web based proxy servers

There's no exact definition of what constitutes a Secure anonymous proxy or so a place you can find one for free about the internet. But I'd like to add some cosmopolitan points and things to watch out for if you're searching for such a proxy server.

An authoritative fact to remember that simply adding the tag - ninja, elite or high anonymity to the description of an proxy server does in fact have no effect any on how secure that server actually is. This could sound an obvious point but I have personally agreed a huge list of supposedly 'Elite proxy servers' and to be honest my gran could have configured it more securely.

Lets for instance take one of the very basic premises of running a secure, anonymous placeholder server - what context is the proxy service running inch. Is this something you know about on proxy hosts you have used?

Let me tell you why - the absolute worse thing you can do is run the proxy service as root, yet I see many that are configured in just this way. The problem are that any flaw, bug or vulnerability with your placeholder server could lead to the compromise of the all machine. The root account gives complete control of the server, and with it all your browsing, all your logs and any traffic you send through that placeholder. This sounds pretty stupid but you will find that many 'free anonymous proxies' that appear in the clear are configured exactly like this.

There is a basal alternative which runs in the context of the drug user 'nobody', now this is much better as the account statement has no special privileges which could put the host at risk. But neither is it a suitable conformation for a high anonymous proxy and the reason as this is that the account will still have a few read and write privileges over public areas and directories. It will also have some rights over all backlogs created in the context of the 'nobody' user entailing potentially all users of the proxy have potential accession to all the proxy logs and files created along this user.

The most secure alternative is what I'd expect to see on any highly anonymous placeholder and that is that each user has a particular user ID for using the proxy server. This drug user account should have no other access rights whatsoever, apiece proxy session would run in the context of these individual user. This protects the security, anonymity of all user of the proxy and secures their files and logs from other surfers using the proxy service.

Configuring an anonymous proxy is extremely important, a badly designed and insecure proxy server puts all of it's drug user* and their information at risk. Remember whenever you apply a proxy server, you are creating a single backlog of all your browsing in addition to your ISP logs - if it is not secure you will comprise putting your security at great risk, in fact a good deal more than not using a proxy at all. Whenever you want a high anonymous proxy make sure you get one.

No comments :