Tag Info

New answers tagged

0

If you are using firefox, you can goto proxy settings and in text box at the bottom, enter the hosts that you do not want proxied.


0

https://check.torproject.org/ Make sure you have setup your browser to use the proxy, you can use something like foxy proxy to be able to switch between TOR and normal browsing quickly.


3

Fiddler would be the right choice for a client-based proxy implementation I guess, and it can be used as a stand-alone application or embarked in your application code (the user browser in your case). However, if you want to do this as a protection measure, you should consider this as weak as a javascript control. Everything running on client-side can be ...


0

Very few small companies host their websites on their own premise. Most will use webhosters with datacenters hosting between a few thousand and a few million websites. When you try to trace the IP address of a website, you will likely find the location that webhoster. When two IPs lead to the same location according to a GeoIP service, then these two IPs ...


1

For transparent web proxies and with static tracking alone (say, your web server's access logs), you can't. The request was made to your web server from the proxy server itself, so unless it's a non-transparent proxy that attaches to web requests forwarding information, such as e.g. X-Forwarded-For HTTP header field revealing the original request's IP ...


1

Use traceroute: traceroute <ipaddress> on linux. ex: john@john-ubuntu:~$ traceroute google.com traceroute to google.com (173.194.46.101), 30 hops max, 60 byte packets 1 ... 2 ... 3 ... 4 ... 5 ... 6 ... 7 ... 8 74.125.49.37 (74.125.49.37) 18.659 ms 205.213.119.62 (205.213.119.62) 18.648 ms 18.605 ms 9 209.85.254.128 ...


0

If your own company is an enemy then you have a problem. Or possibly you are the problem. Normally, you connect your machine on the company's network based on a contractual agreement which makes you the employee, and defines your rights and duties. In particular, many companies do not allow employees to plug their own hardware on the company network; or ...


0

If you have full control over your computer it should be easy to detect SSL interception, because the browser will complain about unknown issuer if you access https-Sites. At least if the firewall administrators did not get an intermediate CA from a trusted CA (see https://lwn.net/Articles/480279/). And even these you will be able to spot if you use Google ...


9

You are correct. Some ways for the site to decrease that attack vector would be to... Use an HSTS header to prevent any data from being sent to the site in plaintext. Advertise only the HTTPS URL and do not allow any plaintext connections. This will ensure most bookmarks use encryption. The point being that sites should force SSL from the beginning, ...


3

Yes. The attacker could simply serve you http://www.facebook.com/ and hijack all the requests and responses to and from your computer. In that scenario, you are correct: it would be up to the user to be vigilant and realize that they are not browsing securely.


0

Web-Proxy Um, trying to look into my crystal ball here. Web proxies in general cannot cache SSL connection content, must pass the traffic through unaltered, and cannot view the content as it passes through. Is this bad for the following reasons? High traffic on your site because of lack of caching (may be able to alleviate with tuning cache settings, ...


1

Current browsers support SNI (server name indication), which sends the name of the target host inside the initial client hello. Thus it is possible to have different https servers on the same IP and current http servers support this. There are still problems with non-browsers (tools and SSL libraries or SSL interfaces in various languages). Some do use SNI ...


2

From the question i am able to understand that request are blocked on the basis on IP.So actually proxy server checks whether the request comes from which IP and then act accordingly .So the solution is if u have control on Computer B then u can set one more proxy server on Computer B and set the Proxy address in Computer A of Computer B or either copy MAC ...


0

In addition to the other answers already posted: deep packet inspection is expensive and require hardware that is capable of reading every bit and making decisions based on those bits without slowing down the entire network (because they sit between the ISP's customers and the rest of the Internet). Repressive countries have the issue of lacking the ...


1

ISPs handle large volumes of traffic so there is a limit to the amount of analysis that can be done. All the legally required filters I'm aware of are domain blacklists. The ISP blocks all access to those domains, and does not generally look any deeper into your traffic. This is why sites like "pirateproxy.se" can trivially bypass the blacklist (at least, ...


0

If all the Internet resources are requested through the ISP, then why can't they detect a disallowed website being requested via a proxy site? The only way to make sure that the ISP really can't detect what is being requested is by using encryption. You need either an encrypted connection to the other endpoint, or at least to the proxy. Everything else ...


3

Browser plugins are your greatest threat, particularly Flash and Java, they can be used to run code which will bypass proxy settings. A website such as this can show you how anonymous you at the moment. http://ip-check.info/?lang=en Simple proxy servers are not particularly good at hiding users. I suggest you do further reading on the topic and investigate ...



Top 50 recent answers are included