Security musings (reflectorium)
Security musings (reflectorium)
Tuesday, January 04, 2005
  Defeating web-based content filtering on gateways...
Rory has some comments on proxies that obfuscate the communication at http://raesene.dnsalias.net/archives/000156.html

(Axel pointed me towards this via http://balrog.de/security/archives/2005/01/04/55_security-is-not-a-product-once-again )

Personally, I think one shouldn't focus on these cgi/php-based proxies too much. Isn't it far easier to use google's "translate that page" functionality? Or Anonymizer and Co?
.. or - to the same end - a trusted SSL-based reverse proxy???

Of course, the cgi/php-based proxies will give you
+ clicks 'n hits on someone's web ads
+ and a nice click/usage history somewhere

Should be ideal for phising too.. (So please beware!)
 
Comments:
hi,

Interesting points, the main area I was thinking of this was, was for corporate users to bypass content filtering.

I must admit I'd not thought of the idea of the google translate page functionality, nice one :o)

The anonymiser style access I didn't think was too important in this content as mostly they'd be filtered by products which companies tend to use to restrict access (like surfcontrol).

but yeah the "best" one would be a SSL based site for proxying access as it removes any trail (other than the fact that the SSL site has been hit)
 
Post a Comment


Me enjoying a "Mate-Club", Alt-Landsberg near Berlin, summer 2003.

RSS Feed now atom.xml!
My public bloglines universe

Essential Security Web-Sites
Internet Head Up Display, Internet Storm Center incl. Handler's Diary NewsNow.co.uk on Virii and Security - Messagelabs stats, Trendmicro, Symantec, CAI, McAffee, F-Secure -- securityfocus, packetstorm


Recently added Detections from CAI
Standalone Virus Cleaner
Trendmicro Sysclean and Signature, Symantec Removal tools, Stinger from McAfee, F-Secure removal tools, Bitdefender free removal tools
The Internet Traffic Report monitors the flow of data around the world. It then displays a value between zero and 100. Higher values indicate faster and more reliable connections.
ARCHIVES
11/01/2003 - 12/01/2003
/ 12/01/2003 - 01/01/2004
/ 01/01/2004 - 02/01/2004
/ 02/01/2004 - 03/01/2004
/ 03/01/2004 - 04/01/2004
/ 04/01/2004 - 05/01/2004
/ 05/01/2004 - 06/01/2004
/ 06/01/2004 - 07/01/2004
/ 07/01/2004 - 08/01/2004
/ 08/01/2004 - 09/01/2004
/ 09/01/2004 - 10/01/2004
/ 10/01/2004 - 11/01/2004
/ 01/01/2005 - 02/01/2005
/ 02/01/2005 - 03/01/2005
/ 03/01/2005 - 04/01/2005
/ 04/01/2005 - 05/01/2005
/ 05/01/2005 - 06/01/2005
/ 06/01/2005 - 07/01/2005
/ 07/01/2005 - 08/01/2005
/ 01/01/2006 - 02/01/2006
/ 02/01/2006 - 03/01/2006
/ 03/01/2006 - 04/01/2006
/ 06/01/2006 - 07/01/2006
/ 08/01/2006 - 09/01/2006
/ 09/01/2006 - 10/01/2006
/ 12/01/2006 - 01/01/2007
/ 03/01/2007 - 04/01/2007
/ 05/01/2007 - 06/01/2007
/ 07/01/2007 - 08/01/2007
/ 08/01/2007 - 09/01/2007
/ 10/01/2007 - 11/01/2007
/ 11/01/2007 - 12/01/2007
/ 12/01/2007 - 01/01/2008
/ 02/01/2008 - 03/01/2008
/ 09/01/2008 - 10/01/2008
/ 10/01/2008 - 11/01/2008
/ 03/01/2009 - 04/01/2009
/ 09/01/2009 - 10/01/2009
/ 11/01/2009 - 12/01/2009
/ 01/01/2010 - 02/01/2010
/ 02/01/2010 - 03/01/2010
/ 06/01/2010 - 07/01/2010
/


Powered by Blogger


related blogs: general and family research