does ip bouncing exist?

[dark159123]

i know this question may sound pretty script kiddie'sh, but im just asking this way because i have no idea of how it works (and if it does)...

in whenever you see someone hacking in movies and games, you always see them bouncing through a million satelites, etc... although i know there isn't any kind of cool lightning beam (i want a freaking light beam for satelites!) emitting from the satelite to satelite, i guess there is a bit of truth in it as it is so widespread (the bouncing part not the lightning beams).

so is it possible to "bounce" through other routers/networks/satelites/etc? and if it is then how do you do it? i know that whenever you're connecting to anything you run through alot of different routers, but can this get exploited to make a trace take longer? and has the technology even got anything to do with this?

[sanddbox]

i know this question may sound pretty script kiddie'sh, but im just asking this way because i have no idea of how it works (and if it does)...

in whenever you see someone hacking in movies and games, you always see them bouncing through a million satelites, etc... although i know there isn't any kind of cool lightning beam (i want a freaking light beam for satelites!) emitting from the satelite to satelite, i guess there is a bit of truth in it as it is so widespread (the bouncing part not the lightning beams).

so is it possible to "bounce" through other routers/networks/satelites/etc? and if it is then how do you do it? i know that whenever you're connecting to anything you run through alot of different routers, but can this get exploited to make a trace take longer? and has the technology even got anything to do with this?

It sounds like you're thinking about something like TOR. Basically, it routes your internet traffic through a bunch of other TOR users so that your IP can't be traced.

[TravisAlan]

I think TOR would be a specific example. What he is describing seems to be just a visual representation of proxying your connection.
It is fairly common but unless you use something encrypted (such as TOR) it is still very traceable.

[sanddbox]

I think TOR would be a specific example. What he is describing seems to be just a visual representation of proxying your connection.
It is fairly common but unless you use something encrypted (such as TOR) it is still very traceable.

What he described, with the exception of tor, isn't fairly common. Normally it would just be a proxy server that would be used.

[TravisAlan]

Okay, im not saying its common to go through "millions of satellites," but I do believe it is common to go through a proxy server. Which is what I thought he was referring to.

[sanddbox]

Okay, im not saying its common to go through "millions of satellites," but I do believe it is common to go through a proxy server. Which is what I thought he was referring to.

He was referring to a connection being routed through multiple other hosts. A proxy server only involves one host.

[dark159123]

actually i was just referring to routing in general...

thanks for the great answers guys!

[thetan]

Even if you do use encryption, the absolute bottom line is if your ISP has it out for you then you can't hide. Your ISP is the messiah of all your etherwebz connectivity. You can establish all the SSL/TLS SSH whatever encrypted tunnels that you want but as long as your ISP wants to watch you theirs nothing you can do. Your ISP is _THE MAN_ in the middle and theirs no way you can verify that you do have a legit end to end encrypted connection with your intended point of destination or whether you have a shady encrypted connection with your ISP that in turn has a separate encrypted forwarding connection with your intended end point, giving the ISP plain text read ability.

Now I'm not saying that "h0m3y3 ISPz R EEEVIL!!!". All I want to get across is that you should never be to comfortable with your online privacy if you have a reason or an idealogical affinity towards privacy rights.

With ACTA on the horizon and cases in the past of whistle blowing EFF cases on ISPs and major web entities cooperating with NSA snooping via fiber optic splitters should wake any privacy conscience individual up to an alert state.

[r-ID]

well, it is possible to use secure proxy, you don't have to send public key every time, you only need to send it once.

[thetan]

well, it is possible to use secure proxy, you don't have to send public key every time, you only need to send it once.

A "Secure proxy" as you call it, is nothing more then a encrypted channel. It doesn't matter if you send it once or you send it a thousand times. The point is, if you send it at all then you have absolutely no way to verify your privacy.

As the recent SSL/TLS force renegotiation exploit has highlighted, anyone in the middle has to see the credentials only once and they have you in plaintext for the lifetime of that connection.

You know what else causes a renegotiation of credentials and is basically un-patch-able? Dropping the connection. Yes, dropping a secure connection will cause it to have to renegotiate all over again, leading back to the single point of failure, the online negotiation.

Also, as I've said said in my last post but will elaborate on now. You can think that you have a secure connection with any end point on the web. However, the thing is you may just have a secure connection to some malicious man in the middle who in turn has a separate secure connection to your intended destination and the "attacker" would just masquerade packets originating from your connection through it's connection to your intended end point (on a separate "secure" channel) and vice versa. While the packets are in transit from one channel to the other on the malicious machine they are in plain text and thus perfectly readable to the attacker. This is because the packets get decrypted once the reach the "attacker" (after all, you do have a secure connection _to him_) and then re-encrypted when sent to their target destination. Theirs no way your end point destination can verify that these packets aren't actually coming directly from you.