Slashdot Mirror


Ask Slashdot: Choosing Anonymous Proxies?

bradley13 writes "There are lots of anonymous proxies out there, and anyone concerned about their privacy probably uses one for at least some of their web browsing. The Megaupload story highlights the fact that having servers in the USA is not a great idea. There are also other countries one may not want to trust. Oddly, very few proxy services mention where their equipment is located. What anonymous proxy services do you use? What criteria do you use to select them? How paranoid are you, and for what types of Internet usage?"

54 of 211 comments (clear)

  1. Botnets and Seven Chains by Christopher+B.+Linn · · Score: 5, Insightful

    It's the only way to stay truly anonymous and secure on the internet. You cannot trust companies to provide you true anonymity and proxies, especially if money is involved.

    Never trust anyone, and never expose to anyone who you are. That is the only way to stay secure on the internet.

    1. Re:Botnets and Seven Chains by El+Torico · · Score: 5, Funny

      Agent Mulder, is that you?

      --
      In the land of the blind, the one-eyed man is usually crucified.
    2. Re:Botnets and Seven Chains by bobbied · · Score: 2
      Smart, Maxwell Smart!

      And Loving It!

      --
      "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
    3. Re:Botnets and Seven Chains by Anonymous Coward · · Score: 3, Funny

      No, he is Christopher B. Linn; but don't tell anyone, especially the internet! (he doesn't want to reveal who he is!

      All jokes aside, this reminds me of an XKDC post... about anonymity

      http://xkcd.com/834/

    4. Re:Botnets and Seven Chains by Hatta · · Score: 5, Informative

      Or Tor. Which is the same thing as a bot net proxy, but consensual. Make sure you don't send any personally identifiable traffic through the tunnel, because the exit nodes are monitored.

      --
      Give me Classic Slashdot or give me death!
    5. Re:Botnets and Seven Chains by GameboyRMH · · Score: 4, Informative

      An anti-MITM browser plugin like Perspectives or Convergence is a good thing to use when browsing via a proxy.

      --
      "When information is power, privacy is freedom" - Jah-Wren Ryel
    6. Re:Botnets and Seven Chains by Ethanol-fueled · · Score: 5, Insightful

      The point he's trying to make is that nobody knows that better than he does - Cisco gear is widely used to facilitate eavesdropping and contains multiple undocumented backdoors for the 3-letter agencies.

      Your proxy could be 100% dedicated to customer privacy, but can be unwittingly monitored and its users exposed as long as the proxy utilizes Cisco gear.

      He did not slip or contradict himself - he is doing you all a favor, and speaks with authority.

    7. Re:Botnets and Seven Chains by TweakedDewAddict · · Score: 2
    8. Re:Botnets and Seven Chains by Anonymous Coward · · Score: 4, Informative

      http://www.forbes.com/2010/02/03/hackers-networking-equipment-technology-security-cisco.html

      http://www.networkworld.com/community/node/57070

      http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040407-username

  2. Anonymouse by Trepidity · · Score: 4, Informative

    I use this thing.

    Selection criteria:

    1. First google hit for [anonymous proxy]
    2. It's been around since forever and I remember its url (but when I don't, see #1)

    Yeah, not that scientific.

    The most venerable lineage in this space is probably The Anonymizer, which was once hosted by CMU researchers, but it seems to have been bought and turned into a commercial desktop application.

  3. They're all the same. by RyuuzakiTetsuya · · Score: 4, Funny

    See: http://xkcd.com/908/

    Except it's all pointing to one gnarly Tor endpoint

    --
    Non impediti ratione cogitationus.
  4. The Onion Router by Anonymous Coward · · Score: 2, Insightful

    It is fine for most purposes, and if you are really worried about backtracking, login from an open WiFi, route through TOR out the exit node and through one or two of the numerous free online proxies. Slow as molasses in January, but there it is.

  5. Anonymous != secure by mindcandy · · Score: 4, Informative

    Many TOR nodes are run for malicious purposes (a few have resorted to 'wall of sheep' sort of tactics' to reinforce this fact). TOR gives you anonymity but NOT privacy.

  6. Some options by Anonymous Coward · · Score: 2, Insightful

    I use Giganews' 'VyperVPN service. They have servers all over the world and you can select which country you want to use.
    I've also used privatetunnels.com which is based in the Ukraine and that was a great service as well.

  7. I do not trust Anonymous proxies. by Dareth · · Score: 5, Funny

    I do not trust Anonymous proxies. So I always host my own "anonymous" proxies myself. That is what I call secure!

    --

    I only look human.
    My mother is a halfling and my dad is an ogre, so that makes me an Ogreling
    1. Re:I do not trust Anonymous proxies. by Cryacin · · Score: 2

      There must be quite a few Sheldon Cooper's out there who don't understand sarcasm apparently. Informative? Really?!?

      --
      Science advances one funeral at a time- Max Planck
    2. Re:I do not trust Anonymous proxies. by v1 · · Score: 4, Interesting

      How do you figure that's "anonymous"? You are paying for the Internet connection so SOMEBODY knows who you are.

      I think that falls under the "I'm behind seven proxies, good luck!" meme. Granted, you get more and more latency each hop, but if you can give someone enough busywork trying to follow the breadcrumbs, you're likely to either (A) make them decide it's not worth the effort to get a 5th, 6th, and 7th court order, or by the time they get to the last proxy they have wiped your session data and simply have nothing to give anyone with a badge on their letterhead.

      Good proxy providers make a point to not retain session data for any longer than is absolutely necessary. Or if they don't, you've made a bad selection of providers. I know if I were working in Anonymous, I sure as hell would be using a proxy chain paid for using prepaid visa cards.

      --
      I work for the Department of Redundancy Department.
    3. Re:I do not trust Anonymous proxies. by kiwimate · · Score: 5, Funny

      Pfft, amateur. I use a WGET to have my web pages e-mailed to me. That way anyone who's watching my activity thinks it's Richard Stallman.

    4. Re:I do not trust Anonymous proxies. by elsurexiste · · Score: 3, Funny

      I finally understand the "Woosh" idiom! Thank you multimediavt!

      --
      I rarely respond to comments. Also, don't ask for clarifications: a brain and Google are faster, believe me!
    5. Re:I do not trust Anonymous proxies. by Joe+Snipe · · Score: 2

      huh?

      --
      Sometimes, life itself is sarcasm...
  8. Overplay by fiannaFailMan · · Score: 4, Informative

    I use Overplay for region-restricted web content. Very useful when watching British TV shows on the BBC iPlayer and Irish Gaelic sports like hurling and Gaelic football which saves me the trouble of having to go to a pub and pay $20 per game.

    --
    Drill baby drill - on Mars
  9. Bitcoin, yes, seriously by Anonymous Coward · · Score: 3, Interesting

    Google for "vpn services accepting bitcoin". Done. We learned from the spectacular failure of HideMyAss that you cannot pay for you proxy with credit card when the FBI comes looking.

    1. Re:Bitcoin, yes, seriously by JWSmythe · · Score: 3, Interesting

          That's not very hard. Plenty of people travel a lot. If I had been so inclined, I could have collected cards from multiple locations in about 12 states. Since you can buy them in most gas stations, you can get them anywhere, regardless of if it's on your route or not. If you're really dedicated, a nice 4 hour drive away can put you in another state to make the purchase.

          From what I have seen of the prepaid credit cards is, you are expected to provide personal information, and have the card with your name on it sent via USPS.

          Use of the temporary card is limited. You'll get funny looks using it at a point of sale. You'll have a hard time using it online if they ask for *any* identifiable information. You don't have even a name and zip code, which are the bare minimum that most ask for. Depending on the merchant account, they may let it slide, but it's a big risk for the vendor.

          Getting something less traceable, like a Starbucks gift card, isn't quite as usable for this purpose.

         

      --
      Serious? Seriousness is well above my pay grade.
  10. The best anonymouse proxy is an open wifi by Anon-Admin · · Score: 4, Insightful

    I personally use open wifi connections, they are about as anonymous as you can get. I picked up a 10" google pad with GPS, installed the software and took a drive. They are all over the place, that is assuming you dont use the open one at the local bar, Denny's, McDonalds, Cigar club, Starbucks, etc, etc, etc.

    If you look, you will find that open and available wifi connections are easy to find, completely anonymous, and fun. Fun because it is amazing what people will share on there local network with an open wifi connection ;)

    1. Re:The best anonymouse proxy is an open wifi by 93+Escort+Wagon · · Score: 4, Funny

      I personally use open wifi connections, they are about as anonymous as you can get. I picked up a 10" google pad with GPS, installed the software and took a drive. They are all over the place, that is assuming you dont use the open one at the local bar, Denny's, McDonalds, Cigar club, Starbucks, etc, etc, etc.

      Hmm... so "Anon-Admin" likes cigars, lattes, Big Macs and Grand Slam Breakfasts - that narrows things down considerably... I've almost got him!

      --
      #DeleteChrome
    2. Re:The best anonymouse proxy is an open wifi by Crudely_Indecent · · Score: 5, Informative

      Be sure to alter the MAC address of your wireless adapter, or the log files on the open wifi router could be used to identify your computer.

      --


      "Lame" - Galaxar
    3. Re:The best anonymouse proxy is an open wifi by jackbird · · Score: 2

      It's driver-dependent. All the consumer Linksys stuff I've run across has it, and some other vendors, too.

    4. Re:The best anonymouse proxy is an open wifi by Defenestrar · · Score: 4, Interesting

      Go for something like 01:23:45:67:89:AB. That way even if the logs get nabbed it'll save a lot of headache for both the open network admin and others involved. It makes it obvious that further tracking is pointless (good for you) and does a nice turn for anyone kind enough to leave open bandwidth for public use by (presumably) ending their harassment by investigators.

      The other way to do it is to leave your home router's wireless open to the public (regulating bandwidth as you see fit), control the logs yourself, and then make any connection to a proxy via (registry/OS footprint free) utilities on a hidden volume or usb drive. Thus even if all of the proxies, anonymizers, and etc. are compromised you'll still have enough reasonable doubt. Of course reasonable doubt is only good in some locations. The places or circumstances these tools are often invented for (i.e. Arab Spring) may not care enough about western due process in the middle of a civil revolution.

    5. Re:The best anonymouse proxy is an open wifi by Maniacal · · Score: 2

      Wouldn't the ability to use spoofed MAC addresses negate the possibility of law enforcement identifying someone using MAC address. I mean it seems like any 2 buck lawyer would be able to argue that someone could have just spoofed your MAC address.

      --
      MG
    6. Re:The best anonymouse proxy is an open wifi by gknoy · · Score: 2

      Sadly, nobody ever expects the Inquisition until its too late.

  11. Coffee shop? by hawguy · · Score: 4, Interesting

    How about a coffee shop's free Wifi using a spoofed MAC address while I'm sitting at the restaurant next door?

    1. Re:Coffee shop? by parlancex · · Score: 3, Insightful

      Just make sure if you buy anything it's cash only. :)

    2. Re:Coffee shop? by GameboyRMH · · Score: 3

      And more important than all of that, use a totally clean browser with geolocation and any other privacy-destroying features disabled, and locked down tightly to put scripts, flash, cookies (including flash cookies and HTML5 storage) and off-site requests on a whielist system.

      --
      "When information is power, privacy is freedom" - Jah-Wren Ryel
    3. Re:Coffee shop? by hawguy · · Score: 2

      Why?

      Your laptop running a Live linux distro and USB drive. Untraceable, or do you think that Mac addresses can not be changed.

      It is perfectly safe to use the same laptop for good and evil.

      Topping that, why even bother spoofing your mac address when you can get a "disposable" usb wifi adapter for less than 10 $.

      Because unless you dispose of it regularly, if the cops confiscate it and find that it matches the MAC address linked with questionable activity at a coffee shop, then you're screwed. If you set your MAC address to some randomly generated number on each visit, then they can't easily link your hardware to the coffee shop logs. (i'm ignoring other fingerprinting that they could be doing to identify your hardware since if someone is interested in you enough to do advanced network analysis to find you, they're interested enough to track down your Wifi signal the next time you get online.)

      But if you are worried about Wifi fingerprinting, then the disposable Wifi adapters you mentioned would be the way to go - as long as you really do dispose of them.

  12. panopticlick by jginspace · · Score: 4, Insightful

    What degree of anonymity are you looking for? Exactly which of the HTTP request headers do you wish to be anonymized? Okay so your proxy is not passing on your IP address. So It's not passing on common proxy behaviours (like HTTP 1.0 requests). And there's no 'proxy' anywhere in the request. You're not even using TOR. Well done. Now check Panopticlick. You're not anonymous. Now exactly what kind of proxy where you looking for and what kind of anonymity were you looking for?

    1. Re:panopticlick by religious+freak · · Score: 2

      Wow - people should take a look at this. Great (if a little disturbing) info! I should really donate a few bucks to EFF.

      --
      If you can read this... 01110101 01110010 00100000 01100001 00100000 01100111 01100101 01100101 01101011
  13. Get Coccon by mbeckman · · Score: 2
    I use Cocoon (GetCoccon.com). It's free, and they are very clear in their privacy policy that they don't store logs tracking where you go:

    .

    "Inside Cocoon we do not track where you go or what you do online... Only operational information, such as processing speed or what features are under greatest demand, may be used to ensure Cocoon provides the best possible performance and experience to our users."

    There is the question of how enforceable this promise is, since Cocoon is ad-supported. It's in their privacy policy, however, so I presume that is legally binding on them. I like that Cocoon comes right out and say that they don't track anything, though. Does any other proxy do that?

  14. Depends on why .. by mindcandy · · Score: 2

    Like always, the question you have to ask is "who am I hiding it from"?

    TOR works well, but is neither anonymous or private (meaning TOR traffic is easy to identify at entry, so the ISP will know you're doing it). At exit, the traffic is the same as it entered .. so unless your transport itself is encrypted, it's game over if the exit op is malicious.

    Paid proxies are good for casual "don't want the boss seeing it", and many of these are plain HTTPS so they're harder to spot. Teathering your personal phone also works here.

    If you're doing something illegal, the safest bet is probably long-range wifi (to somebody else's equipment) + proxy (tor, VPS with stolen CC, etc.) and even then you've got to move around a bit.

  15. Re:I have servers in the USA by kiwimate · · Score: 2, Interesting

    1. People want to do illegal stuff and not get caught; and/or
    2. People are overly paranoid.

    Modern life is complicated enough without trying to get into trouble. Why bother? (Answer: people have a raging sense of entitlement. "Whine, I don't want to pay for stuff.")

  16. Re:I have servers in the USA by RatBastard · · Score: 2

    It's not always about not paying for things. Some people have fetishes for... well, let us just say illegal things. In some places frontal nudity would count. Other places you're talking pictures featuring pyrohomonecropedobestiality.

    --
    Boobies never hurt anyone. - Sherry Glaser.
  17. but why so much? by doston · · Score: 2

    I completely respect people's privacy, but when they insist on SO MUCH and total privacy, it even makes me wonder what they're up to. Personally, I use the "do not track" feature on firefox, which is probably useless and per the WSJ article on privacy, I added the Ghostery and Better Privacy add-ons to Firefox...they're supposed to further help. I'm not sure what I'd be doing to require a botnet or a truly anonymous proxy. Even when I thought about growing my own pot, I just used my regular browser and emailed friends about it over gmail. Probably not real bright. I'd like to know what you're all up to that requires such anonymity.

  18. Re:How do you know they're anonymous? by kiwimate · · Score: 2

    How do you verify the anonymity?

    Because they haven't been caught yet. Duh.

    It's either that, or face up to the fact that nobody's actually looking for you/you're not really all that terribly interesting.

  19. Never trusted them either by AlienSexist · · Score: 5, Interesting

    Being paranoid, I cannot resolve the chain-of-trust for anonymous proxies. For all I know Big Brother, with his infinite budget, owns and operates all of these so called proxies anyway. Honeypots if you will. Not only are they well-positioned to see what you are trying to conceal but even collaborate among other owned nodes to see just how far you're willing to take it. So in the worst case you are drawing even more attention upon yourself. You cannot really know. Is it safer than not using a proxy at all? Possibly.

  20. Recommended by Anonymous by IronHalik · · Score: 3, Interesting

    IPpredator.se and anonine.se. Both from the freedom loving land of Sweden. You get SSL and PPTP with 2048kb or 128kb encryption (IPredator supports PPTP only IIRC).

  21. PRQ by dissy · · Score: 4, Interesting

    http://prq.se/?p=tunnel&intl=1

    PRQ is based in Sweden, and has their own ASN (read: they are their own network, connected to multiple upstream backbones)
    They offer all types of services in addition to VPNs: colo, dedicated hosting, and shared hosting.

    Their tunnels offer a static IP and no ports blocked (for running servers if that's your thing), so you'll want to provide your own firewalling. They use straight OpenVPN too.
    They have a strict privacy policy and appear to follow it.

    This is the same ISP that hosts the pirate bay too, which should give you an idea how they handle requests from certain other countries due to the whining of certain media cartels...

    I've been a customer for awhile now and quite happy.
    I am even planning to colo with them in the next couple of months if all goes well. (Previous data center I've been with has changed company names like three times now in the past six months, and now plans to jack their pricing up)

  22. Re:I have servers in the USA by Genda · · Score: 2

    Alright, you watch "48 Hours" or "Criminal minds" on TV and something you see about terrorism or murder piques your interest so gawd forbid you Google it. Whether it the "Anarchists Cookbook" or "How to hide murder by using succinylcholine", you have just made yourself a potential target of a law enforcement agency, and if gawd forbid again, anything bad happens in your household or neighborhood in the next 24 months, your browsing habits have just planted a smoking gun in your hand.

    You don't even have to be the one who does the search. You leave you home PC logged in as you, and your eldest male-child does a search on how to "Terminate a butthead little brother" and you could be buggered.

    Its not paranoia if Government Agencies have virtually unlimited resources to smoke your hinny like a Cohiba, at the first blush of illegal activity. Its also not particularly heart warming to discover that Prosecuting Attorneys have almost no interest in getting the right guy (that's the job of the police), just winning the case. The number of poor innocent bastards in prison in this country does not exactly inspire confidence in our legal system. Hell, Texas just executed what the entire planet now knows was almost certainly an innocent man just for political value.

    You better believe that I find myself faced with two options in these modern times. They are; Willfully avoid any appearance or opportunity to be caught doing anything that might get me buggered, or Run silent and run deep. Anything else is Russian Roulette.

  23. If you want to be truly "anonomous" by Lumpy · · Score: 2

    Pay for a proxy, but use a prepaid visa that is not registered in your name (hard to od but not impossible) then NEVER connect to that proxy from the same starbucks, mcdonalds, etc...

    Yes this means you have to use hacker tactics for not getting caught. That is the price for living in a oppressive country.

    --
    Do not look at laser with remaining good eye.
  24. Re:you're chasing a snark by EETech1 · · Score: 2

    The condos I used to live in came with free cable and Internet. When I called TWC to ask how to connect to the Internet, they told me to use the cable modem that was installed. When I said there was none, and after two weeks screwing around on the phone, I went into the local office, and asked there. She went through the billing, and found the old modem, and called someone and told them the old numbers, and gave me a new one. When I asked if they were using that modem to get free Internet at a different location, she laughed and said only for about 5 years now, but that will stop soon, as soon as they located which house it was in!

    Cheers

  25. Torrentfreak has a nice list of private VPNs by idonthack · · Score: 2
    --
    Why is it that when you believe something it's an opinion, but when I believe something it's a manifesto?
  26. Re:I have servers in the USA by Fned · · Score: 2

    pyrohomonecropedobestiality.

    I'm trying to figure out how this would work... fucking a fertilized-egg omelet with a strap-on...?

  27. Not exactly anonymous, but close by reboot246 · · Score: 2

    I live next door to CowboyNeal and use his unprotected wifi.

  28. Re:Freenet by Rennt · · Score: 4, Informative

    Tried it. Learned my lesson. The place is choked with CP. I'm talking actual rape here - not merely the kind of naked kiddie pictures that get you sent to a federal prison these days. This is stuff you NEVER see on the internet. The real, horrific, deal. There may be "safe" areas, but I couldn't find any, and I didn't exactly want to hang around to find out.

    I want something like Freenet to exist. I believe we have the right to unregulated communication, individuals should just suck it up when they are offended rather then resorting to censorship and control. But Freenet appears to be used by criminals exclusively. I couldn't see any evidence of the kind of crypto-hippy idealism I expected.

    I'm not going back anywhere near that cess-pit, and I'm not helping to enable it.

  29. Re:Freenet by nurb432 · · Score: 2

    Not really. If you are using the main 'index' sites, they do their best to completely remove CP and other hard core offensive items, and categorize what is left. So it's quite easy to avoid viewing the "sites" you don't agree with.

    Sure you might see that it exists, but you wont see the actual content that offends you. Not much different than real life.

    --
    ---- Booth was a patriot ----