The state of being anonymous. Meaning: not identified by name and not having outstanding, individual, or unusual features that enable identification.

learn more… | top users | synonyms (1)

34
votes
6answers
22k views

Differences between using Tor browser and VPN

I can't quite figure out the differences between using the Tor browser and using a VPN (like concretely proXPN). From what I understand the idea is the same, that they both hide the IP address. The ...
0
votes
1answer
40 views

Hiding my activity from mobile service provider

Ok there is mobile service provider which also happens to be providing mobile internet. Now, I am interested to hide my activity from that provider. e.g. it can't see my browsing habbit. Basically ...
4
votes
2answers
676 views

Multiple gateways (Whonix with Tails)?

I've been reading Whonix's documentation and threads here to be more anonymous and secure. For the best anonymity Whonix recommends having two different computers, one being the gateway and the other ...
37
votes
3answers
15k views

How does check.torproject.org know if you're using TOR?

I'm looking at the results from the following URL and would like to know how does the TOR website "know" that TOR is being used or not. https://check.torproject.org/?lang=en-US&small=1&...
12
votes
4answers
10k views

Detecting Tor proxy by reading request headers

I am a newbie to the field of security. As I was trying to explore more about HTTP request and response headers, I came across this website which provides a detailed analysis of the request header ...
-5
votes
1answer
44 views

Determine last name or any relevant information pertaining to an individual [closed]

Long story short, a family friend is the owner of a fairly relevant company in my area. My friends company was hacked - via social engineering to be exact. They contacted her/his cellular provider and ...
0
votes
1answer
51 views

Anonymisation better than just a hash

I'm trying to help anonymise users but still give them some controls. So this is different from say, anonymising a data set where you never need to go back to the original users. Let me give you an ...
2
votes
4answers
157 views

How can VPN providers end violating accounts when “they don't log any data”?

VPN providers can end accounts which violate their terms of use. If you look at https://nordvpn.com/terms-of-service/ for example, you see that they will terminate accounts violating their ToS. The ...
7
votes
2answers
1k views

Where are the anonymous/private domain validation SSL certs?

I have yet to find a CA that doesn't require personal information for DV certificates. Is this because all of the major browsers and operating systems have a policy to reject CAs that don't require ...
0
votes
0answers
95 views

VPN Server Inside VPN client on Router

This is a different context of an already asked question: In a few words: Sub-VPN or VPN SubNetwork... VPNsception? So I am using DD-WRT flashed router which connects as a client to VPN server "...
0
votes
0answers
37 views

Setting specific geoIP in Piratebrowser

I'm using Piratebrowser. In order to set a specific country's IP, I used the line ExitNodes {in} which is working. I'm getting an Indian IP in dnsleaktest, but my geolocation is getting a Japanese ...
3
votes
6answers
27k views

Possible ways to track down anonymous mail senders?

In my previous post here How can I send emails anonymously? the community framed and guided how we can send an anonymous emails through various ways which makes me thought about the following things ...
4
votes
1answer
106 views

Hidden service security SSH

Pretend I have a Tor hidden service. For ultimate security I would firewall the internet entirely, except for Tor, to try to reduce IP address leakage and other security risks. My problem is how ...
-4
votes
1answer
70 views

Will attributing a bounty compromise my anonymity?

Consider the following scenario: A user asks an anonymous question on StackExchange (on any website that allows it). Now, the user, using they main account, puts a bounty on that question. Can that ...
-2
votes
1answer
82 views

How safe is it to use tor on a monitored network?

So in a shape this question has been asked but mine is more specific. If It is a work network that blocks a huge number of websites and services, you can use tor to circumvent the blocks but can the ...
3
votes
1answer
44 views

What are the key steps in threat modeling as a user willing to stay anonymous?

I've been looking for standards or guides in threat modeling. I found lot of informations for developers threat modeling when building apps, networks etc.. but I could not find relevant information ...
64
votes
1answer
5k views

Tell browser my site has no scripts

I have created a Tor hidden service site which has absolutely no JavaScript or other types of client side scripts. The page is HTML, CSS, images, and some JSP for handling user input. I encourage ...
-4
votes
1answer
63 views

Use Tor browser to download in .com site [duplicate]

I'm using Tor browser to download a file from a .com website. Can the website track/identify my original IP address. Does Tor hide real my IP address during the download ?
1
vote
0answers
38 views

What information about a user can wireless carriers access?

What is the maximum amount of imformatiom about a user and the user's phone that can be obtained by a wireless carrier on a GSM network? Here is a list of the things I know, but are there more? IMEI,...
12
votes
3answers
2k views

ISPs are now adding unique header identifiers to web traffic. Can this be avoided? If so, how?

I'm a security-conscious Verizon user, and it has recently come to light that Verizon is now serving up my web traffic to ad partners while en route. I understand that once my data has left the device,...
1
vote
1answer
37 views

Can I be identified across different access points to same ISP?

The ISP I use at home also provides access points in cafés etc. Can they, for example with my MAC address, match my identity when I'm using one of these access points to when I'm at home? And what ...
1
vote
0answers
46 views

Make my SSH I treat like VPN more anonymous [closed]

I have a VPS (although I could easily upgrade to a dedicated server) which I use as a "poor man's VPN" by tunneling through it. My aim is to improve this server so anyone attempting to track me has ...
-1
votes
1answer
144 views

Can VPN provider see my data?

I have a 2 questions: If I use a VPN and I go to any websites via HTTP - does VPN provider will be able to see the traffic? Those. logins, passwords, all the texts that pass through the channel (in ...
53
votes
8answers
3k views

Why does one need a high level of privacy/anonymity for legal activities?

This question is sort-of spun off of a previous one. How to counter the statement: "You don't need (strong) security if you're not doing anything illegal"? There are a lot of great ...
54
votes
4answers
21k views

What is the best practice: separate ssh-key per host and user VS one ssh-key for all hosts?

Is it better to create a separate ssh-key for each host and user or just using the id_rsa key for all host to authenticate? Could one id_rsa be a malpractice for the privacy/anonymity policies? ...
2
votes
1answer
100 views

How to detect, inspect and delete a super cookie of a specific website? [closed]

Definition of supercookie from the paper I am reading: "Supercookies settle in parts of the system that are harder to erase, and include the usage of Flash Local Shared Objects and IE Local ...
68
votes
2answers
15k views

Best practices for Tor use, in light of released NSA slides

It has been known in the security community that a tool as versatile as Tor is likely the target of intense interest from intelligence agencies. While the FBI has admitted responsibility for a Tor ...
71
votes
3answers
4k views

How to publish scanned documents anonymously?

I was thinking of the following question for a long time and did not find a lot of material* in the web and nothing at all on Security.SE. I think its a very interesting question as it covers ...
0
votes
1answer
34 views

How do connection relays strengthen anonymity?

We've all heard of the concept of some geek bouncing their internet connection over a number of servers to hide their trail when doing something secretive. I'm curious about why this is done. I know ...
0
votes
2answers
74 views

Is spoofing the origin IP in a TCP header an effective “anonymity” strategy?

I know just enough about TCP to know there's a header which, among other things, contains the origin IP and target IP of that packet, which the internet uses to guide it to its destination and then on ...
5
votes
2answers
200 views

Best practices: Use of a single private key as a person, or multiple to identify self across domains?

Similar to the question here, I'd like to apply the same question to a person. For example, I have implanted a chip in my hand that holds an encrypted private key that serves as my personal unique ...
33
votes
7answers
5k views

Is it possible to secretly monitor/backdoor hardware?

I've recently gained an interest in anonymity and the technical aspects of it. Is it possible for hardware to be bugged and monitored? I.e, can a seller of a processor bug it in order to report what ...
36
votes
8answers
81k views

How can you be caught using Private VPN when there's no logs about who you are?

I know there are 2 services of VPN (free and paid). Normally, free VPNs need money from somewhere and sometimes they can sell your information to any agency that needs it. Now, if we are talking about ...
2
votes
3answers
4k views

TOR and sniffing data

If I'm not mistaken, TOR works opening a random anonymous path between two hosts using others computers that have TOR installed no? Then... everybody can sniff the data of the others no? Just wait ...
3
votes
2answers
811 views

Nmap through proxy

Using the following command: nmap --proxy socks4://*.*.*.*:25074 -sV -O --reason scanme.nmap.org I'm not sure if nmap is really using the proxy specified Had an idea of scanning "localhost" or "...
1
vote
1answer
53 views

How does Tor collect addresses of nodes?

My name is Alice and I would like to send a package to my beloved Bob. In order to avoid getting recognized by Bob I decide to send my message through several nodes. At each step, a node decrypts the ...
2
votes
2answers
264 views

How to test my anonymity?

let's assume that I've used proxies and anonymizing tools as much as I want. How to be sure that I'm totally anonymous? I'm not talking only about IP spoofing and identity hiding, but other and ...
-2
votes
0answers
38 views

How to get a secure iPhone [closed]

I have a friend overseas in a war zone, and would like to order an iPhone with this security built in. I understand that you do this, but am unclear how to: Get the iPhone to you. How to secure ...
93
votes
6answers
17k views

How much can I trust Tor?

How much can I depend on Tor for anonymity? Is it completely secure? My usage is limited to accessing Twitter and Wordpress. I am a political activist from India and I do not enjoy the freedom of ...
3
votes
1answer
120 views

Two-phase anonymization

EDIT: [N.B: I fully replaced the original question which was not a very good statement of the problem (see comments) with a more apt one.] I have records that contain - among other things - the ...
0
votes
1answer
55 views

Possibility for Multi-layer VPN or queries through TOR? [duplicate]

If a user is to fingerprint a server via SQL injection and doesn't want the server to be able to trace back. Is the only way to use a proxy/VPN? Can queries and requests be sent through TOR network? ...
17
votes
3answers
4k views

TOR cracked: How do you think the FBI did it? [closed]

I read in this article that the FBI was able to crack the anonymity of TOR. From what I heard and read , onion routing makes it almost impossible to de-anonymize a user. The last time I heard anyone ...
1
vote
0answers
45 views

Proxy help on Kali Linux [closed]

I've recently gotten into using tor and I understand that tor only handles tcp. What I was hoping was to route all of my network traffic from my local machine through what I, at the time, thought of ...
0
votes
4answers
164 views

Isolated safe anonymous OS

I wonder about a setup where I can have a primary OS on my Laptop, but keep a second OS that is safe, anonymous, persistent and isolated (for sensivite data that may communicate with the outside world)...
58
votes
11answers
10k views

How would two people with burner phones communicate?

According to Edward Snowden in this tweet... Phones used in real-world ops are disposed on a per-action, or per-call basis. Lifetimes of minutes, hours. Not days. Let's imagine for a moment that ...
-4
votes
1answer
83 views

Anonymity on a non-anonymous computer [closed]

Question: What steps should be done on a not anonymous PC with personal data to get as anonymous as possible ? Background Info: I use my laptop with Kali Linux for java coding and some C# on VM's....
3
votes
4answers
11k views

How to stay anonymous in public wireless network?

If we are accessing a public wifi network, does changing mac address at certain intervals of time keep us anonymous forever? Is there anything other than mac address to identify a user in an AP?
2
votes
1answer
39 views

Creating secure circuit in first generation Onion Routing

I'm reading paper on first generation Onion Routing from 1996. From paper: "To begin a session between an initiator and a responder, the initiator's proxy identifies a series of routing nodes ...
-1
votes
1answer
115 views

Proxy + TOR = anonymous?

I've been doing some research about how to stay anonymous on the net, and I was wondering what if you set up for instance your browser, to run through a proxy and then run through tor? Can I browse ...
4
votes
2answers
107 views

Exposing IP address via img tags

As we all know, many forums allow users to set profile pictures, post images, or put images in signatures. Could a user create an img tag that points to their own site with a link that no one would ...