Login Register


Securely access to my site without being caught by the goverment filter_list
Author
Message
Securely access to my site without being caught by the goverment #1
Hi,

I am making a website that is not 100% safe ( a little adult content) in my country, which is very strict on porn, censorship etc.

So I don't wanna leave any footprint to get caught.
I use VPN but still concerned because I heard the police can still found out where I access to my site through ISP.

My question is,
if I access my site using TOR, is that 100% safe?

I am planning to format my computer so that just in case I am suspected, they can't find anything.

This is really a big concern to me,
so I would be highly appreciate experienced advice, knowledge.

Thanks in advacne!
have a great day.

dijijic

Reply

RE: Securely access to my site without being caught by the goverment #2
Compatibility permitted, you can run two VPNs and connect to the Tor network thereafter.

In my case, I have ZenMate VPN & ExpressVPN running side by side.
Spoiler:
[Image: meGKzHs.png]


My connection Is: "ZenMate VPN > ExpressVPN > Tor > Exit Node > Destination server". If there's a leak at the Tor exit node, they'll need to get past two layers of encryption (ZenMate & Express VPN) to Identify your ISP. Good luck with that.
[Image: AD83g1A.png]

[+] 2 users Like mothered's post
Reply

RE: Securely access to my site without being caught by the goverment #3
(10-03-2018, 04:05 AM)mothered Wrote: My connection Is: "ZenMate VPN > ExpressVPN > Tor > Exit Node > Destination server".

appreciate your answer Smile
Just one more question, what's Exit Node?

Reply

RE: Securely access to my site without being caught by the goverment #4
(10-03-2018, 05:43 AM)dijijic Wrote:
(10-03-2018, 04:05 AM)mothered Wrote: My connection Is: "ZenMate VPN > ExpressVPN > Tor > Exit Node > Destination server".

appreciate your answer Smile
Just one more question, what's Exit Node?

You're welcome.

The exit node Is when traffic via Tor finally hits the net. Simply put, Tor encrypts data through multiple relays and the final/last relay decrypts It back to It's original form and sends It to It's destination- being the website that the end user wishes to connect to. That Is the exit node. When combined with VPNs as mentioned above, even If there was a leak at the exit node, the ISP of the VPN will be revealed and not your own.
[Image: AD83g1A.png]

[+] 2 users Like mothered's post
Reply

RE: Securely access to my site without being caught by the goverment #5
I am very clear now!

Thanks a lot Mothered!
(This post was last modified: 10-03-2018, 12:47 PM by dijijic.)

[+] 1 user Likes dijijic's post
Reply

RE: Securely access to my site without being caught by the goverment #6
(10-03-2018, 12:47 PM)dijijic Wrote: I am very clear now!

Thanks a lot Mothered!

You're welcome.

If you have any further questions, feel free to ask.
[Image: AD83g1A.png]

[+] 1 user Likes mothered's post
Reply

RE: Securely access to my site without being caught by the goverment #7
I've been reading and watching a lot of tutorials, seems that your IP is not the only thing that can reveal who or where you are, also the DNS needs to be changed. sure maybe you got a VPN and have an IP from a different country, but if your DNS is in your country and automatically provided by your ISP, then it kinda beats the point.

Is this a correct assessment? I change my DNS to cloudfare's and when using proxy chains or a VPN, I get no DNS leak ... you want to go to dnsleaktest to test this. In my proxy conf file, I did have to uncomment the part where it says, to leak DNS data... so it does not!

Hope this helps.

Also another idea, what if you created or had access to a server that was outside of your country.? would that still be an issue? in that sense, anyone accessing said site would need a VPN or proxy to access but you yourself, wont have the data at home on your computer. Not sure if that works, or violates laws, or if its even possible without paying for said server, in that sense, THEY would know what content you have... and maybe that is a whole other can of worms to deal with?

Reply

RE: Securely access to my site without being caught by the goverment #8
(11-04-2018, 06:41 PM)natifix Wrote: I've been reading and watching a lot of tutorials, seems that your IP is not the only thing that can reveal who or where you are, also the DNS needs to be changed. sure maybe you got a VPN and have an IP from a different country, but if your DNS is in your country and automatically provided by your ISP, then it kinda beats the point.

Is this a correct assessment?

Yes that' pretty much correct. I would suggest to route your DNS traffic through Tor, the end point who sees your traffic will change quite frequently. Therefore, if you let's say, everyday connect to sinisterly and to reddit, the end point could get a feeling about your location based on the time you connect to those websites. But if the end point changes frequently, it can't.
[Image: iQDVDdD.gif]

Reply

RE: Securely access to my site without being caught by the goverment #9
(11-04-2018, 07:13 PM)Cr3aTor Wrote:
(11-04-2018, 06:41 PM)natifix Wrote: I've been reading and watching a lot of tutorials, seems that your IP is not the only thing that can reveal who or where you are, also the DNS needs to be changed. sure maybe you got a VPN and have an IP from a different country, but if your DNS is in your country and automatically provided by your ISP, then it kinda beats the point.

Is this a correct assessment?

Yes that' pretty much correct. I would suggest to route your DNS traffic through Tor, the end point who sees your traffic will change quite frequently. Therefore, if you let's say, everyday connect to sinisterly and to reddit, the end point could get a feeling about your location based on the time you connect to those websites. But if the end point changes frequently, it can't.

Hmm, so where you put your DNS address, for me its 1.1.1.1 and 1.0.0.1 ... you would want to use the TOR address, iirc 127.0.0.1 port 9050 ? not sure If I follow exactly, but thanks for clarifying!
(This post was last modified: 11-04-2018, 07:19 PM by natifix.)

Reply

RE: Securely access to my site without being caught by the goverment #10
(11-04-2018, 07:19 PM)natifix Wrote:
(11-04-2018, 07:13 PM)Cr3aTor Wrote:
(11-04-2018, 06:41 PM)natifix Wrote: I've been reading and watching a lot of tutorials, seems that your IP is not the only thing that can reveal who or where you are, also the DNS needs to be changed. sure maybe you got a VPN and have an IP from a different country, but if your DNS is in your country and automatically provided by your ISP, then it kinda beats the point.

Is this a correct assessment?

Yes that' pretty much correct. I would suggest to route your DNS traffic through Tor, the end point who sees your traffic will change quite frequently. Therefore, if you let's say, everyday connect to sinisterly and to reddit, the end point could get a feeling about your location based on the time you connect to those websites. But if the end point changes frequently, it can't.

Hmm, so where you put your DNS address, for me its 1.1.1.1 and 1.0.0.1 ... you would want to use the TOR address, iirc 127.0.0.1 port 9050 ? not sure If I follow exactly, but thanks for clarifying!

You just need to install the Tor service, add to your torrc file a DNSPort and write to your resolv.conf file the localhost(127.0.0.1):dns_port_set_earlier
(this is on linux, on windows I'm not quite sure how it's done, but you can have a look here https://trac.torproject.org/projects/tor/wiki)
This might help you as well: https://tor.stackexchange.com/questions/...s-requests
[Image: iQDVDdD.gif]

Reply







Users browsing this thread: 1 Guest(s)