On Sat, Mar 17, 2007 at 07:30:27PM +0300, ashok _ wrote:

> Nah... i am in a slightly better country, not much more....

I could set up an authenticated SSL proxy, with an IP in German 
address space -- if there's a simple package in Debian people
are willing to point me to.

Or you could do it -- I very much doubt the secret police of 
your country is good friends with the secret police in your 
friend's country (but don't take my word on it, investigate
yourself).
 
> I found this list of proxies some of which are anonymous...and are
> changed everyday....
> 
> http://www.samair.ru/proxy/

If you can read that list, so can the secret police of the
country in question. The point is to use an anonymous proxy
which is guaranteed not in the list, and which connects via
SSL (again, assuming that SSL is not forbidden/unusual in
that country), so there's no way to look for keywords in the cleartext
stream. The only way to do that is team up with a trusted
party in neutral address space.
 
> Is changing to a different proxy every day and using gmail...or
> something similar a more secure idea?

Don't forget that he should manually change http:// to https://
in his Gmail section -- EVERY TIME. He must never slip, even once.
This also assumes that Google isn't cooperating with the secret
police in your target country -- I certainly wouldn't bet my life
on it.
 
> I am not really sure how competent the authorities are in tracing
> people back... my guess is they are not very good at it if it reaches
> even a fair level of obfuscation...

If your friend is willing to risk his life/limb on your educated guess
to be correct, you're in business.

-- 
Eugen* Leitl <a href="http://leitl.org";>leitl</a> http://leitl.org
______________________________________________________________
ICBM: 48.07100, 11.36820            http://www.ativel.com
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE

Attachment: signature.asc
Description: Digital signature

Reply via email to