From 79ad3e6ed1db5ea1d2a4fe3df5503fb03f437148 Mon Sep 17 00:00:00 2001 From: Fabian Keil Date: Mon, 4 Sep 2006 19:20:33 +0000 Subject: [PATCH] Adjusted anonymity related sections to match reality. Added a section about using Privoxy with Tor. --- doc/source/faq.sgml | 150 ++++++++++++++++++++++++++++++++++++++------ 1 file changed, 130 insertions(+), 20 deletions(-) diff --git a/doc/source/faq.sgml b/doc/source/faq.sgml index 1be6014a..7ed167af 100644 --- a/doc/source/faq.sgml +++ b/doc/source/faq.sgml @@ -24,7 +24,7 @@ This file belongs into ijbswa.sourceforge.net:/home/groups/i/ij/ijbswa/htdocs/ - $Id: faq.sgml,v 2.11 2006/07/18 14:48:50 david__schmidt Exp $ + $Id: faq.sgml,v 2.12 2006/09/03 14:15:30 hal9 Exp $ Copyright (C) 2001-2006 Privoxy Developers See LICENSE. @@ -75,7 +75,7 @@ -$Id: faq.sgml,v 2.11 2006/07/18 14:48:50 david__schmidt Exp $ +$Id: faq.sgml,v 2.12 2006/09/03 14:15:30 hal9 Exp $ Can <application>Privoxy</application> guarantee I am anonymous? No. Your chances of remaining anonymous are greatly improved, but unless you - are an expert on Internet security it would be safest to assume that - everything you do on the Web can be traced back to you. + chain Privoxy with Tor + or a similar system and know what you're doing when it comes to configuring + the rest of your system, it would be safest to assume that everything you do + on the Web can be traced back to you. Privoxy can remove various information about you, and allows you more freedom to decide which sites - you can trust, and what details you want to reveal. But it's still possible - that web sites can find out who you are. Here's one way this can happen. + you can trust, and what details you want to reveal. But it neither + hides your ip address, nor can it guarantee that the rest of the system + behaves correctly. There are several possibilities how a web sites can find + out who you are, even if you are using a strict Privoxy + configuration and chained it with Tor. + + + Most of Privoxy's protection can be easily subverted + by an insecure browser configuration, therefore you should use a browser that can + be configured to only execute code from trusted sites, and be careful which sites you trust. + For example there is no point in having Privoxy + modify the User-Agent header, if websites can get all the information they want + through JavaScript, ActiveX, Flash, Java etc. A few browsers disclose the user's email address in certain situations, such @@ -1330,6 +1348,93 @@ us help you. Your efforts are not wasted, and we do appreciate them. +How do I use <application>Privoxy</application> + together with <application>Tor</application>? + + Before you configure Privoxy to use Tor + (http://tor.eff.org/), + please follow the User Manual chapters + 2. Installation and + 5. Startup to make sure + Privoxy itself is setup correctly. + + + If it is, refer to Tor's + extensive documentation to learn how to install Tor, + and make sure Tor's logfile says that + Tor has successfully opened a circuit and it + [l]ooks like client functionality is working. + + + If either Tor or Privoxy + isn't working, their combination most likely will neither. Testing them on their + own will also help you to direct problem reports to the right audience. + If Privoxy isn't working, don't bother the + Tor developers. If Tor + isn't working, don't send bug reports to the Privoxy Team. + + + If you verified that Privoxy and Tor + are working, it is time to connect them. As far as Privoxy + is concerned, Tor is just another proxy that can be reached + by socks4 or socks4a. Most likely you are interested in Tor + to increase your anonymity level, therefore you should use socks4a, + to make sure Privoxy's DNS requests are + done through Tor and thus invisible to your local network. + + + Since Privoxy 3.0.4, its configuration (section 5.2) + is already prepared for Tor, if you are using a + default Tor configuration and run it on the same + system as Privoxy, you just have to uncomment the line: + + + +# forward-socks4a / 127.0.0.1:9050 . + + + + This is enough to reach the internet, but additionally you should + uncomment the following forward rules, to make sure your local network is still + reachable through Privoxy: + + + +# forward 192.168.*.*/ . +# forward 10.*.*.*/ . +# forward 127.*.*.*/ . + + + + Unencrypted connections to systems in these address ranges will + be as (un)secure as the local network is, but the alternative is + that you can't reach the network at all. + If you also want to be able to reach servers in your local + network by using their names, you will need additional + exceptions that look like this: + + + +# forward localhost/ . + + + + Save the modified configuration file and open + http://config.privoxy.org/show-status/ + in your browser, confirm that Privoxy has reloaded its configuration + and that there are no other forward lines, unless you know that you need them. I everything looks good, + refer to + Tor + Faq 4.2 to learn how to verify that you are really using Tor. + + + Afterwards, please take the time to at least skim through the rest + of Tor's documentation. Make sure you understand + what Tor does, why it is no replacement for + application level security, and why you shouldn't use it for unencrypted logins. + + + Might some things break because header information or content is being altered? @@ -1636,9 +1741,9 @@ and related issues? in the default configuration as shipped. You have either manually activated the fun filter which is clearly labeled Text replacements for subversive browsing - fun! or you have implicitly activated it by choosing the - Adventuresome profile in the web-based editor (formerly known - as the Advanced profile). + fun! or you are using an older Privoxy version and have implicitly + activated it by choosing the Adventuresome profile in the + web-based editor. @@ -2151,6 +2256,11 @@ Why? Temple Place - Suite 330, Boston, MA 02111-1307, USA. $Log: faq.sgml,v $ +Revision 2.12 2006/09/03 14:15:30 hal9 +Various updates, including 7 or 8 new FAQs, and updates/changes to various +other ones to better reflect improvements, additions and changes for the +upcoming release. This is close to final form for 3.0.4 IMHO. + Revision 2.11 2006/07/18 14:48:50 david__schmidt Reorganizing the repository: swapping out what was HEAD (the old 3.1 branch) with what was really the latest development (the v_3_0_branch branch) -- 2.49.0