Timeline for Google SSID cookie and TOR
Current License: CC BY-SA 3.0
15 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 23, 2016 at 18:41 | comment | added | Alexey Vesnin♦ | @JohnMiller usually host-only network contains an IP address for the host itself too, and - for example in case of VirtualBox - sometimes you can't avoid connecting physical host by IP to it. And - some services are created, some restarted - and the service can listen to the port number, not to the particular IP(actually, it's a reasonable default for many of services). And here goes the leak possibility... Post your h/w and s/w stack - I can help you if you wish | |
| Jun 23, 2016 at 17:43 | comment | added | John Miller | superuser.com/questions/787793/… from link: "Note that all interaction is between the host and the guest VMs, not the host's other networks, so you won't be able to access the internet via a host only connection, unless your host is setup to do routing. Have you tried the NAT mode instead?" So you are basically saying that I should create a host-only adapter then set up routing on host os? What if I just run tor on the guest os? How could it expose system level details of host os if packets are encrypted prior to leaving guest os? | |
| Jun 23, 2016 at 17:22 | comment | added | John Miller | I turned off my proxy though, and I still cannot access the internet when I use host-only network interface | |
| Jun 22, 2016 at 0:39 | comment | added | John Miller | Ok I am thinking of installing tor or proprietary vpn in linux virtual machine then turning off proprietary vpn for host os how does that sound? | |
| Jun 21, 2016 at 17:51 | comment | added | Alexey Vesnin♦ | @JohnMiller in host-only mode you're locking the whole network part in one pipe that is routed explicitly through Tor via firewall. In NAT mode there's a possibility to contact the host and/or networks it's connected to. | |
| Jun 21, 2016 at 12:58 | comment | added | John Miller | I am planning to use a proprietary vpn service called private internet access. What exactly is the advantage of using host only over NAT? NAT is much easier to set up. | |
| Jun 21, 2016 at 12:57 | comment | added | Alexey Vesnin♦ | You must avoid proxy! If your host is Linux - just use a firewall rules to route all the traffic through Tor. If your host is Windows - make another VM with Linux and make it a Tor node+router. If you need help - post your hw specs and software list, I'll be glad to help | |
| Jun 21, 2016 at 12:20 | comment | added | John Miller | It is saying on most blogs that I need to set up a NAT connection to use a proxy on the host os. Why do you think NAT is less secure? I read the VirtualBox manual, and their NAT setting seems to be supplying a wired virtual network "blackbox" like you suggested. | |
| Jun 20, 2016 at 22:32 | comment | added | Alexey Vesnin♦ | @JohnMiller No! only host-only : NAT can be used to do some things like WebRTC usage etc... Do the blackhole jail for this VM - and the network is a layer of isolation/line of defense | |
| Jun 20, 2016 at 22:09 | comment | added | John Miller | I have been doing some research on my own, and most blogs I have read (for instance: christophermaier.name/blog/2010/09/01/…) seem to suggest that I have to set up one Network Adapter on VBox with NAT to access the internet at all. Then I can set up a second network adaptor with Host Only so that I can ssh into my virtual machine; I don't want to ssh into my virtual machine, though. Will I still have a "blank" machine with just an NAT adapter? it seems superfluous to run a host-only interface if this is mainly to access the vm from host | |
| Jun 20, 2016 at 19:31 | comment | added | Alexey Vesnin♦ | @JohnMiller Correct! And by it's "blankness" I presume that NOTHING except an OS and a Web browser is installed on it. To isolate a VM from a host is quite easy: use a VM that has only one network host-only interface, so no NAT or Bridge networking at all! And route it's traffic through Tor's TransPort+DNS. It's a piece of cake in firewall rules. | |
| Jun 20, 2016 at 19:11 | comment | added | John Miller | Thanks so much! What is a blank VM? do you mean one that I only use for the purpose of surfing the web anonymously? How can I isolate it from my host pc? For example if I installed linux on VirtualBox then just opened that up would that be sufficient? Or are there other steps I should take? | |
| Jun 20, 2016 at 19:07 | comment | added | Alexey Vesnin♦ | @JohnMiller the JS capabilities are highly-dependent on a browser you're using and it's version. If you're concerned about the data leaks you've mentioned upstrings - use a blank VM isolated from your host PC and launch browser inside it : it will see NOTHING except a gateway 192.168.0.1 and a blackhole-like network card that attaches your VM to Tor as a router. No proxies, no real DNS addresses, NOTHING | |
| Jun 20, 2016 at 19:04 | comment | added | John Miller | Yes clearly SSID could stand for anything. Google could also use a cookie called ABCD to store my SSID name. What worries me is the possibility that google may be collecting system level information from javascript to compromise the anonymity provided by my VPN. I wonder if you could help me find a resource I could use to research how (if?) Javascript can make OS API calls to get information about my system such as what operating system I am using, the SSID, or even information about the file directory. If my home folder is Joe_Sixpack_Laptop can a javascript request that information? | |
| Jun 20, 2016 at 18:51 | history | answered | Alexey Vesnin♦ | CC BY-SA 3.0 |