Silk Road forums
Discussion => Security => Topic started by: d0z3r on January 28, 2013, 05:58 am
-
I have the most recent version of Liberte. I had assumed for a while that this had TOR set up optimally and what not. I am not so sure that is the case anymore. Granted I don't know a whole lot about on line anonymity, but when i tested using this site **clearnet** http://ip-check.info/?lang=en **clearnet** I get some pretty alarming results. So I guess my question is, what modifications are you guys making to liberte's browser to make yourself more anonymous? Thanks,
D0z3r
-
Yes, when browsing onion sites on the Tor network.
-
Is there a .onion site that does a test like that?
-
Is there a .onion site that does a test like that?
You do realize that by using Tor, your given a fake I.P address to browse the Tor network anonymously. .
Tor implements a form of onion routing to, basically, push encrypted data through multiple Tor nodes (servers), before it reaches the final destination (e.g. a website). The result is that neither the website owner, nor a local eavesdropper, nor any single Tor server knows who requested that specific website, hence you are communicating anonymously.
The biggest problem with many applications is that they leak DNS requests. That is, although they use Tor to anonymize the traffic, they first send a DNS request untorified in order to get the IP address of the target system. Then they communicate "anonymously" with that target. The problem: any eavesdropper with more than three brain cells can conclude what website you visited, if they see that you send a DNS request for rsf.org, followed by some "anonymous" Tor traffic.
If you use the Tor Browser Bundle (TBB), download the version appropriate to what operating system you're using. It comes pre-configured ready to browse the net anonymously using a fake I.P address, not the one given to you by your I.S.P. :)
-
Sorry if I am asking stupid questions, like I said I dont know much about the subject. Yes, I realize what TOR does in regards to giving me a fake ip, the part I am confused about is the things like DNS leaks or other weaknesses in the system. Is there a way to install the tor bundle into Liberte? I was under the impression that using the tor bundle on your normal pc will leave traces of the sites you have been visiting. Is this true? I may be way off but I thought that was why people loaded from usb. Again sorry for the stupid questions.
-
You don't need the Tor Browser Bundle in Liberté Linux. To make the browser in Liberté safe, all you've gotta do is turn off JavaScript. All connections are forced through Privoxy, a local proxy which ensures all traffic is directed through Tor.
Also, there aren't any DNS leaks from Liberté anymore (at least not known), it was an issue in an older version, with a different browser called Midori (current browser is Epiphany). Besides, when visiting onion site, DNS leaks are not an issue, because DNS isn't used.
-
Is there a way to install the tor bundle into Liberte?
It's portable. You can extract the archive anywhere, including Liberte's persistent volume.
I was under the impression that using the tor bundle on your normal pc will leave traces of the sites you have been visiting. Is this true?
Only if you save bookmarks or passwords. Those will be written to files on the disk. Otherwise, it doesn't write to a cache on a disk during normal browsing. That would be a huge privacy leak. All browsing data is stored in RAM and discarded when TBB shuts down.
-
thanks for the replies fellas!!!!!!! So do you guys just load up using Liberte and not worry about having common browser settings?
-
thanks for the replies fellas!!!!!!! So do you guys just load up using Liberte and not worry about having common browser settings?
Yep. I mostly worry about java exploits on windows somehow compromising TBB. But not with Liberte.