New answers tagged

2

As a client device, simply turn off the "Automatically detect proxy settings" feature in Internet Options. This prevents the browser from trying to look up a location for the wpad.dat or proxy PAC script. If you want to protect poorly configured devices on your network, set a DNS entry for WPAD and blackhole the traffic.


1

It depends. Facebook analyzes the locations from which you use to login from. Depending on where your new IP is located, Facebook may, or may not, give you access to your account. In the case Facebook finds the new location suspicious, it will use another mean to validate your identity. (E.g. an email to validate your attempt.) Once you validate that new ...


2

As far as I'm aware, Facebook don't actually block the new attempts from different IPs. Instead, they send an email to the registered email address with a notification that you logged into a new device, with a button to mark this as legitimate or malicious. The tracking appears to work not only via your IP, but also a long-term identification cookie and ...


0

So, what prevents ISP from seeing IP address of the first relay I'm connected to? Nothing. This is the whole point of Tor: this is part of the security model and it doesn't matter that your ISP can see you talking to a Tor node. Similarly, what prevents other ISPs of each Tor relay nodes/chain of proxies to see where they route traffic to and from, ...


1

You can run a local machine as the web proxy and point all others to use that for all http traffic. Squid is one option. Another option is to setup one machine to be the DNS server, e.g, using bind. You can then collect all the DNS logs. You can set up your router to give this local DNS machine as the primary DNS server via DHCP. Another way (albeit the ...


0

It's simple =) In no-proxy case you're tracing all the redirects yourself, so it's no problem to handle it. A proxy can be tricky as the proxy itself(not Tor case, but there are programs that behave a bit weird), so the proxy component for your language can be. Especially it happens frequently with HTTP and HTTPS proxies. Use a tcpdump - it will show you the ...


0

how does it differentiate the a normal request from a request through a proxy? Proxy detection is usually based on IP addresses. That is particularly easy for Tor, because the IPs of relay nodes are public. From Instagram's perspective it makes sense to block proxies as a mean to enforce rate limis for their API endpoints. Besides that, there is no ...


1

TL;DR: proxy support is limited right now but there are also theoretical limits of what you could do when using a proxy. nmap can do only CONNECT and SOCKS4 and these protocols can do only TCP. Apart from that using any kind of proxy means that nmap communicates with the IP stack of the proxy and not of the target. This means: ICMP ping can not be done ...


3

For now, use an external tool like proxychains. The nmap documentation for --proxies states, that the feature is not fully implemented yet: Warning: this feature is still under development and has limitations. It is implemented within the nsock library and thus has no effect on the ping, port scanning and OS discovery phases of a scan. Only NSE ...


5

Absolutely; they can see every packet going across their network, and analyse and block it as required. They should draw up a detailed acceptable use policy if they're going to make you use your own machine for work. Check if there is one. If they haven't told you not to tunnel personal traffic back home then they can't really complain if you do it!


4

I'm going to answer just one aspect of this problem: browser identification. Your browser is a great source to identify you. You can test and see how unique your browser is using EFF anopticlick. I just did that test, and while my browser is pretty good at fighting off trackers, it can be uniquely identified: your browser has a unique fingerprint Your ...


3

There were several facts which can be used for testing anonymity. In general you could check it out by the following Set two email accounts send the email to another account ,verify the ip address. Your Browser might reveal some sensitive info,check it out here Use network analysis tools like wireshark and you could analyze the packets for anonymity If ...


2

Due to the security built into TLS this can not be done by changing the existing TLS handshake in the proxy. Instead a TLS connection between the target server and the proxy and another TLS connection between the proxy and the client must be created. The latter connection cannot get the original certificate from the server, but the proxy must create a new ...



Top 50 recent answers are included