<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Anonymous Proxy Woes</title>
	<atom:link href="http://www.securitt.com/anonymous-proxy-woes/feed" rel="self" type="application/rss+xml" />
	<link>http://www.securitt.com/anonymous-proxy-woes</link>
	<description>Internet Security Consultant Services of West Virginia</description>
	<lastBuildDate>Mon, 06 Feb 2012 07:56:11 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
	<item>
		<title>By: Anonymous</title>
		<link>http://www.securitt.com/anonymous-proxy-woes/comment-page-1#comment-725</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Mon, 08 Feb 2010 14:49:47 +0000</pubDate>
		<guid isPermaLink="false">http://www.securitt.com/anonymous-proxy-woes/#comment-725</guid>
		<description>&lt;p&gt;In general, I don&#8217;t really even trust my ISP, nevermind hotspots or proxies. Highly considering a 4G/WiMax solution.&lt;/p&gt;
&lt;p&gt;I thought I&#8217;d share this proxy site I found, because its hilarious for many reasons:&lt;br /&gt;
&lt;a href=&quot;http://learninginvestment.com/a/&quot; rel=&quot;nofollow&quot;&gt;http://learninginvestment.com/a/&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;I found this in my web logging software for someone who visited a site (though Facebook). At first I didn&#8217;t understand how this site linked to me, but then I noticed the field and go button, and at the bottom saw the credits for the proxy. In good news, if they took out the credits for the proxy, this might be very good to use in a situation where you don&#8217;t want people to know you are using a proxy (China maybe?), but I am sure people still click on the ads and there is at least 4 pop-ups when you go to a URL, mangled output, and the first time i visited it wanted me to download a random PDF (0-dayyed attack maybe, but I didn&#8217;t even both checking). &lt;/p&gt;
&lt;p&gt;So what is the price to pay for pseudo privacy. I feel like most people are serious about security probably use tor or something, and the people using this technology are kids at school or office workers, which means exploits and virus spread most likely. And to think, if they just trusted their users, then they would only be clicking on the most obvious of malicious content.&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>In general, I don&#8217;t really even trust my ISP, nevermind hotspots or proxies. Highly considering a 4G/WiMax solution.</p>
<p>I thought I&#8217;d share this proxy site I found, because its hilarious for many reasons:<br />
<a href="http://learninginvestment.com/a/" rel="nofollow">http://learninginvestment.com/a/</a></p>
<p>I found this in my web logging software for someone who visited a site (though Facebook). At first I didn&#8217;t understand how this site linked to me, but then I noticed the field and go button, and at the bottom saw the credits for the proxy. In good news, if they took out the credits for the proxy, this might be very good to use in a situation where you don&#8217;t want people to know you are using a proxy (China maybe?), but I am sure people still click on the ads and there is at least 4 pop-ups when you go to a URL, mangled output, and the first time i visited it wanted me to download a random PDF (0-dayyed attack maybe, but I didn&#8217;t even both checking). </p>
<p>So what is the price to pay for pseudo privacy. I feel like most people are serious about security probably use tor or something, and the people using this technology are kids at school or office workers, which means exploits and virus spread most likely. And to think, if they just trusted their users, then they would only be clicking on the most obvious of malicious content.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://www.securitt.com/anonymous-proxy-woes/comment-page-1#comment-724</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Mon, 08 Feb 2010 14:41:09 +0000</pubDate>
		<guid isPermaLink="false">http://www.securitt.com/anonymous-proxy-woes/#comment-724</guid>
		<description>&lt;p&gt;The issue in #1 is appears to be the same one described here:&lt;br /&gt;
&lt;a href=&quot;http://www.kb.cert.org/vuls/id/261869&quot; rel=&quot;nofollow&quot;&gt;http://www.kb.cert.org/vuls/id/261869&lt;/a&gt;&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>The issue in #1 is appears to be the same one described here:<br />
<a href="http://www.kb.cert.org/vuls/id/261869" rel="nofollow">http://www.kb.cert.org/vuls/id/261869</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://www.securitt.com/anonymous-proxy-woes/comment-page-1#comment-723</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Mon, 08 Feb 2010 14:27:11 +0000</pubDate>
		<guid isPermaLink="false">http://www.securitt.com/anonymous-proxy-woes/#comment-723</guid>
		<description>&lt;p&gt;Hey Webappsec, what&#8217;s up?&lt;/p&gt;
&lt;p&gt;Thanks for the post and explaining new ways of using the CSS trick.&lt;/p&gt;
&lt;p&gt;I don&#8217;t use or suggest the use of any kind of proxy, Hidemyass.com and Kproxy.com were the first webproxies that came on my mind to test the CSS hack, there is nothing special about them.&lt;/p&gt;
&lt;p&gt;The only reason I commented that post was how simple it was to detect a lot of proxies, without any configuration, using CSS. There are a lot of ways to detect a proxy connection, but no one as close to this simplicity and efficiency.&lt;/p&gt;
&lt;p&gt;So, once again, nice job. And if you could write something about using traceroutes to detect proxies it would be a blast.&lt;/p&gt;
&lt;p&gt;Take care.&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>Hey Webappsec, what&#8217;s up?</p>
<p>Thanks for the post and explaining new ways of using the CSS trick.</p>
<p>I don&#8217;t use or suggest the use of any kind of proxy, Hidemyass.com and Kproxy.com were the first webproxies that came on my mind to test the CSS hack, there is nothing special about them.</p>
<p>The only reason I commented that post was how simple it was to detect a lot of proxies, without any configuration, using CSS. There are a lot of ways to detect a proxy connection, but no one as close to this simplicity and efficiency.</p>
<p>So, once again, nice job. And if you could write something about using traceroutes to detect proxies it would be a blast.</p>
<p>Take care.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://www.securitt.com/anonymous-proxy-woes/comment-page-1#comment-722</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Mon, 08 Feb 2010 14:11:13 +0000</pubDate>
		<guid isPermaLink="false">http://www.securitt.com/anonymous-proxy-woes/#comment-722</guid>
		<description>&lt;p&gt;@woohoo - So you are trying to bypass censorship? Have you looked into forwarding traffic through a SSH tunnel? I believe you can forward your DNS traffic as well. The only problem is finding someone a SSH service with no bandwidth limits.&lt;/p&gt;
&lt;p&gt;SSH would be good for forwarding a port or two, but a VPN would be better for all the connections from your computer.&lt;/p&gt;
&lt;p&gt;Or if you have a friend or family in another country you could look into the Psiphon program.&lt;br /&gt;
&lt;a href=&quot;hxxp://en.wikipedia.org/wiki/Psiphon&quot; rel=&quot;nofollow&quot;&gt;hxxp://en.wikipedia.org/wiki/Psiphon&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;@Thursday - If your ISP sees all your traffic then SSL becomes vulnerable to man in the middle attacks. Running TOR through a SSL proxy would not improve any of your security. Yes the TOR end node sees all the traffic, but now your SSL proxy is the end node.&lt;/p&gt;
&lt;p&gt;@ChosenOne - There is no such thing as &#8220;real&#8221; anonymity on the internet; only varying degrees of obfuscation. Also I believe RSnake just pointed out that hidemyass and such services are actually very bad for security. So even using them through TOR is a bad idea&#8230;&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>@woohoo &#8211; So you are trying to bypass censorship? Have you looked into forwarding traffic through a SSH tunnel? I believe you can forward your DNS traffic as well. The only problem is finding someone a SSH service with no bandwidth limits.</p>
<p>SSH would be good for forwarding a port or two, but a VPN would be better for all the connections from your computer.</p>
<p>Or if you have a friend or family in another country you could look into the Psiphon program.<br />
<a href="hxxp://en.wikipedia.org/wiki/Psiphon" rel="nofollow">hxxp://en.wikipedia.org/wiki/Psiphon</a></p>
<p>@Thursday &#8211; If your ISP sees all your traffic then SSL becomes vulnerable to man in the middle attacks. Running TOR through a SSL proxy would not improve any of your security. Yes the TOR end node sees all the traffic, but now your SSL proxy is the end node.</p>
<p>@ChosenOne &#8211; There is no such thing as &#8220;real&#8221; anonymity on the internet; only varying degrees of obfuscation. Also I believe RSnake just pointed out that hidemyass and such services are actually very bad for security. So even using them through TOR is a bad idea&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://www.securitt.com/anonymous-proxy-woes/comment-page-1#comment-721</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Mon, 08 Feb 2010 13:34:41 +0000</pubDate>
		<guid isPermaLink="false">http://www.securitt.com/anonymous-proxy-woes/#comment-721</guid>
		<description>&lt;p&gt;Regarding TOR, the man in the middle risk is at least as high as with a cgi proxy because anybody can become a TOR exit node. Also, I think your ISP can see everything, and they probably mark TOR traffic as suspicious.&lt;br /&gt;
At least HTTPS cgi proxies stop your ISP from seeing what you&#8217;re doing&#8230; right?&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>Regarding TOR, the man in the middle risk is at least as high as with a cgi proxy because anybody can become a TOR exit node. Also, I think your ISP can see everything, and they probably mark TOR traffic as suspicious.<br />
At least HTTPS cgi proxies stop your ISP from seeing what you&#8217;re doing&#8230; right?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://www.securitt.com/anonymous-proxy-woes/comment-page-1#comment-720</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Mon, 08 Feb 2010 12:49:38 +0000</pubDate>
		<guid isPermaLink="false">http://www.securitt.com/anonymous-proxy-woes/#comment-720</guid>
		<description>&lt;p&gt;Surely the man in the middle risk is even higher with TOR than cgi proxies, as anyone can be a TOR exit node. Although I guess that by running TOR through a https cgi proxy you could eliminate the TOR exit node eavesdropping risk. Either way it comes down to trust.&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>Surely the man in the middle risk is even higher with TOR than cgi proxies, as anyone can be a TOR exit node. Although I guess that by running TOR through a https cgi proxy you could eliminate the TOR exit node eavesdropping risk. Either way it comes down to trust.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://www.securitt.com/anonymous-proxy-woes/comment-page-1#comment-719</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Mon, 08 Feb 2010 12:06:25 +0000</pubDate>
		<guid isPermaLink="false">http://www.securitt.com/anonymous-proxy-woes/#comment-719</guid>
		<description>&lt;p&gt;PS @Rsnake and LonerVamp - thanks&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>PS @Rsnake and LonerVamp &#8211; thanks</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://www.securitt.com/anonymous-proxy-woes/comment-page-1#comment-718</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Mon, 08 Feb 2010 11:27:30 +0000</pubDate>
		<guid isPermaLink="false">http://www.securitt.com/anonymous-proxy-woes/#comment-718</guid>
		<description>&lt;p&gt;In general (I think) I know what I&#8217;m doing.&lt;br /&gt;
I&#8217;m looking for people who know more than me however to confirm or deny what I think I know &lt;img src=&#039;http://ha.ckers.org/blog/wp-includes/images/smilies/icon_wink.gif&#039; alt=&#039;;)&#039; class=&#039;wp-smiley&#039; /&gt; &lt;/p&gt;
&lt;p&gt;I have foxyproxy set up with tor as an option - but the speed is the biggest issue when I&#8217;m not concerned with anonymity.&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>In general (I think) I know what I&#8217;m doing.<br />
I&#8217;m looking for people who know more than me however to confirm or deny what I think I know <img src='http://ha.ckers.org/blog/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> </p>
<p>I have foxyproxy set up with tor as an option &#8211; but the speed is the biggest issue when I&#8217;m not concerned with anonymity.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://www.securitt.com/anonymous-proxy-woes/comment-page-1#comment-717</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Mon, 08 Feb 2010 10:36:23 +0000</pubDate>
		<guid isPermaLink="false">http://www.securitt.com/anonymous-proxy-woes/#comment-717</guid>
		<description>&lt;p&gt;also&lt;/p&gt;
&lt;p&gt;#11 - the standard nph-proxy.cgi script by jmarshall contains a cross-site scripting bug&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>also</p>
<p>#11 &#8211; the standard nph-proxy.cgi script by jmarshall contains a cross-site scripting bug</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://www.securitt.com/anonymous-proxy-woes/comment-page-1#comment-716</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Mon, 08 Feb 2010 09:51:46 +0000</pubDate>
		<guid isPermaLink="false">http://www.securitt.com/anonymous-proxy-woes/#comment-716</guid>
		<description>&lt;p&gt;If you want *REAL* anonymity, use Tor and Torbutton (the details are explained on the website).&lt;br /&gt;
Torbutton - a firefox addon- will disbale Flash, JS and similair features to decrease the probability of being decloaked &lt;img src=&#039;http://ha.ckers.org/blog/wp-includes/images/smilies/icon_smile.gif&#039; alt=&#039;:)&#039; class=&#039;wp-smiley&#039; /&gt; &lt;/p&gt;
&lt;p&gt;If you just want to send a request originating from a foreign IP, use a proxy like hidemyass.com - but as RSnake said: you gotta know what you&#8217;re doing &lt;img src=&#039;http://ha.ckers.org/blog/wp-includes/images/smilies/icon_wink.gif&#039; alt=&#039;;)&#039; class=&#039;wp-smiley&#039; /&gt;&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>If you want *REAL* anonymity, use Tor and Torbutton (the details are explained on the website).<br />
Torbutton &#8211; a firefox addon- will disbale Flash, JS and similair features to decrease the probability of being decloaked <img src='http://ha.ckers.org/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>If you just want to send a request originating from a foreign IP, use a proxy like hidemyass.com &#8211; but as RSnake said: you gotta know what you&#8217;re doing <img src='http://ha.ckers.org/blog/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /></p>
]]></content:encoded>
	</item>
</channel>
</rss>

