• 0

Tor + Encrypted VPN

Asked by gohpep,

 Share Followers 0
Go to solution Solved by LogicalApex,

Question

gohpep
Posted

It is to my understanding that Tor provides anonymity, meaning that people can see what you do, but don't know who you are, while with an encrypted VPN, you get confidentiality, meaning that people can't see what you do, but can get a general idea of who you are using your IP.

 

Would it be possible to obtain anonymity and confidentiality by using Tor and an encrypted VPN together? What would the best configuration for this? (on Linux, preferably)

Link to post
Share on other sites

4 answers to this question

Recommended Posts

  • 0
+LogicalApex
  • MVC
  • Solution
Posted

Wouldn't make a whole lot of sense... The whole point of a VPN tunnel is to push your traffic through that tunnel and out to and specific end point. If you were to access the VPN through Tor you would negate the major benefit of Tor. As you'll be forcing your traffic through a singular endpoint... Tor works so well because the actual endpoint you're pushing out via changes frequently. This often isn't the case with most VPN services...

 

The only thing this can hope to protect your from is deducing your actual IP address as you're hoping to mask it to the VPN tunnel. I'm not sure the extra complexity will actually gain you any real security in this regard.

 

You're better off just using Tor in a proper manner (booted via a live OS like Tails) than you would be by trying to essentially nest VPN tunnels.

  • Like 1
Link to post
Share on other sites
  • 0
Andre S.
  • Veteran
Posted

Your ISP can know that you're using Tor, but it cannot know what you're doing on Tor. All communication is encrypted.

Link to post
Share on other sites
  • 0
gohpep
  • Author
Posted

Your ISP can know that you're using Tor, but it cannot know what you're doing on Tor. All communication is encrypted.

Ah, I know about ISP monitoring, which is solved with a VPN, but there is also the question of the end node inspection, and I think I read somewhere that monitoring can be done on that end. I thought that could be solved with a VPN.

Wouldn't make a whole lot of sense... The whole point of a VPN tunnel is to push your traffic through that tunnel and out to and specific end point. If you were to access the VPN through Tor you would negate the major benefit of Tor. As you'll be forcing your traffic through a singular endpoint... Tor works so well because the actual endpoint you're pushing out via changes frequently. This often isn't the case with most VPN services...

The only thing this can hope to protect your from is deducing your actual IP address as you're hoping to mask it to the VPN tunnel. I'm not sure the extra complexity will actually gain you any real security in this regard.

You're better off just using Tor in a proper manner (booted via a live OS like Tails) than you would be by trying to essentially nest VPN tunnels.

I found the link that sparked my curiosity in this, https://www.ivpn.net/privacy-guides/why-use-tor-with-a-vpn-service
Link to post
Share on other sites
  • 0
+LogicalApex
  • MVC
Posted

Looks like marketing hyperbole.

Tor itself is merely a VPN.

Link to post
Share on other sites
This topic is now closed to further replies.
 Share
Followers 0
Go to question listing

  • Recently Browsing   0 members

    No registered users viewing this page.

  • Similar Content

    • Google prepares more Privacy Sandbox trials as early testing shows promise
      By indospot
      Google prepares more Privacy Sandbox trials as early testing shows promise
      by João Carrasqueira



      About a year and a half ago, Google announced that it was setting out to create a set of standards that would allow advertisers and marketers to promote their products effectively on the web, while also being more conscious of user privacy. Called Privacy Sandbox, the initiative has been in development since then, and the company shared some updates on it today.

      Perhaps most notable is that Google has been testing something called Federated Learning of Cohorts (FLoC). This is a way for browsers to assign a user to a cohort based on their interests, without exposing them directly. Essentially, FLoC allows a browser to locally analyze the user's habits without sending them to a server, which then groups the user into a cohort, a set of users with similar profiles. These cohorts are designed to include thousands of people so as to avoid exposing individual users, and only the cohort is exposed to marketers.

      Google's testing has shown that advertisers can expect to make at least 95% as many conversions per dollar spent compared to cookie-based advertising, so ads can live on and be effective without violating user privacy. Following the success of Google's testing, Google says it will be opening up an origin trial for the feature starting with Chrome 89, coming in March. It will also begin testing the feature with advertisers on Google Ads in the second quarter.

      Google is also pushing forward with other new APIs and proposals that hope to render third-party cookies obsolete. One of the proposals is FLEDGE, which is designed to enable companies to target prior visitors on their sites using a dedicated "trusted server" to store information about ad campaigns. Another proposal would help advertisers measure conversion without using third-party cookies, again preserving the user's privacy. There's also Gnatcatcher, which would help prevent user fingerprinting by websites. Finally, the Trust Token API has been in testing to help prevent ad fraud and will be in an origin trial in Chrome 89.

      Google says it will keep working with the W3C and share more of its progress with Privacy Sandbox throughout the year. The goal is for these proposals to eventually become standards for all browsers to follow.

    • Indian government asks WhatsApp to backtrack on privacy policy
      By zikalify
      Indian government asks WhatsApp to backtrack on privacy policy
      by Paul Hill



      According to a report from Reuters, India’s Ministry of Electronics and Information Technology asked WhatsApp to backtrack on its planned privacy policy changes which saw it lose users to rivals Telegram and Signal. In a letter, the government complained to WhatsApp saying it was unfair that European users won’t be affected by the changes but Indians will.

      WhatsApp's planned changes have also attracted the attention of Turkish authorities which have launched an antitrust probe. In response to the criticism, WhatsApp delayed the enforcement of its new terms by three months so they won’t be enacted until May 15; ultimately, this will give India more time to pressure the firm over the planned changes.

      According to Reuters, the Ministry, writing to WhatsApp head Will Cathcart, said:

      Accompanying the letter are several questions that India’s IT ministry would like WhatsApp to answer, they ask about which categories of data WhatsApp collects from Indian users, the permissions sought by WhatsApp and the utility of each of these permissions, whether WhatsApp captures information about other running apps, what user profiling goes on and how WhatsApp’s privacy policies differ from country to country.

      WhatsApp has not provided comments to the media about the changes but it previously said the policy wouldn’t affect the privacy of users’ messages with personal contacts. Reuters reports that WhatsApp is running an advertising campaign in India to help quell people’s fears and keep them using the app.

      Source: Reuters

    • WPD (Windows Privacy Dashboard) 1.4.1765
      By Copernic
      WPD (Windows Privacy Dashboard) 1.4.1765
      by Razvan Serea



      WPD is a portable tool to manage your Windows 10 privacy and firewall settings, uninstall Windows apps, and decide what apps can access your information. WPD enables you to disable Telemetry, Customer Experience Improvement, Advertising ID, Input Personalization, Cortana, OneDrive and other Windows features that have the potential to invade your privacy. If you're not sure about any tweaks, there's a question mark icon next to each setting so you can be sure what you're changing. There's also an option that allows you to remove anything from the Windows Store that came with Windows 10 including Xbox, Photos, Tips, Get Office, and more.

      Core features:

      Privacy management - Customize Group Policy, Services, Tasks and other settings responsible for data collection and transmission. Firewall rules - Block telemetry IP's using firewall rules from the @crazy-max repository. Appx uninstaller - Easy remove pre-installed Windows Store garbage or any other app. Supported OS:

      Windows 10 Enterprise 1903, 1809, 1803, 1709, 1703, 1607

      Windows 10 Enterprise LTSC 2019, 2016, 2015

      Windows 10 Education 1903, 1809, 1803, 1709, 1703

      Windows 10 Pro 1903, 1809, 1803, 1709, 1703, 1607

      Windows 10 Home 1903, 1809, 1803, 1709, 1703

      Windows Server Standard 2016, 2019

      Windows 8-8.1

      Windows 7

      WPD 1.4.1765 changelog:

      Added

      Settings menu.

      Updated

      Build-in blocking rules.

      Download: WPD 1.4.1765 | 301 KB (Freeware)
      View: WPD Homepage

      Get alerted to all of our Software updates on Twitter at @NeowinSoftware

    • Tor Browser 10.0.8
      By Copernic
      Tor Browser 10.0.8
      by Razvan Serea


      Protect your privacy. Defend yourself against network surveillance and traffic analysis.
      Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. The Tor software protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody from watching your Internet connection and learning what sites you visit, it prevents the sites you visit from learning your physical location, and it lets you access sites which are blocked.

      The Tor Browser Bundle lets you use Tor on Windows, Mac OS X, or Linux without needing to install any software. It can run off a USB flash drive, comes with a pre-configured web browser to protect your anonymity, and is self-contained.

      Tor Browser 10.0.8 release notes:

      All Platforms

      Update NoScript to 11.1.7

      Windows + OS X + Linux

      Update Firefox to 78.6.1esr Android

      Update Firefox to 84.1.4 OS X

      Bug 40262: Browser tabs crashing on the new Macbooks with the M1 chip Build System - Android

      Bug 40195: repo.spring.io is not usable anymore Download: Tor Browser 10.0.8 (32-bit) | 68.1 MB (Open Source)
      Download: Tor Browser 10.0.8 (64-bit) | 69.7 MB
      View: Tor Browser Website

      Get alerted to all of our Software updates on Twitter at @NeowinSoftware

    • Facebook's Access Your Information tool gets a makeover and a new search tool
      By Jay Bonggolto
      Facebook's Access Your Information tool gets a makeover and a new search tool
      by Jay Bonggolto

      Facebook today announced a visual redesign for its privacy settings tool called Access Your Information. The tool was first launched in 2018 in the wake of the Cambridge Analytica scandal.

      Back then, the tool had two data categories that were rather broad, but the new makeover makes it easier to navigate and use. The latest version removes the data categories "Your Information" and "Information About You". It now breaks those pieces of information into eight categories, namely:

      Facebook also added subcategories to each of these categories to help narrow down your search for a specific type of data. On that note, there's now a new search functionality that lets you look for data categories you want to view or modify.

      The tool is also now more transparent in showing how Facebook uses your data to personalize your experience on its service such as by serving you an ad for a food delivery app based on your location, for example. Although you can already view this information in the "Why Am I Seeing This" tool, Facebook said it "wanted to make it easier for people to discover".

      Facebook is rolling out the redesigned privacy tool to iOS and Android devices from today. In the future, these changes will also go live on other platforms.