Tag Info

New answers tagged

0

What protects financial (or other sensitive transactions) that you make on the web is not a VPN or proxy, but HTTPS and TLS. These, used properly, secure the transmission of the data down the channel all the way from your web browser to the web server and back. Nobody in between, including your VPN provider should be able to access or modify this traffic. ...


0

You are absolutely correct there is no real way to know with certainty that the provider is not monitoring you. This could either be purposefully or due to an unnoticed compromise. A VPN service logging your traffic would not be able to necessarily break the encryption used for a web page. They can man in the middle your traffic, but unless they can exploit ...


2

If Nintendo did not botch things, then you won't succeed. The TLS protocol is meant precisely to prevent inspection and alteration from the outside. If you want to know more on TLS (also known as SSL), read this answer as a walk-through. There are mostly four ways through which you might hope to reverse-engineer the protocol: Try to make the Nintendo 3DS ...


3

Can you install a CA certificate on the 3DS? In that case, this might work: Install Owasp ZAP Install the Owasp ZAP CA certificate on the 3DS Configure the 3DS to use OWASP ZAP as its proxy Inspect traffic in OWASP ZAP If the device implements Pinning then this still won't work. In that case your project might be kinda doomed. If it turns out not to ...


0

Hi I've been a TOR user for three years now. What I like about this is that it uses a system wherein the information pitched from your computer is encrypted and passes from one node to another thereby making it hard for hackers to track all your activities. If you are a someone who fears of his safety or if you just want your administrator to not trace your ...


3

The security differences between an HTTP and HTTPS proxies varies depending on what you are routing through them: Clear text (ftp, telnet, HTTP): If the proxy is HTTP, the traffic is transmitted in clear text between your computer and the proxy, and clear text between the proxy and the final destination. If the proxy is HTTPS, the traffic is encrypted ...


1

Browse using a Virtual Machine with a default installation on it. If you use Windows 7, install Office, but not LibreOffice. The fonts installed with these packages can identify you. Windows + Office is more generic and less specific than Windows + LibreOffice. Javascript and CSS can be used to detect what fonts you have installed. When you have some ...


4

There are two general levels of anonymity: Good enough for hiding from other routine users of the internet. Good enough for hiding from government law enforcement and surveillance agencies. As you can imagine, the second level is much much harder to achieve; and usually unnecessary for law-abiding citizens in a democratic country without a security ...


1

The word "firewall" just describes some device or software to separate security zones. It is not a description of a specific technical implementation. Implementation range from simple packet filters like iptables at OSI layer 3..4 up to application level gateways at OSI layer 7. (Application) proxies instead refer to forwarding a protocol at the application ...


2

A normal firewall typically works on Layer 3 and 4 of OSI model, a proxy can work on Layer 7. Also another thing that a proxy does is: anonymise the requests. E.g.: A normal firewall can block based on destination / origin IP or TCP/UDP ports. A proxy can block based on protocol (https) and / or url (http://stackexchange.com)... Now most of the modern ...


3

I would recommend doing a little reading on the OSI model. It might help shed a little light on this, but I will give you a brief overview so this makes more sense. Remember that these concepts can blend together and a firewall could have all of these features. A traditional network firewall operates at layer 3 and layer 4 of the OSI model, which is IP ...


1

If their encryption is indeed secure, it would ensure that anyone who can eavesdrop on your connection between you and their server will not be able to find out what you are doing. This is a very big if because they don't provide any details on their FAQ about what algorithms they are using and how they use them. Their FAQ only mentions "our proprietary ...


-1

Logs is the most possible option. Since the server is in the DMZ, it would be rather easy. The AV will log the details of the triggered asset and the "ahost" machine thus proving that the proxy is doing what it is supposed to.


5

You can't really prove it, without going through proxy lo gs, antivirus logs etc., but you can certainly get confidence that it is by sending some test messages through with the EICAR signatures in it (see http://www.eicar.org/anti_virus_test_file.htm). You can then see whether it flags them.


3

Normally you are forced to use a corporate proxy. This is necessary for the company to protect against the internet. But a side effect is, that the internet usage of every proxy user can be monitored by the company. This is something nobody wants. Technical details aside: what you are trying to do is to actively circumvent security systems which are ...


2

You are refering to proxy chaining, and it is not supported by any major browser that I know off. You can use some sofware like SocksCap or Proxifier to intercep Firefox network calls, and divert them to your corporate proxy, and configure Firefox to access the network through the second proxy.


1

I'm a bit confused about your question, but it seems like a framework like BeEF might do what you are talking about. This is an interesting project that allows you to drop a hook into a site that contains an XSS vulnerability and then gives you a dashboard that displays who has loaded the page. From here you can target specific users with all types of ...



Top 50 recent answers are included