Serious security holes in all of the major anonymous Web surfing services allow web sites to obtain information about users that the anonymizing services are suppose to be hiding. Java, JavaScript, and ActiveX are the culprits. Many proxy and firewall services are vulnerable too. Exploit description and code included. Recommended solution: Disable Java, JavaScript, and ActiveX.
Serious security holes in all of the major anonymous Web surfing services allow web sites to obtain information about users that the anonymizing services are suppose to be hiding. Java, JavaScript, and ActiveX are the culprits. Many proxy and firewall services are vulnerable too. Exploit description and code included. Recommended solution: Disable Java, JavaScript, and ActiveX.