Anonymity on the Internet: which is better, VPN or Tor?

Image courtesy of Blue Coat Photos at Flickr.com

Complete anonymity on the Internet is impossible and, in the best of cases, a particular phenomenon unfeasible of being maintained for extended periods of time. However, both the VPN and Tor networks help hide the user's identity from third parties. But which one of them is better? Let’s take a look at the similarities, differences, advantages and disadvantages of using VPN and Tor.

Online privacy has become a growing concern for millions of users worldwide, either due to the fact that they’re sharing all kinds of personal information with third parties such as Facebook, Google or Twitter; or to prevent possible attacks by cybercriminals; monitoring by government agencies like the NSA or to limit access to certain websites.

Even though some still believe that surfing the Internet is an anonymous activity, reality is stubborn. The incognito mode or private browsing offered by browsers like Google Chrome, Mozilla Firefox and others is not an effective method of maintaining your anonymity on the Internet, which is why more users are choosing to use a VPN or connecting through Tor.

Both are two methods of transport to surf the Internet. However, the differences between Tor and VPN networks are considerable: a VPN could be likened to an ultralight aircraft, pretty fast but also expensive; whereas Tor, could be compared with a bus, available to anyone, but much slower.

Advantages of using Tor

The purpose of Tor (The Onion Router) is anonymity when surfing the Internet. To do this, the user’s information bounces between different nodes before reaching its destination, so the last server is unable to know the location and private information such as the IP address of the source.

We said at the beginning that there’s no such thing as complete anonymity, and Tor is no exception. Although it’s one of the best systems to surf anonymously, the network’s end node decrypts the data to access the required destination by the initial user, opening the door to possible vulnerabilities. It is hard, but not impossible.

If you browse via Tor, it is essential for you to be aware of the fact that it is not a bullet-proof system. The security level is very high if you use secure connections (HTTPS), but otherwise it’s low.

To maintain your anonymity it’s essential that you avoid sending unencrypted personal information such as your email address, location or mobile phone.

Advantages of using a VPN

Image courtesy of PhOtOnQuAnTiQuE at Flickr.com

In simple terms, VPNs (Virtual Private Networks) add a private network -tunnel- on the main network of the user. Basically, a VPN grabs your connection, encrypts it and sends it to another server. Instead of your computer going directly to Google, it first accesses an intermediate server and, from there, it goes to Google.

Using a VPN is recommended, for example, when browsing within a public Wi-Fi network because otherwise you’ll be at risk of third parties seeing everything you do online. When using a tunnel, only your connection to the intermediate server will be visible, which is the one that actually makes the requests to Google, Facebook and other sites.

Another advantage of using a VPN versus the usual navigation is that you can “fool” the rest of the world about your location: if you are in New York and the VPN server you use is in London, all of the websites that you visit will believe that you are a user from England, which opens the possibility of skipping geographical limitations in all types of content.

When is it best to use Tor? And a VPN?

Although there are some providers of free services like Hola, most VPN services -the most powerful ones- are paid. By contrast, the Tor network is free by definition, because it employs the user’s connections to establish the nodes.

Anonymity in a VPN network is in any case relative, given the fact that even though they promise not to store information about their users, it is difficult to think that they can keep their promise if a court order comes.

Tor guarantees a higher level of online anonymity, as long as the the user takes some precautions, but it’s not as impenetrable as the NSA has tried to show in recent years. The biggest disadvantage of Tor is that browsing speed is very limited.

When to use a VPN? If you are an intermediate user concerned about online privacy and the use of your data by third parties the recommended option is a VPN. You will have a considerable latency, but the speed of your connection will be enough to play HD videos on sites like YouTube or Netflix.

When to use a Tor network? This system is used in situations that require a high level of anonymity, especially with the threat of governments or intelligence agencies. It’s reliable, for instance, for journalists working with sensitive documents and leaks, but the biggest disadvantage is that the connection speed is quite slow.
Recent contents

Read Don Burns’ “How The Evolution of Sensors On Smartphones Makes Life Easier”

Learn how to defend against the MITM attack

Image courtesy of Blue Coat Photos at Flickr.com

The Man in the Middle attack is also known as a bucket-brigade attack, or Janus attack in cryptography. As its name explains, the attacker keeps himself between two parties, making them believe that they are talking directly to each other over a private connection, when actually the entire conversation is being controlled by the attacker. In a previous article, Don Burns explained all about the Man in the Middle attack, now you can learn about the defense. Since MITM attack can succeed only when the attacker can impersonate each endpoint to the satisfaction of the other, the two crucial points in defending against it are authentication and encryption. A number of cryptographic protocols include some form of endpoint authentication specifically to prevent these attacks. For example, Secure Sockets Layer (SSL) can authenticate one or both parties using a mutually trusted certification authority. However, SSL is still not supported by many websites yet. Fortunately, there are three effective ways to defend against a man-in-the-middle attack even without SSL.

Virtual Private Network

A VPN extends a private network across a public network, e.g., the Internet. It enables a computer to send and receive data across shared or public networks as if it were directly connected to the private network while benefiting from the functionality, security and management policies of the private network. You can start creating a virtual private network (VPN) by establishing a virtual point-to-point connection through the use of dedicated connections, virtual tunneling protocols or traffic encryptions, such as PPTP (Point-to-point Tunneling Protocol) or Internet Protocol Security (IPsec). All data transmission is encrypted so that even if being intercepted, the attacker will have no idea about the content of the traffic. As a transfer station, the safety and reliability of the VPN server are very crucial to the security of your whole communication system. So, if you do not have a dedicated VPN server yourself, you are advised to only choose well-famed VPN server provider.
After establishing a remote VPN server, either manually or using some reliable online tool, you can follow these steps to create a Point to Point connection: First, Click “Control Panel” in the startup menu. Then, select “Network and Internet”. Go to “Network and Sharing Center” and Click “Set Up a new connection or network”. Once in the “Set Up a new connection or network” dialog, select “Connect to a workplace” and then press “Next”. In the “Connect to a Workplace” dialog, click “Use my Internet connection (VPN)”. Then, input the IP address of the VPN server and press “Next”. You will have to input your username and password, then press “Create”. And finally, Click “Connect Now”. After following these steps, all data transmission is encrypted so that even if being intercepted, the attacker will have no idea about the content of the traffic.

Proxy Server with Data Encryption

Image courtesy of Defence Images at Flickr.com

Use a reliable proxy server and encrypt the transmission between you and the proxy. If you only want to conceal your IP address for a specific amount of time and are not concerned with the security and performance, go for the free web based proxy services. But if you have the necessity to hide IP address on a regular basis, need high security and performance, go for paid VPN services like HideMyAss VPN (one of the most popular and trusted VPN service that allows people to easily conceal IP address and protect their online privacy) or VyprVPN (world’s fastest VPN services that allows people to easily conceal their real IP)

If you want to make sure your IP is changed, type “my IP address” on Google before and after using any of the above services. Just compare both the IP addresses and make sure they are different. If yes, that means you have successfully changed your IP address.

Secure Shell Tunneling (Linux/Unix)

SSH tunnel consists of an encrypted tunnel created through SSH protocol connection. SSH tunnel can be used to transfer unencrypted traffic over a network through an encrypted channel. You can use SSH tunnel to securely transfer files between an FTP server and a client even though the FTP protocol itself is not encrypted. SSH tunnels also provide a means to bypass firewalls that prohibit or filter certain internet services.

SSH is typically used to log into a remote machine and execute commands, but it also supports tunneling, forwarding TCP ports and X11 connections. A Secure Shell (SSH) tunnel consists of an encrypted tunnel created through an SSH protocol connection. Users may set up SSH tunnels to transfer unencrypted traffic over a network through an encrypted channel. Using a tool like OpenSSH on a Linux/Unix system you can tunnel all of the traffic from your local box to a remote box that you have an account on. SSH tunneling can be thought as a poor-man’s-VPN. It is handy in situations where you would like to hide your traffic from anybody who might be listening on the wire or eavesdropping. You can use such tunnel between your computer and your Unix/BSD/Linux server to bypass limits placed by a network.

6 encryption tools that will secure your data

Image courtesy of jeff_golden at Flickr.com

Encryption is defined as the conversion of electronic data, Plaintext, into ciphertext, encrypted text. This type of text can be hard to understand by a person that is not authorized to do so. Encryption main purpose is to help in the protection of your confidential electronic data which can be found in your laptop, personal computer, or the digital information sent through Internet and other networks. Even though the use of encryption is not new for humans, the advancements about it are greater every day. These advancements are generated by the increment of security problems on the transferring of digital data. That’s why companies related to these issues have worked for many years to develop strategies against safety gaps. In this list, you will find encryption tools that were created to help you in the difficult task of protecting your valuable digital data from the online threats out there.

BitLocker

This full disk encryption software has been developed by Microsoft and it has been set up in almost every Windows operating system. BitLocker works with AES (Advanced Encryption Standard) which is a military grade encryption that most of the security companies use. The easiness of this encryption tool is that you can use it effortlessly, and you can already find it in your Windows operating system. When you encrypt your hard disk with BitLocker, it will block any data breaches or exfiltration from it. If someone steals your laptop, it would be impossible for them to access your files.

7Zip

If you dislike the idea of encrypting the whole hard disk, 7Zip is the right tool for you. 7Zip is a simple but powerful encryption tool (AES - 256) that can support you with ciphering only the data you need to. It works with a 7z archive format, but other archive formats can be also read and written. This encryption tool has a great compression format, and it can extract nearly all file formats. 7Zip is suitable for almost all Windows versions, and you can find it in about 87 languages.

AxCrypt

This encryption software has been around for 15 years, making one of the most popular tools to encrypt data around the world. You can use this software to protect important data from your computer system. AxCrypt encrypts a file during a definite extent of time, and it will be decrypted automatically after it arrives safely to its destination. This tool is simple and fast which makes easier to encipher a complete folder or a group of files. In addition, AxCrypt provides safety against cyber criminal attacks and their extensive cracking methods. It can be installed on different Windows operating systems.

Image courtesy of Linux Screenshots at Flickr.com

VeraCrypt

Tools from VeraCrypt strengthen the security of the system algorithms and its encrypted partitions so it becomes immune to advanced cyber attacks. You can download it freely for Windows, Linux and MacOSX operating systems. If you have files with the obsolete TrueCrypt too, the version 1.0f of VeraCrypt can import TrueCrypt files and it can convert containers and system partitions from a TrueCrypt format to a VeraCrypt one. This encryption tool is been continually improved and its updates increases its security. 

Tor Browser

This tool has been created to allow anonymity and protection while accessing the network. Its software bounces your communications over a worldwide distributed network of relays that are carried out by volunteers. The Tor Browser can be operated by anyone who wishes online privacy and wants to keep prying eyes out of the picture during browsing activity. With this tool, you can also avoid sharing your location to the web sites you visit, and makes almost impossible to trace back to you your instant messages and other communicative activities. The Tor Browser can be used on Windows, Mac OS X, or Linux, and it can be run off from a USB flash drive, so it is not necessary to install any software.

Virtual Private Network – VPN

Virtual Private Network (VPN) makes use of encryption to offer secure access to a remote computer across the internet. VPN is a private network that establishes an encrypted channel capable of protecting your communication from interference attacks. This is another alternative to be online in complete privacy, especially if you need to work remotely and operate private company networks. For instance, VPN is very useful when you want to transfer confidential data or you need to run highly important operations online. Besides, Don Burns recommends using VPN if you connect from unsafe public networks, so you can encrypt your private information and protect your web traffic.

Read more about encrypt and secure communications in this older post “How to encrypt communications”