3 ms·
I never thought about detecting proxies and VPNs this way, very clever. Do any of you know a way to hinder/defeat these detection techniques?
by jaytaylor 11y ago
I never thought about detecting proxies and VPNs this way, very clever.
Do any of you know a way to hinder/defeat these detection techniques?
- userbinator 11y agoFrom the article: If you don’t want to be identified, you can disable mssfix, just set it to zero on both server and client. As for the OS/browser fingerprinting, I suppose you could just use p0f to figure out what your VPN "exit node" is running, then modify your user-agent to match. Interestingly enough, it assumes that if it can't figure out either OS or fingerprint, they match: Detected OS = ??? HTTP software = ??? ... Fingerprint and OS match.
- asdfaoeu 11y ago> If you don’t want to be identified, you can disable mssfix, just set it to zero on both server and client. Wouldn't the server get fragmented packets and discover that?
- zebra 11y agoThey are assembled back before they leave the VPN. This step makes the latency higher.
- nissehulth 11y agoMaybe Tor Browser should try to match the user-agent to the exit-node.
- thaumasiotes 11y agoNo. You can identify a connection as "Tor" in several different ways. That's not the point of Tor. The point of Tor is that everyone using it looks the same as everyone else using it. You want the Tor user agent to be, essentially, "I'm Spartacus".
- zz1 11y agoRight now TorBrowserBundle user agent is the most widespread version of Firefox over the most widespread version of Windows, and I think it should stay like this.
- teenageSec 11y agoAnyone can get a list of every single tor exit node, so it is pretty much impossible to hide that you are using tor.
- netheril96 11y agoIt cannot detect PPTP and L2TP for now. I am browsing with PPTP, and it fails to detect it.