-
Notifications
You must be signed in to change notification settings - Fork 7.7k
Anonymity and SecurityEn
Like Goagent, XX-Net is a proxy access through Google's GAE server. Therefore, Google can see everything proxied by XX-Net. In addition, the GAE server will transfer the full text of the Appid you use (and related information sent by your browser, including HTTP Headers, etc.) to the target server, so XX-Net cannot achieve the effect of anonymity. XX-Net, GoAgent, and other similar GAE-based tools just use Google's large number of servers and free resources to help everyone access the network outside the wall. In other words, they are tools for bypassing Chinese government blocks, not anonymity tools.
- XX-Net** will not** collect Google IPs that you scan. Because the national network environment is different, it is meaningless to collect the Google IPs scanned by everyone.
- The network administrator of your company, school or community will not see the traffic proxied by XX-Net. Before the proxy traffic reaches the GAE server, they are encrypted.
- Although the network administrators of your company, school or community do not know the specific content of your visit, they can see the encrypted traffic coming and going between your computer and overseas servers.
- Google's GAE server can see all the content of your Internet traffic, including all https requests. So, if you don't trust Google, please don't use GoAgent, XX-Net and other GAE-based browsing tools.
- When XX-Net is automatically upgraded, some information will inevitably be collected when you use the public appid. The specific instructions are as follows:
-
possible privacy breach
-
Your IP address When XX-Net automatically checks for updates, the server will record your IP address. Solution: Turn off automatic check for upgrade.
-
UUID In order to control grayscale upgrades, the UUID is randomly generated, which will not expose user information, but can track whether it is the same user. Solution: Turn off automatic check for upgrade.
-
public appid In principle, the owner of the appid you use has the ability to see what you visit. Therefore, this project tries to use the appid applied by the author himself for public use. By limiting video requests, on the one hand, it can save the traffic quota of public appids, and on the other hand, it also encourages users to deploy their own appid, so they can use it with more confidence.
-
Special explanation:
-
XX-Net is unwilling to collect any personal information
We cannot guarantee that the collected information will be taken away by hackers one day. So we avoid collecting user information as much as possible.
For users who need anonymity, use the Tor package: https://www.torproject.org/projects/torbrowser.html
Anonymity cannot be solved with one tool, please refer to: [[Programming Caprice Blog: "How to cover your tracks and avoid inter-provincial pursuit" series of blog posts|http://program-think.blogspot.com/2010/04/howto-cover-your-tracks-0.html] ]
- Use Tor if transferring, viewing particularly sensitive information, and learn how to be anonymous
- Ordinary users, just deploy your own appid is enough