Serious Anonymous surfing
 

Check out the "Steganos Internet Anonym" program. Its pretty sweet. It's using a list of public anon proxies and is moving between them every few seconds. Kinda neat.

sry to burst your bubble, but it http://www.ip-to-location.com/ knows of some way to trace you thru proxy :(

Dammit. How in the hell are they managing that?

i dont know man...i dont know......

we discussed this in #tfp and nobody could come up with something definate.

it could be that the proxies being used are not secure.

another thing i heard was the proxy somehow send your ip in some kinda header.

Maybe having to do with a secure connection *to* ip-to-location.com's server? GRC.com has the shield's up test that does the same thing, only you must accept their cert in order for it to work. Maybe if you blocked the ip2location certs?

Oh hell. I'm just gonna buy a DC power inverter for my truck and an Orinoco card then be done with it. Any downloading can then be done in a parking lot of my chosing.

Bah humbug on web scripts that burst my bubbles.

heh. they can trace that too. Some dude got busted wardriving for kiddie porn the other day. I think the article was on Fark.

I'd love to see that, but I can't seem to find it on fark.

He only got busted because he was driving around without pants at 5mph, watching kiddie porn movies on his laptop... not because he was traced.

He only got pulled over, because he was driving the wrong way down a one way street. They assume he was tring to get a stronger signal....

here is the story posted on the tfp.

http://www.tfproject.org/tfp/showthr...ardriving+porn

Yeah, he didnt get busted by being traced, he got busted for being a perverted dumbass, driving the wrong way down a one way street with no pants and a laptop in one hand.

That's sad, that you have to look at 10 year old's performing such acts. I can't see how that is more entertaining than a regular adult... whatev.


whatev~

IP2Location sucks :P Take a look at the correct listing for my ISP, and then the completely different (and wrong) city/state that they say I live in:

Ok, if a proxy is configured right, the way it's set up is like this:

you <-Link A-> proxy <-Link B-> server

Any traffic sniffed on Link A will show two IP addresses - yours and the proxy's. That's all the conversation there is - nothing between you and the server. Any conversation on Link B, unless the page itself somehow asks your computer for its IP address, will only show the proxy's IP and the server's IP.

Not sure exactly how "ip-to-location.com" works, but I went there with www.anonymizer.com and it didn't pick me up at all. Personally, I think either the proxy you were using wasn't all it was cracked up to be, or else something weird happened.

Pragma, what browser and OS were you using? I'm setting up an apache server with an IP grabbing script to experiment with the incoming packets to see if I can determine how ip2location.com was pulling that off.

Are you using any script blocking? How about cookies?

I am going to solve this mystery. There are a lot of people using Steganos and similar arrangements that need an answer to this problem.

If it's working with certs, chances are your proxies aren't ssl proxies (and chances are you don't want them to be), meaning they just forward your ssl packets straight through, ssl request is unchanged with your ip address, etc.
Off the top of my head I don't know the ssl spec, but I do think it can provide both client and server authentication meaning that they can figure out who you say you are and your ip from the transactions.
SSL proxy would require breaking your SSL connection, connecting to you and then enabling it's own connection with the server. This would allow them to anonymize you over SSL, but also allow them to read all the traffic sent over. Not a good thing if your sending credit card info.
I'm pretty sure Anonymizer works because it simply browses the site you saw, and redisplays what it sees on your browser, fully breaking the connection to you and the server.

Edit- WHen I go there, I can't find where it identifies my ip address, all it does is identify me as being from Japan (where my current proxy resides).