[Napolean]

Hey Fellas,

So I'm still definitely little more than a white hat sport'n script kiddie at this point, and had a few questions on improving my skillz.

Anonymity

I've got a handle on the basics, but I'm sure there are holes in my strat to keep my ID on the DL. I pay to use private-internet-access.com as a VPN, and use their little program to connect to their service and what not. Not sure how good their service is or what their reputation is. Downloaded Tor browser, but rarely use it instead using chrome, ie or ff.

Since the program for private-internet-access.com connects to a VPN, is it just my browsers that use the VPN, or is it other tools like netstat, other programs that connect to the internet, etc?

Heard about the new, supposedly secure email service called proton mail, but wasn't sure how good it was. Any reviews or experiences with proton mail?

What other precautions should I be taking to ensure anonymity?

Testing Anonymity

There has to be some type of tool/program out there to see just how anonymous you really are. Something that can show you if you have DNS leaks, programs informing on you, firewall/port vulnerabilities, etc. Any tips on where I can find a tool or program that confirms your level of anonymity?

Mentors

Would really like to get a dialog going with someone who really knows their stuff - a yoda of the web if you will - just to shoot emails back and forth occasionally. Maybe try various hacking techniques to test each other. Anyone who might be interested, please PM me.

Thanks!

[spooky hacker]

1. Yes, all your programs are routed through the VPN.
2. dnsleak.com and try using a port scanner I guess.

[B4ROT]

1. Great man, glad to hear that you're using a VPN. It definitely helps, but a VPN is only as secure as it's provider. You want a solid VPN that doesn't keep logs. Still not bulletproof, but it's a step up from most usually. As another user stated, all your activity is routed through that VPN. Not just what you do on your browser. Tor is cool, but not necessary in my opinion in most circumstances. If you're doing some super BH activity, then great, but in order to protect your identity from random internet skids you should be fine without it. Proton mail is cool, but it's security hasn't really been put to the test. Better than gmail and other providers though.

As for as not getting your name and other info leaked, just make sure your current alias is in no way shape or form connected in any way to anything that contains your full name. Make sure that this alias doesn't even point to an alias that may have your real name attached to it. If that makes sense.

I'm not the best at following my own advice at times, but you should be fine. Don't sweat it, and just remember to think through every single registration on every site, always think and use your brain when you're putting information anywhere. Be conscious of the footprint you're leaving in the web, and you'll be good.

2. Head on over to http://leakedsource.com and buy a 1 day subscription for $2. They have a ton of popular DB's that have been leaked. Most hashes are cracked, so just lookup your emails you use, and your usernames. See if any of your info is leaked.

[K1ll3r5p3c]

Blackmailed I am wondering what options there are available for free VPN's. At the moment I am a college student and funds are seriously limited so are there any good VPN's for free?

[th3c0rrupt3d0n3]

A good way to check your anonymity is heading up to whoer.net. It checks DNS leaks, browser fingerprint, WebRTC leaks, etc. There are lots of things you have to take into account!

[B4ROT]

Blackmailed I am wondering what options there are available for free VPN's. At the moment I am a college student and funds are seriously limited so are there any good VPN's for free?

Hotspot Shield is free and works, but I wouldn't really rely on it.