December 2013 - tor-relays - lists.torproject.org

(no subject)
by Sebastian Urbach 25 Dec '13

25 Dec '13

Dear Colleagues, Since i switched to 0.2.4.19 a few days ago i noticed some strange behaviour. Sometimes the data seems to he corrupted i see on torstatus.info. The atlas data seems to be right though. Afaik only the contact and family data seems to be wrong. https://atlas.torproject.org/#details/3C82285FAC2171FA5178340A82B05F2190AB6… http://torstatus.info/router_detail.php?FP=3c82285fac2171fa5178340a82b05f21… Im not sure what to make of it right now. A bitcoin for your thoughts ... -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ----------------------------------- Religion is a symptom of irrational belief and groundless hope. ----------------------------------- Gregory House, M.D.

4 3

Shirt
by Sebastian Urbach 25 Dec '13

25 Dec '13

Hi, As long as you are wearing your NSA shirt im gonna wear my tor shirts (received a green and a black one years ago) ;-) On the other days im wearing my Ellsberg/Nikitin/Manning/Snowden shirt. Got ya ;-) -- Mit freundlichen Grüssen / Sincerely yours Sebastian Urbach ----------------------------------- Religion is a symptom of irrational belief and groundless hope. ----------------------------------- Gregory House, M.D.

2 1

Tor malware!
by I 22 Dec '13

22 Dec '13

They are two words I didn't think would be together. Would any pundit tell me if there is anything an exit or relay operator can do about malware using Tor in the news today e.g. Chewbacca (found by Kaspersky) ? Robert ____________________________________________________________ FREE ONLINE PHOTOSHARING - Share your photos online with your friends and family! Visit http://www.inbox.com/photosharing to find out more!

3 3

running a relay on a home connection
by abhiram 19 Dec '13

19 Dec '13

Hello, I am running a tor relay on a home connection. My connection is assigned a new ip as the lease expires every few days. So far I am fixing this my editing my torrc file with the new address value. Are there better ways of handing this? One thing that puzzled me was that when I first setup my relay it was unable to find the external address of my connection and its log files kept complaining that: "If x.x.x.x:9030 is not your correct IP address and directory port, please check your relay's configuration" Obviously it wasn't my ip address, when I looked it up it was from another country. So my question is why is my relay advertising this specific address? thanks for your time. -- Abhiram Chintangal

6 8

Re: [tor-relays] running a relay on a home connection (abhiram)
by Oliver Schönefeld 19 Dec '13

19 Dec '13

hello to everybody, as there were some alternatives for dynmic DNS handling mentioned, i'd like to add the following: as with most commercial dyndns providers come conditions (paid account, limited number of hosts, and - what annoys me the most - login after x days, etc.) i want to point you to https://nsupdate.info. this is an open-source project which offers dynamic DNS service with some advantages. i.e. they state they state in their "why another one?"-section: nagging its users to make a paid subscription annoying its users with advertisements or spam cancelling hosts or accounts after a short period of non-usage hiding the few free features almost undiscoverably between a ton of commercial-only features so check it out and a nice day to all of you!

2 1

bandwith unit
by Kiss Gabor (Bitman) 17 Dec '13

17 Dec '13

Dear folks, I'm tor relay operator since several years but newbie on this list. I just moved node 'traktor' from physical host to virtual machine. So I revised all settings and checked if all works well. I found a funny thing. My RelayBandwidthRate is set to 1 MB (i.e. 8 Mbps). ## Define these to limit how much relayed traffic you will allow. Your ## own traffic is still unthrottled. Note that RelayBandwidthRate must ## be at least 20 KB. ## Note that units for these config options are bytes per second, not bits ## per second, and that prefixes are binary prefixes, i.e. 2^10, 2^20, etc. #RelayBandwidthRate 100 KB # Throttle traffic to 100KB/s (800Kbps) #RelayBandwidthBurst 200 KB # But allow bursts up to 200KB/s (1600Kbps) RelayBandwidthRate 1 MB However on page https://globe.torproject.org/#/search/query=traktor the "Adverised Bandwith" column shows cca. 125 kB/s. Did I misunderstand the difference between kbps and kBps? Gabor

4 5

Relay / Bridge
by Sebastian Urbach 16 Dec '13

16 Dec '13

Hi, Your system is now lsted: ec2bridgerocks001 https://atlas.torproject.org/#details/50855F45464DBE84E917B0ED74E2144E785BA… -- Mit freundlichen Grüssen / Sincerely yours Sebsstian Urbach ----------------------------------- Religion is a symptom of irrational belief and groundless hope. ----------------------------------- Gregory House, M.D.

6 6

Torservers awarded $250,000 by Digital Defenders
by Christian 16 Dec '13

16 Dec '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hej! Torservers.net has been awarded $250,000 over two years by the Digital Defenders Partnership to strengthen and improve the Tor network, the anonymity system crucial to journalists and human rights defenders using the Internet. <https://blog.torservers.net/20131213/torservers-awarded-250000-by-digital-d…> Tor is free software and an open network that helps internet users to defend against traffic analysis, a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security. It is used by hundreds of thousands of daily users worldwide to secure their online communication, avoid tracking, and circumvent censorship. Tor protects users by bouncing communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. Torservers.net provides high bandwidth infrastructure for the Tor network since 2010. We have grown to 10 volunteer-run organizations in 8 countries. Torservers.net distributes donations and grants across independent organizations of IT security professionals, and helps build a sustainable network by teaching others how to run stable Tor infrastructure. The Digital Defenders Partnership was established in 2012 to provide rapid response to threats to internet freedom. The Partnership aims at keeping the internet open and free from emerging threats, specifically in internet repressive and transitional environments. It also wants to increase and better coordinate emergency support for the internet?s critical users, such as bloggers, cyber activists, journalists and human rights defenders, whenever and wherever they are under threat. Thanks to the newly awarded grant of $250,000 over two years, participating Torservers organizations will be able to sustain at least 3 Gbit/s of exit traffic, and 2000 fast and up to date bridges. Tor bridges are required in many countries with state-level censorship. 3 Gbit/s are 949 terabytes, almost a petabyte of user data, every single month, per direction. Call for organizations To strengthen the Tor network and prevent attackers, it is crucial to spread operation across as many groups as possible. Thanks to the Digital Defenders, Torservers.net can now extend its work and help less technical organizations with the setup and maintenance of Tor services. The Institute for War & Peace Reporting (IWPR) is the first civil society organization to join the Torservers program with its Cyber Arabs group. This collaboration allows Cyber Arabs to give stable and working Tor access to activists and journalists in the Arab world. If you are part of an organization interested in supporting Tor, please contact Torservers.net. They have various options available, and are happy to teach tech staff and journalists. ?Since we started Torservers.net a few years ago, Tor finally became fast enough to be used for all Internet communications? comments Moritz Bartl, co-founder of Torservers.net. ?New people also join the Tor network every day. With the help of the Digital Defenders, we have the chance to make the network bigger, safer and more resilient to the benefit of everyone with the desires to protect their online activities from surveillance.? Contact Juris Vetra Zwiebelfreude e.V. c/o DID Dresdner Institut für Datenschutz Palaisplatz 3 D-01097 Dresden Germany Fax: +49-(0)911-30 844 667 48 Phone: +49-(0)351-212 960 19 press(a)torservers.net -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBAgAGBQJSrE7/AAoJEPSKc6jBxtf31rAP/15mEwAiE8dX/+q4n4mKlomj D/eaFJMTRGazwr4J0U92n3ArxBLCAYiIQV/yIYW9R6IGqMTrHX18GSoHw8bF5Xmf BbHDZ4h7IeY2Z6lkMJBqwNejMI0zFqi6rZmIQl4sU4MeByBRtJBePrwJ1+eSn/Kt hSpxZLqTt7geY/V8D97EOjG0+gGfOtZyxCPbmz49g4NTKiI34Sg+pDpgVoqqTFsb XTY8cAn6pDYu60atDTv4F4kyhWkPBKmrkwUL4F65A8VFHu3Hgld2VxveeiZBIbYY 2gsiVz/u16CPts7RGDJdmi/sSa4xo76nKQk5QufM1sS4jahiGn07srNLdWud3NQP VUTty0Wwa8lvBrBbEPUn/Z14sXsXHS3z5WUrLQNGoi4RJxY7+JSimKYxoWz47ejv ps8vHM54McwoJzkbV9wYpOphhQ57v+Ps+l2sW7/T+s3AseP9Ji4sUFotPbeBWhxr MR905ulKYMVXasIWixiOxNsSzPgIPYufIPppMu49dWblaDGKYgkZAgGNgEqa2nl/ C8RAKIW4PwFdb513diUzuYJqHL5GiAGnU+OuPoqn7LYpnN/qmbEGyZNyoXaCp+pR rWAfzQCwL1fTNwMIrcdE3KDZ+oFNmeLZx3uUCHQ45XF4ojuYsGy1lOyhxSAZ1sb3 uWo4s9PMZOKjPOjxt/XQ =6o8b -----END PGP SIGNATURE-----

6 5

Re: [tor-relays] Help testing patch on SandyBridge/IvyBridge? Force disable use of RDRAND in OpenSSL when HardwareAccel is enabled
by coderman 14 Dec '13

14 Dec '13

correct address this time :/ Fwd: #include <std_disclaimer.h> i am not speaking for Tor devs nor Tor project - the cautious should wait for a review and merge. On Sat, Dec 14, 2013 at 6:14 AM, coderman <coderman(a)gmail.com> wrote: > this is logged as trac ticket: > https://trac.torproject.org/projects/tor/ticket/10402 > ... > help coderman test mitigation patch: > https://peertech.org/dist/tor-0.2.4.19-rdrand-disable.patch > https://peertech.org/dist/tor-0.2.5.1-rdrand-disable.patch > https://peertech.org/dist/tor-latest-rdrand-disable.patch many thanks to rl1987! the patches have been updated and verified. anyone running a relay on openssl 1.0.x with HardwareAccel 1 and seeing this line in their notices.log: "[notice] Using OpenSSL engine Intel RDRAND engine [rdrand] for RAND" should** apply the apropos patch above and let me know if it doesn't work. a successful mitigation will look like this: """ [warn] OpenSSL is using RDRAND by default. Attempting to force disable. ... [notice] Using default implementation for RAND . """ **last but not least, please do run a userspace entropy collector like haveged, dakarand, etc. also be sure you're on a recent kernel that is using RDRAND in a conservative / robust manner.[0] best regards, 0. "void extract_buf(struct entropy_store *r, __u8 *out)" https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/tree/driver… good use of RDRAND is: 1. mixed into a hash across the pool, not XOR'd against output, 2. mix the mix back into pool (prevent backtrack attacks) 3. atomically extract portion of pool and mix 4. fold final extracted output in half for conservative operation

1 0

Understanding bandwidth rate
by Florian Lindner 11 Dec '13

11 Dec '13

Hello, I'm using tor 0.2.3.25 from Debian Wheezy, the exit policy is recject *.*, I'm not using the node myself. arm shows these actual bandwidths: Bandwidth (limit: 16 Mb/s, burst: 32 Mb/s, measured: 48.6 Kb/s): Download (13.9 Mb/sec - avg: 11.3 Mb/sec, total: 211.9 GB): Upload (16.0 Mb/sec - avg: 12.6 Mb/sec, total: 237.9 GB): This is my related config: BandwidthRate 5 MB # not set in config BandwidthBurst 10 MB # not set in config RelayBandwidthRate 2 MB # set in config RelayBandwidthBurst 4 MB # set in config I'm a bit puzzled.... Why is bandwidth limit 16 Mb/s? Why bandwidth burst 32 Mb/s? Since I'm not using the node for anything else but relaying I except the bandwidth is more or less equal the RelayBandwidth limit I set. But the averages are so much higher than either the BandwidthRate and the RelayBandwidthRate? What is my problem of understanding here? Thanks, Florian

7 8