Web Proxies for Anonymous Scientific Peer-Review?

nodrogluap asks: "As a scientist, I am often asked to peer-review journal papers. The peer-review process is generally supposed to be anonymous, but often times it is necessary to extensively visit the author's Web site to check and test Web interfaces to software and databases described in the paper. It can be easy for the author to surmise who's reviewing the paper based on Web logs (paper subject + gleaned reviewer's institution), especially when the reviewers are getting the first public crack at the URLs. Are there free, reliable HTTP and HTTPS proxies out there (not including servers run by people who've somehow mistakenly enabled an unrestricted proxy server in Apache)?"

Tor

[Loualbano2]

Basically an anonymous proxy network. The site owners will see the tor endpoints in the logs

http://tor.eff.org/ [eff.org]

Re:Tor

[X0563511]

Works for HTTP, HTTPS, and SOCKS4. (HTTP/HTTPS are best used in conjunction with something like Privoxy)

Re:Tor

[Mattcelt]

So does JAP [tu-dresden.de]. I use it almost exclusively, and it works wonders. It allows stacking with other proxies, either local or remote (if you use proxomitron or have an institutional web proxy), and while it does slow things down a touch, I find it to be eminently useful.

In short no

[Dr.Opveter]

I'm going out on a limb and assume you've googled this question prior to submitting it to ask slashdot.
You will notice the amount of .ru sites in the result. Other websites offer free proxies which turn out to not be so free after all.

Proxify.com

[kfx]

http://proxify.com/ [proxify.com] is pretty decent, but they often restrict free access during peak usage times.

tor

[f0rtytw0]

Try using tor (http://tor.eff.org/ [eff.org]) along with privoxy. There are instuctions on the page on how to get the two working well together. Its pretty easy to set up and it only took me a few minutes before I was up and running.

Get a shell account

[DrSkwid]

and run your own

Number of ways.

[SocialEngineer]

You could contact one of the many Linux/UNIX shell account providers and have them set you up an account (either through a free independant provider, or a professional group - you have enough reason to convince a free one to let you have one for a SOCKS proxy), or use a web based CGI proxy such as Guardster [guardster.com].

Try getting a VPN...

[AnObfuscator]

I don't know of any "Free VPN services", but maybe set up a computer off campus and set up a VPN service on that...

Stayinvisible.com

[SpaceLifeForm]

Pick a fully anonymous proxy.

Firefox Extension: SwitchProxy Tool

[Kvorg]

By fat the easiest solution is the SiwtchProxy Tool, a Firefox Extension that is easy to install and manage.

SiwtchProxy Tool offers a simple status-bar interface where the user can change proxies on the fly. It comes with a pre-set anonymous setting which will change the proxy periodically (user-supplied value). For the list of proxies used, you can supply a simple text file or use a web-based dynamicaly updated list.

For SwitchProxy Tool homepage, see http://extensionroom.mozdev.org/more-info/switchpr oxy [mozdev.org] or https://addons.mozilla.org/extensions/moreinfo.php ?application=firefox&id=125 [mozilla.org]
(I have not observed any of the problems mentioned by the users - with the obvious exception that sites that know you by IP address won't recognize you if you use the anonymising proxy, but that can hardly be construed as a bug.)

You can find several suitable anonymising proxy lists in this forum:
http://forums.mozmonkey.com/viewtopic.php?t=19 [mozmonkey.com]

It's really quite fast, elegant and easy.

Is anonymity really required here?

[harves]

First, you should be one of at least 2 or 3 reviewers. And you only need to worry about your anonymity if you were harsh to the author's work (fear of retaliation).

If one review is harsh, and the other two are nice, the author of the paper still doesn't know who exactly (in this case you) was the nasty one. If all/most reviews are harsh, then you don't need to worry because you're not the only one being harsh (and so it was justified).

If your name can be tied to a single review, there's a problem. But bei

Re:Ask your employer

[91degrees]

Because they haven't thought if that.

I dare say it would be possible to persuade an administrator or colleague at another university to set up a proxy though.

Why really bother?

[ameoba]

You seem to forget that most professors, even those in computer science, don't have an IT background and don't think of things like "web logs". Even those that do aren't generally going to have access to the logs on their departmental webservers.

Re:Why really bother?

[secolactico]

You seem to forget that most professors, even those in computer science, don't have an IT background and don't think of things like "web logs". Even those that do aren't generally going to have access to the logs on their departmental webservers.

They can easily ask/force/bribe/coerce someone in the IT department to provide the logs and maybe analize them. Or they can have a log analysis tool (such as webalizer or webtrends) to provide that info.

Re:Why really bother?

[wronskyMan]

They can easily ask/force/bribe/coerce someone in the IT department to provide the logs and maybe analize them.
I think most IT personnel would react somewhat violently to a random professor trying to analize them?

Re:Why really bother?

[poincaraux]

You seem to forget that most professors, even those in computer science, don't have an IT background and don't think of things like "web logs". Even those that do aren't generally going to have access to the logs on their departmental webservers.

I think you're pretty wrong here. Many resources are hosted in the lab, rather than by the department. Looking at the logs is easy. I am quite sure that people do it. We submitted a paper recently where it would have been very easy to determine the reviewers

Please

[Saeed al-Sahaf]

Paranoia will destroy ya.

But, I don't buy the thread author's premise anyway. I think he's a hacker looking for tips.

Re:Please

[LWATCDR]

Why worry?
Without a court order he can at best find out what ISP the user is on. Maybe what town.

ISP is enough!

[lilmouse]

Let's suppose I work in an odd field of mathematics, and there are about 10 people who are qualified to peer-review an article I write. (This is, BTW, entirely reasonable in many fields in Math). Just knowing which university they are coming from, I've got a pretty good idea of who they are. One of them I know really likes my work, so I'm sure I'll get good reviews from him. One I know never says anything negative about anyone. And one is this young entrant to the field, who was foolish enough to negat

Journal should set up a proxy

[Asgard]

You might suggest that the journal set up an authenticated proxy server so that you can relay through them to better review the journals.

plenty of (mostly) free proxies out there

[paltemalte]

Anonymouse surfing: http://www.anonymization.net/ [anonymization.net] http://www.anonymizer.com/ [anonymizer.com] http://osiris.978.org/~brianr/ians/ [978.org] http://www.guardster.com/ [guardster.com] http://www.antiproxy.com/ [antiproxy.com] http://www.attackcensorship.com/ [attackcensorship.com] http://proxify.com/ [proxify.com] http://www.anonymous.as/ [anonymous.as] http://www.mezzy.com/s-index.php [mezzy.com] http://anonymouse.ws/anonwww.html [anonymouse.ws] http://unipeak.com/ [unipeak.com] http://www.urlencoded.com/ [urlencoded.com] http://www.behidden.com/ [behidden.com] Full system proxy systems: http://tor.eff.org/ [eff.org] http://freenet.sourceforge.net/ [sourceforge.net] http://internet.flashback.se/ [flashback.se] http://anon.inf.tu [tu-dresden.de]

putty

[Macgyver7017]

You can use putty (free windows ssh client) to create a SOCKS4 proxy that appears to come from any machine you can ssh to. Google for putty and click the first hit.

To set up the proxy:
under the tunnels settings, create a "dynamic" tunnel on port 8080 or some port of your preference. Then after the ssh session is up, point your browser at a SOCKS4 proxy on localhost, port 8080 (or whatever you used).

It can also be helpful to enable keepalive packets to keep your firewall from closing the idle ssh session.

Just get a friend to give you shell access, or maybe your institution has a shared machine you can ssh to for the proxy to come from.

Re:putty

[neilsly]

I've heard this mentioned several times by people but I nor anyone I've talked with has actually gotten this to work. Using putty on windows xp and OpenSSH_3.9p1 on the back end it simply doesn't work, at least not out of the box or with any tweaks that I can find.

Web Proxies for Anonymous Scientific Peer-Review?

[Usenet4all]

Hi,

For this I have installed my own anonimizer:
http://usenet4all.com/gate/ [usenet4all.com]

This proxy is for public use.

Enjoy!

Is this really a problem?

[doktor-hladnjak]

Honestly, I have to wonder how much of a problem this really is. Over the course of a few weeks (the usual time frame for reviews to go out and come back), I imagine most websites containing this information get a fair amount of traffic. A paper I wrote last year gets downloaded about 25-30 times per month and it's not even that signficant. I know the site for my group gets thousands of accesses every month. Is it really that easy to pick out who the reviewers are from all that traffic?

Even with an anon

Google is your friend

[DA-MAN]

Just use the Google Web Accelerator.

http://webaccelerator.google.com/ [google.com]

Then you'll show up in the logs as though the connection were coming from Google.

More info here. [slashdot.org]