Re: [tor-talk] Appearing American

[mirimir <mirimir@xxxxxxxxxx>]

On 08/19/2013 06:45 PM, shmick@xxxxxxxxxx wrote:

> mirimir:
>> On 08/18/2013 09:05 PM, mick wrote:
>> 
>>> On Sun, 18 Aug 2013 10:32:13 -0700 Gordon Morehouse 
>>> <gordon@xxxxxxxxxxxx> allegedly wrote:
>>>> 
>>>> Your best bet if you *need* an American IP is to use a VPN.
>>>> 
>>> 
>>> I'm sorry Gordon but I think this needs to be said. On a list 
>>> devoted to tor, recommending a VPN is not ideal. Whilst a
>>> commercial VPN might buy you a geo specific location, at best it
>>> buys you /very/ limited anonymity and privacy.
>> 
>> That's true.
>> 
>>> But, yes, if all you are concerned about is (say) a US IP so
>>> that you can view Hulu, it might be acceptable. It depends upon
>>> your use case.
>> 
>> Well, one can use a VPN service through Tor. It's doable in Whonix
>> or with ra's gateway, and maybe in Tails (with persistent storage).
>> But I believe that reduces the anonymity that Tor can provide,
>> because there's a persistent connection that prevents circuit
>> switching.
>> 
>> Also, unless you're willing to mail cash or thoroughly anonymize
>> some Bitcoins, it needs to be a free VPN service. SecurityKISS
>> works, but throttles and limits daily throughput.
> 
> they also use google dns servers as their backup resolvers ... and
> used easy-rsa for their certs ...

You can force your own DNS servers. It's easy using Network Manager, or
with pfSense router/firewall VMs as openvpn clients.

Also, I'm not very concerned about SecurityKISS using Google DNS
servers, given that I'm connecting to them through Tor, and then through
SecurityKISS. Using firewall rules and routing, you can prevent leaks
around both the Tor and SecurityKISS tunnels.

>>> Best
>>> 
>>> Mick 
>>> ---------------------------------------------------------------------
>>>
>>>
>>> 
Mick Morgan gpg fingerprint: FC23 3338 F664 5E66 876B  72C0 0A1F
>>> E60B 5BAD D312 http://baldric.net
>>> 
>>> ---------------------------------------------------------------------
>>>
>>>
>>>
>>>
>>
>
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsusbscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk