To all:

I recognize that selling minimized log files, even if they could be minimized in a hypothetical way yielding high confidence that it didn't threaten Tor's security model, would still be contrary to the ethos of Tor Project.  Towards that end, effective immediately, log files, aggressively minimized or otherwise, are not for sale.

Additionally, I commit to:
* making a good faith effort to encouraging clearnet users to use TBB over OnionLink.  Details TBD.
* making a good faith effort to clearly conveying that OnionLink is not operated by, nor affiliated with, Tor Project.  Details TBD.
* not appending accessed domains to the /sitemap.xml
* prioritizing development of top-up services such as SatoshiPay.  With hope, ads will be obviated.


For now I am reserving the right to:
* publishing aggregate statistics.  Some will disapprove, but there is a dearth of data in this area to inform public policy.  And Tor is too important to leave policy to the mercy of sophistry.  

* obeying the /robots.txt precedent.  From the very beginning, Aaron and I chose Tor2web's unusual URL structure for the explicit purpose of elegantly supporting robots.txt .


With that said, this has been emotionally draining and I'm taking a break from non-Roster Tor work for a few weeks.

-Virgil


On Friday, 13 May 2016, Virgil Griffith <i@virgil.gr> wrote:
Using my old CDN, Fastly.com, my costs were ~$2000 per month. Under the new setup with 100TB.com (cheapest I could find) costs are $600 per month and climbing.  It's unclear to me how you do it so cheaply.  Are you metered by how much traffic you generate?  If you have suggestions for a host i am interested---anything below $500 per month would be a godsend.

I have never harvested .onion addresses from a HSDir.  All I've ever done is cache NXDOMAIN responses, which I've now stopped doing.  I also stopped adding to the /sitemap.xml (which I was doing) because it made people upset.


I'm recognize that the logs angle as damaging the Tor brand.  I will add a link to download TBB and disclaimer making it excruciatingly clear onion.link is not part of Tor.

Thus far I can commit to each of the above.  Over the weekend I'll take a closer look at this.

-V


On Friday, 13 May 2016, Moritz Bartl <moritz@torservers.net> wrote:
On 05/13/2016 07:53 AM, Matthew Finkel wrote:
> As far as we know, the other Tor2Web sites do not log client connections.
> Compromising on storing and selling user data so you can obtain some money for
> operating the website goes against users' and our expectations of Tor2web, and
> Tor's brand. Shutting down your Tor2web sites is the responsible decision if
> you can't find another way for funding it.

I do not have the time and energy to really contribute to this thread
right now, but some data points: At least for onion.to, that is right:
We do not collect logs. We host it at two locations; the total costs of
running it are less than 30€ per month, which we pay from our own
pockets. Which is totally fine. Adding third party trackers or
advertising is out of the question. If I did not have a way to sustain
it (which, again, is really cheap) I would simply shut it down. Virgil,
if you need 30€/month to operate them and it would buy us an ethical and
privacy-friendly service, I'm happy to pay you. Mentioning costs here
seem to be simply an excuse. You didn't even ask or tried to raise it in
donations.

As far as I know, the other tor2web gateways (tor2web.org, blutmagie
etc) do not log either.

Also, there seems to be some (deliberate?) commingling between running a
tor2web gateway and putting the discovered sites into a sitemap (which
we also don't; we do allow search engine indexing of the individual
sites though), and actively harvesting onions at HSDirs. There is
clearly a difference, it is not the same thing.

--
Moritz Bartl
https://www.torservers.net/
_______________________________________________
tor-project mailing list
tor-project@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-project