Hacker News new | ask | show | jobs
by pandasun 2872 days ago
I could be wrong but I'm not sure this is completely accurate. There are HTTPS proxies listed on the page it's fetching proxies from.

And it's been a while but I could have sworn you can do DNS requests through a proxy.

Feel free to correct me if I'm wrong though.

1 comments

You can proxy DNS requests through SOCKS proxies and trough normal ones but it’s not common or at least airtight (e.g. a none http/https resource request can bypass proxy even in Chrome, addons, flash and other system calls also may be used to reveal the original IP), and proxies do not preserve HTTPS without being able to MITM it, if you want to anonymize something use TOR at least non-state actors likely can’t trace the source of the request since no one is operating enough nodes and has the capability to run timing analysis on the entire network.

If you have something that is sensitive enough to require anonymity you do not want to disclose it to another party.

Proxies are also finicky my honeypot tries DNS resolving via multiple vectors including applets, flash and more recently the dns.resolve API Firefox implemented with 60 onwards. I also return an SSL cert and use OCSP and CRL resolutions to try and get the actual IP address.

Overall proxies and OpenVPN provides are unasked in about 50% of the cases TOR in the high single digits and im not doing anything super sophisticated.

You can ofc go beyond that and fingerprint the browser, use zero days or abuse headless browsers or other frameworks but I’m not that bored yet.

>and proxies do not preserve HTTPS without being able to MITM

This is simply not true in the slightest.

Web newb here. Why are these things so hard to mask? Can't redirect be denied/caught by the Python requests libraries?
It can ofc, but the question is always what do you do with the content :)

But in any case anything that is too sensitive to send from your own IP should not be sent over a medium that you have no ability to verify if it's being logged and by whom.

Open proxy operators aren't charities most of them are dubious at best.

If you want anonymity cryptocurrency VPS in data heaven jurisdiction or TOR is the best way to go, if you don't need that much anonymity than "proven" no-logging VPN providers are also better since they guarantee higher privacy than unauthenticated open proxies.