The state of being anonymous. Meaning: not identified by name and not having outstanding, individual, or unusual features that enable identification.

learn more… | top users | synonyms (1)

5
votes
2answers
141 views

Can Heartbleed expose a TOR user's IP address?

It is interesting to observe, that TOR exit nodes with out-of-date OpenSSL implementations can themselves be affected by the Heartbleed bug. Can Heartbleed expose a TOR user's IP address merely by ...
177
votes
19answers
40k views

How can someone go off-web, and anonymise themselves after a life online?

With data mining tools like Maltego and other correlation tools for large data sets, if we conduct any transactions online assume that these can all be collated to build a good picture of what we do, ...
6
votes
6answers
744 views

Secure Internet Polling

In the United States, there has been a lot of talk about creating a secure polling system that would operate over the internet. I have also heard that Securing a poll over the Internet is impossible. ...
3
votes
4answers
182 views

Anonymized Votes

Background Looking to create an anonymous voting system. The system must track whether or not a user voted on an item (public information), but only that user is ever allowed to know whether they ...
0
votes
2answers
48 views

Is there a way to prevent software from accessing hardware IDs?

I think this is related to this question, but I would like to know if there's also a way to prevent "third party" applications from seeing hardware IDs (motherboard, hard disks, and others), or giving ...
7
votes
1answer
147 views

Deanonymizing users by introducing structured delays to the network?

Here is a scheme for deanonymizing a user that I've been thinking about, just out of curiosity. I tried searching for it but didn't find much. Does this technique have a name? Are there any papers or ...
21
votes
6answers
4k views

How to be completely anonymous online?

I recently saw this post on reddit: http://www.slashgeek.net/2012/06/15/how-to-be-completely-anonymous-online/ But the majority argument, both on reddit and on comments on that post seems to be that ...
3
votes
3answers
109 views

Alternative to security questions for account recovery when email isn't an option

I'm working on a project whereby a certain level of anonymity is required for users. One of stipulations is that no email is used at all, as it makes the barrier to entry too high for people who want ...
60
votes
6answers
9k views

How much can I trust Tor?

How much can I depend on Tor for anonymity? Is it completely secure? My usage is limited to accessing Twitter and Wordpress. I am a political activist from India and I do not enjoy the freedom of ...
0
votes
3answers
115 views

Can one use IP-spoofing to anonymize DDOS attacks?

Since it is possible to fake the source-ip of an ip-package, is it also possible to anonymize DDOS-attacks?
0
votes
1answer
34 views

What are the strengths and weaknesses of using a single 'burner' computer vs. many public access computers over a sustained period? [closed]

Assuming that the user is accessing/publishing related sensitive information over this period, and also assuming that they would take additional precautions in both scenarios, such as a Tails live ...
0
votes
4answers
3k views

Can someone tell if you are using a VPN by your IP address?

I am wondering whether a website you are accessing can tell if you are using a VPN or not based on your IP address? I have done some Google research and it appears, that this is the case. However, I ...
1
vote
0answers
67 views

Store which parts of an IP address, for user to remain anonymous?

I'm thinking about building a very anonymous forum, where people can comment and upvote each other's comments anonymously. People are supposed to remain anonymous even if the forum's database contents ...
3
votes
2answers
139 views

Tor traffic correlation attacks by global adversaries

I recently came across a paper called "Users Get Routed: Traffic Correlation on Tor by Realistic Adversaries" (Aaron Johnson et al) ... which seems to be saying that adversaries (like the NSA) that ...
3
votes
3answers
80 views

Way for two parties to establish that they are not previously known to each other

(Sorry if this isn't in the right SE / is not relevant for security.stackexchange - seemed like the best choice) Is there a way for two anonymous parties to establish that they are not previously ...
6
votes
4answers
12k views

Advanced techniques for detecting a proxy/getting original IP

In what manner can a website detect my original IP address, even though I'm using a proxy server? I've noticed this with a few sites. There are four proxy methods I've used: Firefox with a proxy ...
16
votes
15answers
17k views

How to remain 100% anonymous on the internet?

I was searching for methods or tools to remain completely anonymous on the internet. TOR came up but it is seems that it is far from perfect. Are there any 100% foolproof ways ? Or approximately 100% ...
2
votes
3answers
155 views

Can authentication in social networks through VPN defeat the purpose of the latter?

If a person uses VPN and authenticates herself to some social network through the VPN, doesn't she lose her anonymity for as long as the VPN session is used ? By losing her anonymity, I mean that her ...
26
votes
2answers
5k views

Best practices for Tor use, in light of released NSA slides

It has been known in the security community that a tool as versatile as Tor is likely the target of intense interest from intelligence agencies. While the FBI has admitted responsibility for a Tor ...
2
votes
1answer
167 views

How to run a tor hidden service from home securely?

Another theoretical question about Tor: Imagine I am running a dissident web site as a hidden service. How can I reduce the chances that I get caught? Assume I am running the server from home, over a ...
1
vote
1answer
134 views

Anonymous website

I want to publish some information in my country that is in the public domain that is in a hard to read format. What are some reasonable steps I could take to help ensure I am not identified or make ...
34
votes
6answers
1k views

Is the concept of Authenticated Anonymity possible?

Or is authentication essentially incompatible with anonymity? If we have the idea that authentication is proving that someone is who they say they are and anonymity is essentially having an unknown ...
1
vote
3answers
3k views

Is it possible to find who posted comment on my blogspot anonymously?

Problem Behind question : I own an blogspot site and people used to come and comment on my posts. In recent days I can see a spammer who comments anonymously on my every blog-posts. The comments were ...
-1
votes
4answers
127 views

Is there any other way to trace a computer besides its IP? [closed]

I play on this game thing - it isn't important but it is a roleplay game. I am roleplaying a criminal - a smart one. Now the fake FBI in the roleplaying game sent me a message. They have made the IP ...
19
votes
4answers
858 views

Can anonymizing techniques make you less anonymous?

There's a recent report in the news of a Harvard student who emailed in a bomb threat so as to postpone year-end exams. According to the report, he carefully covered his tracks using the best ...
3
votes
3answers
559 views

Can too much web searching be a danger to a security professional?

As a junior security professional, I spend a lot of time goggling for things such as 'wpa dictionaries', 'vulnerabilities...' , 'how to crack ...','and so on. I sometimes feel like I am calling for ...
32
votes
7answers
2k views

Why does one need a high level of privacy/anonymity for legal activities?

This question is sort-of spun off of a previous one. How to counter the statement: "You don't need (strong) security if you're not doing anything illegal"? There are a lot of great ...
18
votes
7answers
2k views

How can I keep my identity anonymous as a website owner/administrator?

My question looks touchy, but I'll do my best to explain. You see, I live in country where democratic rules are quite, well, delusive. In theory, there is freedom of speech, democratic elections and ...
264
votes
10answers
44k views

Is it bad practice to use your real name online?

On some accounts I use my real name on-line (Google+/Facebook/Wikipedia/personal blog), others (Q&A/Gaming) I use an alias. My question is: Security and privacy wise, what can people do with my ...
3
votes
4answers
471 views

How to stay anonymous in public wireless network?

If we are accessing a public wifi network, does changing mac address at certain intervals of time keep us anonymous forever? Is there anything other than mac address to identify a user in an AP?
9
votes
4answers
4k views

Make online payments anonymously? [closed]

Is there a service/company which allows you to make anonymous payments online ? This is how i want the service to work - Just like a credit/debit card. When you make the payment online, instead of ...
23
votes
7answers
16k views

How can you be caught using Private VPN when there's no logs about who you are?

I know there are 2 services of VPN (free and paid). Normally, free VPNs need money from somewhere and sometimes they can sell your information to any agency that needs it. Now, if we are talking about ...
1
vote
3answers
475 views

How to expose a client's real IP address?

As a forum administrator, how can I find a client's real IP address? Are there any third party tools or weakness that expose the real IP address?
2
votes
2answers
398 views

What order is best for nesting VPNs?

if anyone is available to give me advice on a VPN situation I'd appreciate it. So the story is, I have one Swedish VPN which I trust not to log, and which I've connected to with my real IP, and I've ...
2
votes
3answers
759 views

How Tor, Privoxy, Vidalia and Polipo are getting together?

I realized that these applications are frequently used together. What is the role of each software in the mission of anonymity and privacy on the web? While I understand Vidalia is a GUI provider, I ...
0
votes
1answer
53 views

Decentralized online shopping service [closed]

Would it be possible to create an online shopping service like Amazon (or Silk Road) but also to make it decentralized so there would no main server users would have to trust with their data? I ...
24
votes
3answers
7k views

How does “check.torproject.org.” know if you're using TOR?

I'm looking at the results from the following URL and would like to know how does the TOR website "know" that TOR is being used or not. ...
1
vote
2answers
210 views

Are KIS 2014, Malewarebytes Pro and SpyBot sufficient to prevent internet attacks?

As mentionned in the title, I have KIS 2014, Malewarebyte Pro and Spybot installaed on my windows 7 (regularly updated). I regularly scan my pc for viruses and spywares and clean it with Glary ...
16
votes
6answers
2k views

Anonymous web browser. Is it real?

Do anonymous browsers work? What principles do they use? Can I use them to test access to my web site? Can I detect if a visitor is using one? What is the different between traditional and anonymous ...
0
votes
1answer
105 views

Anonymity on the Web 101 [duplicate]

nice to meet you all! I'm newbie on this stack. Sorry if I did anything idiot :) Well, I'm very curious about browsing on the web completly anonymous. I would like to hide the websites, e-mails, ...
15
votes
5answers
8k views

Does using an http proxy completely hide my real IP address?

If I obscure my IP by going through a free http proxy and visit a page, will that site's admin ever be able to find out my true IP or anything related to my true connection/info?
2
votes
1answer
185 views

Torception: An onion within an onion

With the recent takedown of silkroad, I am pondering on how anonymous you actually can be on the Tor Network. Other more legal or moral uses such as anonymity as a right, or avoiding censorship. These ...
7
votes
3answers
2k views

Detecting Tor proxy by reading request headers

I am a newbie to the field of security. As I was trying to explore more about HTTP request and response headers, I came across this website which provides a detailed analysis of the request header ...
8
votes
6answers
3k views

How can I send emails anonymously?

How can I send email anonymously? We used to track email's IP and its location based upon the email headers, and there are many possible ways to track the email's id's which were sent by the anonymous ...
0
votes
1answer
310 views

Hide a machine on LAN [closed]

Is there any way to hide a computer on LAN? For example maybe with a firewall, when someone is going to ping a machine, it won't answer. In other words the machine must answer to router only. I am ...
0
votes
2answers
103 views

Are there any obvious flaws in this anonymous-receiver communication method using Twitter?

There might be flaws in the following method for anonymous signal reception that I'm not seeing: Alice doesn't know who Bob is. Bob wants to Alice to notify Bob of a particular outcome without ...
3
votes
2answers
233 views

How to prevent CAS from leaking user identity to arbitrary visited websites?

Summary evil.example.com could use a hidden frame to request a CAS ticket from corporation.example.net, then validate it to receive the username of the hapless user. This effectively deanonymizes the ...
1
vote
2answers
401 views

Is it possible to respect a user's privacy while collecting phone MAC addresses?

In London, there are trash bins that track a phone's MAC address and monitor the users movement from one location to another. I want to see if there is any best practice for collecting private ...
10
votes
8answers
5k views

Whats the best way to make my internet traffic anonymous?

Recently I have thought more and more about how to make my Internet traffic anonymous. Not for illegal reasons, but just to stop leaving information about me. The methods I know of to anonymize my ...
2
votes
3answers
2k views

What is the best practice: separate ssh-key per host and user VS one ssh-key for all hosts?

Is it better to create a separate ssh-key for each host and user or just using the id_rsa key for all host to authenticate? Could one id_rsa be a malpractice for the privacy/anonymity policies? ...