Hot answers tagged

12

Linksys Router It appears that both dd-wrt and TomatoUSB firmware builds are available for the Linksys E4200. Both dd-wrt and TomatoUSB are Linux-based firmware. Either firmware can run either an OpenVPN client or a Tor client, but not simultaneously. By the way, while the Linksys E4200 is adequate as a Tor client, it arguably doesn't have enough CPU or ...


8

Hint: $ openvpn --help --socks-proxy s [p] [up] : Connect to remote host through a Socks5 proxy at /etc/tor/torrc: SocksPort 9050 # what port to open for local application connections SocksListenAddress 127.0.0.1 # accept connections only from localhost Edit: As a newbie, you are probably meet troubles with wrapping a connection. While you'll start ...


6

Tor. Unless you can somehow prevent your VPN provider from knowing who you are or what your IP address is, there will always be the possibility of your anonymity being compromised. You could conceivably sign up to a service under a pseudonym, pay for the service using a bitcurrency that you had sourced anonymously, and ensure every time you connected to ...


5

First, let's consider that "the goal is to prevent an eavesdropper on the local end from noticing Tor usage". For argument's sake, let's say that it's easier, at any particular time, to identify all VPN service entry servers than it is to identify all Tor bridges. And let's say that all Internet traffic is logged, and at least metadata (such as IP addresses, ...


5

It can be more dangerous. It can be a useful dodge. It depends on the threats facing you in particular. If you connect to a VPN provider through Tor, your VPN provider typically knows who you are (or at least has a path back to near you) via your payment arrangements. They can also know you use Tor to reach them. The VPN provider will provide this ...


5

This can be done using VirtualBox VMs. It's easy with Whonix. Just set up a VPN client in the workstation VM in /etc/openvpn/, and add socks-proxy 192.168.0.10 9150 up and socks-proxy-retry to the configuration file. The requirement for an up proxy-authentication file is an OpenVPN bug. The up file must exist, but it's not parsed, so its content doesn't ...


5

The list of exit nodes is well known so it's trivial for any system to look up into that list and see if any incoming connection comes from any of them.


4

VPN must be considered more of a circumvention tool rather than an anonymity tool. Even for circumvention Tor stands very well in cases that public known entry nodes are blocked, with the use of (obfuscate) bridges. If you're seeking anonymity Tor is the way to go. Tor is using a three-hop circuit to establish an anonymous path to your destination. No ...


4

Quite simple. You are taking the first protocol and routing it through the second protocol. The page you mention discusses the benefits of each one and gives the details. As an example if you want to run a Tor relay, but don't want your ISP to know you are doing so, you would wrap the Tor traffic in a VPN session, or Tor-over-VPN, written Tor --> VPN. The ...


4

Setting up an account on Wikipedia does not necessarily lead to pseudonomymizing. The idea behind that is not to link your account to your real ID, but rather to link your account to your behavior on Wikipedia, whether it is good editing, bad editing, vandalizing, or spamming. Here is an approach that would not endanger your anonymity: Access Wikipedia ...


4

Some obvious anonymity fails: checking your Gmail, etc. logging into your Facebook account using a fake Facebook account, but friending your true-name friends tweeting your true-name friends having the same set of interests that you do as your true name Beyond that, it's prudent to firewall everything involving your true name from your anonymous activity. ...


4

You have to disable Torbutton. At the top of the connection settings dialog, it indicates this: "Disable Torbutton to change these settings." In about:addons you can disable Torbutton and TorLauncher and then quit/relaunch the browser. Then you can set your own proxy settings or none in the network connection settings. Edit to add: If you don't use a ...


3

This is a matter of who are you trusting more? Your ISP or your VPN provider? Since you have a lot more choices with VPN providers than ISPs, it is logical to prefer the VPN provider over ISP. This is in a case where the schematic of your network looks something like the following: User---VPN---Node 1 (Guard)--- Node 2 (middle node)--- Node 3 (exit node)--- ...


3

It can surely be a great way to increase your anonymity, especially if you trust your VPN provider more than your ISP. Actually it's like replacing your ISP with somebody else. And considering common data retention laws that apply to most of ISPs but not to VPN providers (for example, some of them operate offshore), the winner is obvious. You have also ...


3

No, this is not possible. TOR works on higher layer than VPNs and is only able to substitute your TCP stack. It is not possible to relay raw IP packets via TOR, like you can do over VPNs. I know this might sound very limiting (and it is), but there's some privacy advantages here. TOR is designed to limit possibilities of traffic analysis by reducing the ...


3

A relay requires a public IP address as it needs to accept incoming connections. As far as I can see from your routing table, your tunnel provider does not give you a public IP address. Your Tor log messages should currently contain something like: Your server has not managed to confirm that its ORPort is reachable. Please check your firewalls, ports, ...


3

VPN -> Tor -> VPN Any paranoid tell you "the more, the merrier" 1) VPN -> Tor. ( VPN inside Tor ) If you have enough skill, you know VPN protocol, you see that it is raw, aggressive protocol, it talks everytime about everything. Timing attack. Provider see your Tor session, crop your connection to uncontrollable nodes, you are going through nodes under ...


3

Similar q/a linked below should also apply here. Not necessary imo. Although it might be more secure to use orbot's built-in transparent proxying (requires a rooted device) which will torrify additional system applications/etc that you or the browser connect with. Secure my connection with VPN router & Tor


3

Firstly, if you aren't using Tor Browser, then your browser probably already uniquely fingerprints you. The Tor developers spend endless hours making sure that you look exactly like every other Tor user. With 3 VPNs, the websites you visit will be able to determine this fingerprint and correlate all such traffic. This may or may not be enough to actually ...


3

As per the Tor FAQ: Some government or corporate firewalls censor connections to Tor's website. In those cases, you have three options. First, get it from a friend — Tor Browser fits nicely on a USB key. Second, find the google cache for the Tor mirrors page and see if any of those copies of our website work for you. Third, you can download Tor Browser ...


3

I have found that this works pretty well: (For this, I'm assuming that you have installed tor using "apt-get install tor" and not using the Tor browser bundle.) Add this line to the "/etc/tor/torrc" file to tunnel vpn traffic: SocksPort 9150 PreferSOCKSNoAuth Then you will need to tell OpenVPN to use a proxy. Add this to your VPN config file: socks-proxy ...


3

That random site who will make money in selling you a VPN service is being "liberal with the truth". Lets do a point by point: Their "Tor disadvantages" "It is very slow" Not always, you can reasonably stream video over Tor. Tor has latency, but the throughput can be good enough to stream video, which is what's important (suggests a fundamental lack of ...


3

I'd recommend just using Tor. The VPN is probably being recognized, not you. If needed, use bridges. The VPN destroy Tor purpose


2

I believe you can do this if your VPN provider allows it, however it seems like would de-anonymize your traffic as all exit traffic would be linked to you (if it's your VPN.) You of course could argue that you were running a relay so the traffic isn't yours, etc. Now if you're asking if you can connect to your VPN via tor, then this is very bad unless the ...


2

I think is best is to not include any non-legitimated part in the chain. Untill there is not a part that could be considered like NSA-safe 'apart' of TOR, if a minor safe part like VPN is include, the strength of the whole chain is equal to the wickest part. In my opinion Tor should be used Alone and as much isolated as possible, (like with live Tails), ...


2

Despite setting the SOCKS5 proxy in Firefox, I could not view web pages blocked in my country because Firefox was still doing DNS lookup out of my router, rather than through Tor. Asking on the tor-relays mailing list, I learned this solution. Type "about:config" in the address bar, and hit enter. Search for the item "network.proxy.socks_remote_dns" and set ...


2

This is pretty complicated to do, but it is possible. Assuming that the VPN you are connected to only uses TCP then this could work, though not easily. You could do this with much less complication using a few socks5 proxies. You could use a standard proxy to contact a bridge. Then, you would have to send a new packets to your other proxy. The problem ...


2

If strong anonymity is what you want, use Tor. Reaching the Tor network through a VPN does not increase privacy or anonymity. It merely shifts knowledge about Tor usage from your ISP (and relevant government) to the VPN (and relevant government). You choose based on which you trust more (or distrust less). Tunneling a VPN through Tor decreases anonymity in ...


2

Sebastian advised you to use the meek transport. However you can also use the current version of Tor browser. This has support for a new protocol called obfs4. Just use the dropdown menu at the green onion and at network settings choose obfs4 as transport type. As far as I know obfs4 bridges work quite good inside China. The older protocol obfs3 usually ...


2

Using Hola may not be advantageous and instead can even backfire considering the infamous reports. In addition, I do think the IP address of those exit nodes are even available, and even if you get one using such 'false' exit node is an overly restrictive/impractical/unstable setup. You can, though, set preferred entry and exit nodes as well as inform Tor ...


Only top voted, non community-wiki answers of a minimum length are eligible