Re: How safe is Tor for logging into http (nont https) web sites

Re: How safe is Tor for logging into http (nont https) web sites

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Re: How safe is Tor for logging into http (nont https) web sites Joan Battaglia 10-27-2007
Posted by hummingbird on October 29, 2007, 9:13 am
If you were  Registered and logged in, you could reply and use other advanced thread options

On Mon, 29 Oct 2007 03:11:50 +0100 (CET) 'Anonymous'
wrote this on alt.comp.freeware:

>Only by the most narrow, cherry picked definition of "fact".
>
>To an attacker it's as good as a fingerprint. To law enforcement it is.

I should have added that recent sporge/floods on some groups often
contain IP addresses that are valid the IPs but don't to belong to
the sporgers. There are recent posts on Usenet by Radium claiming
that other people are forging his IP address. Then I see identical
spam posts from Google which contain different IPs, so they're
possibly from the same person. The whole thing is very fuzzy.

All I'm saying is that an IP add does not necessarily identify an
individual and may not ID a specific computer connection. It is
merely one piece of relevant evidence.

--
uh oh...black helicopter ... gotta run

Posted by Anonymous Sender on October 29, 2007, 7:29 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
hummingbird wrote:

>
> On Mon, 29 Oct 2007 03:11:50 +0100 (CET) 'Anonymous'
> wrote this on alt.comp.freeware:
>
> >Only by the most narrow, cherry picked definition of "fact".
> >
> >To an attacker it's as good as a fingerprint. To law enforcement it
> >is.
>
> I should have added that recent sporge/floods on some groups often
> contain IP addresses that are valid the IPs but don't to belong to
> the sporgers. There are recent posts on Usenet by Radium claiming

And proxied connections are relevant.... how?

> that other people are forging his IP address. Then I see identical
> spam posts from Google which contain different IPs, so they're
> possibly from the same person. The whole thing is very fuzzy.

Only if you're fuzzy headed to begin with.

>
> All I'm saying is that an IP add does not necessarily identify an
> individual and may not ID a specific computer connection. It is
> merely one piece of relevant evidence.
>

It most ofetn does ID and individual, and *always* ID's specific
computer connection. The latter is what it's specifically designed for.

Duh.


Posted by hummingbird on October 30, 2007, 12:32 am
If you were  Registered and logged in, you could reply and use other advanced thread options

On Mon, 29 Oct 2007 23:29:40 +0000 (UTC) 'Anonymous Sender'
wrote this on alt.comp.freeware:

>hummingbird wrote:
>
>>
>> On Mon, 29 Oct 2007 03:11:50 +0100 (CET) 'Anonymous'
>> wrote this on alt.comp.freeware:
>>
>> >Only by the most narrow, cherry picked definition of "fact".
>> >
>> >To an attacker it's as good as a fingerprint. To law enforcement it
>> >is.
>>
>> I should have added that recent sporge/floods on some groups often
>> contain IP addresses that are valid the IPs but don't to belong to
>> the sporgers. There are recent posts on Usenet by Radium claiming
>
>And proxied connections are relevant.... how?

Not proxied connections but fake usage of IP addresses.

It's relevant to make my previous point that an IP address
is *not definitive* as to who the user is.

>> that other people are forging his IP address. Then I see identical
>> spam posts from Google which contain different IPs, so they're
>> possibly from the same person. The whole thing is very fuzzy.
>
>Only if you're fuzzy headed to begin with.

la la la.

>> All I'm saying is that an IP add does not necessarily identify an
>> individual and may not ID a specific computer connection. It is
>> merely one piece of relevant evidence.
>>
>
>It most ofetn does ID and individual, and *always* ID's specific
>computer connection. The latter is what it's specifically designed for.

Ah! you've now gone from: "it's as good as a fingerprint" to:
"It most ofetn does". hhmmm.

You are quietly moving the goalposts. An IP address ID's a specific
computer connection and I never disputed that. What is does *not*
do is necessarily ID a *person*, which was where our debate started
when you wrote:

"To an attacker it's as good as a fingerprint.
To law enforcement it is."


Nice to have cleared that up ... HAND.

--
uh oh...black helicopter ... gotta run

Posted by hummingbird on October 30, 2007, 11:56 am
If you were  Registered and logged in, you could reply and use other advanced thread options

On Tue, 30 Oct 2007 15:58:13 +0100 (CET) 'George Orwell'
wrote this on alt.comp.freeware:

>> Nice to have cleared that up ... HAND.


>Ahem.
>Are you aware that your bizarre implementation of X-N-A by putting it in
>your Keywords header
>(Keywords: =?ISO-8859-1?Q?=A0=0AX-No-Archive:_yes?=) is having absolutely
>no effect at google?

I'm certainly aware of some debate on that subject.

As to whether Google deletes posts after 6 days (like it's banner
says), or hides them or does nothing at all with XNA, I'm not sure
if there's any conclusion based on fact or evidence. My current
experience of Google archives is that it's fcuking useless - I can't
find a single MID that I search for!

>Not that it makes any difference.

ok.

--
uh oh...black helicopter ... gotta run

Posted by Franklin on October 30, 2007, 12:51 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
wrote:

>>
>>
>> Nice to have cleared that up ... HAND.
>
> Ahem.
> Are you aware that your bizarre implementation of X-N-A by putting
> it in your Keywords header
> (Keywords: =?ISO-8859-1?Q?=A0=0AX-No-Archive:_yes?=) is having
> absolutely no effect at google?
> Not that it makes any difference.
>


Awwwww, don't tell him.
Hummingbird thought his posts weren't being archived.

I've no idea what he's trying to hide.

Some newsgroup archives ignore the XNA flag anyway.

Similar ThreadsPosted
Re: How safe is Tor for logging into http (nont https) web sites October 26, 2007, 8:57 am
Re: How safe is Tor for logging into http (nont https) web sites October 27, 2007, 5:24 pm
Re: How safe is Tor for logging into http (nont https) web sites October 28, 2007, 10:06 am
Snort logging May 4, 2005, 4:52 am
snort file logging name December 18, 2004, 5:31 am
A question about firewall logging March 29, 2006, 7:42 am
How to keep sites from reading cookies? November 24, 2004, 6:37 am
ActiveX drive-by download Sites December 29, 2004, 1:01 pm
Determining which sites are blocked at the office February 10, 2005, 10:41 am
Yahoo sites hit by availability problems July 8, 2007, 3:46 pm

The site map in XML format XML site map

Contact Us | Privacy Policy