- tor-relays - lists.torproject.org

Anti-Sybil (re: Explain... all the Nodes)
by grarpamp 03 May '19

03 May '19

On 5/2/19, Herbert Karl Mathé <mail(a)hkmathe.de> wrote: > I strongly believe certain issues need be brought up into conscious, and > into presence: into discussion, actually. > > Therefore appreciating this as it might fit too well into context > > Keeping things below surface, or trying so, has too often proven to be a > very bad idea as these will come up sooner or later anyway, then with much > higher magnitude. Even worse, trust is then destroyed. As said before, the category of Anti Sybil Web of Trust Projects needs considered, and could even cover such speculative subjects. It's not about analysing the meta of one node or one operator, even if a true positive hit, in general the yield is approximately zero percent of any overlay network's nodes, it's about stepping back and agnostically analysing them all. Go investigate and collate all the possible meta informations... Node location, payment, OS, ISP, uptimes, anon / nym / PGP / GovID, workplace, politic, blogs, whatever else you can imagine, including incorporating what's already in the consensus, contact, MyFamily, nickname, both real world and virtual infos, operator to operator p2p Web of Trust... No node has to supply any infos. Put it all in a db and give users tools to select node sets. Some users might select State's, or State's workers or even Statist's nodes, over say anon nodes, as maybe they feel they have to play by some "rules" that anon nodes don't. Others might reject operators that post stupid pics on Facebook. Or all Ubuntu relays. Or nodes that engage in free speech they don't like, some in Tor Project would love that selector, lol. It doesn't matter, it's a meta project, with it you can accept or reject on whatever whim you wish by node fingerprints in your client. And if the Sybil WoT project ends up discovering some interesting potential threats classes among the entire node set, you win. Until then, you are potentially missing all of that, and are not raising Sybil's costs of doing business by forcing them to expend much resource into playing real world Web of Trust against users who might select to use various positive-meta-ranking and or WoT structures. Right now Sybil's cost is only a little hosting. If not, you can still report bad exits and other actual technical node and traffic mangling to tor-relays and or bad-relays, at least until someone DHT's or otherwise distributes tor away from the more centralized DA design. Note that Tor's architecture does not protect much against Global Passive Adversary of NSA style fiber Vampires, that threat does not require Sybil nodes, nor do they have to be Global or Govt, even Tier-N backbones can tap, analyse, and do nefarious things like and with that, including sell, give, and partner it all away. Though they can and do run Sybil nodes to help inject, manipulate, block, see, etc traffic, nodes, and clients. On flip perspective, maybe you really don't want to develop WoT's and such, simply because enabling creeping featureism of it all can lead to exclusivity and control whereby valuable anon diversity is selected away from and purged. That would be very bad. Either way, other than the usual design, protocol, code, and "Lawfare" exploit space, and the coming Quantum Compute adversary, Sybil and Vampire are likely todays biggest remaining threats to overlay networks. None of todays networks seem to be trying to do anything to stop Sybil, and only a few networks put Vampire as any sort of priority [1]. While Vampire may perhaps be solved with some technical measures, Sybil may require some sort sort of human based measures. [1] Curiously, cryptocurrencies do employ Anti-Sybil in various proofs of work (adversary cost raising), and can help defund Vampires.

3 3

[tor-talk] Explain yourself Conrad Rockenhaus
by Stirling Newberry 03 May '19

03 May '19

> I met Conrad online in September 2013, not long after the Washington Navy Yard shootings. Which is how I remember when. He mentioned that he was serving in the Navy then. And I vaguely recall that he's posted on Tor lists about the military using Tor. So you met Conrad on Grindr in September 2013, not long after he was supposed of been shot by the Washington Navy Yard shooter? Did you tell him during the Grindr date that he was lucky to be alive so he could bring us Greypony? I wish the shooter would of killed him because Conrad deserves to be dead because of the hell the Greypony project brought us since 2013. Was he top or were you top? Did you suck or did he suck? or did you both suck? Did you do a good little rim afterwards? Sent with ProtonMail Secure Email.

5 4

ALL GREYPONY SERVERS ARE OPEN FOR DDOS
by Stirling Newberry 03 May '19

03 May '19

ATTENTION GREYPONY USERS ALL GREYPONY EXITS WILL BE TARGETED FOR DDOS. THIS REQUEST HAS COME FROM PRETTY HIGH UP. GAME OVER BITCHES. YOU GUYS ARE GOING TO BE DONE. LOIC WILL BE USED TO TARGET THE NODES. DON'T SAY YOU WERENT WARNED YOU STUPID SACKS OF FAGGOT SHIT. Sent with [ProtonMail](https://protonmail.com) Secure Email.

3 2

A forwarded response
by Anonymous Tormaster 03 May '19

03 May '19

I don't believe it's right that trolls get the right to basically accuse Conrad of violating the principles of the Tor network just because he wants to offer donation based FreeBSD VMs to run Tor Exits. He has stated that he is unable to post to the lists and he is not being provided a reason on why he is unable to post to the lists. I can understand somewhat that he might be advertising but I don't understand why he's publicly reprimanded then banished yet now we're allowing people to trash someone who has actually contributed somewhat decently to this community. This action or inaction is disgusting and unacceptable and fosters and unwelcoming and hostile user climate all because Conrad wanted to HELP. So I'm including his full reply he sent me and I'm sending it anonymously because that's what seems to be popular these days: Hello, I'm sure that this original email was a personal attack and trolling, but given that it has aroused some interest in some of the emails I have received off-list, and the fact that Herbert did make the comment that keeping things below the surface may destroy trust, I will answer your points in question, Mr. Revolution. > You worked at the National Reconnaissance Office of the United States which is the most secretive branch of the United States Intelligence Community > You worked at the Naval Security Group Activity which is the United States Navy's version of the National Security Agency I was previously stationed at the NRO/SPAWAR Washington DC and Temporarily Attached to NSGA/NIOC and NRL on several occasions while I was on Active Duty in the Navy. I was stationed at various places, attached to various commands, served in various capacities and I haven't kept my previous affiliation with the US Government a secret by any means at all. I have no reason to, in fact, I'm very proud of what I've done in service of my country. That being said, I've been retired from Active Duty as of February 25, 2015 and in civilian employment since and I haven't had any employment affiliated with any government agency. This point is kind of moot. I've never kept my Naval Service Hidden, in fact, I brought it up as examples of Government/Military uses of Tor on the mailing list. > You have a Security Clearance but you don't specify what type but I wonder why someone with a SECURITY CLEARANCE would want to work with Tor My security clearance serves no purpose at this point other than making criminal background checks easier and allowing me, as a cybersecurity professional, easier trusted access through organizations that utilize the Federal Government's security clearance adjudicative standards the ability to grant me access faster. This point is moot. > Teor called you out months ago as a US Government Spy and I'm glad that the Tor Community Council is calling you out with. People can post all of the advertising in the world but as long as you're called out Mr US Federal Government Spy then they're doing the right thing. I have no idea what you're talking about with Teor, I do know that when a bunch of the users of the previous iteration of GreyPony were posting about their relay speeds and what not he asked for the list to remain on topic, but I don't remember any pointed calls of Teor accusing me ever being a US Government Spy. I don't care for the Tor Community Council, because I believe it's quite odd of them to repeatedly condemn me yet be completely chill with this. Strange. > You are probably trying to push hacked FreeBSD or that hacked HardenedBSD stuff that no one cares about anyway. You should probably do a little research on how BSD operating systems, especially FreeBSD or HardenedBSD work, to realize how impossible it is for this to work. FreeBSD it's hard, HardenedBSD, I think it's about impossible, but I like the fact you're reaching who shot JFK? levels in your analysis here. > If people cared about more FreeBSD on Tor they would do it but obviously it's not a big issue!!! You see, people do care, because what's going to prevent the big bad spies like me from finding that exploit in all of the cool l33t Ubuntu b0xes you're running Tor on and bringing down 2/3s of the overlay network? That's why we have network diversification to prevent such a failure - if there's a bug or an anomaly that effects Linux for example, it won't effect the BSD, MacOS, and Windows relays, and we'll still have a functioning overlay network. That's the point of diversification. That's the point of promoting it. I'm sorry that you don't want to see that, but that's what it is - we have the resources up to prevent a problem prior to a problem occuring. > It's not a big issue to spin up our Hetzner exits at least we know that a spy not you isnt doing it!!! Cool, and when Hetzner finally decides to pull the plug on Tor exits because they had enough, what then? It never hurts to try to diversify AS assets either. Your characterization of me being a spy is completely illogical because if I were to act in such a capacity, I would just do it. I have the bandwidth to do it, I don't need people to do it for me, I would just set up relays and go for it. The question is - what would I be spying on? I mean, you make it sound like that the exit operator has the full picture in his/her view....except they don't. I see connections from other relays. Oh, don't we default to HTTPS-Everywhere in the Tor Browser package as well by the way? What exactly am I trying to spy on Mr. Revolution? In the end, here's what I think is going on. Several newbies started using GreyPony. Everything was fine, in fact, there was support for it on the mailing list until they started bragging about speeds in excess of 1 Gbit/s. Then the following things occurred (and if you look back at the mailing list history, you can see this): 1. There were complaints that said newbies were lying about their exit relay speeds, even though speeds are measured by the bwauths, so user reported speed really doesn't matter anymore, so this wasn't a valid complaint. 2. There were complaints that the relays should all be in the same MyFamily, even though we don't expect relays hosted on OVH, Hetzner, etc. to be reported on the same MyFamily, after all, I didn't have access to any of these relays, so this wasn't a valid complaint, as I was just hosting the relays. 3. Excess traffic was being generated about GreyPony, which Teor asked everyone to stop bringing up GreyPony until October because of all of it. This was a valid complaint. Due to all of the newbie bragging and honestly, because I was proud of the fact that I was helping out several people, I let myself get out of hand and replied to the emails as well, so I understood and cooled it. Now, again, I wind up back in the hospital, things go a little south for the project because I'm not around, but I come back and the project is ready to start again. Now GreyPony is back to the way that we originally intended it to be - a donation only project to provide FreeBSD/HardenedBSD exits to Tor. Most of the same guys that were running relays with the original one want to come back to the new one, plus some new people. I'm sorry that people wanting to help the Tor network by providing high performance FreeBSD Exit Relays angers you and some other of your fellow travellers so much. If it makes you happy, the project will go on with or with out your support.

4 4

How Greypony fucks everyone over
by Stirling Newberry 03 May '19

03 May '19

Greypony just attracts a bunch of script kiddies who have no business running HS relays. All of those morons that run instances with Greypony are lazy and cheap who don't want to pay for server colocation and don't want to pay their dues on their mailing list or by getting known. This isn't a welcoming community don't you get it!!!! You earn your keep and when youre granted the ability and permission to run an exit they will grant you the permission to run the EXIT. Obviously Conrad doesn't deserve his Freedom of Speech on here because it's the torproject's property and they can take it away from him. He doesn't deserve to speak because he's probably a closeted homosexual given the fact that he was in the Navy. No one cares about Greypony or freebsd Conrad. Just give it up. Greypony is like the crap that gets stuck in your dick after you're done vigorously fucking a girl in the ass for 10 hours. You'll get a sliver of impacted shit on your dick and that's Greypony a sliver of annoying impacted shit. Sent with [ProtonMail](https://protonmail.com) Secure Email.

1 0

Re: [tor-relays] [tor-talk] Tor diversity (was: Explain yourself Conrad Rockenhaus)
by René Ladan 02 May '19

02 May '19

Op do 2 mei 2019 09:43 schreef Tor Revolution < isupportthenewrevolution(a)protonmail.com>: > You are probably trying to push hacked FreeBSD or that hacked HardenedBSD > stuff that no one cares about anyway. If people cared about more FreeBSD on > Tor they would do it but obviously it's not a big issue!!! > Ignoring half-baked accusations against Conrad for now. Having relays running something else than Ubuntu *is* an important issue. This does not have to be FreeBSD/HardenedBSD, it can also be OpenBSD/NetBSD, MacOS, or even Windows. The point is that if someone (say the NSA) discovers a bug in Ubuntu which they can use to take over relays, and 95% (or so) of the relays run Ubuntu, then they can take over Tor. If a significant part of the relays run something else, then those relays are safe for the exploit and consequently becomes harder for the NSA to take over Tor. As for why 95% of the relays runs on Ubuntu, I guess it is legacy. At least https://support.torproject.org/#operators advertises multiple operating systems. See also https://torbsd.github.io/ René (running "ymkeo" on FreeBSD for almost 5 years now)

3 2

Re: [tor-relays] [tor-talk] Explain yourself Conrad Rockenhaus
by Tor Revolution 02 May '19

02 May '19

> This is another reminder to please keep posts on-topic and civil. > > This is not the place for personal attacks. > The sooner that the Tor community is rid of this filth known as "Conrad Rockenhaus" the sooner people will stop talking about him. Why are you defending him? > > > On 2 May 2019, at 09:43, Tor Revolution isupportthenewrevolution(a)protonmail.com wrote: > > Per your LinkedIn: > > You worked at the National Reconnaissance Office of the United States which is the most secretive branch of the United States Intelligence Community > > You worked at the Naval Security Group Activity which is the United States Navy's version of the National Security Agency > > You have a Security Clearance but you don't specify what type but I wonder why someone with a SECURITY CLEARANCE would want to work with Tor > > Teor called you out months ago as a US Government Spy and I'm glad that the Tor Community Council is calling you out with. People can post all of the advertising in the world but as long as you're called out Mr US Federal Government Spy then they're doing the right thing. You are probably trying to push hacked FreeBSD or that hacked HardenedBSD stuff that no one cares about anyway. If people cared about more FreeBSD on Tor they would do it but obviously it's not a big issue!!! It's not a big issue to spin up our Hetzner exits at least we know that a spy not you isnt doing it!!! > > > > Sent with ProtonMail Secure Email. > > > > ----------------------------------- > > > > tor-talk mailing list - tor-talk(a)lists.torproject.org > > To unsubscribe or change other settings go to > > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk > > -- > > tor-talk mailing list - tor-talk(a)lists.torproject.org > To unsubscribe or change other settings go to > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

2 1

Explain yourself Conrad Rockenhaus
by Tor Revolution 02 May '19

02 May '19

Per your LinkedIn: You worked at the National Reconnaissance Office of the United States which is the most secretive branch of the United States Intelligence Community You worked at the Naval Security Group Activity which is the United States Navy's version of the National Security Agency You have a Security Clearance but you don't specify what type but I wonder why someone with a SECURITY CLEARANCE would want to work with Tor Teor called you out months ago as a US Government Spy and I'm glad that the Tor Community Council is calling you out with. People can post all of the advertising in the world but as long as you're called out Mr US Federal Government Spy then they're doing the right thing. You are probably trying to push hacked FreeBSD or that hacked HardenedBSD stuff that no one cares about anyway. If people cared about more FreeBSD on Tor they would do it but obviously it's not a big issue!!! It's not a big issue to spin up our Hetzner exits at least we know that a spy not you isnt doing it!!! Sent with [ProtonMail](https://protonmail.com) Secure Email.

1 0

SENDME CELL
by marziyeh latifi 30 Apr '19

30 Apr '19

Hello, I have two questions about SENDME cell in TOR: Is SENDME a Control cell or a Relay cell? Which node does interpret SENDME cells?The node that receives them or the edge node(client/exit)? thanks

2 2

Re: [tor-relays] Well, what exactly are you trying to contribute with your efforts?
by Conrad Rockenhaus 29 Apr '19

29 Apr '19

On Wed, Apr 17, 2019 at 5:49 PM Seby <seby2kt14(a)gmail.com> wrote: > > Here we go again... > This dude just won't stop harassing us with masked advertising, commercial > offers and monetary asks. Every time even the most boring thing needs to be > publicly shouted on these mail lists, every time he does something > extraordinary, something quite unusual that none of you mortals could ever > do like running a middle relay on a small virtual machine, or a 500KB/s > bridge. > Actually, it's not masked advertising for commercial offers. It's nonprofit solicitation to assist other users that are interested in expanding Tor's FreeBSD Resiliency. There's quite a few people that would like to help but aren't comfortable making the plunge on their own. Increasing the number of FreeBSD machines ensures we don't have a single point of failure as the number of Linux machines presently on Tor greatly outweighs the number of FreeBSD machines on Tor. This was previously discussed, but I'm sure you weren't paying attention, but that's where the project started from and it was always a nonprofit project to begin with. In addition, we're now assisting with AS divestment as well, to try to get people off of highly populated ASes so those don't form single points of failure. Which is another goal of the Project, from what I have been told. I understand you may not get that, so I'll explain it as simply as possible - too many middle relays and exits are getting service from the same service providers. We are trying to help provide another Tor friendly service provider to the table (which runs separately from this since that's a commercial operation). When we had are stuff fully online, we occupied all 15 top spots of the highest bandwidth exits in Canada. Right now my highest performing exit in the US is in the Top 10 but I've been scaling that exit down as I'm not sure if I'm keeping my personal items online anymore at this point. Finally, the GreyPony project has been there to make it be able for an enduser be able to easily setup and get going on their first new relay with dedicated support, sometimes people want that extra hand. Before you trash a project before you should learn about it, but all you've been doing is trashing things. Maybe you should try contributing to something and ignoring things you disagree with or asking questions if you don't understand it, instead of just resorting to talking trash about a project. I just makes it look like you have plenty of free time to mock others because you aren't helping others, but that's my take on things. -- Conrad Rockenhaus https://www.rockenhaus.com Cell: (254) 292-3350 Fax: (254) 875-0459

3 4