tritium

Check out the "Steganos Internet Anonym" program. Its pretty sweet. It's using a list of public anon proxies and is moving between them every few seconds. Kinda neat.

__________________
Blah.

The_Dude

sry to burst your bubble, but it http://www.ip-to-location.com/ knows of some way to trace you thru proxy

__________________
"Luck is what happens when preparation meets opportunity." - Darrel K Royal

tritium

Dammit. How in the hell are they managing that?

__________________
Blah.

The_Dude

i dont know man...i dont know......

we discussed this in #tfp and nobody could come up with something definate.

it could be that the proxies being used are not secure.

another thing i heard was the proxy somehow send your ip in some kinda header.

__________________
"Luck is what happens when preparation meets opportunity." - Darrel K Royal

tritium

Maybe having to do with a secure connection *to* ip-to-location.com's server? GRC.com has the shield's up test that does the same thing, only you must accept their cert in order for it to work. Maybe if you blocked the ip2location certs?

__________________
Blah.

tritium

Oh hell. I'm just gonna buy a DC power inverter for my truck and an Orinoco card then be done with it. Any downloading can then be done in a parking lot of my chosing.

Bah humbug on web scripts that burst my bubbles.

__________________
Blah.

shakran

heh. they can trace that too. Some dude got busted wardriving for kiddie porn the other day. I think the article was on Fark.

gigawatz

I'd love to see that, but I can't seem to find it on fark.

hu-man

He only got busted because he was driving around without pants at 5mph, watching kiddie porn movies on his laptop... not because he was traced.

Banginblaz

He only got pulled over, because he was driving the wrong way down a one way street. They assume he was tring to get a stronger signal....

The_Dude

here is the story posted on the tfp.

http://www.tfproject.org/tfp/showthr...ardriving+porn

__________________
"Luck is what happens when preparation meets opportunity." - Darrel K Royal

sailor

Yeah, he didnt get busted by being traced, he got busted for being a perverted dumbass, driving the wrong way down a one way street with no pants and a laptop in one hand.

__________________
"Good people do not need laws to tell them to act responsibly, while bad people will find a way around the laws."
--Plato

genstylez

That's sad, that you have to look at 10 year old's performing such acts. I can't see how that is more entertaining than a regular adult... whatev.


whatev~

__________________
Everything in it's right place...

seretogis

IP2Location sucks :P Take a look at the correct listing for my ISP, and then the completely different (and wrong) city/state that they say I live in:

__________________
seretogis - sieg heil
perfect little dream the kind that hurts the most, forgot how it feels well almost
no one to blame always the same, open my eyes wake up in flames

Pragma

Ok, if a proxy is configured right, the way it's set up is like this:

you <-Link A-> proxy <-Link B-> server

Any traffic sniffed on Link A will show two IP addresses - yours and the proxy's. That's all the conversation there is - nothing between you and the server. Any conversation on Link B, unless the page itself somehow asks your computer for its IP address, will only show the proxy's IP and the server's IP.

Not sure exactly how "ip-to-location.com" works, but I went there with www.anonymizer.com and it didn't pick me up at all. Personally, I think either the proxy you were using wasn't all it was cracked up to be, or else something weird happened.

__________________
Eat antimatter, Posleen-boy!

tritium

Pragma, what browser and OS were you using? I'm setting up an apache server with an IP grabbing script to experiment with the incoming packets to see if I can determine how ip2location.com was pulling that off.

Are you using any script blocking? How about cookies?

I am going to solve this mystery. There are a lot of people using Steganos and similar arrangements that need an answer to this problem.

__________________
Blah.

hilbert25

If it's working with certs, chances are your proxies aren't ssl proxies (and chances are you don't want them to be), meaning they just forward your ssl packets straight through, ssl request is unchanged with your ip address, etc.
Off the top of my head I don't know the ssl spec, but I do think it can provide both client and server authentication meaning that they can figure out who you say you are and your ip from the transactions.
SSL proxy would require breaking your SSL connection, connecting to you and then enabling it's own connection with the server. This would allow them to anonymize you over SSL, but also allow them to read all the traffic sent over. Not a good thing if your sending credit card info.
I'm pretty sure Anonymizer works because it simply browses the site you saw, and redisplays what it sees on your browser, fully breaking the connection to you and the server.

Edit- WHen I go there, I can't find where it identifies my ip address, all it does is identify me as being from Japan (where my current proxy resides).