- tor-relays - lists.torproject.org

Prepared for [Raided for running a Tor exit node]?
by grarpamp 30 Nov '12

30 Nov '12

>> Running an exit node from home DSL or Cable is bad idea. One must look >> for a Tor friendly ISP and have balls made of steel! ... ISP[/hoster] and[/or] have ... > However, I do not believe it is that way in > the United States What 'way'? Running an exit node at home, or elsewhere, would seem to come down to... a) Are you physically ready for a query / subpoena / search warrant / exigent raid? Are things segregated by room? Are your doors and machines labeled with the same sort of exit node notice you'd put on the TCP port and in DNS? Have you inventoried, photographed and documented your setup and property? Do you have offsite backups? Are private things encrypted? Are any co-habitants aware and similarly prepared? b) Are you mentally ready? Is your life and butt otherwise clean, legal, and organized? If you were to appear in court, how would you act and be perceived? How do you feel about being in the news and in public docs? Have you networked with other operators and entities? c) Are you legally, financially, and timewise ready? Have you consulted with and preselected a couple attorneys? Have you made arrangements for making bail? How will you make court required appearances? All these sorts of meta things, and surely more, come into play whether or not you're ever raided. I'd suggest making a wiki article for them.

1 0

How to get client locale statistics without arm?
by tor-admin 30 Nov '12

30 Nov '12

Hi, I would like to know from which countries my nodes are mostly used. I tried to use arm for this but on high capacity relays arm eats the same cpu resources as the tor process it monitors, if the connection panel is activated. Switching to the connection panel lets arm often freeze. Is there another way to get country statistics from a node? Maybe something build in Tor? Thanks, Torland

2 3

Bandwidth and server leads [was: Tor raid]
by grarpamp 29 Nov '12

29 Nov '12

> From: elijah wright <elw(a)stderr.org> > Date: Thu, 29 Nov 2012 13:38:51 -0600 > Cc: nanog(a)nanog.org > Subject: Re: William was raided for running a Tor exit node. > We had a guy (aka potential customer) inquire the other day about hosting a > Tor exit on our infrastructure the other day; he disappeared fairly > quickly when he figured out that we weren't just going to give him an > endless supply of unmetered 10G bandwidth. I was looking forward to > billing him. :-) Contemporary mailing list lols aside, I believe you'll find that most operators in this space are quite serious and professional. If you're a potential friend of Tor, anonymity networks and the general thought space around it... and your price [or that of someone you know, nanog or otherwise, who might be such a friend] was highly competitive, or even special... I'd be fairly confident that consultation with those on this list would lead to a sale of said (or related) billable services. Feel free to forward and/or put any interested parties in touch with this list or torproject.org.

1 0

Deploy relays using hidden exit IP's?
by grarpamp 29 Nov '12

29 Nov '12

Shouldn't some exit relays (funded or not) be deployed to use an exit IP that is different from it's advertised exit IP in order to prevent a simplistic form of blocking based on scraping the descriptor set? I think this can happen if the default route is out another interface or secondary address. Something of that nature.

10 14

setting up a Tor exit node
by esolve esolve 29 Nov '12

29 Nov '12

I want to use Tor browser bundle to set up a Tor exit node in vidalia, I click "set up relay" -> sharing then there are some options, I checked "Relay traffic for the Tor network(exit relay)" and then click "ok" however, it doesn't work, and the exit relay option is automatically unchecked, while the option "relay traffic inside the tor network (non-exit relay)" is checked how can I set up a Tor exit node? thanks!

5 13

TOR relay and their flags
by androny 29 Nov '12

29 Nov '12

Hello all! My torrc main config: SocksPort 0 RunAsDaemon 1 DataDirectory /tmp/.tor ControlPort 9051 CookieAuthentication 1 ORPort 4999 AvoidDiskWrites 1 BridgeRelay 1 ExitPolicy reject *:* so, its pure relay. Run arm and got: "flags: none" Well, read flags definitions at https://gitweb.torproject.org/torspec.git?a=blob_plain;hb=HEAD;f=dir-spec.t… and still don't understand it :-) My tor has almost 4 days uptime, and at logs have: ----- Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor ----- Performing bandwidth self-test...done. ----- Tor has successfully opened a circuit. Looks like client functionality is working ----- Connections (1 inbound, 6 circuit, 1 control) ----- It means, it works well - so, why my tor relay server doesn't have an "Running" flag, "Valid" flag or "Stable"? Regards And-ron

4 3

DFRI is running two sponsored exits
by Linus Nordberg 26 Nov '12

26 Nov '12

Hi Moritz, DFRI [1] is running two relays, DFRI0 and DFRI3, which should qualify as fast relays as defined by sponsor j. (They were just recently bumped From 10 MB to 12.5 MB. They both have an exit policy allowing the ports explicitly required on https://trac.torproject.org/projects/tor/wiki/org/sponsors/SponsorJ.) We'd love to be able to get some funds for this which would make it possible for us to run more exit traffic. We only have one /24 network to run exit traffic from atm though so this is all we can do for now without breaking the stated diversity rules. (Anybody sitting on an IPv4 /24 PI that we can borrow for a year or so? We'd handle it with care!) We could technically run bridges too but we would have to discuss this internally some more first. Do we really want to take money for running entry _and_ exit relays? Isn't that exactly how you'd attack Tor users if you had the power, by controlling entry and exit? If we've missed some public discussion on this topic, please point us at it. [1] https://dfri.se/index.en/ Thanks, Linus, DFRI

4 4

Setting up new Tor relay
by Lance Hathaway 25 Nov '12

25 Nov '12

Hi all, I'm trying to set up a Tor bridge relay as an NT service under Windows 2003 x64. It runs, but only when I -don't- pass it a torrc file. Specifically, I've tried the following: 1. Installed service using "tor --service install". This installed the Tor service, with files located in "C:\Documents and Settings\LocalService\tor". I copied a torrc file into this directory and edited it to correctly set the ports and other options to be a bridge relay. After placing this file into the directory, attempting to start the service results in error 1064: an exception occurred in the service when handling the control request. Renaming or removing the torrc file allows the service to start. 2. After reading some old posts to tor-talk and tor-relays, I ensured that the directory has full permissions assigned to SERVICE and LOCAL SERVICE accounts. No change. 3. I removed the service and created a new directory for the configuration and log files, located at "C:\torsvc". I installed the service again with "tor --service install -option -f "C:\torsvc\torrc". I also ensured the new directory had all permissions set correctly. The service installed as "tor -net-service" without any options and executed successfully. I stopped the service and fixed the path in the registry to include "-f "C:\torsvc\torrc"", but then the service wouldn't start any more. 4. I verified the permissions on the torsvc directory. After removing the -f option from the service, the service starts successfully again, albeit without my configs (including log locations which would tell me what was going wrong). Sorry to be a bother, but could anybody offer me some enlightenment on what I'm missing??? -Lance

2 3

(no subject)
by Znerol2 25 Nov '12

25 Nov '12

Sent from Samsung Mobile

1 0

Akamai running Tor exit relays
by tagnaq 24 Nov '12

24 Nov '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi, I found out about it via Moritz's twitter feed [1] and I think it is great. Am quite curious about it. Does anyone have some insights on why Akamai decided to start 10 fast exit relays? (CC'ing the relays contact address here) Some compass stats [2]: bandwith: 2.75% of the Tor network exit probability: 6.97% [1] https://twitter.com/torservers/status/266669861139255296 [2] https://compass.torproject.org/?family=C3D1F08204E2BF81C6A426F312AE3A2212C7… -----BEGIN PGP SIGNATURE----- iF4EAREKAAYFAlCws7EACgkQyM26BSNOM7YTnQD+L6D2fH6T5QmR0MUh4wJAnan2 Aag6ImaavJeFZS+jihwA/2roYnLDlocvfgoHe4cDk7vJvGctTGgylLi/FdH2tf9r =zf1i -----END PGP SIGNATURE-----

1 0

traffic pattern indicates MITM?
by ea 19 Nov '12

19 Nov '12

For four days the BW graph and usage table of my bridge indicated noticeable traffic and then the graph dropped precipitously to near zero & the table shows no recent usage. Vidalia/tor are working fine. I did try rebooting my router-modem gateway last night, but as far as I could monitor it, the traffic has still been near zero (maybe a few KB every hour or so). If I'm reading it correctly, onionoo is showing that the bridge is still published. I'm not complaining about this pattern, but wondering if the abrupt drop-off in traffic for a still-published bridge is diagnostic of MITM activity. Maybe there's a way to further monitor my bridge from within the network? If MITM is suspected, should I shut down the bridge for a day or so?

2 1

Tor marked as "enforced" process in Apparmor, but also "unconfined"
by Christian 14 Nov '12

14 Nov '12

Dear fellows, I use Ubuntu Precise 12.04 and as I run a Bridge, I find the idea of confining Tor with an Apparmor profile charming. When upgrading Ubuntu and Tor, the Apparmor stuff seemed to be automatically worked out, so I deleted my old handmade usr.sbin.tor profile as I found the new system_tor profile. Wenn I type "sudo aa-status", I get system_tor as "enforced process" with its correct process id and there's no process "unconfined, but with a profile defined". But when I type "sudo aa-unconfined", /usr/sbin/tor ist marked as "not confined". So, what about that being charming? Is everything bad? Or good, and it's just I'm an idiot? I tried to rename the system_tor profile to usr.sbin.tor and adjusted its name in the profile itself, but this only results in Tor being listed under "unconfined processes that have a profile defined" when typing "sudo aa-status". Anybody who can see clear in this issue? Any help is appreciated and thanks in advance. christian P.S.: I really did a "sudo service apparmor reload" ;-)

1 0

Tracking fast Tor exits
by Moritz Bartl 07 Nov '12

07 Nov '12

Hi, I wrote a small script today that keeps track of all "fast exits" as defined in https://trac.torproject.org/projects/tor/ticket/6498 . https://github.com/moba/tor-fast-exits-tracker Hourly updated output: https://www.torservers.net/tor-fast-exits.html Move mouse over dots to see the timestamp. -- Moritz Bartl https://www.torservers.net/

1 0

Fw: Undelivered Mail Returned to Sender
by syrus f 05 Nov '12

05 Nov '12

hello dear sir/madam I download tor (vidalia) on 05 Nov 2012 and I am in IRAN would you please tell me how remove problem step by step.

1 0

Status of NumCPUs >2 in 0.2.3.x?
by Steve Snyder 05 Nov '12

05 Nov '12

In the Tor v0.2.2.x series it was said that it was pointless to set NumCPUs to a value greater than 2. Due to poor scaling, I guess. Is that still the case with v0.2.3.24+ ? Would NumCPUs value of 4 or 8 (on systems with that many CPU cores) actually provide any benefit over a value of 2? Thanks.

2 1

Map of Tor Relays updated
by Moritz Bartl 28 Oct '12

28 Oct '12

Hi, I updated my small Python script that visualize Tor relays on Google Maps/Earth and OpenStreetMap. You can see the results generated today here: - All relays (2668): http://maps.burningsilicon.net/index.php?url=https%3A%2F%2Fwww.torservers.n… http://maps.google.com/maps?q=http:%2F%2Fwww.torservers.net%2Fmisc%2Ftormap… - Exits only (786 plus 153 "fast" exits >2MB/s) http://maps.burningsilicon.net/index.php?url=https%3A%2F%2Fwww.torservers.n… http://maps.google.com/maps?q=http:%2F%2Fwww.torservers.net%2Fmisc%2Ftormap… - Screenshot Exits only: https://www.torservers.net/misc/tormap/tormap.png - Download KML, eg. for use in Google Earth (works best): https://www.torservers.net/misc/tormap/tormap.kml https://www.torservers.net/misc/tormap/tormap-exitsonly.kml - Script: https://github.com/moba/tormap Colors: Red: Exits >2MB/s, Green: Exits <2MB/s, Yellow Star: Stable middle nodes >2MB/s, Yellow: Stable middle nodes <2MB/s, White: Other (unstable) I used the Maxmind GeoIP CityLite database. The markers might give a false impression of accuracy. Most IPs can only be tracked to city level (or even region), ie. the markers are somewhat near, not necessarily at the real location of the relay. -- Moritz Bartl https://www.torservers.net/

2 1

How to diagnose lack of traffic on bridge?
by Steve Snyder 27 Oct '12

27 Oct '12

I have a bridge that gets no traffic. I don't mean "hardly any" traffic; I mean none. The contents of bridge-stats are always empty except for the date, which advances once per day. In the state file the last date, apart from daily accounting entries, is a EntryGuardAddedBy entry from 09 Sep 2012. Yeah, that's six weeks ago. The log file contains only a weekly notice of log file rotation and a daily notice of bandwidth self-test. I never see errors or even warnings in the log. My bridge is not unstable. It has been running continuously for the last 25 days, which is pretty typical for this bridge. I understand that bridges can be identified and their IP addresses blocked. But I am not lacking traffic just from China, or just from Iran, or just from any other entity. It doesn't seem likely that my IP address has been blacklisted by *everybody*. I am also aware that the bridge authorities seem to favor handing out some addresses more than others. Really, though, this IP address is never given out at all? What are the odds of that? On the rare occasions that I restart the bridge, I see in the log that my ORPort is reachable from outside and that my server descriptor is being published. That's nice. Also, I am running the current stable version of Tor, so it is not a matter of obsolete software. How can I diagnose the failure of my bridge to garner any traffic? Thanks.

4 5

Need help: High capacity exit relay does not get traffic
by tor-admin 25 Oct '12

25 Oct '12

Hi, I am operating two 1 GBit/s servers which host 7 exit nodes. One server is located in GB with torland1 https://atlas.torproject.org/#details/4E377F91D326552AAE818D5A17BC3EF79639C… torland2 https://atlas.torproject.org/#details/332895D092C2524A3CDE8F6E1498FFE665EBF… torland1 is configured to run at maximum bandwidth, torland2 runs trottled to ensure not to exceed the 100TB contractual traffic limit. The nodes on this server get traffic as expected and are at the top of the Blutmagie Tor Status http://torstatus.blutmagie.de/index.php?SR=Bandwidth&SO=Desc. The second server is located in RO and hosts torland3 https://atlas.torproject.org/#details/E5DB403858511BB166405E4C43776D933A7B8… torland4 https://atlas.torproject.org/#details/E0D2F8B2A18516A5C935477B06048D7BD2E7E… torland5 https://atlas.torproject.org/#details/D2F1745C11843BC5AF09CB9D4027AD2BE5F1B… torland6 https://atlas.torproject.org/#details/43F9022028F8AB0F7420F702CB079DF0CA0C8… The configuration for the GB and RO nodes is: Nickname TorLandX ORPort 443 DirPort 80 Address a.b.c.d ORListenAddress a.b.c.d DirListenAddress a.b.c.d OutboundBindAddress a.b.c.d RelayBandwidthRate 30 MBytes # max 30 RelayBandwidthBurst 100 MBytes # max 100 MaxOnionsPending 250 NumCPUs 4 On both servers AES-NI is used by openssl. Although the server in RO has the same configuration, same operating system and a similar hardware, it does not get traffic as the server in GB. At the moment Atlas shows for torland3-6 only an advertised bandwidth rate of less the 3 MB/s. The GB node torland1 shows more than 30 MB/s. In order to test if there are any traffic limits I did several speed tests by doing up and downloads of a large 4GB iso image. Downloading simultaneously with 10 curl instances from different debian mirrors I measured around 1 GBit/s. To measure upload I stored the debian 4GB iso image on the webserver of the RO server and used curl on the GB server to download it from RO. The maximal measured upstream speed on the RO server was around 750 Mbit/s. Therefore I looks for me as there are no traffic limits inplace by my ISP or their upstream. One of the servers operated by Torservers.net is located in the same data center and runs wau, gorz and sofia at high speed. I am wondering why the directory authorities only measure such a small fraction of the available bandwidth for the RO nodes. Because I am paying personally for the server I would like to get most out of the server. Can someone who runs a tor authority please help me to understand what is the reason for the low observed bandwidth. Thanks, Torland

2 2

Announcing the Walla Walla Project
by admin 23 Oct '12

23 Oct '12

Hi, I'm representing the Walla Walla Project, a volunteer initiative that aims to support the Tor network by contributing (exit-)relays and bridges to the network, and I would like to quickly announce today's (initial) launch of our humble project to the Tor relay operator mailinglist. Without any further ado, our project website is available at http://wallawallaproject.org/ We certainly very much welcome questions, comments and suggestions! Have a great day. On behalf of the Walla Walla Project team, Thomas

5 10

Running relay on OpenBSD ulimit problems
by Gijs 18 Oct '12

18 Oct '12

Hey guys, I just created a new relay on my new firewall box thats running openbsd, however I'm running into issues with ulimits: Failing because we have 991 connections already. Please raise your ulimit -n. I tried editing login.conf (might be doing it wrong) to no avail Anyone able to help me out ? Gijs

2 2

openBSD question.
by sharon dvir 12 Oct '12

12 Oct '12

sorry to bother you guys, and i hope its not a dumb repeated question. but which of the two following options is preferred for an exit node on openBSD? - run the Tor package available through the openBSD repositories, which is 2.2.35 but probably been reviewed by the openBSD team. or - compile and use 2.2.39 which is not as obsolete? thanks

3 2

interesting sequence of messages
by Scott Bennett 10 Oct '12

10 Oct '12

I'm running 0.2.4.3-alpha and had to restart it during the night due to a system crash. As it was starting up, it put out the following sequence of messages. Oct 08 00:38:44.616 [notice] We now have enough directory information to build circuits. Oct 08 00:38:44.616 [notice] Bootstrapped 80%: Connecting to the Tor network. Oct 08 00:38:45.728 [notice] Bootstrapped 85%: Finishing handshake with first hop. Oct 08 00:38:46.130 [notice] Self-testing indicates your ORPort is reachable from the outside. Excellent. Publishing server descriptor. Oct 08 00:38:46.359 [notice] Bootstrapped 90%: Establishing a Tor circuit. Oct 08 00:38:48.930 [notice] Our directory information is no longer up-to-date enough to build circuits: We have only 1868/2874 usable descriptors. Oct 08 00:38:48.930 [notice] I learned some more directory information, but not enough to build a circuit: We have only 1868/2874 usable descriptors. Oct 08 00:38:49.495 [notice] Tor has successfully opened a circuit. Looks like client functionality is working. Oct 08 00:38:49.495 [notice] Bootstrapped 100%: Done. Oct 08 00:38:49.830 [notice] I learned some more directory information, but not enough to build a circuit: We have only 1917/2874 usable descriptors. Oct 08 00:38:50.062 [notice] I learned some more directory information, but not enough to build a circuit: We have only 2013/2874 usable descriptors. Oct 08 00:38:50.142 [notice] I learned some more directory information, but not enough to build a circuit: We have only 2108/2874 usable descriptors. Oct 08 00:38:50.229 [notice] We now have enough directory information to build circuits. Oct 08 00:38:51.476 [notice] Self-testing indicates your DirPort is reachable from the outside. Excellent. Oct 08 00:39:03.079 [notice] Performing bandwidth self-test...done. The above really are nothing new, but just a really clear example of the screwiness of some common messages. In particular, the "no longer up-to-date enough to build circuits" and "learned some more directory information, but not enough to build a circuit" messages apparently are issued at times and under conditions contrary to the textual content of those messages. Let's examine the sequence shown above. 1) tor claims to have enough information to build a circuit. 2) It begins doing so by establishing the first hop of a testing circuit. 3) The testing circuit connects to my tor's own ORPort, so... 4) it builds a circuit to publish a descriptor and publishes it. 5) In less than 5 seconds from the time tor had enough directory information to build circuits, enough of that information has expired that tor no longer can build circuits. 6) tor fetches some descriptors, but still claims not to be able to build circuits. 7) tor announces that it has build a client-side circuit and pronounces that its startup is 100% complete. 8) tor continues to fetch three more batches of descriptors, saying that it still needs more to be able to build circuits, even after having claimed to have just built another one. I conclude from the above that the text of the messages claiming not to have enough directory information to build circuits is in error and should be revised to reflect the actual situation and events more accurately. Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at cs.niu.edu * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * **********************************************************************

2 1

Problems Setting up Bridge Relay on AWS
by freeflow＠mail.md 06 Oct '12

06 Oct '12

Hi! I recently set up a bridge relay on my home broadband connection. Unfortunately my ISP is restricting bandwidth during what it refers to as "peak hours", usually between 16:00 & 00:00 each day. This is obviously having a detrimental affect on my bridge relay as both upstream & downstream bandwidth is severely limited during these times. So I decided to set up a bridge relay on AWS, using the documentation at https://cloud.torproject.org/#get_started During the set-up process I've experienced 2 separate problems which I've described below. These are the actions I've taken: 1) I've successfully registered my account with AWS. 2) I've navigated my web browser to https://cloud.torproject.org/#get_started 3) At the above mentioned web page I've chosen: Obfsproxy Bridges (required ports: 22, 443, 52176) eu-west-1-Ireland 4) The pre-configured image is selected, and I'm directed to the AWS Management Console. When I arrive on the AWS Management Console page my web browser (Firefox 15.0.1) presents me with a "Warning: Unresponsive Script" dialogue box. The dialogue box explains, "A script on this page may be busy, or it may have stopped responding. You can stop the script now, or you can continue to see if the script will complete. Script: https://images-na.ssl-images-amazon.com/images [snip]... I chose to persevere & clicked "Continue" on the "Warning: Unresponsive Script" dialogue box. After being presented with another "Warning: Unresponsive Script" dialogue box I arrive at the "Choose an AMI" pane of the "Request Instances Wizard" which displays the pre-configured settings. It's at this stage that I begin to get confused... I've attempted to use the "Step-by-Step" instructions provided at https://cloud.torproject.org/#get_started The "Step-by-Step" instructions state, "Simply follow the steps as illustrated below, and your bridge will up and running in just a couple of minutes." With regard to the "Choose an AMI" pane the "Step-by-Step" instructions suggest, "Click "Continue". (No changes needed here.)" There doesn't appear to be an option to continue beyond the first pane (Choose an AMI), the only available option that I can see is to cancel (top right corner of the Choose an AMI/Request Instances Wizard pane). This takes me to the "Amazon EC2 Console Dashboard". However, because nothing has been set up, the EC2 Console Dashboard quite correctly informs me that there are no instances running. On the left-hand side of the Amazon EC2 Console Dashboard is the "Navigation" pane listing "Instances" & "Images" (including AMIs). So, I can see some of the required components that are incorporated into the "Request Instances Wizard" but I lack the experience to set up my AWS manually. So, more confusion! On the plus side the Amazon EC2 Console Dashboard does inform me that I've selected my chosen region which it reports is up & running. Maybe a "Continue" option isn't being displayed in the "Choose an AMI" pane because of the above-mentioned "Unresponsive Script" dialogue box, or maybe there's some other way to move through the "Request Instances Wizard" that I'm unaware of? I'm currently running java version 1.7.0_07 from Oracle Corporation on 12.04.1 LTS precise. I have no experience of setting up anything like an AWS so any help would be much appreciated & hopefully I can succeed in setting up my bridge relay! Best regards!

2 5

Re: [tor-relays] [tor-talk] clockskewer attack
by Eugen Leitl 03 Oct '12

03 Oct '12

----- Forwarded message from Ted Smith <tedks(a)riseup.net> ----- From: Ted Smith <tedks(a)riseup.net> Date: Wed, 03 Oct 2012 11:09:00 -0400 To: Eugen Leitl <eugen(a)leitl.org> Cc: cypherpunks(a)al-qaeda.net Subject: Re: [tor-talk] clockskewer attack The "attack" assumes that the targeted hidden service is running a Tor relay. On Wed, 2012-10-03 at 16:52 +0200, Eugen Leitl wrote: > ----- Forwarded message from Webmaster <webmaster(a)felononline.info> ----- > > From: Webmaster <webmaster(a)felononline.info> > Date: Wed, 03 Oct 2012 09:50:02 -0400 > To: tor-talk(a)lists.torproject.org, tor-relays-request(a)lists.torproject.org > Subject: [tor-talk] clockskewer attack > User-Agent: Mozilla/5.0 (X11; Linux x86_64; > rv:15.0) Gecko/20120912 Thunderbird/15.0.1 > Reply-To: tor-talk(a)lists.torproject.org > > Found some interesting news on reddit. I dont know the tech behind it, > but is sounds like playing with Clock allows you to get the IP address of > the hidden service > > http://www.reddit.com/r/onions/comments/10usgv/clock_skewing_a_clever_uncon… > > http://pastebin.com/PfXUm3VQ > > > Is this something to be worried about? > _______________________________________________ > tor-talk mailing list > tor-talk(a)lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk > > ----- End forwarded message ----- -- Sent from Ubuntu ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE _______________________________________________ tor-talk mailing list tor-talk(a)lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

1 0

Fwd: Ongoing, repetitive, flooding and abuse on Usenet newsgroup ba.broadcast from your site
by Michael Renner 02 Oct '12

02 Oct '12

Hi List, I run a relay-only and an exit node without too much hassle, today I received this mail and am not too sure what to make out of it. A fellow requests that I shall block access to Google Groups because somebody is using Tor to spam groups there. My gut feeling is that if they know the identity of this fellow they should just go the legal route and be done with it. Any opinions/insights from your side? all the best, Michael Begin forwarded message: > From: "Paul W. Schleck" <pschleck(a)oasis.novia.net> > Subject: Ongoing, repetitive, flooding and abuse on Usenet newsgroup ba.broadcast from your site > Date: October 2, 2012 2:30:11 GMT+01:00 > To: groups-abuse(a)google.com > Cc: abuse(a)co.at, abuse(a)amd.co.at > > Note to TOR Exit Server maintainers: > > This article is from Google Groups, a third-party news posting site via > http (80 port). I have received replies from other TOR exit server > maintainers that they will temporarily block connectivity to Google > Groups' range of IP addresses, as this kind of repetitive flooding to > deny use of a newsgroup is not free speech, and not what the TOR project > was intended to be used for. The IP addresses for Google Groups are as > follows: > > groups.google.com canonical name = groups.l.google.com. > Name: groups.l.google.com > Address: 74.125.142.102 > Name: groups.l.google.com > Address: 74.125.142.113 > Name: groups.l.google.com > Address: 74.125.142.138 > Name: groups.l.google.com > Address: 74.125.142.139 > Name: groups.l.google.com > Address: 74.125.142.100 > Name: groups.l.google.com > Address: 74.125.142.101 > > Name: googlegroups.com > Address: 74.125.142.99 > Name: googlegroups.com > Address: 74.125.142.103 > Name: googlegroups.com > Address: 74.125.142.104 > Name: googlegroups.com > Address: 74.125.142.105 > Name: googlegroups.com > Address: 74.125.142.106 > Name: googlegroups.com > Address: 74.125.142.147 > > Google Groups would otherwise have to implement blocking of your exit > nodes to stop this flooder. The security practices of sites under my > control are fine, including blocking of all TOR exit servers. > > The article quoted below is one of thousands over the past year. I can > send you far worse examples, if required. A good sampling of the > perpetrator's mental state, and criminal record, may be found at: > > http://www.smbtech.com/ras/ > > This is some voluminous, off-topic flooding and harassment on the > ba.broadcast Usenet newsgroup. It is being reported to abuse reporting > mailboxes based on the contents of the NNTP-Posting-Host: and > X-Complaints-To: headers, and lookup of the originating IP address via > WHOIS and the Network Abuse Clearinghouse. They are sometimes also > crossposted to unrelated newsgroups such as rec.arts.tv, > soc.culture.new-zealand, and several other newsgroups in the nz.* > hierarchy. It is disruptive, and completely off-topic, as well as > causing disruptive, cascaded flame wars among those unrelated > newsgroups. > > This user has also been posting from other sources, including 100tb.com, > 31173.se, 51.net, 62.net, all.de, armax.me, artelco.com, bahnhof.se, > bigkitten.net, boingboing.net, broadviewnet.net, bu.edu, ccc.de, co.at, > coolhousing.net, creekcabin.com, dfri.se, exit.de, einteilung.at, > finalhosting.cz, formlessnetworking.net, ghst.net, hessmo.com, > hexhost.net, ib.de, ipredator.se, mydev.net, noisetor.net, oceanic.net, > ovh.net, plebia.org, ovh.net, privacyfoundation.ch, privacyrepublic.org, > progressbar.sk, riseup.net, ru.is, sbcglobal.net, scnet.net, > servers.com, snydernet.net, solidonetworks.com, stanford.edu, > stargrave.org, techfixuk.com, torland.is, torland.me, torservers.net, > trolling.me, dmzglobal.com, telstraclear.net, xtra.co.nz, clear.net.nz, > orcon.net.nz, netgate.net.nz, freeparking.co.nz, powerusenet.com, > giganews.com, thundernews.com, altopia.com, comcast.net, > groups.google.com, and tigerusenet.com. It appears that you are merely > the latest of his victims. > > The charter of ba.broadcast is as follows: > > "This group is here for discussions, comments and program reminders > about broadcast media in the San Francisco Bay Area, both radio and > television. It also includes cable systems and TVRO/BCRO in the SF Bay > Area. It does not include scanner, ham radio or other action here in > the SF Bay Area; these may be addressed in another newsgroup at another > time. Issues of national interest should be posted to one of the groups > in rec.arts.tv or rec.radio." > > (see: http://groups.google.com/group/ba.broadcast/browse_thread/thread/ddfbd8175e…) > > The charter does not include sexual innuendo and libel, abusive threats, > bigotry and minority bashing, or any off-topic discussion of subjects > not reasonably related to broadcasting in the Bay Area, which now > consitute the overwhelming majority of current message traffic on > ba.broadcast, to the detriment and exclusion of on-topic participation > by others. > > Please take appropriate action to put a stop this this misbehavior > originating from your site that is disrupting ba.broadcast. > > > Offending article follows: > > > Received: by 10.224.223.84 with SMTP id ij20mr14306706qab.5.1349116799161; > Mon, 01 Oct 2012 11:39:59 -0700 (PDT) > MIME-Version: 1.0 > Received: by 10.224.33.136 with SMTP id h8mr4922241qad.1.1349116799065; Mon, > 01 Oct 2012 11:39:59 -0700 (PDT) > Path: novia.net!newscene!newscene.com!novia!news-out.readnews.com!transit3.readnews.com!209.85.216.87.MISMATCH!l8no19978676qao.0!news-out.google.com!e10ni152738478qan.0!nntp.google.com!l8no19978674qao.0!postnews.google.com!l18g2000vbv.googlegroups.com!not-for-mail > Newsgroups: ba.broadcast,alt.radio.talk,alt.radio.broadcasting,alt.sports.football.pro.sf-49ers,alt.sports.football.pro.oak-raiders > Date: Mon, 1 Oct 2012 11:39:58 -0700 (PDT) > Complaints-To: groups-abuse(a)google.com > Injection-Info: l18g2000vbv.googlegroups.com; posting-host=212.232.24.57; posting-account=amCOWAkAAABZSaz2UHdaAM8n23Z-gMLO > NNTP-Posting-Host: 212.232.24.57 > User-Agent: G2/1.0 > X-HTTP-Useragent: Mozilla/5.0 (Windows NT 6.1; rv:10.0) Gecko/20100101 Firefox/10.0,gzip(gfe) > Message-ID: <95a49153-6779-42a1-802a-fd3a121c872b(a)l18g2000vbv.googlegroups.com> > Subject: JEW: Layer 42 Inc. (Mtn. View) KAITLYN RUBIN: Satanic Ritual Abuse > (S.R.A.) S.teve R.ubin A.irplanes .^ > From: "Jose' Scott Satanist Drug Dealer Outlaw [kzsu fm]" <zyklon_bozo(a)yahoo.com> > Injection-Date: Mon, 01 Oct 2012 18:39:59 +0000 > Content-Type: text/plain; charset=windows-1252 > Content-Transfer-Encoding: quoted-printable > Xref: novia.net ba.broadcast:285031 alt.radio.talk:296685 alt.radio.broadcasting:60948 alt.sports.football.pro.sf-49ers:539274 alt.sports.football.pro.oak-raiders:296436 > > Layer 42 Inc. (Mtn. View) > Steve Rubin Satanic Ritual Abuse > Kaitlyn Rubin (daughter) and clear case of > child abuse, neglect and well known worldwide > satanic JEW child pedophilia "faith" racket: > > Steve Rubin (CEO President) > Layer 42 Inc. > Mountain View California > > Rubin's Abused Child: > > http://www.exorcist.org.nz/kaitlyn-whothehellareyou_1.jpg > http://www.exorcist.org.nz/kaitlyn_scabs_bruises_parched.bmp > > THAT LOOK OF TERROR IN THE YOUNG GIRL'S FACE (below) > > KAITLYN RUBIN: > * Bruises > * Swollen Lips > * Snot Filled Nose > * Multiple Marks On Face > * Beatings > * Domestic Violence Against Children > * Sexual Abuse (see below about jews \ pedophilia) > > Steve Rubin (CEO President) > Layer 42 Inc. > Mountain View California > > Steve Rubin also owns a small airplane, which coincides > with the facts that have been released involving the McMartin > Pre-School child abuse scandal years ago. The facts > un-covered prove that the children were actually flown by > a small airplane to a location in the mountains and then > Satanic Ritual Abuse (S.R.A.) occured, and then the > children were flown back to the Pre-School prior > to being picked-up by the parents. > > Steve Rubin's closest friends are admitted and proven > luciferians (satanists) > > THE LUCIFERIAN CONSPIRATORS > http://www.exorcist.org.nz/citizen_cohn_luciferian_higdon_byrd.html > > "Eric Conspiracy" > http://www.catb.org/~esr/ecsl/ > > ------------------------------------- > > From Webpage: > http://www.exorcist.org.nz/music_mafias.html > > It just so happens that an anti-christ styled JEW, named : > > S t e v e R u b i n > > who happens to work for Napster (world-wide piracy), who was so > offended that I & I offered criticism of the whole pirate now > so-called "company" of thieves, Napster. Once again, a JEW is > involved in is involved in filthy ill-gotten monies, filthy lucre, > from another, evil JEW in the music scene, and this time it is > the cold-blooded terrorist JEW named Steve Rubin, who is > stalking me personally, both at work and and at my residence. > I feel like Jesus (Y'shua) Christ sometimes, when evil luciferian > satanic JEWS (Revelation 2:9) are trying their best to smear > I & I, to stop I from witnessing to the JEW conspiracy alive > like a satanic (Revelation2:9) monster, after having killed > Jesus (Y'shua) Christ. . . > > Steve Rubin had published, publicly, and cached by Google, > photos of his own daughter Kaitlyn, on his web-page. > > The only problem for Steve Rubin (evil JEW spirit of anti-Christ), > is that the photo below shows clearly that neglect is rampant > in the Rubin "household". . . . where "daddy" Steve Rubin, the > evil anti-christ who is stalking me personally, and taking pride > in his small private airplane that he bothers the South Bay of > Santa Clara Valley, etc. with the noisey engines. You have all > heard them before . . . the noisey private planes, and of course > all of the accidents caused by private piloted aircraft. With > the knowledge that the JEWS who owned, leased Bldg. 7 of the > World Trade Center, and did "pull-it", whereby it came down, > and wasn't hit by the planes . . . where also a group of Israelis > were caught filming the whole 911 event, were arrested and > then released. > > I am deeply concerned, when a JEW TERRORIST like Steve > Rubin, who is hunting me down, making I & I feel like I am > Jesus or something . . . . a JEW conspiracy, > and a JEW TERRORIST, like Steve Rubin, who has access > to an airplane, could of course be so crazy as to attempt > another infamous airplane terror event, once again staged > by the JEWS ! > > Steve Rubin's daughter Kaitlyn, with picture below, definately > shows neglect, and most poignantly, the inability for a JEW to > fight the urge to buy a Kleenex (too cheap JEW) for his own > daughter . . . . but rather, it is more likely that he is just a > S H I T T Y " F A T H E R ". The pictures tell all. > > Notice if you will, the bruises, sores, cuts, parched and chapped > lips, nostril openings that are completely crusted and not clean > enough for proper breathing, thus Steve Rubin is actually > suffocating his own daughter, by not cleaning the air passages > that lead to the baby's lungs. Parched lips usually means that > the child probably doesn't get enough liquids fed to her also, > yet another case of neglect by a "father" who is probably > playing stupid, and I did say stupid video games, like all > computer dweebs like JEW Steve Rubin actually is. > > --------------- > > The only thing Steve Rubin has ever done in radio, is to turn > on the damn appliance at home, to probably tune-in to > something dark and demonic, like what the JEW Talmud > demand of their leaders, and that is that they, the Jew > leaders, rabbis, MUST BE SORCERERS. > More on that, below ! > > Evil JEW Steve Rubin, who is on a warpath against I & I, > because he is a miserable, evil, terrorist (with plane), that > has tried his best to hunt me down, like some Pharisee Jew > hunting Jesus (Y'shua) Christ . . . > > What is funny is that JEW Steve Rubin, would most likely > rail against and attack the philosophy and practice of > suffocating Jews in the bogus German showers of WW2. > > --When in all actuality, it is - > --who wants to do things his own way, > --suffocating his own daughter in his own > --method - by blocking her air passages (nose) . > Good going Rubin ! > --Keeping one-self dirty, like a dirty JEW, > --a dirty JEW family, just like the > > VERMIN ANTI-CHRIST YOU ARE RUBIN ! > > How dare you come and test I & I, and try to conspire and > lie about the I, with a smear of lies, coming from a miserable > evil JEW like you Rubin. > > The Talmud (JEW Text) gives complete approval for Adult-Child > Sex. Therefore I want to know where all of those bruises are > coming from. Is the child being sexually abused by Steve Rubin ? > Coming from a "religion" which gives support, and urges such > Adult-Child Sex activity - See Below For Information on the Talmud > and Adult-Child Sex. > > Let's see, we have Steve Rubin who is the spirit of antichrist > "father" who abuses his own daughter (snot nose / parched > lips / bruises / sores) > NEGLECT, who is coming after me, and amazingly labels > the photo that is above of Kaitlyn, " Hell ". I kept the picture > file name intact, exactly how Steve Rubin named his daughter. > http://www.exorcist.org.nz/kaitlyn-whothehellareyou_1.jpg > > Steve Rubin (CEO President) > Layer 42 Inc. > Mountain View, California > http://www.layer42.net/contact/ > > ~ THE FLAME ~ > Steve Rubin Anti-God Anti-Christ Satanist > Layer 42 Inc. Mtn. View, CA > Child Neglect =3D Child Abuse > Jew Sanctioned Regulated Pedophilia > http://www.exorcist.org.nz/music_mafias.html > > ------------------------------------------------ > > JEW REGULATED PEDOPHILIA > (Talmud, Torah, Kabbalah) > > Permits Child-Adult Sex > Talmud law permits sexual intercourse between > children and adults. > > This doctrine is contained in a number of Mishnahs. > Before we examine them, however, it is necessary > that the reader be familiar with the word kethubah. > According to the Soncino Talmud Glossary: > > " KETHUBAH (Lit., 'a written [document]'); (a) a wife's marriage > settlement which she is entitled to recover on her being divorced > or on the death of her husband. The minimum settlement for a virgin > is two hundred zuz, and for a widow remarrying one hundred zuz; > (b) the marriage contract specifying the mutual obligations > between husband and wife and containing the amount of the endowment > and any other special financial obligations assumed by the husband. " > > =97 Babylonian Talmud, Soncino Talmud Glossary > > Zuz is a unit of currency. We see, then, that a dollar (or zuz) > value is put on virginity. > > Now let's look at a Mishnah from Kethuboth 11a: > " MISHNAH. WHEN A GROWN-UP MAN (7) HAS HAD SEXUAL > INTERCOURSE WITH (8) A LITTLE GIRL, (9) OR WHEN A SMALL > BOY (10) HAS INTERCOURSE WITH A GROWN-UP WOMAN, OR > [WHEN A GIRL WAS ACCIDENTALLY] INJURED BY A PIECE OF > WOOD (11) =97 [IN ALL THESE CASES] THEIR KETHUBAH IS TWO > HUNDRED [ZUZ] =85 " > > =97 Babylonian Talmud, Tractate Kethuboth 11a > > Soncino 1961 Edition, page 57 > The translator, Rabbi Dr. Samuel Daiches, amplifies the text > with footnotes: > " A man who was of age. > Lit., 'who came on'. > Less than three years old. > Less than nine years of age. > Lit., 'One who was injured by wood', as a result of which she > injured the hymen. " > > =97 Rabbi Dr. Daiches > > Let's review the above-cited Mishnah: "When a grown-up man has > had sexual intercourse with a little girl, or when a small boy > has intercourse with a grown-up woman =85" It is obvious that > sex activity between a grown man and a little girl, and between > a grown woman and a little boy, is a part of the woof and the > warp of everyday Talmud life; such relationships, in the eyes > of the Sages, are unremarkable. > There is no prohibition on sexual activity between adults and > young children =97 it is simply regulated. Recall the words of > the Very Reverend the Chief Rabbi of the British Empire, the > late Dr. Joseph Herman Hertz: > > " Religion in the Talmud attempts to penetrate the whole of > human life with the sense of law and right. Nothing human is > in its eyes mean or trivial; everything is regulated and > sanctified by religion. Religious precept and duty accompany > man from his earliest years to the grave and beyond it. > They guide his desires and actions at every moment. " > > =97 Rabbi Dr. Hertz > > Thus, if the Talmud permits girls three years old and younger > to be sexually used by adults, that is the law. The concern of > the Sages is to ensure that the adult is not, technically > speaking, in violation of any of the rules. > > > >

1 0