1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Why a web-proxy is NOT providing anonymity !

Discussion in 'Proxies' started by justone, Dec 8, 2008.

  1. justone

    justone Elite Member

    Joined:
    Oct 12, 2008
    Messages:
    1,516
    Likes Received:
    1,037
    Occupation:
    -
    Location:
    Europe
    I am sure a lot of the people here use web-proxies.
    Why ?
    Because a web proxy is free and easy to find.

    Why does a web-proxy suck for anything relying on anonymity ?
    a) webproxies make it extremely easy to catch and log your passwords
    b) webproxies change content and malfunction on many websites
    c) webproxies give no anonymity

    Take a look at this: http://proxy-check.squabbel.com

    This will decloak webproxies and show your real IP, it currently only works if you don't disable scripts in a webproxy config, a bit more work and it would work even if scripts are disabled. Currently that's not included cause who can really disable javascript these days, most websites need it.

    This is probably the first proxy analyzer able to reveal the true IP behind web-proxies but as this proofs how easy it is. NOONE should rely on a webproxy if anonymity is important to him.

    If you must use a web proxy then disable javascript, active x and java in your browser setting (not in the webproxy settings !) this makes at least 90% of the possible attack useless.
    But in the end there are still ways to get the real IP. Keep that in mind.
     
    • Thanks Thanks x 4
  2. mack

    mack Registered Member

    Joined:
    Dec 4, 2008
    Messages:
    97
    Likes Received:
    45
    Occupation:
    Happily self-employed online since 2004. Always d
    Location:
    USA
    In another thread (linked below) you said that there's no way for a website to get your MAC address.

    In this thread, you say that there's always a way for a website to your real IP, even if you're using a proxy.

    You are totally correct in both cases... take note, people!

    Don't rely on proxies, learn to change up your IP as well:

    http://www.blackhatworld.com/blackhat-seo/proxies/39076-changing-ip-noobies-non-proxy-methods.html

    Now if you're lucky, you can just reboot your modem (or release/renew) and get a fresh IP. If so, you don't need that thread.

    But if your ISP wants to you keep giving you the same IP, read that thread and you'll discover how to change your IP address anyway.
     
  3. ultimatium1

    ultimatium1 Junior Member

    Joined:
    Oct 10, 2008
    Messages:
    107
    Likes Received:
    19
    justtone, Thats not completly TRUE.
    Depending on the type of proxy and script the site is using, you cant always get the REAL IP.
    And if that site did, Then basically that site is gaining access to the proxy sites server and is calling the IP of the user thats on it. Which I doubt very much it is doing...

    no mack, hes correct in the mac address case
     
  4. justone

    justone Elite Member

    Joined:
    Oct 12, 2008
    Messages:
    1,516
    Likes Received:
    1,037
    Occupation:
    -
    Location:
    Europe
    ultimatium1: Please see that i talk only about web-proxies.
    web-proxies are those websites with a formular field to enter a URL, then they load data from that URL and transport it to your screen.

    If you know one webproxy that will not reveal your real ip if you test it through the link in my first post then please share here, I'll analyze it for you.


    Please keep in mind: at this time the analyzer only works when javascript is not blocked, I also had successfull tests when javascript was blocked but the analyzer does not check for that.

    From all proxies I tested, only one did not show the real IP through the analyzer and the reason was that it really fucked up the content of the remote website ^^
     
  5. CyberDilemma

    CyberDilemma Regular Member

    Joined:
    Apr 22, 2008
    Messages:
    322
    Likes Received:
    139
    That's all fine and dandy unless the authorities supeona your isp for their logs, which would show who was assigned a particular ip on a particular date and time.
     
  6. ultimatium1

    ultimatium1 Junior Member

    Joined:
    Oct 10, 2008
    Messages:
    107
    Likes Received:
    19
    Hey, I tried it here, http://eatmybrowser.com/, and it couldnt seem get my real ip.
     
  7. justone

    justone Elite Member

    Joined:
    Oct 12, 2008
    Messages:
    1,516
    Likes Received:
    1,037
    Occupation:
    -
    Location:
    Europe
    CyberDilemma is fully correct.
    Changing your IP by reconnecting (or forcing your router by changing it's MAC) is really not a professional method with many downsides.
    Including the fact that it is not increasing your privacy as your connection stays unencrypted.
    If authorities are a danger to you then you need a high anonymity service! No normal proxy or VPN will help you to avoid authorities.
    Why ? Because they can and will gain access the the proxy or the provider and either get logfiles or catch you while you connect (or simply get your name and ip from the serverowner)
    If you want high anonymity you need Tor or Cloakfish (see my sig for more info).
     
  8. justone

    justone Elite Member

    Joined:
    Oct 12, 2008
    Messages:
    1,516
    Likes Received:
    1,037
    Occupation:
    -
    Location:
    Europe
    Analysis of your current connection

    * You are most probably using a web-proxy at 74.50.104.2 (United States) , your ip is 89.26....
    * Your hostname is host7.nsmx.net
    * Your operating system is Win2000
    * Your browser was detected as Firefox
    * You followed a link from http://proxy-check.squabbel.com


    It DOES work for eatmybrowser.
    you probably have the checkbox "remove scripts" active so javascript is removed as i explained above it currently only works if scripts are not supressed.
     
  9. ortal

    ortal Junior Member

    Joined:
    May 27, 2008
    Messages:
    106
    Likes Received:
    10
    Just checked it.
    http://anonymizeit.com/?http://proxy-check.squabbel.com/ found my IP when I used any of the proxies in tube*increaser. A few of them are actually Princeton CoDeeNs.
    But many proxies from Proxyfire were not detected (but the fact that a proxy was used was guessed correctly).
     
  10. ortal

    ortal Junior Member

    Joined:
    May 27, 2008
    Messages:
    106
    Likes Received:
    10
    In addition there are cases when the website guesses a use of a proxy uncorrectly. So don't be impressed from this claim.
    However, all of the Proxyfire proxies that I found hided my ass against proxy-check.squabbel.
    At least when there were working...
     
  11. justone

    justone Elite Member

    Joined:
    Oct 12, 2008
    Messages:
    1,516
    Likes Received:
    1,037
    Occupation:
    -
    Location:
    Europe
    This was not about the fact that proxy-check check find all webproxies, this here is a thread that informs people about the fact that every webproxy without exception is not hiding your IP.
    As I already wrote proxycheck is not perfect, I get no money from it it's just a free service and I have limited time to spend on that.
    You probably had javascript deactivated on those that were hiding your IP or they were destroying parts of content of the website, that's all.

    Fact stays that a webproxy is not providing anonymity, anyone who read this and uses one for actions that require high anonymity deserves the consequences.
     
  12. Realign02

    Realign02 Regular Member

    Joined:
    Aug 13, 2007
    Messages:
    387
    Likes Received:
    232
    Occupation:
    Full time IMER
    No issues with for me either
    Your IP is 130.94.106.238, no proxy can be detected
    Your country is Anonymous Proxy
    Your current IP does not have a reverse hostname
    Your primary language is english
    Your operating system is WinVista
    Your browser was detected as IE


    As you said though, It's not perfect.

    -E
     
  13. justone

    justone Elite Member

    Joined:
    Oct 12, 2008
    Messages:
    1,516
    Likes Received:
    1,037
    Occupation:
    -
    Location:
    Europe
    Is 130.94.106.238 a web-proxy ?
    A webproxy example is http://hidemyass.com .

    This is only about webproxies. Not HTTP, SOCKS, VPN or similar.
     
  14. Tcm9669

    Tcm9669 Regular Member

    Joined:
    Dec 30, 2007
    Messages:
    369
    Likes Received:
    26
    Hmm... now this is strange! I didn't know that.

    But when I tried freegate it did not detect my real IP.. only the IP of the server... but when I tried a web proxy it detected my real ip :(
     
  15. justthinking

    justthinking BANNED BANNED

    Joined:
    Aug 13, 2008
    Messages:
    475
    Likes Received:
    463
    I went through a proxy and it didn't detect my real ip. Of course, it wasn't the normal ones that are used here.
     
  16. justone

    justone Elite Member

    Joined:
    Oct 12, 2008
    Messages:
    1,516
    Likes Received:
    1,037
    Occupation:
    -
    Location:
    Europe
    It's specialized for the common types, works for those. If I were running a big site and wanted to detect webproxies it would be possible to catch them all.
    Webproxies are flawed from the base no matter how much they are developed they will never become secure and can only be trusted to unblock sites that are blocked by employers or schools. For this purpose they are perfect.
    Or to generate massive votes/hits when you don't care that you'll get cought sooner or later. (short time stuff)
     
  17. Realign02

    Realign02 Regular Member

    Joined:
    Aug 13, 2007
    Messages:
    387
    Likes Received:
    232
    Occupation:
    Full time IMER
    OH my bad man, I misunderstood what you meant.

    So many ways to get different proxies.. search apekillape's profile and you will find a way to get some decent proxies.

    -E
     
  18. asprind

    asprind Junior Member

    Joined:
    Sep 15, 2008
    Messages:
    108
    Likes Received:
    17
    LOL! I just tested your proxy checker with my ordinary CGI proxy, hosted at Hostgator, with script support TURNED ON! and it did NOT reveal my true IP.


     
  19. justone

    justone Elite Member

    Joined:
    Oct 12, 2008
    Messages:
    1,516
    Likes Received:
    1,037
    Occupation:
    -
    Location:
    Europe
    Yea a smaller part of the proxies are programmed or altered in a bad way.
    This results that the javascripts are partly destroyed.

    It is still possible to get the IP but my checker only uses one method to do so.

    The fact remains the same, my checker is only a proof of concept. The problem lies in the design of web proxies.
    No web proxy can ever be trusted to really hide your IP if any scripting in the browser is enabled.
    As long as you keep that in mind and use the web-proxy for stuff where your anonymity is not that important it's fine.
     
  20. livelybrowser

    livelybrowser Senior Member

    Joined:
    Nov 20, 2008
    Messages:
    935
    Likes Received:
    371
    Home Page:
    OMG, I have never used web-proxy before.

    Can anyone tell me the most popular web-proxy sites?

    I am in China. Many website can't be opened even I use normal proxy.

    So I think I should have a try the web-proxy.