tor, i2p, .bit and opennic portable suite

Forum rules
Warning !
Avoid using binary softwares from untrusted users.
Prefer compiling it yourself and verify sources.
Post Reply
virtual_master
Posts: 541
Joined: Mon May 20, 2013 12:03 pm
Contact:

tor, i2p, .bit and opennic portable suite

Post by virtual_master »

An interesting bundle, I saw it on reddit
http://www.reddit.com/r/onions/comments ... t_opennic/
http://namecoinia.org/
Calendars for free to print: 2014 Calendar in JPG | 2014 Calendar in PDF Protect the Environment with Namecoin: 2014 Calendar in JPG | 2014 Calendar in PDF
BTC: 15KXVQv7UGtUoTe5VNWXT1bMz46MXuePba | NMC: NABFA31b3x7CvhKMxcipUqA3TnKsNfCC7S

phelix
Posts: 1634
Joined: Thu Aug 18, 2011 6:59 am

Re: tor, i2p, .bit and opennic portable suite

Post by phelix »

+1
nx.bit - some namecoin stats
nf.bit - shortcut to this forum

biolizard89
Posts: 2001
Joined: Tue Jun 05, 2012 6:25 am
os: linux

Re: tor, i2p, .bit and opennic portable suite

Post by biolizard89 »

virtual_master wrote:An interesting bundle, I saw it on reddit
http://www.reddit.com/r/onions/comments ... t_opennic/
This looks extremely dangerous. Here's the source code:

Code: Select all

//PAC file by AyrA for various projects
//Get your own at https://ayra.ch/PAC

function FindProxyForURL(url, host)
{
		//I2P does not supports socks for some reason, even since SOCKS V5 has DNS support.
	var I2P="PROXY home.ayra.ch:4444";
		//Public TOR Proxy
		//1067 is used by AyrA. Hey it's my PAC file!
	var TOR="PROXY home.ayra.ch:1067";
		//Alternative Proxy for .bit Names
	var ALT="PROXY home.ayra.ch:9876";
		//Direct connection without a proxy
	var DIR="DIRECT";
	
	//Redirect .I2P to I2P proxy
	if (shExpMatch(host,"*.i2p"))
	{
		return I2P;
	}

	//Redirect .onion to TOR proxy
	if (shExpMatch(host,"*.onion"))
	{
		return TOR;
	}

	//Redirect .bit and OpenNIC to ALT-DNS proxy
	if (
		shExpMatch(host,"*.bit") ||
		shExpMatch(host,"*.bbs") ||
		shExpMatch(host,"*.dyn") ||
		shExpMatch(host,"*.free") ||
		shExpMatch(host,"*.fur") ||
		shExpMatch(host,"*.geek") ||
		shExpMatch(host,"*.gopher") ||
		shExpMatch(host,"*.glue") ||
		shExpMatch(host,"*.indy") ||
		shExpMatch(host,"*.ing") ||
		shExpMatch(host,"*.micro") ||
		shExpMatch(host,"*.neo") ||
		shExpMatch(host,"*.null") ||
		shExpMatch(host,"*.oss") ||
		shExpMatch(host,"*.oz") ||
		shExpMatch(host,"*.parody") ||
		shExpMatch(host,"*.pirate"))
	{
		return ALT;
	}

	//Route everything directly
	return DIR;
}
It's routing all your Tor/I2P/Namecoin/OpenNIC traffic through an unencrypted, non-private proxy run by the author of this bundle. There is no way to know what this proxy is doing with your data. All security/privacy advantages of Tor/I2P/Namecoin are useless with this bundle, and in fact this is worse than clearnet in terms of security/privacy (because the author's proxy can see all your data and hijack it at will).

I would strongly recommend avoiding this bundle.
Jeremy Rand, Lead Namecoin Application Engineer
NameID: id/jeremy
DyName: Dynamic DNS update client for .bit domains.

Donations: BTC 1EcUWRa9H6ZuWPkF3BDj6k4k1vCgv41ab8 ; NMC NFqbaS7ReiQ9MBmsowwcDSmp4iDznjmEh5

phelix
Posts: 1634
Joined: Thu Aug 18, 2011 6:59 am

Re: tor, i2p, .bit and opennic portable suite

Post by phelix »

biolizard89 wrote:
virtual_master wrote:An interesting bundle, I saw it on reddit
http://www.reddit.com/r/onions/comments ... t_opennic/
This looks extremely dangerous. Here's the source code:

...

It's routing all your Tor/I2P/Namecoin/OpenNIC traffic through an unencrypted, non-private proxy run by the author of this bundle. There is no way to know what this proxy is doing with your data. All security/privacy advantages of Tor/I2P/Namecoin are useless with this bundle, and in fact this is worse than clearnet in terms of security/privacy (because the author's proxy can see all your data and hijack it at will).

I would strongly recommend avoiding this bundle.
Thanks for the heads up!
nx.bit - some namecoin stats
nf.bit - shortcut to this forum

virtual_master
Posts: 541
Joined: Mon May 20, 2013 12:03 pm
Contact:

Re: tor, i2p, .bit and opennic portable suite

Post by virtual_master »

Thank you for analyzing it.
http://namecoinia.org/
Calendars for free to print: 2014 Calendar in JPG | 2014 Calendar in PDF Protect the Environment with Namecoin: 2014 Calendar in JPG | 2014 Calendar in PDF
BTC: 15KXVQv7UGtUoTe5VNWXT1bMz46MXuePba | NMC: NABFA31b3x7CvhKMxcipUqA3TnKsNfCC7S

Post Reply