+- Sinisterly (https://sinister.li)
+-- Forum: Computers (https://sinister.li/Forum-Computers)
+--- Forum: Networking (https://sinister.li/Forum-Networking)
+---- Forum: Anonymity (https://sinister.li/Forum-Anonymity)
+---- Thread: VPN not secure ? (/Thread-VPN-not-secure)
RE: VPN not secure ? - Equinox - 11-28-2015
(11-28-2015, 10:10 AM)B!t Wrote: some post hunter ;D comon if you try it hard you can reach today 2.000 ...
Post hunter LOL
You think I care about 2000 posts? I've been here for years now, if I wanted 2k I would've gotten it a long ass time ago. Perhaps I was when I first started, but I was also young and dumb.
RE: VPN not secure ? - B!t - 11-28-2015
(11-28-2015, 10:10 AM)Panty Wrote: Do you even read what you say? I doubt every tor relay server will be repossessed by the government.
could be right but to get a user from Tor you need the most time Tor nodes which are not oly in your country, so i think i could say that only a organization like FBI / NSA can gain total control for it.
(11-28-2015, 10:12 AM)Stocking Wrote: Post hunter LOLyeah could be, can you send me then any explanation what you wanted to say with "Ohhh OP" ?
You think I care about 2000 posts? I've been here for years now, if I wanted 2k I would've gotten it a long ass time ago. Perhaps I was when I first started, but I was also young and dumb.
RE: VPN not secure ? - B!t - 11-28-2015
since when it is harder to gain server from other country's any explanation ?
yeah Stocking wrote me allready a pm ,thanks for this answer.
i think it would be a good idea to close this Thread, somehow it gained out of control because i missed to inform myself about vpn.
Regards B!t
RE: VPN not secure ? - The Real Slim Shady - 11-28-2015
(11-28-2015, 05:11 AM)mothered Wrote: In fact, even behind a private VPN connected via "your" ISP, Is not 100% anonymous/hidden.
nothing is ever 100%.
but you also need to define 'private'. the businesses offering private vpns that ya just hook up to, ya sure, they aren't much better than a public vpn.
that server you rooted? could be a pretty private VPN. that vps you leased in russia with a prepaid visa credit card? could be a pretty private vpn - for just a couple of pretty obvious vectors. start daisy chaining them around the world and you throw hoops into investigations. depending on the route and location (ie going from Australia, to England, to Australia, to England, to the US, is gonna be a shit ton slower than going from Australia, to Singapore, to Japan, to the US for example), you can daisy chain 4, maybe 5 private VPNs and still get a functional connection.
RE: VPN not secure ? - mothered - 11-29-2015
(11-28-2015, 03:09 PM)The Real Slim Shady Wrote: nothing is ever 100%.
but you also need to define 'private'. the businesses offering private vpns that ya just hook up to, ya sure, they aren't much better than a public vpn.
that server you rooted? could be a pretty private VPN. that vps you leased in russia with a prepaid visa credit card? could be a pretty private vpn - for just a couple of pretty obvious vectors. start daisy chaining them around the world and you throw hoops into investigations. depending on the route and location (ie going from Australia, to England, to Australia, to England, to the US, is gonna be a shit ton slower than going from Australia, to Singapore, to Japan, to the US for example), you can daisy chain 4, maybe 5 private VPNs and still get a functional connection.
With the VPN Itself, I certainly agree It will never be 100% private. You've made some very valid points here.
In terms of the methodology used to establish Internet connectivity (as stated In my post #4 above), your Identity can be (and remain) 100% anonymous.
RE: VPN not secure ? - The Real Slim Shady - 11-29-2015
(11-28-2015, 05:11 AM)mothered Wrote: Nailed It right here ^^
In fact, even behind a private VPN connected via "your" ISP, Is not 100% anonymous/hidden. Generally speaking, for 100% anonymity, purchase a second-hand lappy (with cash and no receipts) securely erase the HDD (low-level format targeting the disk sectors), Install a pirated OS (and pirated hack tools that are Intended to be used) and then hook onto a wireless network far from home. The MAC address cannot traced, nor (obviously) can the IP or any Information on the lappy.
(11-29-2015, 02:11 AM)mothered Wrote: In terms of the methodology used to establish Internet connectivity (as stated In my post #4 above), your Identity can be (and remain) 100% anonymous.
Again, I take exception to the 100%. Your suggestion is way too simplistic. Where is that wifi? Is it public or private? if it's public, where are you sitting? are there video cameras? did you buy a latte for those hours of hacking? used card? cash? If it's private, how much effort are you going to to use it? cracking wep/wps/wpa2? how many hours will it take? Will you reuse it repeatedly? if you do, it's no different than using your home connection really. How did you get to the location? public transport? cameras every where. car? what if you're captured on camera outside the establishment? did you steal the car? will the license lead back to you? what if while you were connected to that network and traffic was being logged? picked up a request from the browser to a specific site with identifying information? a facebook page? an email account?
Point is there are a whole ton of little fuckups you can make that will compromise that "anonymity" that you get from using someone elses wifi if they're eager enough to get you.
maybe if you had someone drive you to the next city, drop you off a few miles from a train station, walk to the train station, take it to wherever you want to go, get off a few miles from that location and walk the rest of the way. wear a hoodie and dark sunglasses, find a remote location you can hide and use some pretty powerful antenna's to connect to your target. maybe then... maybe... you'd be pretty damn close to 100% anonymous and untraceable...
RE: VPN not secure ? - Vemius - 11-29-2015
Computer > Encrypt w/ VPN > Tor Entry > Tor Exit > Decrypt w/ VPN > Destination
-
you <-> isp <-> vpn1 <-> tor <-> vpn2 <->
this artical is only talking about certain services
RE: VPN not secure ? - mothered - 11-29-2015
(11-29-2015, 04:13 AM)The Real Slim Shady Wrote: maybe if you had someone drive you to the next city, drop you off a few miles from a train station, walk to the train station, take it to wherever you want to go, get off a few miles from that location and walk the rest of the way. wear a hoodie and dark sunglasses, find a remote location you can hide and use some pretty powerful antenna's to connect to your target. maybe then... maybe... you'd be pretty damn close to 100% anonymous and untraceable...
To a certain extent, you've just answered your own question.
However, wearing a hoodie and dark sunglasses only states the obvious. It looks more suspicious than anything else. So too Is a "remote location" - as a person who tries to hide, Is obviously hiding something. Wearing a suit and tie with a briefcase sitting outside a populated coffee shop during business hours with a laptop, will seem like you're performing work-related duties, hence no suspicion Is raised. Traveling to the location (to perform the attack) via public transport and connecting to an "open wireless network" with everything I've already stated, will definitely be untraceable.
RE: VPN not secure ? - The Real Slim Shady - 11-29-2015
(11-29-2015, 01:21 PM)mothered Wrote: Wearing a suit and tie with a briefcase sitting outside a populated coffee shop during business hours with a laptop, will seem like you're performing work-related duties, hence no suspicion Is raised.
It's not about the suspicion raised at the time though. What happens if your attack is traced back to that coffee shop? suddenly your on camera. maybe theres a few other people on laptops - but you're still identifiable. How about next time your caught on camera? same person at 2 locations or at the same place at the right time, twice? gotchya. Then it's just a matter of finding out who you are. They know what you look like. Did you make a purchase? did you use a card? check security cameras from the buses that transit through that local? oh you took the 140 bus? where did you get on? Oh you got on at the train station? what train did you get off of? oh someone with the license plate 44M309 dropped you off?
Point is, it's dangerous (and most likely false) to say you can remain 100% untraceable. It's kinda like saying something is unhackable. You can make it really fucking difficult, but someone, somewhere, can probably find a way of they put enough effort into it.
RE: VPN not secure ? - mothered - 11-29-2015
(11-29-2015, 01:35 PM)The Real Slim Shady Wrote: It's not about the suspicion raised at the time though. What happens if your attack is traced back to that coffee shop? suddenly your on camera. maybe theres a few other people on laptops - but you're still identifiable. How about next time your caught on camera? same person at 2 locations or at the same place at the right time, twice? gotchya. Then it's just a matter of finding out who you are. They know what you look like. Did you make a purchase? did you use a card? check security cameras from the buses that transit through that local? oh you took the 140 bus? where did you get on? Oh you got on at the train station? what train did you get off of? oh someone with the license plate 44M309 dropped you off?
Point is, it's dangerous (and most likely false) to say you can remain 100% untraceable. It's kinda like saying something is unhackable. You can make it really fucking difficult, but someone, somewhere, can probably find a way of they put enough effort into it.
As with everything In life, there's always the "what Ifs" and In this case, It's all about preparation and planning to avoid the what Ifs when the real attack comes about.
We can go back and forth here with all possibilities and scenarios covering the pros and cons, but It's not my Intention to do so. As I've mentioned a few times here on Sinisterly, I'm writing an eBook on doxing, social engineering and hacking that covers a lot of attack vectors. It's solely written by me, with no plagiarism whatsoever. What we've discussed here, Is documented In my eBook In GREAT detail that leaves nothing to chance.
On completion, I'd assume It'll be around 300-400 pages In length and I will gladly forward you a copy.