The state of being anonymous. Meaning: not identified by name and not having outstanding, individual, or unusual features that enable identification.

learn more… | top users | synonyms (1)

0
votes
0answers
87 views

VPN Server Inside VPN client on Router

This is a different context of an already asked question: In a few words: Sub-VPN or VPN SubNetwork... VPNsception? So I am using DD-WRT flashed router which connects as a client to VPN server "...
0
votes
0answers
32 views

Setting specific geoIP in Piratebrowser

I'm using Piratebrowser. In order to set a specific country's IP, I used the line ExitNodes {in} which is working. I'm getting an Indian IP in dnsleaktest, but my geolocation is getting a Japanese ...
3
votes
6answers
26k views

Possible ways to track down anonymous mail senders?

In my previous post here How can I send emails anonymously? the community framed and guided how we can send an anonymous emails through various ways which makes me thought about the following things ...
2
votes
3answers
133 views

How can VPN providers end violating accounts when “they don't log any data”?

VPN providers can end accounts which violate their terms of use. If you look at https://nordvpn.com/terms-of-service/ for example, you see that they will terminate accounts violating their ToS. The ...
4
votes
1answer
101 views

Hidden service security SSH

Pretend I have a Tor hidden service. For ultimate security I would firewall the internet entirely, except for Tor, to try to reduce IP address leakage and other security risks. My problem is how ...
4
votes
2answers
652 views

Multiple gateways (Whonix with Tails)?

I've been reading Whonix's documentation and threads here to be more anonymous and secure. For the best anonymity Whonix recommends having two different computers, one being the gateway and the other ...
-4
votes
1answer
70 views

Will attributing a bounty compromise my anonymity?

Consider the following scenario: A user asks an anonymous question on StackExchange (on any website that allows it). Now, the user, using they main account, puts a bounty on that question. Can that ...
-2
votes
1answer
76 views

How safe is it to use tor on a monitored network?

So in a shape this question has been asked but mine is more specific. If It is a work network that blocks a huge number of websites and services, you can use tor to circumvent the blocks but can the ...
3
votes
1answer
41 views

What are the key steps in threat modeling as a user willing to stay anonymous?

I've been looking for standards or guides in threat modeling. I found lot of informations for developers threat modeling when building apps, networks etc.. but I could not find relevant information ...
64
votes
1answer
5k views

Tell browser my site has no scripts

I have created a Tor hidden service site which has absolutely no JavaScript or other types of client side scripts. The page is HTML, CSS, images, and some JSP for handling user input. I encourage ...
-4
votes
1answer
61 views

Use Tor browser to download in .com site [duplicate]

I'm using Tor browser to download a file from a .com website. Can the website track/identify my original IP address. Does Tor hide real my IP address during the download ?
1
vote
0answers
35 views

What information about a user can wireless carriers access?

What is the maximum amount of imformatiom about a user and the user's phone that can be obtained by a wireless carrier on a GSM network? Here is a list of the things I know, but are there more? IMEI,...
12
votes
3answers
2k views

ISPs are now adding unique header identifiers to web traffic. Can this be avoided? If so, how?

I'm a security-conscious Verizon user, and it has recently come to light that Verizon is now serving up my web traffic to ad partners while en route. I understand that once my data has left the device,...
1
vote
1answer
37 views

Can I be identified across different access points to same ISP?

The ISP I use at home also provides access points in caf├ęs etc. Can they, for example with my MAC address, match my identity when I'm using one of these access points to when I'm at home? And what ...
1
vote
0answers
44 views

Make my SSH I treat like VPN more anonymous [closed]

I have a VPS (although I could easily upgrade to a dedicated server) which I use as a "poor man's VPN" by tunneling through it. My aim is to improve this server so anyone attempting to track me has ...
36
votes
3answers
15k views

How does check.torproject.org know if you're using TOR?

I'm looking at the results from the following URL and would like to know how does the TOR website "know" that TOR is being used or not. https://check.torproject.org/?lang=en-US&small=1&...
-1
votes
1answer
119 views

Can VPN provider see my data?

I have a 2 questions: If I use a VPN and I go to any websites via HTTP - does VPN provider will be able to see the traffic? Those. logins, passwords, all the texts that pass through the channel (in ...
53
votes
8answers
3k views

Why does one need a high level of privacy/anonymity for legal activities?

This question is sort-of spun off of a previous one. How to counter the statement: "You don't need (strong) security if you're not doing anything illegal"? There are a lot of great ...
51
votes
4answers
20k views

What is the best practice: separate ssh-key per host and user VS one ssh-key for all hosts?

Is it better to create a separate ssh-key for each host and user or just using the id_rsa key for all host to authenticate? Could one id_rsa be a malpractice for the privacy/anonymity policies? ...
2
votes
1answer
81 views

How to detect, inspect and delete a super cookie of a specific website? [closed]

Definition of supercookie from the paper I am reading: "Supercookies settle in parts of the system that are harder to erase, and include the usage of Flash Local Shared Objects and IE Local ...
68
votes
2answers
15k views

Best practices for Tor use, in light of released NSA slides

It has been known in the security community that a tool as versatile as Tor is likely the target of intense interest from intelligence agencies. While the FBI has admitted responsibility for a Tor ...
71
votes
3answers
4k views

How to publish scanned documents anonymously?

I was thinking of the following question for a long time and did not find a lot of material* in the web and nothing at all on Security.SE. I think its a very interesting question as it covers ...
0
votes
1answer
34 views

How do connection relays strengthen anonymity?

We've all heard of the concept of some geek bouncing their internet connection over a number of servers to hide their trail when doing something secretive. I'm curious about why this is done. I know ...
0
votes
2answers
72 views

Is spoofing the origin IP in a TCP header an effective “anonymity” strategy?

I know just enough about TCP to know there's a header which, among other things, contains the origin IP and target IP of that packet, which the internet uses to guide it to its destination and then on ...
5
votes
2answers
187 views

Best practices: Use of a single private key as a person, or multiple to identify self across domains?

Similar to the question here, I'd like to apply the same question to a person. For example, I have implanted a chip in my hand that holds an encrypted private key that serves as my personal unique ...
33
votes
7answers
5k views

Is it possible to secretly monitor/backdoor hardware?

I've recently gained an interest in anonymity and the technical aspects of it. Is it possible for hardware to be bugged and monitored? I.e, can a seller of a processor bug it in order to report what ...
34
votes
8answers
80k views

How can you be caught using Private VPN when there's no logs about who you are?

I know there are 2 services of VPN (free and paid). Normally, free VPNs need money from somewhere and sometimes they can sell your information to any agency that needs it. Now, if we are talking about ...
2
votes
3answers
3k views

TOR and sniffing data

If I'm not mistaken, TOR works opening a random anonymous path between two hosts using others computers that have TOR installed no? Then... everybody can sniff the data of the others no? Just wait ...
3
votes
2answers
534 views

Nmap through proxy

Using the following command: nmap --proxy socks4://*.*.*.*:25074 -sV -O --reason scanme.nmap.org I'm not sure if nmap is really using the proxy specified Had an idea of scanning "localhost" or "...
1
vote
1answer
51 views

How does Tor collect addresses of nodes?

My name is Alice and I would like to send a package to my beloved Bob. In order to avoid getting recognized by Bob I decide to send my message through several nodes. At each step, a node decrypts the ...
2
votes
2answers
209 views

How to test my anonymity?

let's assume that I've used proxies and anonymizing tools as much as I want. How to be sure that I'm totally anonymous? I'm not talking only about IP spoofing and identity hiding, but other and ...
-2
votes
0answers
38 views

How to get a secure iPhone [closed]

I have a friend overseas in a war zone, and would like to order an iPhone with this security built in. I understand that you do this, but am unclear how to: Get the iPhone to you. How to secure ...
93
votes
6answers
17k views

How much can I trust Tor?

How much can I depend on Tor for anonymity? Is it completely secure? My usage is limited to accessing Twitter and Wordpress. I am a political activist from India and I do not enjoy the freedom of ...
3
votes
1answer
117 views

Two-phase anonymization

EDIT: [N.B: I fully replaced the original question which was not a very good statement of the problem (see comments) with a more apt one.] I have records that contain - among other things - the ...
0
votes
1answer
51 views

Possibility for Multi-layer VPN or queries through TOR? [duplicate]

If a user is to fingerprint a server via SQL injection and doesn't want the server to be able to trace back. Is the only way to use a proxy/VPN? Can queries and requests be sent through TOR network? ...
17
votes
3answers
4k views

TOR cracked: How do you think the FBI did it? [closed]

I read in this article that the FBI was able to crack the anonymity of TOR. From what I heard and read , onion routing makes it almost impossible to de-anonymize a user. The last time I heard anyone ...
1
vote
0answers
41 views

Proxy help on Kali Linux [closed]

I've recently gotten into using tor and I understand that tor only handles tcp. What I was hoping was to route all of my network traffic from my local machine through what I, at the time, thought of ...
0
votes
4answers
157 views

Isolated safe anonymous OS

I wonder about a setup where I can have a primary OS on my Laptop, but keep a second OS that is safe, anonymous, persistent and isolated (for sensivite data that may communicate with the outside world)...
58
votes
11answers
10k views

How would two people with burner phones communicate?

According to Edward Snowden in this tweet... Phones used in real-world ops are disposed on a per-action, or per-call basis. Lifetimes of minutes, hours. Not days. Let's imagine for a moment that ...
-4
votes
1answer
82 views

Anonymity on a non-anonymous computer [closed]

Question: What steps should be done on a not anonymous PC with personal data to get as anonymous as possible ? Background Info: I use my laptop with Kali Linux for java coding and some C# on VM's....
3
votes
4answers
11k views

How to stay anonymous in public wireless network?

If we are accessing a public wifi network, does changing mac address at certain intervals of time keep us anonymous forever? Is there anything other than mac address to identify a user in an AP?
2
votes
1answer
39 views

Creating secure circuit in first generation Onion Routing

I'm reading paper on first generation Onion Routing from 1996. From paper: "To begin a session between an initiator and a responder, the initiator's proxy identifies a series of routing nodes ...
-1
votes
1answer
112 views

Proxy + TOR = anonymous?

I've been doing some research about how to stay anonymous on the net, and I was wondering what if you set up for instance your browser, to run through a proxy and then run through tor? Can I browse ...
4
votes
2answers
105 views

Exposing IP address via img tags

As we all know, many forums allow users to set profile pictures, post images, or put images in signatures. Could a user create an img tag that points to their own site with a link that no one would ...
2
votes
1answer
93 views

How anonymous is this setup?

I've been fiddling around lately about my security as I'd like to stay completely anonymous on the Internet because we all deserve privacy, and I hope this setup will at least make it hard to find out ...
-1
votes
2answers
58 views

Can I dis-identify myself if I use VPN on sites?

This is for irc site. but identification mechanism is what I need to know. On IRC (since it's the kinpin of tracking,identifying) if I use a different IP, can I still be identified if someone is ...
-5
votes
1answer
50 views
5
votes
1answer
121 views

Anonymity while “attacking” a target [closed]

I'm very interested to the security topic, but sometimes I fail in understanding how a hacker would be successful like for example a group that recently claimed they got data from FBI. I wonder ...
38
votes
2answers
8k views

Why hasn't anyone taken over Tor yet?

Tor is known to encrypt the transferred content and the meta information by layering the encryption. I know there have been correlation attacks that deanonymized some users by federal agencies. Why ...
0
votes
0answers
48 views

What is the difference between traffic co-relation attack and timing attack?(with relation to VPN or TOR)

Till what I have understood of timing attack is that I send 5Mb request and my VPN also sends a 5Mb request(the adversary present at both the ends i.e my ISP and VPN's end,hence the adversary finding ...