I understand that all traffic between Tor nodes is encrypted.

I understand that the Tor exit node is able to see all unencrypted traffic to/from website.

I understand Tor is all about anonymity and has little to do with security.

What is the best, most efficient way to run both securely and anonymously using Tor? Do Is setting up OpenVPN a solution running over Tor??

If you dont have a vpn running, this is a page with easy steps how to get one running:

Windows XP VPN Setup
http://wireless.gumph.org/content/6/4/011-howto-xp-pptp-vpn-user.html

Windows Vista VPN Setup
http://theillustratednetwork.mvps.org/Vista/PPTP/PPTPVPN.html

Ubuntu GNU/Linux VPN Setup
https://help.ubuntu.com/community/VPNServer

It is not rocket science to set one up.

About Tor
Tor is a whole different story, its main goal is not securing your connection, but to anonymize it, the packets are not being encrypted, only passed to a mass of proxies.

So if you want to defend yourself from sniffing attacks, use a vpn, if you just want to be anonyme, use tor.

Btw, combining tor and vpn isnt such a good idea, it does not only cricitally slows down your network connection, but also the more machines your packets are being processed over, the more likely theres one inbetween, that might be able to break it.

The other mentions of SSH tunneling work well, but only for limited applications. SSH tunneling is really a hack around of a real VPN.

A real VPN is the *correct* answer, even though it’s kind of a pain to set up. OpenVPN is an SSL VPN (and the ONLY secure SSL VPN) that’s free, though you need to understand Linux routing to really get the benefits. Other “SSL VPN” solutions that have “no client install” or work like VNC are SNAKE OIL and TERRIBLY INSECURE.

I second the earlier suggestion about an SSH tunnel, that’s how I protect my Wifi use on public networks. SSH to a home SSH server, and tunnel my web browsing over that connection. Or tunnel remote desktop/VNC over that connection and then run everything from your home computer.

Just finish the Frontier Visionary Interview with Alvin Toffler ( http://www.hwswworld.com/uploaddownload/interview/toffler.mp3 ), I was impressed by his sharp mind as well as his talking speed, that is probably why he could made those precise predictions, such as Prosume, a combination of outsourcing and DIY

Through the interview, the following viewpoints have been drawn:

1. There is no truth, only the correctness of truth to be proved. That is the fundamental limitation of human perception of reality

2. Minority power is good in certain way; it is ridiculous a high school drop out shall have the same voting as that of post-doctor. Elite ruling is good for a less developed world for sure

3. To fix the education system, the key is not the system itself; the key is people, especially those students. How to motivate them is a key challenge, since current generation and future generations need not study and work hard in order to make a decent living as we did before

4. The causes and effects of innovation to drive knowledge creation is yet a wild land or wonderland to be fully explored

5. There is a possibility for business miniature to happen, it will be not a shame any more for one-man shop, or one-shop man

6. Where will the modern civilization head on remains an open question

7. Human intelligence will be enhanced through technology advancement

That’s what I’ve been looking into but wasn’t sure of which software to use. Thank you for the tip.

http://shiftplusone.com/haha.jpg

Because of the heat and because I’m not having an easy time adjusting to a home office after spending the last few years working in buildings with open office floors and surrounded by people with ADHD, I’ve been setting up shop at the Special Starbucks. The only problem is, I don’t feel very confident that any of my data is secure.

Since signing up for T-Mobile wifi a couple of days ago, I’ve been feeling a strong need for a VPN. In fact, I just FTP’d the above linked jpg from one server to my desktop and back up on the Shift+One Media server. That’s 2 unencrypted access codes right there!

My big question is, why aren’t there more solutions available? I would think that the big-hot thing would be wifi security suites. Is this an emerging market or is someone missing the boat?

What I will likely do is to provide a consumer-friendly wifi security page on the Shift+One Media website once I can work out all these issues for myself.

!

Follow me on
Lockergnome – http://themarkside.com
Twitter – http://twitter.com/markdavidson

too easy these days with applications like MS SBS2003 (this is what i use for my family/home email and web pages etc).

this would also add a ton of other functionality like auto backups which you’ve asked about before. Plays nice with asterisk for voip if you get isa 2004 as well.

http://www.cognation.net/asterisk

Cheers,
Dean

Great topic, Chris. To escape the 1000 degree heat today, I signed up for a T-Mobile account–like I need another IP service provider–and headed off to the special Starbucks. The only problem was, I was too concerned about data security to really get any work done. (There was a creepy and weird guy who kept looking at my screen while I was tooling around WHM… nice).

Not only was I nervous about checking email but I wanted to register a domain… http://themarkside.com and create the account entry on my server.

Okay, I’m going to go back up and read your post now. Very timely.

Once you have that set up. Download Hamachi on any other computer you would like to have connect to your Hamachi network. Join the network by inputting your Hamachi network name and password..

Now you have an alternative to VPN without exposing open ports. You can do WIndows File Sharing, FTP, VNC or Remote Desktop all from a secure network using 256 bit AES encryption.

You can download there free software @ http://hamachi.cc

Here is a little tip: For extra added security you can still run your VPN server. Just close the ports on your firewall. Install Hamachi onto your VPN server. Now when clients join your Hamachi network they can still VPN into your server (just use the IP address assigned by Hamachi, input that into your VPN client)

Now you have double the security and encryption.

Wirelesspacket

If anyone needs more information or has questions, you can post on the Wyldryde forums, or talk with one of the IRC Operators (such as myself) on Wyldryde. :)