It didn't report my real IP address.<br>I tried this page with JanusVM and recorded the session in FLASH. <br>Here's the link if anyone would like to see for themselves.<br><br><a href="http://janusvm.peertech.org/Flash/JanusVM-SEC-Demo-1.html">
http://janusvm.peertech.org/Flash/JanusVM-SEC-Demo-1.html</a><br>
<br>Needless to say, it didn't compromise my real IP address with JAVA TURNED ON.<br>We also tested the Metasploit Project's Decloaking Engine. It failed too.<br><br>Regards, <br>~Kyle<br><br><br><div><span class="gmail_quote">
On 4/2/07, <b class="gmail_sendername">norvid</b> <<a href="mailto:norvid@gmail.com">norvid@gmail.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hello<br><br>I have another method that may block Java hijinks that can allow a<br>site to determine your real IP. This one allows you to use the normal<br>default browser settings. You do not have to turn off all sorts of
<br>scripts. You probably should still block cookies.<br><br>Use a firewall with settings which block the browser from accessing<br>the internet but allows Privoxy access. Set up your firewall this<br>way. Now to test obviously all you need do is turn the firewall off
<br>and on.<br><br>Go to this page to test:<br><a href="http://stayinvisible.com/cgi-bin/iptest.cgi">http://stayinvisible.com/cgi-bin/iptest.cgi</a><br>This page uses a Java applet to reveal your real IP.<br>It will guess mine when the firewall is off but fails to when the
<br>firewall is on.<br><br>Now test your IP without the firewall but while turning off Java. You<br>should see that the test will not reveal your IP. Don't worry about<br>javascript. It has nothing to do with it on this particular page.
<br><br>I'm throwing this out here as potentially another way to protect your<br>privacy while using Tor and depending on the firewall used it may be<br>easier to set up than turning off all sorts of browser functionality.
<br></blockquote></div><br>