Anonymity - How to Anonymously access websites that block Tor - to be redone #54

New Issue

nihilist · 2024-09-23T13:09:59+02:00

nihilist commented

2024-09-23 13:09:59 +02:00

how to force a vpn through Tor (openvpn socks5-proxy) take it from https://blog.nowhere.moe/opsec/anonymity/index.html

nihilist added this to the OPSEC Tutorials (paid contributions) project 2024-09-23 13:09:59 +02:00

nihilist commented

2024-09-23 13:10:22 +02:00

assigned to nihilist
price: NA
deadline: NA

assigned to nihilist price: NA deadline: NA

nihilist added the

Complex

label 2024-09-23 13:10:50 +02:00

nihilist added

Doable

and removed

Complex

labels 2024-09-23 13:15:15 +02:00

nihilist changed title from ~~Anonymity - How to Anonymously access websites that block Tor~~ to Anonymity - How to Anonymously access websites that block Tor - to be redone

2024-09-23 14:45:48 +02:00

nihilist added the

To be improved / simplified / finished / fixed

label 2024-10-01 20:01:10 +02:00

nihilist commented

2024-10-29 08:31:51 +01:00

to be explained:

context: from your whonix VMs, you try to access [website that blocks tor] like monero.town
in short you need to access it anyway but your connection must not exit via tor, but rather via a VPN
and to maintain anonymity you must go through tor anyway. so you need a (you -> tor -> vpn setup)
flashback to the torthroughvpn tutorial, serverside context
so the idea is to force the VPN to go through Tor for that context
on top of that, the idea is to use a VPN that allows anonymous connections (via tor) and anonymous payments (via monero) like MullvadVPN
WARNING this setup removes the most important feature of Tor : stream isolation, you are making it all go through one circuit. therefore i recommend using this setup ONLY in case if a website blocks tor, and using the rest of your anonymous uses on a regular whonix VM, this should be only one-time uses.

to be showcased:

from a second whonix VM, show that the public IP is a tor exit node (validate it from shodan if needed / torproject check connection page) >> thats why you're blocked on monero.town
how to get a mullvadVPN subscription (via tor and monero)
how to get the openvpn tcp 443 ovpn file,
how to edit it with the socks-proxy 127.0.0.1 9050 to force it to go through tor
once connected, showcase that the public IP is no longer Tor, but a mullvad IP (mullvad check ip page)
and then showcase that you can access monero.town just fine.

to be explained: - context: from your whonix VMs, you try to access [website that blocks tor] like monero.town - in short you need to access it anyway but your connection must not exit via tor, but rather via a VPN - and to maintain anonymity you must go through tor anyway. so you need a (you -> tor -> vpn setup) - >> flashback to the torthroughvpn tutorial, serverside context - so the idea is to force the VPN to go through Tor for that context - on top of that, the idea is to use a VPN that allows anonymous connections (via tor) and anonymous payments (via monero) like MullvadVPN - WARNING this setup removes the most important feature of Tor : stream isolation, you are making it all go through one circuit. therefore i recommend using this setup ONLY in case if a website blocks tor, and using the rest of your anonymous uses on a regular whonix VM, this should be only one-time uses. ![image](/attachments/24f91e29-9535-463e-b489-51e9789c8eb7) to be showcased: - from a second whonix VM, show that the public IP is a tor exit node (validate it from shodan if needed / torproject check connection page) >> thats why you're blocked on monero.town - how to get a mullvadVPN subscription (via tor and monero) - how to get the openvpn tcp 443 ovpn file, - how to edit it with the socks-proxy 127.0.0.1 9050 to force it to go through tor - once connected, showcase that the public IP is no longer Tor, but a mullvad IP (mullvad check ip page) - and then showcase that you can access monero.town just fine.

image.png

375 KiB

👍 1

nihilist added

pushed to prod (1 month external review)

and removed

Doable

To be improved / simplified / finished / fixed

labels 2024-11-02 12:21:05 +01:00

nihilist commented

2024-11-10 16:49:31 +01:00

note for the future when mullvadvpn will drop openvpn support: