Bitcoin Forum>Other>Off-topic
Author

Topic: TOR users be aware, Flash and Javascript reveals IP address. (Read 16151 times)

Tuxavant
hero member
Activity: 784
Merit: 1010
Bitcoin Mayor of Las Vegas
TOR users be aware, Flash and Javascript reveals IP address.
May 01, 2012, 10:30:07 AM
#15
Quote from: ?? on ??
But it really sucks when anonymity is sometimes needed. Talking about some politics where I live can get you 15 years in jail.

WAY too many laws to break now aday... Tell someone is a jerk from with Arizona Internet connection and you go to jail. WTF. There is no such thing as a "law abiding citizen" any longer.
Tuxavant
hero member
Activity: 784
Merit: 1010
Bitcoin Mayor of Las Vegas
Re: TOR users be aware, Flash and Javascript reveals IP address.
May 01, 2012, 09:18:55 AM
#14
I don't like disclosing TTPs, but if you put more than a few brain cells on this problem, it's pretty easy to mitigate it.
a nice guy
newbie
Activity: 27
Merit: 0
Re: TOR users be aware, Flash and Javascript reveals IP address.
May 01, 2012, 03:49:52 AM
#13
Quote from: Xenland on April 28, 2012, 09:15:22 PM
Every poster above or below this post should be considered a terrorist

Is this a bad or a good thing? Cheesy
Xenland
legendary
Activity: 980
Merit: 1003
I'm not just any shaman, I'm a Sha256man
Re: TOR users be aware, Flash and Javascript reveals IP address.
April 28, 2012, 09:15:22 PM
#12
Every poster above or below this post should be considered a terrorist
I didn't know this, thanks for the post OP.

Red Emerald
hero member
Activity: 742
Merit: 500
Re: TOR users be aware, Flash and Javascript reveals IP address.
April 26, 2012, 12:57:53 PM
#11
Quote from: cryptoanarchist on April 26, 2012, 10:55:22 AM
Wow...if you didn't know this before doing something illegal on the internet, maybe crime isn't your thing.
Tor and illegal actions do not at all have to be connected.  There are plenty of legitimate reasons for usage of Tor.

I don't like when people automatically assume anonymity is only needed for illegal purposes.  I don't want to live in that world.
cryptoanarchist
legendary
Activity: 1120
Merit: 1003
Re: TOR users be aware, Flash and Javascript reveals IP address.
April 26, 2012, 10:55:22 AM
#10
Wow...if you didn't know this before doing something illegal on the internet, maybe crime isn't your thing.
Red Emerald
hero member
Activity: 742
Merit: 500
Re: TOR users be aware, Flash and Javascript reveals IP address.
April 25, 2012, 03:25:50 PM
#9
Quote from: a nice guy on April 25, 2012, 01:50:06 PM
Hello,

just setup a vm or real hardware working as a proxy to route all the traffic from eth0(internal network) to eth1(external network).
eth1 routes then all traffic through tor.
Now setup a 2nd vm which has only one port directly connected to eth0 on the proxy.
ALL traffic is now routed through tor and immune to those attacks.

I think there is a tutorial on the torwiki too.

kind regards,
a nice guy
https://trac.torproject.org/projects/tor/wiki/doc/TorBOX
theymos
administrator
Activity: 5222
Merit: 13032
Re: TOR users be aware, Flash and Javascript reveals IP address.
April 25, 2012, 02:14:55 PM
#8
You can't do it with just JavaScript, which is why torbutton allows JavaScript. You need a plugin like Flash.
a nice guy
newbie
Activity: 27
Merit: 0
Re: TOR users be aware, Flash and Javascript reveals IP address.
April 25, 2012, 01:50:06 PM
#7
Hello,

just setup a vm or real hardware working as a proxy to route all the traffic from eth0(internal network) to eth1(external network).
eth1 routes then all traffic through tor.
Now setup a 2nd vm which has only one port directly connected to eth0 on the proxy.
ALL traffic is now routed through tor and immune to those attacks.

I think there is a tutorial on the torwiki too.

kind regards,
a nice guy
Red Emerald
hero member
Activity: 742
Merit: 500
Re: TOR users be aware, Flash and Javascript reveals IP address.
April 25, 2012, 01:14:52 PM
#6
Quote from: Serith on April 25, 2012, 01:07:18 PM
Quote from: mila on April 25, 2012, 12:32:42 PM
no kidding, Sherlock?

I mean, thank you for rising awareness but it's really well known or at least documented and the bundled browser has the settings right by default.

Any link on this forum that I missed?
Well there are warnings on the actual tor download page.

https://www.torproject.org/download/download-easy.html.en#warning
Serith
sr. member
Activity: 269
Merit: 250
Re: TOR users be aware, Flash and Javascript reveals IP address.
April 25, 2012, 01:07:18 PM
#5
Quote from: mila on April 25, 2012, 12:32:42 PM
no kidding, Sherlock?

I mean, thank you for rising awareness but it's really well known or at least documented and the bundled browser has the settings right by default.

Any link on this forum that I missed?
Red Emerald
hero member
Activity: 742
Merit: 500
Re: TOR users be aware, Flash and Javascript reveals IP address.
April 25, 2012, 12:35:56 PM
#4
Also, http://panopticlick.eff.org/ is a much more informative page than your link.
mila
sr. member
Activity: 462
Merit: 250
Re: TOR users be aware, Flash and Javascript reveals IP address.
April 25, 2012, 12:32:42 PM
#3
no kidding, Sherlock?

I mean, thank you for rising awareness but it's really well known or at least documented and the bundled browser has the settings right by default.
Red Emerald
hero member
Activity: 742
Merit: 500
Re: TOR users be aware, Flash and Javascript reveals IP address.
April 25, 2012, 12:23:07 PM
#2
Good information, but not new news at all.  This is why the Tor Browser Bundle and Tails have javascript and flash disabled by default.
Serith
sr. member
Activity: 269
Merit: 250
Re: TOR users be aware, Flash and Javascript reveals IP address.
April 25, 2012, 12:20:13 PM
#1
Quote from: http://dl.packetstormsecurity.net/0610-advisories/Practical_Onion_Hacking.pdf
The following sequence of events occurs when somebody is unmasked:

  • VictimHost connects through MyTorNode, to SomeWebSite
  • MyTorNode changes outbound traffic to SomeWebSite so that HTTP1.0 and gzip compression are not used (HTTO headers are stripped / changed)
  • MyTorNode replaces inbound traffic from SomeWebSite, inserting and