Questions tagged [anonymity]

The state of being anonymous. Meaning: not identified by name and not having outstanding, individual, or unusual features that enable identification.

46 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
10 votes
1 answer
4k views

Meterpreter (Metasploit) anonymous reverse connection over Tor2web

The general consensus seems to be that one sets up a listener on a server accessible by a public IP and some port forwarding. For anonymity this should be a throw-away server or a hacked box. I've ...
user avatar
4 votes
0 answers
143 views

How to calculate the posterior belief in bayes-optimal-privacy?

The paper "L-diversity: privacy beyond k-anonymity" (DOI: 10.1109/ICDE.2006.1) introduces the concept of bayes-optimal privacy and the idea of prior and posterior belief. A formula for ...
user avatar
  • 141
2 votes
0 answers
251 views

Does NTP compromise anonymity?

I read today for the first time about the NTP protocol, and realized I have a NTP daemon running on my system, with a socket syncing to some (assumed randomly selected) server. Does this at all have ...
user avatar
  • 299
1 vote
2 answers
391 views

Can Tor bridges really prevent ISPs from knowing the fact that you are using Tor?

Using Tor bridges for censorship circumvention routes your traffic to a bridge before an entry node. If the IP of the bridge is constant, isn't it abnormal that you are always connecting to the same ...
user avatar
1 vote
0 answers
94 views

How can someone using public wifi be deanonymized?

Say someone wants to send a document overseas while living in a hostile country. He uses tor over public wifi. What are some ways he can be tracked if he uses a burner laptop and public wifi? Few ways ...
user avatar
1 vote
0 answers
99 views

Nym Perfect Forward Secrecy

I recently heard about the Nym mixnet and am researching it and the Sphinx packet format. So far it looks promising, but there is one thing I'm unsure of. Networks like Tor use ephemeral keys to limit ...
user avatar
1 vote
0 answers
70 views

Is mutually private protocol negotiation possible?

Say I have two peers that wish to engage in a protocol with multiple sub-protocols. Naturally, it is necessary for them to negotiate which sub-protocol they should use. But what if the peers wish to ...
user avatar
1 vote
3 answers
170 views

Anonymized posting mechanism for members-only-post mailing lists

Suppose you are administering a mailing list where only members/subscribers can post; but you want those members to be able to occasionally post some content to the list anonymously. (*) Now, in an ...
user avatar
  • 429
1 vote
0 answers
238 views

How have you secured production data (PII) on non-prod environments?

Data protection laws including GDPR state: “Personal data shall be obtained only for one or more specified and lawful purposes, and shall not be further processed in any manner incompatible with that ...
user avatar
1 vote
0 answers
91 views

Anonymous (privacy-preserving) random walk

Quoting this paper - SmartWalk (https://dl.acm.org/doi/pdf/10.1145/2976749.2978319): For graph privacy, strong link privacy relies on deep perturbation to the original graph, indicating a large ...
user avatar
  • 153
1 vote
0 answers
106 views

Is anonymous remote attestation viable?

I'm currently reading about the TPM and remote attestation. Here's my current understanding of what is happening. To attest a PCR value to a remote party, the TPM signs the value with an attestation ...
user avatar
1 vote
0 answers
127 views

Does a mobile VPN provide anonymity when using apps?

When employing a system-wide VPN on a smartphone, I understand that all web traffic is routed through that VPN. Browsing to a webpage in incognito mode would provide some degree of anonymity, but I'm ...
user avatar
  • 713
1 vote
0 answers
131 views

What information for identification does a WiFi router get from a connecting device (Android)? What information can be spoofed?

When I want my device to connect to a WiFi router and make the router not recognize the device I have to change the MAC and the hostname. Is this right? And what information will also be usually ...
user avatar
1 vote
0 answers
87 views

How does the Mixminion communication model work?

I'm reading this paper and I have difficulty to understand the purpose of the division in two "legs" of a message path. I understand the first leg contains the path chosen by the sender and the ...
user avatar
  • 259
1 vote
0 answers
110 views

How to release a safe anonymous social network graph (raw data)?

There are multiple papers published by Arvind and Vitaly (De-anonymising social network) and other papers about de-anonymising social networks. In short, they used a network graph to deanonymise an ...
user avatar
1 vote
0 answers
55 views

MIX Network Message Length

In MIX network indirect re-encryption scheme how does the message length is maintained as in each step the message gets shorter is MIX network?
user avatar
  • 11
1 vote
0 answers
161 views

What information about a user can wireless carriers access?

What is the maximum amount of imformatiom about a user and the user's phone that can be obtained by a wireless carrier on a GSM network? Here is a list of the things I know, but are there more? IMEI, ...
user avatar
1 vote
0 answers
240 views

VPN Server Inside VPN client on Router

This is a different context of an already asked question: In a few words: Sub-VPN or VPN SubNetwork... VPNsception? So I am using DD-WRT flashed router which connects as a client to VPN server "...
user avatar
  • 11
1 vote
0 answers
403 views

Adobe Flash-based site's UI misbehaves when it's accessed through a VPN. Is it leaking my real ip address?

Here is a setup: A Linux/Windows VM at home (will call it "hidden VM" from now on) which is placed into an isolated environment (it's located in its own isolated virtual network, and the only way out ...
user avatar
  • 275
1 vote
0 answers
1k views

What are the best ways for an iOS 9 user to protect against device fingerprinting?

In response to this series of questions: What unique device fingerprinting information can an iOS9 app collect? and as an update to this question: What are the best practices for maintaining privacy ...
user avatar
  • 1,420
1 vote
0 answers
712 views

Is it possible to allow anonymous users to access part of an Azure website which uses Active Directory

I have a website hosted in Azure that uses Active Directory to prevent anyone from accessing it except for a few test users. Now I would like to expose a single page so that anyone can access it. I've ...
user avatar
1 vote
0 answers
229 views

Whonix Signature verification failure

I've downloaded Whonix images and I have successfully imported the signing key (https://www.whonix.org/wiki/Whonix_Signing_Key). I have also established trust for the said key and verified that by ...
user avatar
1 vote
0 answers
91 views

How to anonymize contributors while still keeping attribution?

Imagine a CMS with authentication where the author of each article has to be stored in the database. Now I want to make it harder to analyze (by crawling or stealing the database) who has written ...
user avatar
  • 631
0 votes
1 answer
44 views

Is a one-time, paper wallet Bitcoin transaction anonymous if you never link personal info? Can one begin with anonymity/end with anonymity too?

Say I buy bitcoins from someone with cash (no bank, name, trace, etc.) and have them send it to a paper wallet/offline address. Yeah, there's a "trace" but to WHAT/WHO? It's bought with cash,...
user avatar
0 votes
0 answers
105 views

How does the --os-shell parameter in Sqlmap work? Is it still anonymous over Tor?

How does the --os-shell parameter in Sqlmap work? I know its uploading a backdoor, but how is sqlmap uploading it and is the file just a normal reverse shell trojan? And is it still anonymous when ...
user avatar
0 votes
1 answer
58 views

Broadcast message anonymity and untraceability

The difference between anonymity and untraceability is clear for me in the context of e.g. voting (you have to identify your self but your vote can not be traced back to you guaranteeing ...
user avatar
0 votes
0 answers
89 views

Should you use encrypted DNS before connecting to a VPN?

The ISP would still see the IP address of the VPN you're connecting to, but it would not be in plaintext compared to normal DNS from what I understand. Should one even bother or just let it be as it ...
user avatar
0 votes
0 answers
50 views

Anonymity setup criticism

My current setup up is for pseudonymous communication on a smartphone. I need help to know if I am doing anything wrong. GrapheneOS all traffic over tor using (orbot) using Signal with anonymous ...
user avatar
0 votes
3 answers
127 views

Privacy - If I get a new IP from my ISP (home network), can websites infer the new IP is me?

Let's say I am a member of a website. I always sign in from computer A, which is not linked at all with computer B, and I have always signed in from my home network. Now let's say my ISP releases the ...
user avatar
0 votes
0 answers
164 views

How can one avoid being identified by facial recognition in a public setting?

Facial recognition is ubiquitous and methods like disguises, surgical masks and makeup are becoming ineffective owing to the improvement in algorithms. In light of these advances, what are some ...
user avatar
0 votes
0 answers
85 views

Can voice analysis be used to determine if voice samples converted in two different ways are from the same person?

Suppose we have two voice samples, A and B, which are converted from the same person's voice into different voices respectively by a voice changer. In addition, let us assume that the voice conversion ...
user avatar
0 votes
1 answer
276 views

Anonymous video uploading on an internet host

How much video uploading could be trackable for some person who uses the Tor Browser for uploading video on YouTube or other video hosting services with low authorization and sign-up processing, like ...
user avatar
0 votes
3 answers
567 views

What’s the point in using proxychains for an nmap scan when you could use Tor?

I always hear on YouTube and other places on the internet that Tor is the best option to stay anonymous. Tor is used by many activists, journalists etc. hiding from oppressive governments and so on. ...
user avatar
0 votes
1 answer
147 views

Could an OS or app store and send my old IP after I start using a VPN?

If I connect to a VPN, go to some websites, post something or browse something, is it possible for my OS (Windows 10) in this case to: Store my IP before I connected to the VPN, say "old IP"...
user avatar
0 votes
0 answers
205 views

Why does my IP being leaked with system-wide proxy through webTRC, but it doesn't happen when I use system-wide VPN

WebRTC manages to leak my IP when I use proxy, but when I use VPN it only shows VPN server's IP (both proxy and VPN were system-wide). What's the key difference? Google Chrome was used in both tests (...
user avatar
0 votes
0 answers
137 views

Tails anonymous filesharing

I performed some research on file sharing and anonymity, but it turns out anything I read is not about what I need. Most articles and forums recommend not to use services like Google Drive or Dropbox, ...
user avatar
  • 1
0 votes
0 answers
164 views

How do LEA and others track no log VPN users?

Other questions have been asked but not with the specific details that I have shown (no log VPN, no leaks, dynamic user agent and JavaScript disabled). Hypothetical situation Someone sends a ...
user avatar
0 votes
0 answers
277 views

How do hacking groups get a license anonymously for threat emulation software like Cobalt Strike?

I've seen that a lot of hacking groups replicate techniques and attacks from red teams using software like Cobalt Strike and Powershell frameworks for offensive security and red teaming like Nishang ...
user avatar
0 votes
0 answers
137 views

VPN client DNS setup for maximum anonymity

I am installing a pivpn, on my raspberry pi, at my home network and it asks me for the DNS provider for my VPN Clients. I am concerned about the privacy of the DNS. What can I do to ensure the maximum ...
user avatar
  • 151
0 votes
0 answers
228 views

What is the function of a Re-encryption mix network?

I'm studying "mix networks" and I'm reading the book "Anonymous Communication Networks" written by Kun Peng. In the beginning of chapter 2, section 2.2, it talks about the classification of Mix ...
user avatar
  • 259
0 votes
0 answers
805 views

Hashing Identifiers to Create Pseudonyms

I'm wanting to share datasets between two organisations in a pseudonymised way such that they link together via mutual entities (e.g. people) but so that the entities cannot be identified. E.g.: ...
user avatar
0 votes
0 answers
76 views

How can LPWA get implemented

I have been reading about computer security and at a point it mentioned Lucent Personalized Web Assistant (LPWA). Though I think I understood what it can offer, it doesn't say anywhere how/if a user ...
user avatar
  • 181
-1 votes
1 answer
672 views

How many proxy_len is good in proxychains?

How many chains are the best? chain_len = ? I read somewhere at tor browser, that more than 4 is not good so I guess it applies the same to proxychains? the default setting is chain_len = 2.
user avatar
  • 101
-1 votes
2 answers
98 views

Considerations for a Web Based Secure Questionnaire System

I am about the start working with my degree project, which is related to Secure Questionnaires. I am currently doing research about how to develop a web based system which requires the users to login ...
user avatar
-2 votes
1 answer
384 views

How safe is it to use tor on a monitored network?

So in a shape this question has been asked but mine is more specific. If It is a work network that blocks a huge number of websites and services, you can use tor to circumvent the blocks but can the ...
user avatar
-5 votes
0 answers
122 views

How can Tor be modified to circumvent traffic correlation attacks for voting and web browsing?

I have two sets of data that I plan to send in multiple cron jobs in which the anonymization use case for Tor is otherwise defeated by traffic correlation ("timestamp-matching" to be ...
user avatar