All times are UTC + 1 hour




Post new topic Reply to topic  [ 13 posts ]  Go to page 1, 2  Next
Author Message
 Post subject: Auto Route
PostPosted: Fri Apr 20, 2012 11:17 

Joined: Mon Mar 12, 2012 22:04
Posts: 39
Hi

Is there any place for a optional auto route server feature within Jondo.

IE

From the servers that you have available (after using the filter IE mix's in three different countries)
You would auto route to the next mix each time you connected to jondo - so would would have to re-start jondo five times before you started back on the same mix server.

This of course would not suit everyone for various reasons (speed, location of mix's etc)
But if everyone kept changing servers each time they log in this would only greatly increase everyone's anonymity ??


Top
 Profile  
 
 Post subject: Re: Auto Route
PostPosted: Fri Apr 20, 2012 15:30 

Joined: Mon Mar 12, 2012 22:04
Posts: 39
auto rotate rather than route ooopppsss


Top
 Profile  
 
 Post subject: Re: Auto Route
PostPosted: Mon Apr 23, 2012 7:41 
User avatar

Joined: Thu Dec 04, 2008 18:02
Posts: 1054
There is already a "Automatically change services"-checkbox on the Advanced settings tab in the Anonymity section in your JonDo settings (only visible in the extended view). Is this not enough? And, if not, why?


Top
 Profile  
 
 Post subject: Re: Auto Route
PostPosted: Sat May 05, 2012 17:31 

Joined: Mon Mar 12, 2012 22:04
Posts: 39
can you tell us more about this function. I have it checked but have never noticed the rotation of servers either while logged on to jondo or in the next session using jondo


Top
 Profile  
 
 Post subject: Re: Auto Route
PostPosted: Thu May 10, 2012 2:18 
User avatar

Joined: Fri Jul 16, 2010 17:32
Posts: 272
anonuser112 wrote:
can you tell us more about this function. I have it checked but have never noticed the rotation of servers either while logged on to jondo or in the next session using jondo


from the JonDo help https://anonymous-proxy-servers.net/en/ ... neral.html

JonDo help wrote:
Automatically change services
This option randomly selects a service from the cascades set in your service filter if the active service fails or is unreachable.


it randomly selects a different service at the JonDo startup, too


Top
 Profile  
 
 Post subject: Re: Auto Route
PostPosted: Sun May 27, 2012 8:54 

Joined: Mon Mar 12, 2012 22:04
Posts: 39
Hi

The service / function I had in mind would remember the last mix used from your previous session and on start-up would randomly select a different mix different to the last one used.

If anyone was watching your traffic they wouldn't knw which mix to look at on your next session.

Yes people can do this manually but if it was set as default or option this would vastly increase everyone's overall anonymity


Top
 Profile  
 
 Post subject: Re: Auto Route
PostPosted: Tue May 29, 2012 10:02 
User avatar

Joined: Thu Dec 04, 2008 18:02
Posts: 1054
anonuser112 wrote:
The service / function I had in mind would remember the last mix used from your previous session and on start-up would randomly select a different mix different to the last one used.
Then an attacker would already know that you did not use the current cascade the last time you used JonDonym. Maybe that is already a small data point that is helping him...
Quote:
If anyone was watching your traffic they wouldn't knw which mix to look at on your next session.
How does the attacker you have in mind is separating your sessions and above all correlating these sessions with your internet activity? And how would your idea help against it?


Top
 Profile  
 
 Post subject: Re: Auto Route
PostPosted: Wed May 30, 2012 22:15 

Joined: Mon Mar 12, 2012 22:04
Posts: 39
"Then an attacker would already know that you did not use the current cascade the last time you used JonDonym. Maybe that is already a small data point that is helping him..."

Maybe then your last log in is not remembered and your mix server is selected from random from the mix's that are available after you have applied your filters.


"How does the attacker you have in mind is separating your sessions and above all correlating these sessions with your internet activity? And how would your idea help against it?"

The first mix IP is known by the attacker as they know the exit mix IP hence they will known which one of Jondo's mix's you are using. If it was known what time the target visited a said website at a particular time/s over a period of days it would be easy to work out through a process of elimination. This would be done by looking at which IP's where connected to the first mix and the time of connection - matching the two up would give you the victims IP

Adding a feature which automatically selects a random mix eliminates or at least's reduces the potential of this attack. Yes this can be done manually but people become lazy over time and do not switch mix's on each log in.

If everyone was switching mix's more regularly there would be no pattern


Top
 Profile  
 
 Post subject: Re: Auto Route
PostPosted: Mon Jun 11, 2012 10:07 
User avatar

Joined: Thu Dec 04, 2008 18:02
Posts: 1054
anonuser112 wrote:
"Then an attacker would already know that you did not use the current cascade the last time you used JonDonym. Maybe that is already a small data point that is helping him..."

Maybe then your last log in is not remembered and your mix server is selected from random from the mix's that are available after you have applied your filters.
I don't know how this helps your argument. Either a random mix (but not the one from the last session) is chosen for a new session or not. In the former case there is no filter helping here as the attacker knows for sure that you were not using the current mix. That is one of your constraints made above. in the latter case you have the current behavior. Why not just randomly chosing the last mix without the condition to not chose the one used in the last session?
anonuser112 wrote:
"How does the attacker you have in mind is separating your sessions and above all correlating these sessions with your internet activity? And how would your idea help against it?"

The first mix IP is known by the attacker as they know the exit mix IP hence they will known which one of Jondo's mix's you are using. If it was known what time the target visited a said website at a particular time/s over a period of days it would be easy to work out through a process of elimination. This would be done by looking at which IP's where connected to the first mix and the time of connection - matching the two up would give you the victims IP

Adding a feature which automatically selects a random mix eliminates or at least's reduces the potential of this attack.
It MAY reduce the potential of this attack. But that remains to be seen and one has to take into account all the new attacks that are emerging out of this idea. Btw: Tor which has more the design which you have in mind is affected by this attack as well. Currently, there is no defense available against an attacker who is controlling the connections to the first mix and from the last mix.
anonuser112 wrote:
If everyone was switching mix's more regularly there would be no pattern
That's too easy as humans can never be sure to act pattern free.


Top
 Profile  
 
 Post subject: Re: Auto Route
PostPosted: Tue Jul 24, 2012 21:52 

Joined: Mon Mar 12, 2012 22:04
Posts: 39
As Tor changes mix/nodes every 10 min's - can we have at least the option built in so the your connection server is randomly selected on connection or is it beneficial (for someone) that we all stay on several popular mix's ???


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 13 posts ]  Go to page 1, 2  Next

All times are UTC + 1 hour


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
cron
Free Trial for Premium Services
Free Trial for Premium Services
Get your free test code for JonDonym Premium services!
JonDonym News
JonDo Error Message
Fri, 03 Mai 2013
HTTPS Certificate Updates
Fri, 22 Feb 2013
Speaker's Corner
First-Party Cookies
Thu, 09 May 2013
JonDoBrowser 0.6 - Status Report
Tue, 16 Apr 2013
For your web site - free!
Get your free IP check image for your web site or forum here!
Latest software releases
JonDo 0.18.001
Tue, 29 May 2012
JonDoFox 2.6.14
Wed, 15 May 2013
JonDoBrowser 0.7 Beta
Tue, 21 May 2013
Live-CD/DVD 0.9.41
Fri, 12 Apr 2013