Tag Info

New answers tagged

1

Browse using a Virtual Machine with a default installation on it. If you use Windows 7, install Office, but not LibreOffice. The fonts installed with these packages can identify you. Windows + Office is more generic and less specific than Windows + LibreOffice. Javascript and CSS can be used to detect what fonts you have installed. When you have some ...


4

There are two general levels of anonymity: Good enough for hiding from other routine users of the internet. Good enough for hiding from government law enforcement and surveillance agencies. As you can imagine, the second level is much much harder to achieve; and usually unnecessary for law-abiding citizens in a democratic country without a security ...


1

The word "firewall" just describes some device or software to separate security zones. It is not a description of a specific technical implementation. Implementation range from simple packet filters like iptables at OSI layer 3..4 up to application level gateways at OSI layer 7. (Application) proxies instead refer to forwarding a protocol at the application ...


2

A normal firewall typically works on Layer 3 and 4 of OSI model, a proxy can work on Layer 7. Also another thing that a proxy does is: anonymise the requests. E.g.: A normal firewall can block based on destination / origin IP or TCP/UDP ports. A proxy can block based on protocol (https) and / or url (http://stackexchange.com)... Now most of the modern ...


3

I would recommend doing a little reading on the OSI model. It might help shed a little light on this, but I will give you a brief overview so this makes more sense. Remember that these concepts can blend together and a firewall could have all of these features. A traditional network firewall operates at layer 3 and layer 4 of the OSI model, which is IP ...


1

If their encryption is indeed secure, it would ensure that anyone who can eavesdrop on your connection between you and their server will not be able to find out what you are doing. This is a very big if because they don't provide any details on their FAQ about what algorithms they are using and how they use them. Their FAQ only mentions "our proprietary ...


0

Logs is the most possible option. Since the server is in the DMZ, it would be rather easy. The AV will log the details of the triggered asset and the "ahost" machine thus proving that the proxy is doing what it is supposed to.


5

You can't really prove it, without going through proxy lo gs, antivirus logs etc., but you can certainly get confidence that it is by sending some test messages through with the EICAR signatures in it (see http://www.eicar.org/anti_virus_test_file.htm). You can then see whether it flags them.


3

Normally you are forced to use a corporate proxy. This is necessary for the company to protect against the internet. But a side effect is, that the internet usage of every proxy user can be monitored by the company. This is something nobody wants. Technical details aside: what you are trying to do is to actively circumvent security systems which are ...


2

You are refering to proxy chaining, and it is not supported by any major browser that I know off. You can use some sofware like SocksCap or Proxifier to intercep Firefox network calls, and divert them to your corporate proxy, and configure Firefox to access the network through the second proxy.


1

I'm a bit confused about your question, but it seems like a framework like BeEF might do what you are talking about. This is an interesting project that allows you to drop a hook into a site that contains an XSS vulnerability and then gives you a dashboard that displays who has loaded the page. From here you can target specific users with all types of ...



Top 50 recent answers are included