Privacy on IRC reddit / irc ---------------------------------------------------------------------- Imagine666 · 2012-05-31 04:07 What is the best way to maintain privacy on IRC without hindering download speeds? Specifically, I want to mask my IP address and location. I just got back into IRC today, and it is a little disconcerting that all my info is out there for anybody to see. I used to dabble with IRC privacy years ago, but I can't remember how to do anything now. Unfortunately my Google-Fu and Reddit-Fu have failed me, so if anyone has any tips, tricks, or suggestions, it would be greatly appreciated! ---------------------------------------------------------------------- meeb · 2012-05-31 11:43 Most networks offer a user accessible virtual hosts or cloaks. Cloaks are automatic (your host/IP is scrambled slightly on connect). Virtual hosts are usually assigned in combination with a network account (via NickServ, Q or X etc. depending on the network) and setting a user mode, typically +x. If you want true privacy choose a network that has automatic cloaks, SASL authentication and SSL. SASL authentication requires a script or plugin for your client to use but it enables you to log into channel services before connecting to the network (meaning you can be assured your vhost is set before joining any channels). If you're using SSL, make sure you verify the fingerprint of the certificate or use a network that has commercial certificates. ---------------------------------------------------------------------- TehZomB · 2012-05-31 12:14 If you're using (X)DCC or FServe to download via IRC, you can't hide your IP without breaking those features. ---------------------------------------------------------------------- sneakatdatavibe · 2012-05-31 12:32 Nothing is downloaded over the IRC protocol, so there are no download speeds to hinder. Your question belies a lack of understanding. ---------------------------------------------------------------------- [deleted] · 2012-05-31 12:33 [deleted] ---------------------------------------------------------------------- Pteraspidomorphi · 2012-05-31 14:37 Tunnel into a proxy, for example mIRC supports SOCKS for DCC but it may take some effort to configure properly. ---------------------------------------------------------------------- ComradePyro · 2012-05-31 14:42 DCC SEND YOU DON'T KNOW WHAT YOU'RE TALKING ABOUT ---------------------------------------------------------------------- flotwig · 2012-05-31 15:28 Set umode +x on connect and connect via SSL, the standard port for which is 6697. For some servers you can log in to services via the server password which is sent on-connect, so if you have a vHost via HostServ or similar it will be activated immediately as opposed to whenever you identify manually. If you have an external server or access to a shell account which allows IRC, you can set up a BNC. A BNC basically acts as a proxy for IRC, with the added benefit of being always online, so your home (or work, or school) IP address will be hidden and instead replaced with the IP address of your server. Most BNCs will save messages for you while you are offline and can be connected to via a regular IRC client. I use [ZNC](http://wiki.znc.in/ZNC), try it out. ---------------------------------------------------------------------- magicomplex · 2012-05-31 15:53 The lack o privacy you find in many IRC networks is done in purpose. The IRCd (software that runs in the IRC servers) are capable of hinding partially or fully your IP address. Only during a file transfer in a DCC, the sending (or receiving) part will eventually know your IP address. These IRC networks that exposes users IP addresses as a measure to make people unconfortable to go beyond limits. If you annoy too many people, you might get DDoS. If you commit some crime (like piracy or racism), you are already exposed. You might think that proxies/bouncers easily circumvent this but this IRC networks also do portscan at each connecting user (to identify open proxies), block the usage of Tor and query blacklist like dronebl.org. ---------------------------------------------------------------------- theor · 2012-05-31 17:07 That is not really relevant though. Reddit knows your IP, yet the users here do not. ---------------------------------------------------------------------- resuni · 2012-05-31 18:36 Yeah, but most IRC networks mask it so not every user can see it. His only problem would be features like DCC. ---------------------------------------------------------------------- [deleted] · 2012-05-31 21:24 [deleted] ---------------------------------------------------------------------- [deleted] · 2012-05-31 22:30 [deleted] ---------------------------------------------------------------------- Paradox · 2012-06-01 01:23 Freenode doesn't offer +x, but snoonet does :) ---------------------------------------------------------------------- liquoranwhores · 2012-06-01 02:20 If your using IRC to pirate software, your doing it wrong. ---------------------------------------------------------------------- [deleted] · 2012-06-01 02:37 snoonet also uses mibbit links everywhere [and mibbit logs everything you do including your nickserv passwords](http://www.geekshed.net/2011/08/mibbit-hacked/) ---------------------------------------------------------------------- Paradox · 2012-06-01 02:39 We're working on webchat right now ---------------------------------------------------------------------- [deleted] · 2012-06-01 02:49 So your excuse for endangering your userbase's password security is "we are working on it" go post to /r/netsec about your choice to use mibbit and see *their* reaction. Right now you should be informing all of your users to change their passwords. ---------------------------------------------------------------------- meeb · 2012-06-01 11:37 Not a freenode fan personally, bit then again I'm already on 5 IRC networks snoonet might be a bit overkill :P ---------------------------------------------------------------------- hintss · 2012-06-02 21:30 no. bouncers usually aren't kept public, and if they were, they wouldn't be detected by server-side proxy detection because it doesn't check for IRC servers. ---------------------------------------------------------------------- Buttscicles · 2012-06-02 21:44 Out of interest, is it being written in house? It's been in the 'working on it' stage for a while, which leads me to believe you're not using qwebirc or some equivalent. ---------------------------------------------------------------------- Paradox · 2012-06-03 03:14 We have a few people developing various solutions, so if we dont like one we can move to another. We are testing a qwebirc, another variant, and a few guys are building their own in Node.js. ---------------------------------------------------------------------- [deleted] · 2012-06-04 04:19 [deleted] ---------------------------------------------------------------------- [deleted] · 2012-06-04 05:31 [deleted] ---------------------------------------------------------------------- cowbacon · 2012-06-04 11:30 My recommendation to you is to buy a IRC Shell at random shell hosting provider. A shell is an account at a machine running an operative system like Linux which you connect to via SSH. This will make sure that any trace of you on IRC will end at the shell provider, making sure your real location is kept hidden. It'll cost somewhere from $3-5/month and it'll give you a shell with screen, irssi and usually the possibility to setup a small website too if you'd like. The following are just hits from google to get you starting, I don't know if they're any good nor do I have any info about the providers but an IRC Shell doesn't usually require much to work so most likely any provider with good uptime will work: http://www.jeah.net/shellaccounts.shtml $5 http://www.ispeeds.net/ircd.php $5 http://www.exodus.ro/shells.html €7 http://www.gallush.com/buy/shell-services/starter-shell/ ( $3. Seems to be specific to either running a BNC or a shell account) A BNC is an IRC server which you connect to with *any* client (mIRC/XChat/Irssi) and it'll bounce your connection to the real IRC server making it look like you never turn off your computer and hide your real location as any investigation into your real location will end at the BNC's ip address. A BNC is recommended if you have no or little experience with a unix like system, but learning how to use a shell and connect to IRC via irssi will take 5 minutes to learn so that's basically up to you. http://www.shellprox.net/irc1.html $3 **Again:** I am in no way affiliated with these companies, they were simply the first hits on google. I recommend you to research the various companies before purchasing a shell, the most important thing to look for is their uptime. I recommend everyone to come visit IRC, it's an amazing place to find new, friendly people to talk to. :) ---------------------------------------------------------------------- crowseldon · 2012-06-08 10:15 I don't get why were you downvoted. How does your comment not add to the discussion? ---------------------------------------------------------------------- [deleted] · 2012-06-08 10:39 Not only was i downvoted, i got banned by fedv for it. (later reversed) ---------------------------------------------------------------------- [deleted] · 2012-06-08 10:42 But to answer your question, they downvoted it because I am the one who said it. ---------------------------------------------------------------------- SLLabsKamilion · 2012-06-11 00:17 A: Most IRC user connect unencrypted over 6667 and pass their insecure nickserv password over that open link. B: If you are paranoid about your known insecure password being known, follow proper paranoid security protocol and change your password regularly, or make use of a proper local client with SSL and SASL. C: WE ALL KNOW IRC IS INSECURE. IT'S A TWENTY YEAR OLD PROTOCOL. We do not need to be reminded. D: Don't use mibbit? *tactical facepalm* ---------------------------------------------------------------------- [deleted] · 2012-06-11 00:25 Most of the users they draw in have no clue about IRC. ---------------------------------------------------------------------- magicomplex · 2012-06-21 15:24 Bouncers are far beyond the reach of majority of users. Many IRC networks (as the one I was an admin) limits the number of concurrent connections comming from the same IP address up to a low value (like 3 in my case). So commercial bouncers would quickly run out of availability because 3 customers couldn't use the same public IP address. ---------------------------------------------------------------------- [deleted] · 2012-06-22 19:08 A lot of BNC providers get around this by using a IPv6 /64 block. 3 connections per IPv6 address. Problem solved. (I ran a BNC service a few years ago and I'm kinda thinking I'll probably start again Although this time instead of focusing on 1 network provide BNCs for any network) ---------------------------------------------------------------------- Aevum1 · 2012-06-24 05:03 Actually when torrenting is unavaiable and direct downloads are blocked. theres alot of XDCC bot scene around. especialy for ebooks on undernet, cartoons on dejatoons, i remember i watched enterprise off XDCC servers when i was transitioning from edonkey to bittorrent and couldnt get it to work well enough yet. ---------------------------------------------------------------------- [deleted] · 2012-06-25 01:27 vpn, vps, tor, proxy/proxy chain, bnc, ssh/ssl, virtual host, i2p has it's own irc servers too and people use it regularly. Also don't allow ctcp. I think it's ctcp...maybe it was DCC there is a really good guide on one of the i2p wikis. I haven't used irc in ages. edit: did you even try googling this? [found the wiki i was talking about](http://ugha.i2p.to/HowTo/IrcAnonymityGuide) [another guide](https://zwadderneel.wordpress.com/2011/05/10/privacy- anonymity-and-security-on-irc/) [another one](http://www.searchlores.org/irc_kane.htm) [yet another one](http://www.irc-junkie.org/2009-12-31/howto-irc- anonymously-with-tor/) [moar](https://sites.google.com/site/jamespandavan/Home/fun/irc- anonymity-guide) [didnt even read this one](http://www.slaaonline.org/irc/mirc/anonymity/) [stack exchange question](http://unix.stackexchange.com/questions/15934/how-to- protect-my-anonymity-and-authenticity-in-irc) [staying anonymous - part 4: irc](http://www.terminal23.net/2007/05/st aying_anonymous_part_4_irc_1.html) im bored. im done. remember kids: using google is much faster than reddit edit : holy shit, 24 days ago? damn.