FAQ 8: Surfing and Security

Introduction

Note: Some of these links have died out, so I'll see if I can find new ones to replace them. If you have any you wish to add, post a note at Epsilon board.

People have been nagging me to make a security page for years, so I figure I might as well put up a few things simple notes on it. ;)

In the past I helped the Lightbringer set up his "Securesurf" site, but it might be nice to have a FAQ on a few of the more commonly asked subjects.

As a disclaimer, nothing on this page originates directly from anyone else. All of the information here was researched and verified through multiple sources.

I should point out that you may see several points presented here can also be found in the Lightbringer's page. This is because I have contact with him and have presented many of these topics to him personally.

Related Links

Here are pages on this site that deal in part with security:

  1. Uncle Willy's proxy list + extra (archived on this site with permission)
  2. FAQ 5: Rules of Acquisition
  3. FAQ 7E: Staying Safe
  4. FAQ 12: Spam and Spoof
  5. FAQ 16: Security in General
  6. Cryptology FAQ (by Doctor Who) - version 10
  7. Pranks people post

Here are a few assorted links:

  1. The Lightbringer's Page Made by a good friend of mine ;)
  2. Privacy Links
  3. Things to clean your hard drive with
  4. List of Remailers 1
  5. List of Remailers 2
  6. Cryptology FAQ
  7. Anonymous Usenet Poster
  8. Anonymicer Usenet Remailer
  9. Netspy

Suggestions for Browsing Safely

Below are various possible measures you can take to protect yourself when browsing. Not all of them may be necessary, depending on your situation and usage:

  1. Use an anonymizing proxy
  2. Disable Java, Javascript, and/or Active-X (for IE users)
  3. Turn off image loading
  4. Avoid mystery sites
  5. Don't click on links unless you roughly know where it leads or what you're doing. ;)
  6. Use a plain browser

An anonymizing proxy

Lists of Proxy servers

  • Uncle Willy's proxy list + extra (archived on this site with permission)
  • http://www.lightspeed.de/irc4all/eproxy.htm
  • http://proxys4all.bikkel.com/
  • http://akihiro.gd.nu/PRX/s-othersP.cgi
  • http://www.infovlad.net/internet/proxydata.html

    Thanks to Ziggy for the last two. ;)

    What a proxy can do

    In general, there are three useful things that a proxy can do for you:

    1. A proxy may disguise your IP from sites that you visit and anonymize you.
    2. In a few cases (not many), a proxy may be faster than without a proxy.
    3. A proxy may perform an additional service such as translation, stripping pages of javascript, etc...

    Not all proxies do the above. In fact, most don't even do any. So, it's important that you make sure that the proxy you are using will do what you want. You can test this using links provided later on.

    the Anonymizer

    In general, if you want to cover all security flaws dealing with websurfing, the most common proxy for the job is the Anonymizer. If you don't like the Anonymizer, there are thousands of other proxies that will also do the job for you. ;)

    For example, to use the Anonymizer you can place http://invis.free.anonymizer.com/ or http://anon.free.anonymizer.com/ in front of the url you want to visit. Alternatively, you can configure your browser's proxy option to use the anonymizer (so you don't have to type it in front of every url you visit).

    What's thedifference between using invis.free.anonymizer.com/ and http://anon.free.anonymizer.com/? The difference is that http://invis.free.anonymizer.com/ has no delay at first while http://anon.free.anonymizer.com/ does.

    A demonstration

    Here are some diagnostic urls without the anonymizer:
    http://www.anonymizer.com/snoop.cgi
    http://www.cs.ndsu.nodak.edu/~breid/mycgi/echo.cgi
    http://www.helie.com/BrowserCheck/

    In each case, the above url should display your IP. IP stands for "Internet Pointer" and is the numerical address of your computer on the internet. Depending on your ISP, it may change each time you sign on, though it will generally remain within a certain range until you change ISPs.

    Here are the urls with the anonymizer:
    http://invis.free.anonymizer.com/http://www.anonymizer.com/snoop.cgi
    http://invis.free.anonymizer.com/http://www.cs.ndsu.nodak.edu/~breid/mycgi/echo.cgi
    http://invis.free.anonymizer.com/http://www.helie.com/BrowserCheck/

    In each case, you should not see your actual IP displayed. Instead, the IP you see should be 209.75.196.2 instead. 209.75.196.2 = sol.infonex.com, which is the Anonymizer proxy. In other words, as far as IP is concerned any webpage you visit cannot distinguish you from anyone else visiting who is using the Anonymizer.

    Where to test your proxy

    There are other proxies other than Anonymizer that also hide your IP. Remember, some proxies do, some proxies do not. Before you use another proxy, you should test it out with one of the following sites and make sure that your real IP is not detected:

  • http://groucho.dbc.bib.dk:1080/cgi-bin/dumpx
  • http://ba1979.hypermart.net/cgi-bin/diag.cgi
  • http://wwwp.cs.unc.edu/wwwp-f98/docs/resources/perl/perl-cgi/programs/demos/cgi_env_vars.cgi
  • http://www.cs.ndsu.nodak.edu/~breid/mycgi/test.cgi
  • http://www.cs.ndsu.nodak.edu/~breid/mycgi/echo.cgi
  • http://www.forsmark.uu.se/cgi-bin/test.cgi
  • http://thor.prohosting.com/~acis/cgi-bin/env.cgi
  • http://www.snafu.de/~hweede/pulin.htm
  • http://www.tamos.com/bin/proxy.cgi
  • http://cavency.virtualave.net/proxy/

    Note: All but the last are compliments of Uncle Willy. ;)

    Lists of proxies are linked to at the beginning of this section.

    Turning off Java

    Reasons to turn off Java

    There are many reasons why you may wish to turn off java and javascript until you need them. Turning off java will avoid annoying popup windows or ads that you might see at websites. In addition, it will prevent people with bad intentions from doing something annoying to you through java or javascript.

    For a few actual examples of what annoying things some people have posted in the past, try seeing the pranks page. If you see any annoying or harmful java or javascript posted at a message board, you should warn incoming visitors of it.

    Turning off Active-X is exspecially important for IE users in a few cases if you are concerned about someone with bad intentions trying to play a prank on you.

    How to turn off Java

    Here is how to turn off Java and Javascript.

    Internet Explorer 4.x
    As Lord Byron says, this is how you turn off Java on IE4: From within IE 4.0 you will select "veiw" then "internet options" and then click on the "security tab" at the bottom corner. You then choose "custom" and click the "settings" button. Then scroll to the "Java" category and select disable. You can also turn off other scripting from here as well or have it to prompt you before it runs...
    [I suggest you turn off all Active-X until needed]

    Internet Explorer 3.x
    To disable Java in Internet Explorer 3, go to View -> Options menu. Select the Security tab. Uncheck the four boxes in the Active content area, in particular the last two.

    Netscape 4.x
    To disable Java in Netscape 4, go to the Edit -> Preferences menu option. Select Advanced category. Uncheck the boxes to disable java and javascript.

    Netscape 3.x
    To disable Java in Netscape 3, go to Options -> Network Preferences. Select the Languages tab. Uncheck the two boxes there. Only in a few pages does Java make a difference, and on those pages it shouldn't be too much trouble to change your settings.

    Only on a few pages does Java make a difference, and on those pages it shouldn't be too much trouble to change your settings.

    Turning off Images

    Reasons to turn off Images

    If you are only interested in the information of a site or want a quick preview, one quick way to surf is to turn off images. This allows you to load graphic-intensive pages much faster because the browser will not load any of the images on the page. On Netscape, if you want to later view the images at the page, press the button on the toolbar that says "Images".

    Another reason you might want to turn off images at certain sites is in case a site is using an image pagecounter to record your visit.

    Here are a summary of the benefits:

    1. Pagecounters will no longer load on your page.
    2. With Netscape (but not IE), you will be able to see the entire page quickly (one page loaded 200 times faster because it had tons of images on it).
    3. If/when you want to see the images on the page, there is a button at the toolbar for Netscape that says "images". Click on it to view the images for that page.

    How to turn off Images

    Internet Explorer 4.x (by nothere)
    for Internet Explorer 4.0 you will go to View then down to options...then to advanced.... scroll down to Multimedia and unmark the "show pictures" and "smart image dithering" and that will do it...
    now if you wish to see an image on that page you can right click on that image and go to show picture and it will load the image that you ask it too but make sure the page has fully loaded before doing so and do not load the image of the pagecounter itself

    Internet Explorer 3.x

    For IE3, go to View -> Options. Under the General options, uncheck the box that says display images. You might also want to uncheck the other box for sounds too if you find them loud or annoying at times. ;)

    Netscape 4.x
    Edit->Preferences...choose Advanced and uncheck the box "Automatically load images"

    Netscape 3.x (by Pericles)
    Click [Options]
    Uncheck [Auto Load Images]

    To view images:
    For one image - Right click on image, select [View Image]
    For all images in frame - Click [Images] Button

    If someone ever does post a counter to a message board, you should immediatedly copy the image location (and optionally the link associated) and repost it to several other off-topic message boards.
    This will hopefully distort the statistics just a bit and deter the more rational spammers. ;)

    Note that any images you have already loaded *prior* to changing this option will still be displayed. This option only prevents your browser from loading *new* images. ;)

    Avoid mystery sites

    At times you may wish to avoid mystery sites. Generally speaking, if you want to avoid spam sites, stick to sites in the .jp domain unless you actually know what the site is beforehand and have a good referral.

    Here are the warning signs of a spam site:

    1. The person advertising the site says "Come here!" or "Free stuff!" or something that "real" people don't say about sites. ;)
    2. The site advertised does not use its domain name but its IP instead. For example, instead of saying http://www.spam.com they advertise http://206.10.25.251 instead. Both urls lead to the same site (try the two urls yourself), but when you see someone advertise the second url instead of the first, it is a common sign of spam.

    Avoid clicking on links unless you know what you're doing

    In some cases you might not want to click on links. As an example, click on the following link:
    http://www.helie.com/BrowserCheck/

    If you look carefully you will see that the Browser Check can tell what site you just came from (assuming you clicked on the link instead of typing it out).

    Now open a new browser window (so that you can make a comparison) and copy and paste the url (instead of clicking on it).

    The difference should be that in the first case, the page you visit will know what was the last page you were at. In the second case, the page that you visit will not. Rely on common sense to determine when you should care about this and when you shouldn't. ;)

    The technical term for this piece of information is the "Referrer" header. The X-Referrer header is not used if you type out a url, only if you click on a link to another url.

    Demo of a traceroute

    Here is an example of a traceroute being done. It basically maps the path between two points on the internet with additional info such as the time each hop takes (3 numbers are listed because this test was done 3 times).

    In this particular demo, the originator is in Japan and the destination is in the United States.

    1 ntt-tky-cisco1-s2-6.cnoc.imnet.ad.jp (202.241.0.17) 12 msec 12 msec 12 msec
    2 ntt-tky-cisco2-fddi1-0.cnoc.imnet.ad.jp (202.241.1.66) 12 msec 12 msec 16 msec
    3 kdd-im-cisco-f4-0.inoc.imnet.ad.jp (202.241.1.50) 16 msec 16 msec 16 msec
    4 202.239.171.69 204 msec 120 msec 120 msec
    5 hs-gw1.kddnet.ad.jp (202.242.132.152) 128 msec 124 msec 124 msec
    6 border5-hssi1-0.sacramento.mci.net (204.70.120.5) 124 msec 136 msec 124 msec
    7 core2-fddi-0.sacramento.mci.net (204.70.164.49) 124 msec 124 msec 136 msec
    8 core4-hssi-6.sanfrancisco.mci.net (204.70.1.233) 128 msec 120 msec 144 msec
    9 mae-west-nap.sanfrancisco.mci.net (204.70.1.14) 184 msec 160 msec 160 msec
    10 mae-west-nap.sanfrancisco.mci.net (204.70.1.14) 160 msec 156 msec 160 msec
    11 mae-west.cais.net (198.32.136.101) 128 msec 144 msec 140 msec
    12 lst-to-san-fran-atm-ds3.cais.net (206.161.255.181) 216 msec 232 msec 244 msec
    13 lst-to-mclean-ds3.cais.net (206.161.255.26) 276 msec 276 msec *[0] 
    14 idsonline-gw.cais.net (205.252.5.11) 208 msec 268 msec 204 msec
    15 idsonline-c.sb1.cais.net (206.161.140.181) 216 msec 220 msec 240 msec
    16 reclaimed.agis.net (204.157.204.11) 224 msec 220 msec 212 msec
    17 russ-smith.idsonline.com (205.177.128.2) 468 msec 376 msec 460 msec
    

    What you see above is the results of a traceroute. The person doing the traceroute sends out 3 sample packets. The packets then hop from one place to another until after 17 hops it lands on the destination server. The first packet took 468 milliseconds in all, the second 376, the third 460. The number in parenthesis is the IP of each respective domain (for example russ-smith.idsonline.com = 205.177.128.2).

    To do a traceroute, there are various programs that will allow you to perform one listed in FAQ 6B. Alternatively, if you have Windows, then at a DOS prompt while online type in:
    tracert [IP]

    ...where [IP] is the IP of what you want to perform the traceroute on.

    How to compile a list of sites

    This is something random that I just threw in here. I got asked about this often enough to put this here. ;)

    In any case, the answer is pretty straightfoward and intuitive, so it should be nothing new to most of you. First, find a single site that has what you want and has links (you can find such a site by using a search engine). Once you found a site with links, most of the hard work is already done for you; chances are the webmaster of the site you're at already took the trouble of searching for related pages. So, instead of doing it from scratch yourself, just visit the links he or she has. Keep track of what types of links work well and what don't, so that you can learn to be more effective.

    Through experience, common sense, and divinely inspired instinct, you will know which links will lead where you want (for the most part). I must stress common sense as the key word here ("key word" being a pun if you're using a search engine ;).

    Chances are that if you are looking for sites on a particular movie, game, or person, you'll be able to use this method to find most of such sites that are worth visiting.

    ========================================
    A note about saving files
    ========================================

    Sometimes, you'll notice that if you click on a link to a file, your browser will start displaying it as weird text, instead of downloading it like it usually does. The way to fix this is simple. Instead of simply clicking on the link, hold down SHIFT and then click it. This will force your browser (at least Netscape) to ask you if you want to save the file. This works for anything being linked to, even a link to a webpage (holding shift would cause you to save the .htm file to your hard drive). It also works for pictures but only if the picture file is actually being linked (not merely displayed as it usually is).

    ========================================
    Quick ways to download large numbers of files
    ========================================

    If you prefer not to use Anawave Websnake (a program that automatically downloads files off of a webpage), then here are a few alternative ways to download a large number of files. (instructions for Netscape)

    Method 1: Hold down SHIFT before clicking on the link to a file you want to download. Note that it must be an actual link, where your mouse changes shape when passing over the link. If you do SHIFT and click, that should pop up a window asking you where you want to save the file. Press enter to quickly accept the defaults. Repeat. The advantage is that this is a simple two-step process, which can be used for pages with a large index of links to files (large meaning from 50 to 400 files).

    Method 2: Right click on an image (just click, no need to hold down the mouse button), press S (for Netscape 2 or 3), and then press enter. This is a three step process, and the first two steps accomplish exactly the same thing as the first step of method 1. I actually prefer this method over method 1, mainly because I can simply tap buttons instead of holding down and time the buttons, but both methods are very fast for me. Note: For some silly reason, Netscape 4 does not allow you to do this (they assigned two commands to the S button, so Netscape 4 can't decide when you press S and does nothing).

    Method 3: If the above two methods do not work for you, see if you can figure one out that does work with your browser by experimentation. I found that the more uncommon shortcuts vary significantly between browsers, even between two different versions (like in the case of Netscape 4).

    Once you got several threads (each download you start is a thread) going, you can sit back and read a book, play tetris, or anything else you want (use your imagination ;). The number of threads that's best varies depending on:
    -the size of the files you are downloading
    -the quality and rate of your connection
    -the reliability of the server you're downloading from

    If you're not sure, it's always best to underestimate. I've gotten up to 20 threads going at one point. This was not because it was any faster than 5 threads. It was simply because I wanted to sort some files on my computer meanwhile (and 20 threads would give me plenty of time). However, if the page you're downloading from is not that reliable (it can't handle too many connections, etc...), then there is a chance that a download will stall and be cut off prematurely (resulting in an incomplete download).

    Personally, I find these methods to work just as fast as Anawave Websnake. The disadvantage is that these methods aren't automated like Anawave. The advantage is that you only get the files you want, while Anawave might blindly download lots of things you don't want. Also, Anawave is harder to configure.

    ========================================
    Suggestions for bookmark file (probably applies more to Netscape than IE)
    ========================================
    If you have lots of links, I suggest you organize them systematically.

    First you might want to sort them by category (Bluebirds, sprites, software, etc...). Of course, you might want to consider whether or not a friend/family member might have access to them before you store bookmarks. ;)

    For example, one girl I knew was fooling around with Netscape and was somewhat bored. She began visiting my bookmarks and almost visited one of the Bluebird (women blessed by God) sites. Then again, she was a lesbian, so maybe I wouldn't have been so embarrased (and maybe even turned her on for once. ;)

    But I digress! Now if you do plan on having bookmarks, I suggest also placing a few words describing content. For example, you might write "inspirational artwork" as a description for Vivian Hsu, or "asian movie reviews" for Hsu Chi, for example ;) Anything will do so long as you can remember it.

    More importantly, list as good an estimate as you can on the number of images you found. That way, if the site adds more images, you'll be able to tell. This will also give you an idea of what the site is like in terms of size.

    Leave other useful information that will help you remember specifically which site it is (for Dynamix's site, you might say, "Gates of Heaven" or "Older women" ;) If your memory isn't too good, make it more obvious (like dynmx or just spell it out if you don't care).

    I also prefer to place sites that frequently update in a directory so that I'll visit them every month or so. Moving bookmarks around with Netscape is easy. You can even drag and drop multiple bookmarks (after highlighting them).

    ========================================
    Suggestions for organizing files
    ========================================

    This section is dedicated to Casahobo, who has been very blessed of late. May all of you be so blessed as he that you will be forced to read this section out of desperation. It wasn't too long ago that I had to sit down and work this out myself out of desperation. ;)

    I'll refer to ACDSee a lot, which is detailed in FAQ 6.

    In order to better visualize the model I'm presenting, I'll list a skeleton version of the directory structure. This isn't too close to the structure or names I use, but it has all the basics:
    A (Main directory used to hold subdirectories; I usually keep nothing here)
    A/sort or A/temp (I use it to temporarily hold files to sort; you might use it as a download directory)
    A/work or A/task (stores files that you plan to work on, like ones with masks, etc...)
    A/bluebird (stores miscellaneous bluebird files that you only have a few of)
    A/named/Vivian (stores your Vivian Hsu collection!)
    A/unnamed/a (Stores that other model you don't know the name of)
    A/unnamed/ (stores thumbnails or previews of directories "a", "b", etc...so you can figure out what series is where)
    A/unnamed/few (You don't know the model's name, and you don't have enough of the model to make a directory for the series, so you can put it here)
    A/trash (You think you should get rid of a file, but you feel you might regret it. So, you can put those files here for later reonsideration)
    A/slide/swim (Stores a copy of all your favorite swimsuit files so you can view them one after the other in a slideshow. Just use ACDSee and hit enter. I suggest using only a copy unless you are desperate for space. Here you might compress that 400kb file into a quicker-loading 100kb file).
    A/slide/favorite (Stores a copy of all your overall favorites)
    A/specific (stores subdirectories that contain specific types of files that aren't easy to classify otherwise)
    A/specific/vid (stores your videos)

    Keep in mind I use over 200 directories, and even then some folders are getting filled to the point where they are hard to manage. Still, you don't see me complaining about my oversized Natusko Tohno collection. ;)

    Over time I have adopted many organizational schemes, and I find that the best one is often just a person's preference. First of all, I strongly suggest using ACDSee to organize graphicals. Its shell is far superior to the one used by Windows 95. To put it briefly, it has nearly all the advantages of both Win 95 explorer and Win 3.1 file manager plus more with no major disadvantages (though some minor ones). It also saves a list of all directories that you have previously moved files into, sorted by order of most recently used (this is extremely useful and efficient). Note that this might not be so good if someone else might use ACDSee on your computer. ;) Most importantly, ACDSee allows you to view files as thumbnail icons or you can preview each one quickly. One other thing is that I suggest you make a hotkey for ACDSee, rather than using an icon. Unless, of course, you plan to be even more secure (I'm sloppy). A hotkey is something like where you can just press CTRL+ALT+F5 to run a program. To make a hotkey, right click on the program icon (or even its shortcut). Then in properties type in the shortcut you want (you can just press it, as long as it contains CTRL and either SHIFT or ALT and either F1-12 or 0-9).
    Here is a description of how to make all those directories. This may be difficult to follow. Assuming you have a large collection, you might want to make a directory (I'll call it A), then several subdirectories of A. One subdirectory (let's call it "named") can contain all the series of which you know the name of (I usually go by the name of the model). For example, under subdirectory 'named', I might have one called Vivian (for Vivian Hsu), Hsuchi (for Hsu Chi), Chiasa (you know), etc... If I know the name of the model but I hardly have any of the model, then there are several options. If it's nice, I might put it in a subdirectory named "few". Or if you don't know the name of a girl or are just interested in quickly archiving a particular series, make a subdirectory of "A" named "series", "unnamed", "arch", or whatever your choice. Suppose you chose "arch". Make a subdirectory of arch for this series (I usually just alphabetically like "archa", "archb", "archc", etc...).
    If you've just downloaded 1000 files from the newsgroups and want to clear up that download directory, I usually send all the files to A/sort. If some of them need to be unmasked, I send those to A/task (using preview of ACDSee you can very quickly tell which is masked and which isn't. You can even tell using thumbnails, though I prefer preview because I can go through 1000 files pretty quickly using just preview). If you prefer, you might even segregate the western and eastern files however manner you prefer.

    Notes on this system
    One advantage of creating a subdirectory to hold unnamed series is that often on the web you'll find renamed images. You can now tell if you already have the image by simply sending it to the directory which holds that series. Now you may ask how I can easily tell which directory holds which series when the unnamed series are assigned names like "a", "b", and "c". What I do is I copy the first file of each series into the main directory and then renname them to match the directories they came from. This way, I can quickly reference which directory has which series. I'm almost done with all the letters of the alphabet, so this is pretty useful. ;) If you put a series in the named directory, on the other hand, hopefully you'll be able to recall which directory has which series by the name itself.
    One important thing to point out is the advantage in using a single directory to unmask images. That's because unless you're using a batch mask, it's much more convenient for FLmask to save to the same directory. Otherwise, you'll have to change it each time you use another directory. I think gmask works similarly.

    Miscellaneous Note: On a typical IBM PC, a 32kb file takes up just as much space as a 0kb file. That's because of the way your computer allocates space. FAQ 7 has an explanation of this as well as a chart describing how to tell how large this number is for your PC.

    Other Links

  • http://www.onion-router.net/

    -Ramses

    I write these FAQs in hopes that it will benefit and educate you, so as always, feel free to correct me and add your own suggestions. You may remain anonymous or allow me to credit you with the suggestion (I will assume the former but definitely feel free to volunteer the use of your nick in the credits of the FAQ) 1