drawbacks of using TOR

[independentdirect]

Hello everyone,

New member here. I would like to know the drawbacks of using TOR for online browsing and posting.

Not planning any illegal activity, but would like to keep my identity safe. Maximize anonymity, prevent competitors from tracking me down using software, etc.

 

[tualingong]

no good lah can be hijacked suddenly your backside will be exposed.

vpn is better.

 

[Ralders]

I think no good as well.better use Mivec2.0 or VVtec 2.0 much safer.
cover all your track .you wanna do what here.sell your backside?
Tony may want it if you sell it cheap.
cheers

 

[independentdirect]

no good lah can be hijacked suddenly your backside will be exposed.

vpn is better.

Elaborate. What can be hijacked and how? Why is VPN better?

 

[gsfosnis]

Hi, welcome to SammyBoy.com

Follow this thread @

http://sammyboy.com/showthread.php?117634-How-to-stay-anonymous-Written-by-iPar

 

[Maxima]

Do read their FAQ. If u have cash to spare then get strong VPN.

https://www.torproject.org/download/download-easy.html

https://www.torproject.org/

 

[independentdirect]

Thank you, gfsnosis and maxima. Appreciated.

I've read all the links, was just confused by SOCKS and HTTP proxy but i guess its irrelevant. I've decided to use a combination of vpn and TOR. Just wanted to know the drawbacks of TOR, any security loopholes i should be aware of, as the TOR website only gives advice on tips on safe browsing but doesn't go into detail what TOR cannot do.

 

[independentdirect]

currently experimenting using vpn alone, and using vpn plus tor at the same time, with tor bundle running off a thumb-drive. the combination is definitely slower due to the tor network routing. when i log into the vpn website, it says "anonymous proxy". Without TOR, the vpn websites states my IP address as one of the vpn servers.

 

[LeMans2011]

hahaha with Tor can watch nice porno... who cares about the rest

 

[Dinosaur]

vpn is better.

Totally incorrect.

Be they free or paid, VPN services are NOT completely anonymous.

In a world in which there are so many terrorist threats - real or imagined - governments have the right of access to logs kept by VPN service providers. On paper, VPN service providers always claim to NOT keep logs; however in practice they are required by law to do so. Just a few years ago Sweden required all local VPN service providers to keep logs. Romania who many people thought was the last frontier recently ordered its VPN service providers to keep logs as well.

For your information, the US government requires all VPN service providers who own servers in the country to keep logs. It does not matter whether these VPN companies have their headquarters based in the USA. The US government does not need court orders to compel VPN companies to submit logs. The Patriot Act empowers the FBI to have access to the logs without a court subpoena.

 

[Dinosaur]

If u have cash to spare then get strong VPN.

Please do NOT ever use StrongVPN. It's one of the worst liars out there in the VPN world. It's as bad as HideMyAss.

See "LulzSec Hacker Exposed by the Service He Thought Would Hide Him"
http://www.theatlanticwire.com/tech...osed-service-he-thought-would-hide-him/42895/

Below is some data that I managed to collect for you (correct as at 1st March 2012). Some data may have changed since then：

Good countries for VPN:
Argentina - No data retention law
Brazil - No data retention law
Bulgaria - Data retention law not applicable to VPN providers
Cyprus - Data retention law declared unconstitutional (?)
Czech Republic - No data retention law (declared unconstitutional)
Hong Kong - No data retention law (?)
Iceland - No data retention period specified (?); good privacy laws
Japan - No data retention law
Luxemburg - Data retention law not applicable to VPN providers
Netherlands - Data retention law not applicable to VPN providers
Panama - No data retention law
Romania - Data retention law declared unconstitutional
Serbia - Data retention law not applicable to VPN providers (?)
Sweden - Data retention law going into effect in May 2012, but (presumably) not applicable to VPNs
Taiwan - No data retention law (?) + seemingly good privacy laws
Ukraine - No data retention law (?)

"Questionable" Countries:
Australia - No data retention law, but internet regulations are strict & they're on RSF's Internet Surveillance 2012 watch list
Belgium - Data retention law not implemented, but has fairly strict laws & some internet censorship issues (esp. anti-p2p)
Canada - No data retention law, but anti-privacy legislation is rapidly gaining traction
Egypt - No data retention law (?), but privacy laws are dubious & they're on RSF's Internet Surveillance watch list
France - Data retention law not applicable to VPNs, but has strict laws & they're on RSF's Internet Surveillance watch list
Germany - Data retention law declared unconstitutional, but server raids & gov't surveillance are prevalent
Israel - No data retention law, but gov't surveillance is suspected (conflict zone)
Italy - Data retention law not applicable to VPNs, but internet regulations are fairly strict & there are some censorship issues
Malaysia - No data retention law, but has some censorship/server raid issues & they're on RSF's Internet Surveillance watch list
Mexico - No data retention law, but there are concerns about gov't corruption & some internet censorship issues
New Zealand - No data retention law, but there are concerns about gov't surveillance
Russia - No data retention law (?), but they have some censorship issues & they're on RSF's Internet Surveillance watch list
Singapore - Minimal data retention law, but has fairly strict internet regulations & some censorship issues
South Africa - No data retention law, but internet regulations are strict
South Korea - No data retention law, but they have some censorship issues & they're on RSF's Internet Surveillance watch list
United States - No data retention law, but server raids and gov't surveillance are prevalent

Bad Countries for VPN:
Afghanistan - Suspected surveillance by allied forces (war zone)
Armenia - Internet censorship
Austria - Data retention law
Bahrain - Internet censorship
Belarus - Internet censorship
Burma (Myanmar) - Internet censorship
China - Internet censorship + data retention law
Cuba - Internet censorship
Denmark - Data retention law
Estonia - Data retention law
Ethiopia - Internet censorship
Finland - Data retention law
Greece - Data retention law
Hungary - Data retention law
India - Internet censorship + data retention law
Indonesia - Internet censorship
Iran - Internet censorship + data retention law
Iraq - Suspected surveillance by allied forces (war zone)
Ireland - Data retention law
Kuwait - Internet censorship
Latvia - Data retention law
Liechtenstein - Data retention law
Lithuania - Data retention law
Malta - Data retention law
Morocco - Internet censorship
North Korea - Internet censorship (internet infrastructure is virtually non-existent here anyway) :P
Norway - Data retention law
Oman - Internet censorship
Pakistan - Internet censorship
Palestinian Territory - Internet censorship
Poland - Data retention law
Portugal - Data retention law
Qatar - Internet censorship
Saudi Arabia - Internet censorship
Slovakia - Data retention law
Slovenia - Data retention law
Spain - Data retention law
Sudan - Internet censorship
Switzerland - Data retention law
Syria - Internet censorship
Thailand - Internet censorship + data retention law
Tunisia - Internet censorship
Turkey - Data retention law + internet censorship
Turkmenistan - Internet censorship
United Arab Emirates - Internet censorship
United Kingdom - Data retention law
Uzbekistan - Internet censorship
Vietnam - Internet censorship
Yemen - Internet censorship

 

[Dinosaur]

I would like to know the drawbacks of using TOR for online browsing and posting.

(Side note: Tor developers would prefer users to refer to their software as Tor and not TOR)

NEVER EVER use Tor on a Microsoft Windows OS or Mac OS.

While you may think you are browsing anonymously with Tor on a Windows OS or Mac OS, the website that you are surfing may fish data such as your current physical location, MAC address, browser cookies from other Windows programs that you installed.

 

[Dinosaur]

In terms of development activity and the degree of anonymity, I recommend the following software:

1. Tails (very high degree of anonymity provided you accept all the default settings and don't activate persistence. The latest version supports obfsproxy bridges)
2. Liberté Linux
3. Whonix
4. Qubes OS

It's recommended that you use the Live DVD versions instead of Live USB versions.

There's a possibility that if a computer is infected with a hardware rootkit virus, your Live USB version may also be infected (read: data corruption and possible loss of anonymity) when the USB flash drive is plugged into the USB port.

 

[droopal]

Whatever you do and whichever anonymous tools you use be very careful with the people you interact with,
be it a male or a female always maintain your anonymous identity in SBF or other cyber activities.
Related articles :
http://www.forbes.com/sites/andygreenberg/2012/03/06/lulzsec-leader-sabu-identified-reportedly-worked-as-government-informant/
http://www.bostonglobe.com/business/2012/03/07/suspects-hacking-inquiry-arrested/1GfWKus6ckD1MiIiOuGKAL/story.html

 

[MadrigalWheel]

Whatever it is, just be wary of prying eyes and long ears

 

[independentdirect]

Dinosaur,

This is really great info. You saved me lots of time at the search engine.

I've decided to use vpn for normal use, and Tor (or Tor in conjunction with vpn) for highly sensitive needs.

Droopal, I agree with you. Do not reveal your identity in cyberspace or details about your personal or professional life. You never know who out there may be keen on using that in a malicious or mischievous manner.

P/S: I am limited to 500 chracters per post only.

 

[Millennium Falcon]

Please do NOT ever use StrongVPN. It's one of the worst liars out there in the VPN world. It's as bad as HideMyAss.

See "LulzSec Hacker Exposed by the Service He Thought Would Hide Him"
http://www.theatlanticwire.com/tech...osed-service-he-thought-would-hide-him/42895/

Below is some data that I managed to collect for you (correct as at 1st March 2012). Some data may have changed since then：

Thank you Dinosaur.

 

[Dinosaur]

Whatever you do and whichever anonymous tools you use be very careful with the people you interact with,
be it a male or a female always maintain your anonymous identity in SBF or other cyber activities.
Related articles :
http://www.forbes.com/sites/andygre...ed-reportedly-worked-as-government-informant/
http://www.bostonglobe.com/business...ry-arrested/1GfWKus6ckD1MiIiOuGKAL/story.html

Just exactly what do you mean by "maintain your anonymous identity" and how do you propose we go about doing it?

The articles you provided refer to hacking activities. You don't seem to know exactly and indepth what tools are needed to carry out computer hacking.

Let me tell you: Tor isn't developed for hacking. It never was, never is and never will be. FYI Tor is supported by EFF.org. In turn EFF.org is backed by the governments of USA, Canada, UK, France, Germany and major EU countries.

P.S.: Read Tor's source code and its implementation model thoroughly and you'll understand what I mean.

 

[Dinosaur]

I've decided to use vpn for normal use, and Tor (or Tor in conjunction with vpn) for highly sensitive needs.

What are those "highly sensitive needs"?

Most people are lulled into a false sense of security when they think that by tunneling Tor over VPN, they will remain anonymous. Nothing is further from the truth.

Assuming you're using Microsoft Windows OS. I am sure that you have other programs installed on it as well. Any one of them, including programs native to the OS, has the possibility of leaking your identity to the website that you are surfing even though you are using Tor over VPN.

The only way to prevent identity and data leaks is to re-engineer or re-configure Microsoft Windows OS and all your programs to use only Tor when access to the internet is established. But we know that is impossible because Microsft Windows is proprietary software, not open-source. And so are most of your installed software, e.g. Norton, Kapersky, McAfee, Skype, Internet Explorer, MSN messenger, the apps from Windows Apps Store, etc..(they are proprietary software)

That is where Tails and the other three software that I listed in post #13 step in.

All of them are based on Linux variants (Debian Squeeze for Tails for example) or derivatives if you wish to call them as such. Linux is open source. The developers have re-configured the variants of Linux OS and the programs in such a way that all of them will have to use Tor when they access the internet. In computer speak, we say that all the programs are torrified. Identity and data leaks are therefore reduced to a very bare minimum, negligible in fact. And you can download and view their source codes and implementation policies if you want to be sure of their claims of anonymity.

Droopal, I agree with you. Do not reveal your identity in cyberspace or details about your personal or professional life. You never know who out there may be keen on using that in a malicious or mischievous manner.

Well, you may wish to start by deleting the accounts of your Facebook, Youtube, Twitter, LinkIned and other social media networking sites. Did you know that the FBI, CIA, DIA, etc..have dedicated teams to track their targets down using those aforementioned sites? Well, now you know. Best of luck to your social networking.[/QUOTE]

 

[ionzu]

great post, especially since samantha loves recommending using Strong VPN. makes you wonder about her agenda.

Please do NOT ever use StrongVPN. It's one of the worst liars out there in the VPN world. It's as bad as HideMyAss.

See "LulzSec Hacker Exposed by the Service He Thought Would Hide Him"
http://www.theatlanticwire.com/tech...osed-service-he-thought-would-hide-him/42895/

Below is some data that I managed to collect for you (correct as at 1st March 2012). Some data may have changed since then：

Good countries for VPN:
Argentina - No data retention law
Brazil - No data retention law
Bulgaria - Data retention law not applicable to VPN providers
Cyprus - Data retention law declared unconstitutional (?)
Czech Republic - No data retention law (declared unconstitutional)
Hong Kong - No data retention law (?)
Iceland - No data retention period specified (?); good privacy laws
Japan - No data retention law
Luxemburg - Data retention law not applicable to VPN providers
Netherlands - Data retention law not applicable to VPN providers
Panama - No data retention law
Romania - Data retention law declared unconstitutional
Serbia - Data retention law not applicable to VPN providers (?)
Sweden - Data retention law going into effect in May 2012, but (presumably) not applicable to VPNs
Taiwan - No data retention law (?) + seemingly good privacy laws
Ukraine - No data retention law (?)

"Questionable" Countries:
Australia - No data retention law, but internet regulations are strict & they're on RSF's Internet Surveillance 2012 watch list
Belgium - Data retention law not implemented, but has fairly strict laws & some internet censorship issues (esp. anti-p2p)
Canada - No data retention law, but anti-privacy legislation is rapidly gaining traction
Egypt - No data retention law (?), but privacy laws are dubious & they're on RSF's Internet Surveillance watch list
France - Data retention law not applicable to VPNs, but has strict laws & they're on RSF's Internet Surveillance watch list
Germany - Data retention law declared unconstitutional, but server raids & gov't surveillance are prevalent
Israel - No data retention law, but gov't surveillance is suspected (conflict zone)
Italy - Data retention law not applicable to VPNs, but internet regulations are fairly strict & there are some censorship issues
Malaysia - No data retention law, but has some censorship/server raid issues & they're on RSF's Internet Surveillance watch list
Mexico - No data retention law, but there are concerns about gov't corruption & some internet censorship issues
New Zealand - No data retention law, but there are concerns about gov't surveillance
Russia - No data retention law (?), but they have some censorship issues & they're on RSF's Internet Surveillance watch list
Singapore - Minimal data retention law, but has fairly strict internet regulations & some censorship issues
South Africa - No data retention law, but internet regulations are strict
South Korea - No data retention law, but they have some censorship issues & they're on RSF's Internet Surveillance watch list
United States - No data retention law, but server raids and gov't surveillance are prevalent

Bad Countries for VPN:
Afghanistan - Suspected surveillance by allied forces (war zone)
Armenia - Internet censorship
Austria - Data retention law
Bahrain - Internet censorship
Belarus - Internet censorship
Burma (Myanmar) - Internet censorship
China - Internet censorship + data retention law
Cuba - Internet censorship
Denmark - Data retention law
Estonia - Data retention law
Ethiopia - Internet censorship
Finland - Data retention law
Greece - Data retention law
Hungary - Data retention law
India - Internet censorship + data retention law
Indonesia - Internet censorship
Iran - Internet censorship + data retention law
Iraq - Suspected surveillance by allied forces (war zone)
Ireland - Data retention law
Kuwait - Internet censorship
Latvia - Data retention law
Liechtenstein - Data retention law
Lithuania - Data retention law
Malta - Data retention law
Morocco - Internet censorship
North Korea - Internet censorship (internet infrastructure is virtually non-existent here anyway) :P
Norway - Data retention law
Oman - Internet censorship
Pakistan - Internet censorship
Palestinian Territory - Internet censorship
Poland - Data retention law
Portugal - Data retention law
Qatar - Internet censorship
Saudi Arabia - Internet censorship
Slovakia - Data retention law
Slovenia - Data retention law
Spain - Data retention law
Sudan - Internet censorship
Switzerland - Data retention law
Syria - Internet censorship
Thailand - Internet censorship + data retention law
Tunisia - Internet censorship
Turkey - Data retention law + internet censorship
Turkmenistan - Internet censorship
United Arab Emirates - Internet censorship
United Kingdom - Data retention law
Uzbekistan - Internet censorship
Vietnam - Internet censorship
Yemen - Internet censorship