https everywhere and other add ons

[whiskey_76 6]

Using https everywhere, ublock orgin, no script, and other stuch add ons on web broswers. Could it be a security risk while using a vpn? Do these extensions ever log information that could unmask who you really are, or are requests still encrypted within the vpn stream?

[OpenSourcerer 1442]

The latter.

 

Furthermore, I propose that your paranoia is to be destroyed.

[larky 40]

"https everywhere" doesn't "log" anything that could "unmask" you

 

"no script" doesn't "log" anything that could "unmask" you

 

"ublock orgin" doesn't "log" anything that could "unmask" you.

 

as for "other such add ons" < have no idea what those are as you did not list them so can't give an answer on those.

 

 

"requests still encrypted within the vpn stream?"

 

if the VPN is working properly for you all "requests" from and to your system are encrypted by the VPN encryption between your system and the VPN 'network'.

 

Basically you are the only one that can "unmask" you on VPN, by faulty, or lack of good, opsec type principals and practices being employed, or by not fully taking into account the capabilities of any thing you use on your system (e.g. software, extensions, etc...) which can, for example, access things like the system NAT or your hard drives where you store personal information.

 

A real world example of faulty opsec concerning something a lot of people never think about and that is what we put on line; If you give out information on the internet that can be traced directly back to you - for example, you post videos of your vacation, to say alaska, and in those videos is a time and date indication and also a hotel where you stayed and its posted on your facebook page with your real name, and you post the link to your facebook page while on VPN to show people your vacation videos. Anyone that is able to get information from that hotel in alaska for that date and time for a person with your real name would be able to use that information to find out who and where you are. I once tracked down a con man this way, he had cheated me out of something I purchased on ebay - he sent a box of old torn up shoes, what I had purchased was definitely not shoes torn up or otherwise. He used the PIA VPN on line for all his on line activity but for some reason had posted a link on his ebay page to his facebook page with the vacation videos. I used the videos dates and times and the hotel name with his real name from the facebook page to contact the hotel and pretended I was him wanting information on "my" stay there. The hotel sent out a mailer to guests so I asked what address he had given using the excuse that "had moved and wanted to make sure had given them the right address so as to get their mailer". The hotel person told me what address the guy had used when he registered. checked and it was a real address, went back to his facebook page and saw some more pics, one of which was him washing his car in the driveway of this address and the address number was showing in the pic and matched that of the hotel info. Took what I had to the police who acted on it, got my money back and him convicted for fraud and jailed as a result. he had cheated a lot of people, turned out ebay had refused to get rid of him even after hundreds of complaints about him as ebay said they had "investigated" and found nothing, their "investigation" consisted of simply asking him if he had shipped the items purchased, of course he said he had. He had provided fake name ID info to ebay. The guy apparently had a steady source of old torn up shoes as that's what he sent everyone who purchased from him instead of what they had actually purchased.