
By Adam Pash How to Secure and Encrypt Your Web Browsing on Public Networks (with Hamachi and Privoxy)
What's the Point?We've mentioned this more than a few times, but when you're browsing on a public Wi-Fi network and aren't connecting to sites that use HTTPS, anyone on that network can see what you're doing; they can grab passwords sent in plain text, or they can potentially steal your browser cookies and pretend they're you. (That's how, for example, Firesheep works.) On Monday we offered some tips for securing your online life the easy way, which involved using HTTPS connections on web sites that provide them, stashing your passwords more securely, and keeping your plug-ins up-to-date (among other things). Today we're going to take this to a big more advanced level, detailing how to encrypt and secure your entire browsing session, regardless of whether or not your using HTTPS to browse a site. Here's How It WorksBelow, I'm going to detail how to set up a secure, encrypted connection to a web proxy you're going to run from your home computer. The secure proxy will hide all your browsing from prying eyes, even on a public network. Prox-wha? A web proxy is essentially a middleman that stands between you and the web at large. When you browse to a page using a proxy, you pass your request to the proxy, which actually fetches the page content and then passes it back to you. A proxy alone isn't enough if you're connecting via a simple, unencrypted HTTP connection—a sneaky user could still watch what you're passing back and forth over a public network. The special sauce involves Hamachi, a free app that creates a secure, encrypted Virtual Private Network (VPN) between your computer and any other of your computers that you've installed and configured Hamachi on. By setting up a proxy on one computer, then connecting to that proxy using a secure connection via Hamachi, you're able to encrypt and secure your browsing session. If that sounds complicated, don't worry: It's actually pretty easy to set up, and I'll walk you through every step. Hat tip to user warwagon from the Neowin forums. What You'll Need
Step One: Install and Set Up HamachiThe first thing you'll want to do is install Hamachi on the computer that's going to act as you proxy and on the computer(s) you want to browse securely on when you're on a public network. For example, I've got Hamachi installed on my Windows desktop computer at home (which will act as my secure proxy), then also installed on my MacBook Air (which I'll be using on public networks).
Note: You can also create and manage your networks by signing into LogMeIn. For our purposes it's not necessary, but it is a great way to further manage Hamachi. You can rinse and repeat this on every machine you want to do this with, for up to 16 clients (that's the limit for Hamachi's free-for-non-commercial-use version). Now that you're set up with Hamachi, it's time to install Privoxy on your always-on home machine. Step 2: Install and Set Up PrivoxyPrivoxy is a free, open source web proxy that we're going to install to your always-on home machine. So download Privoxy from Sourceforge for your system and install. Privoxy is available for Windows, Mac, and Linux, so you should be able to find a download to fit your needs. For my example, I'm using Windows, which you can easily install by running through a regular old installer. Things may run slightly different on other systems, but it should be the same basic setup. If you need help, check Privoxy's installation page. After you've installed Privoxy, launch the application. (If you're running a firewall, you may need to give it access to open a port.) In Windows, Privoxy loads as a blank window. Don't worry, that doesn't mean it isn't working. In fact, you can close this window; Privoxy will still be running in your system tray.
Step 3: Set Up Your Web Browser to Use Your New Secure ProxyNow you just need to set your browser to use the secure Hamachi+Privoxy proxy you've set up so far. This last step varies by browser, but I'll walk through setting it up on Chrome or Firefox. On Chrome
Whenever you want to browse using your secure proxy—whenever you hit your coffee shop, for example—just click the Proxy Switchy icon in Chrome, then select your Privoxy connection. On Firefox
Make Sure It's WorkingTo test that Privoxy is working, you can simply point your browser to http://config.privoxy.org/. If it is, you'll see a message like "This is Privoxy 3.0.17 on Windows (5.xxx.xxx.xx), port 8118, enabled." If not, you'll see a page that reads "Privoxy is not being used". Also, if you're on a public Wi-Fi connection and you navigate to something like WhatIsMyIP.com with your proxy turned off, you should see a different IP when you reload the page with your proxy turned on. (Essentially, when turned on, your home's public IP address should be showing.) And that's all there is to it. This may sound a touch geeky or complicated, but it's an extremely useful thing to have set up, and it's actually really easy to set up and use. And remember, even though your proxy is running over an HTTP connection, Hamachi is encrypting everything that runs between your computers, so it's still a secure option. Also keep in mind: This is far from the only way to accomplish this task. You could, for example, set up an SSH SOCKS proxy to encrypt your browsing. I like this method because it's relatively simple to set up, and so far, it's worked like a charm for me. If you've got your own favorite alternative, let's hear about it in the comments. You can contact Adam Pash, the author of this post, at tips+adam@lifehacker.com. You can also follow him on Twitter and Facebook. | February 17th, 2011 Top Stories |
No comments:
Post a Comment