JAP vs Tor

[RAV TUX]

Anonymous browsing with JAP
By Dmitri Popov on September 12, 2007 (9:00:00 AM)

When it comes to anonymous Web access, Tor is not the only fish in the sea. If you are looking for a lightweight utility that allows you to navigate the Web anonymously, JAP is more user-friendly.continue the rest of the article: http://www.linux.com/feature/118919

reference:

JAP - http://anon.inf.tu-dresden.de/index_en.html

Tor - http://tor.eff.org/

Which do you think is better?...Why?

Which do you use, JAP or Tor?...Why?

[Johnsie]

I use http://proxylord.com or http://anonymouse.org because I dont have to install them. Anonymous browsing can be useful for some things but it's always important to remember not to use it for sensitive things like ebay/paypal or private email accounts. proxy hosts will have access to any information you transmit with your browser and not all of them can be trusted.

[PartisanEntity]

Hmm JAP sounds interesting, I like the idea of all users sharing one IP which makes it extremely hard for anyone to trace the/a connection/s to any one user. Also the fact that the mix providers are known and must officially declare that they do not keep log files makes them more accountable.

I use TOR too, but the problem with TOR is that the node providers are unknown to the user.

[RAV TUX]

Hmm JAP sounds interesting, I like the idea of all users sharing one IP which makes it extremely hard for anyone to trace the/a connection/s to any one user. Also the fact that the mix providers are known and must officially declare that they do not keep log files makes them more accountable.

I use TOR too, but the problem with TOR is that the node providers are unknown to the user.

Awesome points PartisanEntity, thanks for looking a bit deeper into this I sincerely and greatly appreciate it. ;)

[RChickenMan]

I am a firm supporter of TU Dresden.

So JAP (having never used the software).

[PartisanEntity]

Becareful with JAP:


And in 2003, he says a German court ordered developers of a separate anonymity system known as Jap to build in a back door that authorities could access when conducting investigations related to national security.

From here: http://www.theregister.co.uk/2007/09/16/bomb_threat_leads_police_to_raid_tor_operator/

[RAV TUX]

Becareful with JAP:



From here: http://www.theregister.co.uk/2007/09/16/bomb_threat_leads_police_to_raid_tor_operator/

Wow, Thanks for the JAP warning, they both may have vulnerabilities.

[Sp|ke]

Personally I never use JAP because of the issues of the German courts insisting a backdoor was placed in the code (although they assure us the resulting information could only be used by gaining a court order)

TOR does have it's weaknesses, for example you can set up a number of servers and if they are used as an exit node you can harvest an amazing amount of information from the resultant data since it is not encrypted at that stage. (email addresses, passwords, sensitive information etc.)

Having said that I still use TOR as it's probably the most secure way of browsing, even over proxy chaining etc.

S

[PartisanEntity]

How are TOR speeds for you Sp|ke? For me they are often unbearably slow.

[23meg]

The long standing suspicion, that the anonymizing network TOR is abused to catch sensitive data by Chinese, Russian and American government agencies as well as hacking groups gets new support. Members of the Teamfurry community found TOR exit-nodes which only forward unencrypted versions of certain protocols. These peculiar configurations invite speculation as to why they are set up in this way. Another tor exit node has been caught doing MITM attacks using fake SSL certificates.

http://it.slashdot.org/article.pl?sid=07/11/21/1544229

[p_quarles]

http://it.slashdot.org/article.pl?sid=07/11/21/1544229
Thanks for the heads up.

Anyway, I think this commenter gets it exactly right:
http://it.slashdot.org/comments.pl?sid=367373&cid=21438361

[ice60]

they are both good, you can use the TOR mixes with JAP. they are both secure i know that.

[ice60]

there are loads of threads about this stuff at a forum i go to if anyone wants to learn more about it. there are threads about the JAP backdoor, how to setup TOR and JAP, how to configure your browser so your real IP won't be forwarded, chaining them with HTTP proxies etc.
http://www.wilderssecurity.com/forumdisplay.php?f=40