I was bitching. I asked a freakin QUESTION!

Ah, this makes sense, you judge knowledge based on post-count. Look at the date I joined, pal. Been here longer than you. Unlike yourself, however, I realize that just about EVERY question someone could have is answerable via the search button and therefore have very little need to post. I am now asking about HTTPS as I *would* like to post more, but don't need my ISP (or anyone else, for that matter) looking at what I'm posting. Like I said, they can tell I'm on icmag, but they'll have no idea which person is me.

What happens at 50 posts? Do I win a prize?

ICMAG owes you nothing. If you have complaints, you can e-mail a webmaster, but stop spreading a bunch of disinformation in public forums.

What disinformation did I spread? This is kind of a loaded question though because you yourself obviously have a limited grasp on the subject.

EasyBake, I wish you the best, I'm sorry you've turned this into a he-said-she-said pissing match, I never intended to offend anyone, I was simply asking what happened to the HTTPS that appeared to work for a day or two. Good Day.

 

[EasyBakeIndica]

​

 

[SomeGuy]

You must spread some Reputation around before giving it to EasyBakeIndica again.

 

[LiLWaynE]

You must spread some Reputation around before giving it to EasyBakeIndica again.

haha, im officially changing your name from SomeGuy to THATGuy - good shit...

 

[CaptainTrips]

DH is right, https won't keep an ISP from seeing where you go.

Try proxies. (www.pagewash.com)

It won't stop them from seeing that you visited icmag.com... But it would keep them from seeing the content you are viewing/posting.

 

[iluvtogrograss]

So what if they see what you are viewing? Do you think there is some person actually sitting in a room and watching and reading reports about what IP addy is visiting what sites? BFD??

 

[trademanny]

So what if they see what you are viewing? Do you think there is some person actually sitting in a room and watching and reading reports about what IP addy is visiting what sites? BFD??

Yes, I certainly do think that. With good reason...