- tor-relays - lists.torproject.org

WannaCry fallout FYI
by Jon Gardner 16 May '17

16 May '17

From the SNORT folks... http://blog.talosintelligence.com/2017/05/wannacry.html?m=1 ".... Additionally, organizations should strongly consider blocking connections to TOR nodes and TOR traffic on network. Known TOR exit nodes are listed within the Security Intelligence feed of ASA Firepower devices. Enabling this to be blacklisted will prevent outbound communications to TOR networks." <>< Jon L. Gardner Mobile: +1 979-574-1189 Email/Skype/Jabber: jon(a)brazoslink.net AIM/iChat/MSN: jlg(a)mac.com

8 14

Tor and ufw
by je suis 15 May '17

15 May '17

Hello everyone One of my friends got a ransomware and, even if I am on Linux and I take care when browsing, with such a proof beside me I thought I'd secure myself a bit, so I got ufw. I am running a middle relay, and so far it went just fine with ~2.5MB bandwidth, even if only in the daytime, morning to evening (laptop...; I do plan in getting a RaspberyPi in the future). I followed this page for setting up ufw with tor: https://help.ubuntu.com/community/TorDedicatedUser , even if I have Archlinux. I didn't use all in there, only the part right below "Traffic redirection", with ufw in the command line. Now, if I see the relay with 25kB, it's a miracle. So, obviously, I did something wrong. Is there a page with proper explanations for dummies like me? If it helps, my net comes from a router that handles cable TV and phone, as well. Vlad

1 1

A Naïve Question About ARM
by Kenneth Freeman 13 May '17

13 May '17

This is possibly a naïve question, but I like to compile and run the alpha/unstable version of Tor, but for the life of me I can't figure out how to get ARM to run the latest version. I'm currently running Anosognosia (Fingerprint: 9536B457F01F40696B131A72BC102343759F46AA), but it's stuck in the unrecommended Tor 0.2.7.5 and I'd like it to run 0.3.0.5-rc. Please explain it to me like I'm eight. Thanks! P.S. I understand that ARM is crufty is shall be updated, and furthermore, I miss Vidalia.

2 2

niftybunny relays: MyFamily configuration needs an update
by nusenu 11 May '17

11 May '17

Hi Markus, thanks for running so many tor relays. One [1] of your relays recently got a new key (2017-04-27), please update your MyFamily setting accordingly to help protect tor clients from using your entry+exit at the same time. thanks, nusenu https://raw.githubusercontent.com/ornetstats/stats/master/o/potentially_dan… [1] https://atlas.torproject.org/#search/niftychinchilla -- https://mastodon.social/@nusenu https://twitter.com/nusenu_

1 1

schlarman.org relays: MyFamily configuration
by nusenu 09 May '17

09 May '17

Hi, thanks for running tor relays [1]. Please update your MyFamily [2] setting to help protect tor clients from using your entry+exit at the same time. thanks, nusenu [1] https://atlas.torproject.org/#search/contact:tor@schlarman.org [2] https://www.torproject.org/docs/tor-manual.html.en#MyFamily -- https://mastodon.social/@nusenu https://twitter.com/nusenu_

1 0

Relay has Low Consensus and No Exit Flag Following Upgrade
by Chris 07 May '17

07 May '17

Hello, I recently upgraded my tor exit relay's tor version to 0.2.8.12. The uptime is 51 days and it has valid, running and stable flags. However, it no longer has the exit node flag and the consensus is very low (20). It also is not listed as a directory. I suspect something else during the upgrade has broken it as I had some SELinux issues binding to the ports before - which I resolved. There are no errors in ARM although the log is non existent? - permissions error? The fingerprint is 575F2C60045805ABFDB2B7D7A78982F9571BC277 Where should I start to fix this? Best Wishes, Chris -- Protect your privacy: encrypt your communications GPG: CF7F98B2

5 5

Actual user demographics?
by Jivan Amara 03 May '17

03 May '17

The counter they made has a good point, that you really don't know who is using it; but to suggest that means it's entirely used by criminals is also ridiculous. What can be known is *how* TOR is being used by setting up studies at exits and seeing what kind of services people are connecting to. From that, some inference of *who* is using TOR is possible. Maybe it's the same guy buying cocaine from a black market seller that posts articles on a civil rights abuses site, but it would be silly to make that assumption. From the usage stats I've seen, the TOR website paints a prettier picture than the truth, but at the same time opponents paint a significantly darker one. On 05/03/2017 05:00 AM, tor-relays-request(a)lists.torproject.org wrote: > Good morning, > > I recently presented to a group of ten local police chiefs on the topic of Tor and its more common, though less publicized, civil usage, as opposed to the more publicized criminal usage. During my presentation I emphasized this fact, and they countered that because its usage is entirely anonymous, it is reasonable to assume that it could be used entirely by criminals and none of the oppressed as I had claimed. > > Which brings me to my question. Other than private individuals saying "Hey, I use Tor for X", how does the overall network know what the network is used for, even approximately? > > Make your day great, > Isaac Grover, Senior I.T. Consultant > Aileron I.T. - "Practical & Proactive I.T. Solutions" > > O: 715-377-0440, F:715-690-1029, W: www.aileronit.com -- Cheers, Jivan Amara --- Senior Full-Stack Developer Development(a)JivanAmara.net (619) 549-4497

4 4

Actual user demographics?
by Isaac Grover, Aileron I.T. 02 May '17

02 May '17

Good morning, I recently presented to a group of ten local police chiefs on the topic of Tor and its more common, though less publicized, civil usage, as opposed to the more publicized criminal usage. During my presentation I emphasized this fact, and they countered that because its usage is entirely anonymous, it is reasonable to assume that it could be used entirely by criminals and none of the oppressed as I had claimed. Which brings me to my question. Other than private individuals saying "Hey, I use Tor for X", how does the overall network know what the network is used for, even approximately? Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" O: 715-377-0440, F:715-690-1029, W: www.aileronit.com

3 2

tornull
by Dirk 01 May '17

01 May '17

Dear all, I was made aware of the Tor Null Advisory BL [1] which is also mentioned in trac here [2]. Block Botnets does not seem like a bad idea in principal. But the page has no listing of a responsible person neither any criteria listed which it chooses to identify "bad" IPs. Looking at some of the links I found 1 which had a date from 2011 [3]. As will I miss information an when and how often it is updated. Therefore it looks slightly suspicious to me. And it surely has an abuse potential. Does anyone have more information on the background or recommendations here ? best regards Dirk [1] https://tornull.org/ [2] https://trac.torproject.org/projects/tor/wiki/doc/ReducedExitPolicy [3] https://www.spamhaus.org/sbl/query/SBL113323

4 4

Fast relay dropped from use by Tor
by Sec INT 01 May '17

01 May '17

Hi This relay processed 7TB in April for Tor and processed 12 gb yesterday but today is hardly processing any data at all? Its barely doing 1000 b/sec? Its flagged as'fast, guard' etc so why is it not being used? I also checked on Atlas and this relay is not even listed anymore? Finger: B39AD54B73A70DA68F6FC26CD0A874DE762B7825 Is this BW auth issue? Oh and I checked the available bandwidth its 100mb/s up and down Snap

2 1