Tor and Java

Tor and Java

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Tor and Java Prester Jacques 06-05-2006
|--> Re: Tor and Java Dimitri Maziuk06-05-2006
`--> Re: Tor and Java Sebastian Gotts...06-05-2006
Posted by Prester Jacques on June 5, 2006, 10:32 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Tor protects my IP address, it doesn't "clean up" the data that I send
over it (and nor should it, I guess). Unfortunately, the browser can
access my "system properties" and my host address through Java and
Javascript. I don't particularly care about things like my OS type and
CPU and screen resolution, but I _do_ want to keep my originating IP
address private -- that's why I'm using Tor in the first place.

Is there some way of "cloaking" my ip address at my machine? Can I
create an ethernet alias and have Java only see 192.168.01 or something
like that?

I know you guys like to see a "legitimate purpose" for something; I
think protecting my privacy when I'm legitimately about my business is
legitimate enough.
--
P_J

Posted by Volker Birk on June 5, 2006, 10:35 am
If you were  Registered and logged in, you could reply and use other advanced thread options
[Tor and Java]
> Is there some way of "cloaking" my ip address at my machine?

I don't know one beside using NAT and a local address on the machine
running Java.

Yours,
VB.
--
"If you want to play with a piece of windows software that makes you
click all over the place, there's always minesweeper."

Kyle Stedman about "Personal Firewalls" in c.s.f

Posted by Dimitri Maziuk on June 5, 2006, 12:05 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Prester Jacques sez:
...
> Is there some way of "cloaking" my ip address at my machine? Can I
> create an ethernet alias and have Java only see 192.168.01 or something
> like that?

You can rewrite source IP address in all outgoing packets, it
isn't that hard. The side effect is that replies will not get
to your computer. (I'd suggest rewriting it to 192.168.0.1 --
this way your packets will not make it past the nearest router
and save the rest of us a bit of bandwidth.)

HTH
Dima
--
Well, lusers are technically human. -- Red Drag Diva

Posted by Sebastian Gottschalk on June 5, 2006, 4:43 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Prester Jacques wrote:
> Tor protects my IP address, it doesn't "clean up" the data that I send
> over it (and nor should it, I guess). Unfortunately, the browser can
> access my "system properties" and my host address through Java and
> Javascript. I don't particularly care about things like my OS type and
> CPU and screen resolution, but I _do_ want to keep my originating IP
> address private -- that's why I'm using Tor in the first place.
>
> Is there some way of "cloaking" my ip address at my machine? Can I
> create an ethernet alias and have Java only see 192.168.01 or something
> like that?

Why don't you simply disable Java?

> I know you guys like to see a "legitimate purpose" for something; I
> think protecting my privacy when I'm legitimately about my business is
> legitimate enough.

I know something about your private address anyway: It's a private one.
Damn, who cares?

Similar ThreadsPosted
Need help on Java cards October 3, 2005, 10:14 am
Anonymous surfing with Java enabled December 19, 2004, 10:04 am
SSRT4871 Rev.0 Untrusted applets in Java Plugin may allow unauthorized privileges on HP-UX December 3, 2004, 12:42 pm
SSRT051003 rev.0 - HP-UX Java Web Start remote unauthorized privileged access August 30, 2005, 9:40 pm
SSRT051003 rev.1 - HP-UX Java Web Start remote unauthorized privileged access October 7, 2005, 11:27 am
HPSBUX02196 SSRT071318 rev.2 - HP-UX Java (JRE and JDK) Remote Execution of Arbitrary Code March 12, 2007, 10:18 am
HPSBUX02284 SSRT071483 rev.2 - HP-UX Running Java JRE and JDK, Remote Unauthorized Access November 15, 2007, 8:56 am
HPSBUX02284 SSRT071483 rev.4 - HP-UX Running Java JRE and JDK, Remote Unauthorized Access December 20, 2007, 7:56 am
SSRT051004 rev.0 - HP-UX Java Runtime Environment (JRE) Untrusted Applet Elevates Privilege August 30, 2005, 9:42 pm
SSRT051004 rev.1 - HP-UX Java Runtime Environment (JRE) Untrusted Applet Elevates Privilege October 6, 2005, 11:44 am

The site map in XML format XML site map

Contact Us | Privacy Policy