Re: How safe is Tor for logging into http (nont https) web sites

Re: How safe is Tor for logging into http (nont https) web sites

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Re: How safe is Tor for logging into http (nont https) web sites Joan Battaglia 10-27-2007
Posted by Anonymous on October 30, 2007, 4:16 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
hummingbird wrote:

>
> On Mon, 29 Oct 2007 23:29:40 +0000 (UTC) 'Anonymous Sender'
> wrote this on alt.comp.freeware:
>
> >hummingbird wrote:
> >
> >>
> >> On Mon, 29 Oct 2007 03:11:50 +0100 (CET) 'Anonymous'
> >> wrote this on alt.comp.freeware:
> >>
> >> >Only by the most narrow, cherry picked definition of "fact".
> >> >
> >> >To an attacker it's as good as a fingerprint. To law enforcement
> >> >it is.
> >>
> >> I should have added that recent sporge/floods on some groups often
> >> contain IP addresses that are valid the IPs but don't to belong to
> >> the sporgers. There are recent posts on Usenet by Radium claiming
> >
> >And proxied connections are relevant.... how?
>
> Not proxied connections but fake usage of IP addresses.

How do you "fake the usage of an IP address"?

This should be good... watching you try and wriggle your way around the
problems of packet sequence prediction and return routing.

<chuckle>

>
> It's relevant to make my previous point that an IP address
> is *not definitive* as to who the user is.

The only thing it's relevant for is to show what a clueless rube you
are. I'll be more than happy to help you out with that if you want.

>
> >> that other people are forging his IP address. Then I see identical
> >> spam posts from Google which contain different IPs, so they're
> >> possibly from the same person. The whole thing is very fuzzy.
> >
> >Only if you're fuzzy headed to begin with.
>
> la la la.
>
> >> All I'm saying is that an IP add does not necessarily identify an
> >> individual and may not ID a specific computer connection. It is
> >> merely one piece of relevant evidence.
> >>
> >
> >It most ofetn does ID and individual, and *always* ID's specific
> >computer connection. The latter is what it's specifically designed
> >for.
>
> Ah! you've now gone from: "it's as good as a fingerprint" to:
> "It most ofetn does". hhmmm.

No, I haven't. I started out quite plainly saying "as good as", and
noting that for LE purposes it does denote an ID. If you were even a
quarter as clever as you think you are you mighe have figured out why I
specifically worded it that way by nore, but here you are, not even up
to speed with the actual statements themselves.

How do you manage to type and maintain autonomic functions at the same
time?

> You are quietly moving the goalposts. An IP address ID's a specific

Dream on sonny. I've moved nothing. You simply don't have the ability
to think up to my level so you don't even grasp the meaning of what
I've said.

















Posted by hummingbird on October 30, 2007, 8:03 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

On Tue, 30 Oct 2007 21:16:36 +0100 (CET) 'Anonymous'
wrote this on alt.comp.freeware:

>hummingbird wrote:
>
>>
>> On Mon, 29 Oct 2007 23:29:40 +0000 (UTC) 'Anonymous Sender'
>> wrote this on alt.comp.freeware:
>>
>> >hummingbird wrote:
>> >
>> >>
>> >> On Mon, 29 Oct 2007 03:11:50 +0100 (CET) 'Anonymous'
>> >> wrote this on alt.comp.freeware:
>> >>
>> >> >Only by the most narrow, cherry picked definition of "fact".
>> >> >
>> >> >To an attacker it's as good as a fingerprint. To law enforcement
>> >> >it is.
>> >>
>> >> I should have added that recent sporge/floods on some groups often
>> >> contain IP addresses that are valid the IPs but don't to belong to
>> >> the sporgers. There are recent posts on Usenet by Radium claiming
>> >
>> >And proxied connections are relevant.... how?
>>
>> Not proxied connections but fake usage of IP addresses.
>
>How do you "fake the usage of an IP address"?

You ensure that an IP address gets used which is not the one you
are posting from. Don't ask me how that is done in detail because
a) I wouldn't tell you on this forum and b) I dunno - hey - I'm
not a sporger doncha know. lol.

If you look at the recent sporge on many newsgroups, they contain
IP's from all over the place but are not those of the posters.
Something to do with where the sporge is posted through or injected
into the stream I believe. Since you're familiar with the anon
network, you probably already know some of this. Maybe.

>This should be good... watching you try and wriggle your way around the
>problems of packet sequence prediction and return routing.
>
><chuckle>

While you're chuckling anonymous, I'm rotfl in stitches.

>> It's relevant to make my previous point that an IP address
>> is *not definitive* as to who the user is.
>
>The only thing it's relevant for is to show what a clueless rube you
>are. I'll be more than happy to help you out with that if you want.

Your absence of any relevant input is noted.

>> >> that other people are forging his IP address. Then I see identical
>> >> spam posts from Google which contain different IPs, so they're
>> >> possibly from the same person. The whole thing is very fuzzy.
>> >
>> >Only if you're fuzzy headed to begin with.
>>
>> la la la.
>>
>> >> All I'm saying is that an IP add does not necessarily identify an
>> >> individual and may not ID a specific computer connection. It is
>> >> merely one piece of relevant evidence.
>> >>
>> >
>> >It most ofetn does ID and individual, and *always* ID's specific
>> >computer connection. The latter is what it's specifically designed
>> >for.
>>
>> Ah! you've now gone from: "it's as good as a fingerprint" to:
>> "It most ofetn does". hhmmm.
>
>No, I haven't. I started out quite plainly saying "as good as", and
>noting that for LE purposes it does denote an ID.

Not in the UK it doesn't and I doubt it's the case in the US either,
although I'm no expert on US law, such that it is. Like I said it is
*one* piece of evidence and probably scores more points than some
other pieces.

Here it is again: An IP address is not definitive evidence of a
person's ID (from a legal standpoint). I explained why earlier.
Get used to it. Live with it. Have a party with it.

> If you were even a
>quarter as clever as you think you are you mighe have figured out why I
>specifically worded it that way by nore, but here you are, not even up
>to speed with the actual statements themselves.

If you were even a quarter as clever as you think you are you might
have figured out why I posted my previous comments. You might also
have figured out that the law varies from one country to another and
surprise surprise the world doesn't all follow the same law.

>How do you manage to type and maintain autonomic functions at the same
>time?

la la la.

>> You are quietly moving the goalposts. An IP address ID's a specific
>
>Dream on sonny. I've moved nothing.

Pah! Sure you have. One minute you claim it's a slam dunk, now
you back peddle because I've explained why you are wrong.
Get used to it. Live with it.

>You simply don't have the ability
>to think up to my level so you don't even grasp the meaning of what
>I've said.

I understand exactly what you said and I explained why you are
wrong. Get used to it. Live with it. Learn not to describe your
*opinions* as fact and learn about the rule of law.

HTH - HAND.

--
uh oh...black helicopter ... gotta run

Posted by Anonymous on October 30, 2007, 10:10 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
hummingbird wrote:

<snippage>

> If you look at the recent sporge on many newsgroups, they contain
> IP's from all over the place but are not those of the posters.

Those aren't forged IP addresses, they're "forged" headers. Completely
different issue. And they're usually not even forged at all, they're
the IP address of some proxy.

You're not just out in deep left center here guy, you got lost on your
way to the ballpark. :-)


Posted by hummingbird on October 31, 2007, 9:05 am
If you were  Registered and logged in, you could reply and use other advanced thread options

On Wed, 31 Oct 2007 03:10:15 +0100 (CET) 'Anonymous'
wrote this on alt.comp.freeware:

>hummingbird wrote:
>
><snippage>
>
>> If you look at the recent sporge on many newsgroups, they contain
>> IP's from all over the place but are not those of the posters.
>
>Those aren't forged IP addresses, they're "forged" headers. Completely
>different issue. And they're usually not even forged at all, they're
>the IP address of some proxy.

You're making this up as you go along ain't yer. Lol.

I never used the word "forged", you did.

I wrote this: "...fake usage of IP addresses" ... and I explained
several times what I meant by that. Too bad you don't understand.

Maybe that's why you post using *Anonymous* - too ashamed to use
a regular handle or name.

>You're not just out in deep left center here guy, you got lost on your
>way to the ballpark. :-)

la la la. Grow up and get a life dork.

EOT for me.

--
uh oh...black helicopter ... gotta run

Posted by Anonymous Sender on October 31, 2007, 1:44 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
hummingbird wrote:

>
> On Wed, 31 Oct 2007 03:10:15 +0100 (CET) 'Anonymous'
> wrote this on alt.comp.freeware:
>
> >hummingbird wrote:
> >
> ><snippage>
> >
> >> If you look at the recent sporge on many newsgroups, they contain
> >> IP's from all over the place but are not those of the posters.
> >
> >Those aren't forged IP addresses, they're "forged" headers.
> >Completely different issue. And they're usually not even forged at
> >all, they're the IP address of some proxy.
>
> You're making this up as you go along ain't yer. Lol.
>
> I never used the word "forged", you did.

Childish semantics quibble noted.

And discarded.

>
> I wrote this: "...fake usage of IP addresses" ... and I explained
> several times what I meant by that. Too bad you don't understand.

I do understand kid. I had to explain it to you in fact. You're talking
about proxies. Period. Learn to deal with it.

>
> Maybe that's why you post using *Anonymous* - too ashamed to use
> a regular handle or name.

So now we're reduced to taking cheap shots at anonymity are we? Last
club in your bag, isn't it you pathetic little bitch? Can't even come
up with a decent sounding reply so your hypocritical ass tries to
attack the method someone uses to post.

> >You're not just out in deep left center here guy, you got lost on
> >your way to the ballpark. :-)
>
> la la la. Grow up and get a life dork.

What's a "life dork"?

<snicker>

>
> EOT for me.

You said that in another message to you pathetic little bitch.

Now come on and squawk for me again...

>



Similar ThreadsPosted
Re: How safe is Tor for logging into http (nont https) web sites October 26, 2007, 8:57 am
Re: How safe is Tor for logging into http (nont https) web sites October 27, 2007, 5:24 pm
Re: How safe is Tor for logging into http (nont https) web sites October 28, 2007, 10:06 am
Snort logging May 4, 2005, 4:52 am
snort file logging name December 18, 2004, 5:31 am
A question about firewall logging March 29, 2006, 7:42 am
How to keep sites from reading cookies? November 24, 2004, 6:37 am
ActiveX drive-by download Sites December 29, 2004, 1:01 pm
Determining which sites are blocked at the office February 10, 2005, 10:41 am
Yahoo sites hit by availability problems July 8, 2007, 3:46 pm

The site map in XML format XML site map

Contact Us | Privacy Policy