New answers tagged

2

There isn't any real magic here. The thought is that it is non-trivial to trace a message to it's physical location. It generally involves support by the ISP and is strongly regulated by the prevailing laws. So, while it is possible to trace messages, it requires some effort. If I use an intermediate relay, the thought is that anyone tracing packets to my ...


1

While this is a good idea in theory it can not work practically. The TCP protocol uses a three-way-handshake, and so when you spoof the origin IP in a packet the packet with the SYN flag (First packet) will be sent but when the destination machine tries to establish a connection by sending an SYN-ACK packet back to that spoofed IP, the connection will fall ...


0

Let's assume you just ask out of curiosity and we are not helping you committing a crime. So why would you want to modify the TCP Header and redirect packets to another host? I am not sure if that could work at all but if you had a compromised computer, why don't you do whatever you have in mind from there? Also if the compromised computer is offline it ...


2

Using the same private key across separate domains is basically secure. If you authenticate to a system, you don't give away you private key, and that system cannot impersonate you. So you can use your key across work and personal systems, and a work system cannot then access your personal systems. However, there are often reasons to use different keys. For ...


5

The problem with this approach is that the same identity is used by every destination, so sites can swap notes to see where you've been and draw correlations that you may not want to expose. There are several ways to solve this issue, such as the one used in the FIDO U2F security key. In this case, the device contains a symmetric key (not an asymmetric key ...


1

None of these answers are actually answering the question, and nobody is mentioning the power behind meta data. Let's go into detail as to how this can be done. How can you be caught using Private VPN when there's no logs about who you are? Generally speaking, there are logs about who you are, even if your VPN provider isn't logging anything about ...


1

TL;DR: proxy support is limited right now but there are also theoretical limits of what you could do when using a proxy. nmap can do only CONNECT and SOCKS4 and these protocols can do only TCP. Apart from that using any kind of proxy means that nmap communicates with the IP stack of the proxy and not of the target. This means: ICMP ping can not be done ...


3

Your Tor software comes with a list of predefined directory authorities. These authorities maintain signed lists of relays from which your client can choose to build the connection. A new relay publishes a server descriptor to the authorities to advertise itself. Since not every Tor client acts as a relay, the number is smaller than you might assume and you ...


3

For now, use an external tool like proxychains. The nmap documentation for --proxies states, that the feature is not fully implemented yet: Warning: this feature is still under development and has limitations. It is implemented within the nsock library and thus has no effect on the ping, port scanning and OS discovery phases of a scan. Only NSE ...


0

One of the major reasons I've heard about, and from my own government no less as a warning (when facebook was new) is none other than preventing crime from being committed to you in the first place. Lets spin things around, government surveillance is bad, sure but government being able to watch you means that anybody else with a relatively simple set of tech ...


4

I'm going to answer just one aspect of this problem: browser identification. Your browser is a great source to identify you. You can test and see how unique your browser is using EFF anopticlick. I just did that test, and while my browser is pretty good at fighting off trackers, it can be uniquely identified: your browser has a unique fingerprint Your ...


3

There were several facts which can be used for testing anonymity. In general you could check it out by the following Set two email accounts send the email to another account ,verify the ip address. Your Browser might reveal some sensitive info,check it out here Use network analysis tools like wireshark and you could analyze the packets for anonymity If ...


0

To restate: your system has users with assigned IDs. You receive periodic location data associated with these user IDs in real time. You also have one (or more) clients who want to analyze your user locations. Each client needs to receive randomized tokens that each map to a user ID, and the tokens can refer to a specific ID for a period of no more than ...



Top 50 recent answers are included