tor-relays

tor-relays@lists.torproject.org

February 2026

25 participants
22 discussions

Re: Tor Node infected with ransomware
by skankhunt42 03 Feb '26

03 Feb '26

Hi, Thank you for the replies. At the time of writing I was in total panic mode and rotated all my keys. Only after that I saw all these posts from users across different hosters facing the same issue. It was a good practice to just re-evaluate my OPSEC, though. I opened a support ticket with my hoster (HostSlick) and got a reply about 12 hours later. I didn't want to re-deploy until they gave confirmation they are clean again. Luckily, with the awesome relayor playbook I recovered the relay, I just lost the Guard flags, but I think thats fine for now, they'll come back :) However, I decided to turn my back on that hoster and cancelled my VPS, will be up for a few more months. We already had a few disagreements when the problem with spoofed IP abuse reports arose last year. My relay was suspended (without any notice) at the time for multiple days and it took some time to explain to the hoster that the packets did not came from me. PS: Thanks Marco, I will look into a centralized solution for collecting logs, just to make any future incidents easier to understand. Best, skankhunt42

1 0

upcoming CIISS update
by nusenu 01 Feb '26

01 Feb '26

Hi, I'm working on a new contactinfo information sharing specification version. Current version (2): https://nusenu.github.io/ContactInfo-Information-Sharing-Specification/ Some likely changes will be: * add happy family proof https://gitlab.torproject.org/tpo/core/torspec/-/merge_requests/407/diffs * add signal username field https://support.signal.org/hc/en-us/articles/6712070553754-Phone-Number-Pri… * maybe add keyoxide field as suggested by boldsuck: https://github.com/nusenu/ContactInfo-Information-Sharing-Specification/iss… Feel free to send me your suggestions and opinions before 2025-06-30 by creating github issues or by replying to this thread. kind regards, nusenu -- https://nusenu.github.io

3 5