Why a web-proxy is NOT providing anonymity !

I am sure a lot of the people here use web-proxies.
Why ?
Because a web proxy is free and easy to find.

Why does a web-proxy suck for anything relying on anonymity ?
a) webproxies make it extremely easy to catch and log your passwords
b) webproxies change content and malfunction on many websites
c) webproxies give no anonymity

Take a look at this: http://proxy-check.squabbel.com

This will decloak webproxies and show your real IP, it currently only works if you don't disable scripts in a webproxy config, a bit more work and it would work even if scripts are disabled. Currently that's not included cause who can really disable javascript these days, most websites need it.

This is probably the first proxy analyzer able to reveal the true IP behind web-proxies but as this proofs how easy it is. NOONE should rely on a webproxy if anonymity is important to him.

If you must use a web proxy then disable javascript, active x and java in your browser setting (not in the webproxy settings !) this makes at least 90% of the possible attack useless.
But in the end there are still ways to get the real IP. Keep that in mind.

In another thread (linked below) you said that there's no way for a website to get your MAC address.

In this thread, you say that there's always a way for a website to your real IP, even if you're using a proxy.

You are totally correct in both cases... take note, people!

Don't rely on proxies, learn to change up your IP as well:

http://www.blackhatworld.com/blackhat-seo/proxies/39076-changing-ip-noobies-non-proxy-methods.html

Now if you're lucky, you can just reboot your modem (or release/renew) and get a fresh IP. If so, you don't need that thread.

But if your ISP wants to you keep giving you the same IP, read that thread and you'll discover how to change your IP address anyway.

justtone, Thats not completly TRUE.
Depending on the type of proxy and script the site is using, you cant always get the REAL IP.
And if that site did, Then basically that site is gaining access to the proxy sites server and is calling the IP of the user thats on it. Which I doubt very much it is doing...

no mack, hes correct in the mac address case

ultimatium1: Please see that i talk only about web-proxies.
web-proxies are those websites with a formular field to enter a URL, then they load data from that URL and transport it to your screen.

If you know one webproxy that will not reveal your real ip if you test it through the link in my first post then please share here, I'll analyze it for you.


Please keep in mind: at this time the analyzer only works when javascript is not blocked, I also had successfull tests when javascript was blocked but the analyzer does not check for that.

From all proxies I tested, only one did not show the real IP through the analyzer and the reason was that it really fucked up the content of the remote website ^^

mack said:

Now if you're lucky, you can just reboot your modem (or release/renew) and get a fresh IP. If so, you don't need that thread.

Click to expand...

That's all fine and dandy unless the authorities supeona your isp for their logs, which would show who was assigned a particular ip on a particular date and time.

justone said:

ultimatium1: Please see that i talk only about web-proxies.
web-proxies are those websites with a formular field to enter a URL, then they load data from that URL and transport it to your screen.

If you know one webproxy that will not reveal your real ip if you test it through the link in my first post then please share here, I'll analyze it for you.


Please keep in mind: at this time the analyzer only works when javascript is not blocked, I also had successfull tests when javascript was blocked but the analyzer does not check for that.

From all proxies I tested, only one did not show the real IP through the analyzer and the reason was that it really fucked up the content of the remote website ^^

Click to expand...

Hey, I tried it here, http://eatmybrowser.com/, and it couldnt seem get my real ip.

CyberDilemma is fully correct.
Changing your IP by reconnecting (or forcing your router by changing it's MAC) is really not a professional method with many downsides.
Including the fact that it is not increasing your privacy as your connection stays unencrypted.
If authorities are a danger to you then you need a high anonymity service! No normal proxy or VPN will help you to avoid authorities.
Why ? Because they can and will gain access the the proxy or the provider and either get logfiles or catch you while you connect (or simply get your name and ip from the serverowner)
If you want high anonymity you need Tor or Cloakfish (see my sig for more info).

ultimatium1 said:

Hey, I tried it here, http://eatmybrowser.com/, and it couldnt seem get my real ip.

Click to expand...

Analysis of your current connection

* You are most probably using a web-proxy at 74.50.104.2 (United States) , your ip is 89.26....
* Your hostname is host7.nsmx.net
* Your operating system is Win2000
* Your browser was detected as Firefox
* You followed a link from http://proxy-check.squabbel.com


It DOES work for eatmybrowser.
you probably have the checkbox "remove scripts" active so javascript is removed as i explained above it currently only works if scripts are not supressed.

Just checked it.
http://anonymizeit.com/?http://proxy-check.squabbel.com/ found my IP when I used any of the proxies in tube*increaser. A few of them are actually Princeton CoDeeNs.
But many proxies from Proxyfire were not detected (but the fact that a proxy was used was guessed correctly).

In addition there are cases when the website guesses a use of a proxy uncorrectly. So don't be impressed from this claim.
However, all of the Proxyfire proxies that I found hided my ass against proxy-check.squabbel.
At least when there were working...

This was not about the fact that proxy-check check find all webproxies, this here is a thread that informs people about the fact that every webproxy without exception is not hiding your IP.
As I already wrote proxycheck is not perfect, I get no money from it it's just a free service and I have limited time to spend on that.
You probably had javascript deactivated on those that were hiding your IP or they were destroying parts of content of the website, that's all.

Fact stays that a webproxy is not providing anonymity, anyone who read this and uses one for actions that require high anonymity deserves the consequences.

No issues with for me either
Your IP is 130.94.106.238, no proxy can be detected
Your country is Anonymous Proxy
Your current IP does not have a reverse hostname
Your primary language is english
Your operating system is WinVista
Your browser was detected as IE


As you said though, It's not perfect.

-E

Is 130.94.106.238 a web-proxy ?
A webproxy example is http://hidemyass.com .

This is only about webproxies. Not HTTP, SOCKS, VPN or similar.

Hmm... now this is strange! I didn't know that.

But when I tried freegate it did not detect my real IP.. only the IP of the server... but when I tried a web proxy it detected my real ip

I went through a proxy and it didn't detect my real ip. Of course, it wasn't the normal ones that are used here.

It's specialized for the common types, works for those. If I were running a big site and wanted to detect webproxies it would be possible to catch them all.
Webproxies are flawed from the base no matter how much they are developed they will never become secure and can only be trusted to unblock sites that are blocked by employers or schools. For this purpose they are perfect.
Or to generate massive votes/hits when you don't care that you'll get cought sooner or later. (short time stuff)

justone said:

Is 130.94.106.238 a web-proxy ?
A webproxy example is http://hidemyass.com .

This is only about webproxies. Not HTTP, SOCKS, VPN or similar.

Click to expand...

OH my bad man, I misunderstood what you meant.

So many ways to get different proxies.. search apekillape's profile and you will find a way to get some decent proxies.

-E

LOL! I just tested your proxy checker with my ordinary CGI proxy, hosted at Hostgator, with script support TURNED ON! and it did NOT reveal my true IP.

justone said:

Take a look at this: http://proxy-check.squabbel.com

This will decloak webproxies and show your real IP, it currently only works if you don't disable scripts in a webproxy config, a bit more work and it would work even if scripts are disabled. Currently that's not included cause who can really disable javascript these days, most websites need it.

This is probably the first proxy analyzer able to reveal the true IP behind web-proxies but as this proofs how easy it is. NOONE should rely on a webproxy if anonymity is important to him.

Click to expand...

Yea a smaller part of the proxies are programmed or altered in a bad way.
This results that the javascripts are partly destroyed.

It is still possible to get the IP but my checker only uses one method to do so.

The fact remains the same, my checker is only a proof of concept. The problem lies in the design of web proxies.
No web proxy can ever be trusted to really hide your IP if any scripting in the browser is enabled.
As long as you keep that in mind and use the web-proxy for stuff where your anonymity is not that important it's fine.

OMG, I have never used web-proxy before.

Can anyone tell me the most popular web-proxy sites?

I am in China. Many website can't be opened even I use normal proxy.

So I think I should have a try the web-proxy.