- tor-relays - lists.torproject.org

Re: [tor-relays] Fwd: Tor Guard Relay
by Mirimir 14 Jul '18

14 Jul '18

On 06/09/2018 01:51 PM, Keifer Bly wrote: > I just scanned the picture files using Avast, which I use a a lot and it is > a pretty great anti virus program based off of my use with it. Here is the > contents of the email in programming code; I don't know about other email > services but in Gmail this can be retrieved by signing into the web version > (in a web browser) clicking the more options button (next to the replay > button) and clicking "show original". > >>From what I can tell looking at the code, it is encoded using base64 and > the ip address of the web server it was sent from is 104.161.37.109. > > However, as for telling anything else, it seems like that would be > difficult to do without the right equipment. Let me know what you think. Thanks for source with headers. I don't see anything useful, though, I do see that "In-Reply-To: <5b182b2c.1c69fb81.390f6.f0ea(a)mx.google.com>" is correct, so the sender is probably subscribed to the list. Getting that right from messages in the online archives would be nontrivial. But damn: "I joined this site so that i could weed through the guys who aren’t serious and reliable enough to invite to my house where i feel comfortable." Trolling the tor-relays list for nice guys to date? That is bizarre. > On Sat, Jun 9, 2018 at 5:26 PM Mirimir <mirimir(a)riseup.net> wrote: > >> On 06/09/2018 05:28 AM, Keifer Bly wrote: >>> I was asked by mirmir to send one of the emails as a txt file, and so >> here >>> it is. It is at the google drive link below, I had tried to send it as an >>> attachment, but got a note back saying it was being held because it was >> too >>> big. The zip file contains the contents of the email and the attached >>> images. Thank you. I will try creating a spam filter for the email domain >>> they are coming from, though a few of them have come from yahoo.com >> domain, >>> which annoyingly I can't really block as some of my legitimate contacts >> use >>> yahoo mail. I could try reporting this to Google, what do you think? >>> >>> >> https://drive.google.com/open?id=0B_cH2cPZZmbTMmE2Ni1hc1BZbXliM0hMaTZnN19Gc… >> >> Thanks. But the text there doesn't contain headers. But that's less an >> issue, because from headers aren't spoofed. The question now is whether >> this is simple trolling, or attempts to infiltrate machines of relay >> operators. Someone experienced with malware analysis could examine the >> images for attack code, as Roman suggested. But that's over my head. >> >> Blocking *.mexyst.com domains, as Neel suggested, will likely stop most >> of them, with little or no downside. But blocking yahoo.com isn't >> workable for many. But if they're all as salacious as Keifer's example, >> blocking on language seems workable. Or language plus domain. >> >> As with Efail, this is a reminder of the risks of decoding HTML, loading >> embedded images, and fetching remote content. And the importance of >> compartmentalizing email and browsing from credentials for relay >> management (and other high-impact stuff, such as finances). >> >>> On Fri, Jun 8, 2018 at 9:57 PM Mirimir <mirimir(a)riseup.net> wrote: >>> >>>> On 06/08/2018 05:03 PM, Keifer Bly wrote: >>>>> This is one of the about 20 emails that have been received. Upon >> looking >>>> it >>>>> looks like they are spoofing the [tor-relays] subject line. My >> apologies >>>>> for the subject change but could not find a way to forward the emails >>>>> without forwarding them from an old conversation. Thank you. (The >> subject >>>>> this is in reference to is "Spam Emails Received From This Mailing >>>> List"). >>>> >>>> OK, so they're just using subject lines from the list. And not spoofing >>>> the from address. >>>> >>>> But what you forwarded doesn't include the headers. By googling, I get >>>> this: >>>> >>>> | 1) Open the message in your Gmail inbox. >>>> | 2) Click the down-arrow in the top-right corner of the message. >>>> | 3) Click the "Show original" link toward the bottom of the options >>>> | box. The message will open in a separate window with the full >>>> | message headers at the top. >>>> >>>> Just save that as a text file, and send it to me as an attachment. >>>> >>>> Why the bloody hell someone would target users of this list in that way >>>> is bizarre. And why you? Rather than me, who is admittedly an outspoken >>>> jerk sometimes ;) >>>> >>>>> ---------- Forwarded message --------- >>>>> From: Becky Janet <beckyjanet335900(a)re.mexyst.com> >>>>> Date: Fri, Jun 8, 2018 at 7:48 PM >>>>> Subject: Re: [tor-relays] Tor Guard Relay >>>>> To: Keifer Bly <keifer.bly(a)gmail.com> >>>>> >>>>> >>>>> first you need to trust someone to find real sex partner. So if you >> want >>>> to >>>>> find real sex partner then you need to trust me. Always i'm telling you >>>>> it's totally f r e e. Just connect with My Private Page >>>>> <http://datingflirt.info/1stold> by submitting you mail, name, age >> etc. >>>> I'm >>>>> assure you if it's ask any cc then no need to connect with me. So just >>>>> trust and try. Trust Me & Try It Now NCTB ; After completing this task >>>>> check your mail ,Automatically you will get my personal phone no in >> your >>>>> mail within 5 min. Just check your mail (inbox/s p a m) and call me >> asap. >>>>> I'm waiting for your cam >>>>> >>>> _______________________________________________ >>>> tor-relays mailing list >>>> tor-relays(a)lists.torproject.org >>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >>>> >>> >> _______________________________________________ >> tor-relays mailing list >> tor-relays(a)lists.torproject.org >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays >> >

4 9

bridge not accessible through obfs4 port
by entensaison＠use.startmail.com 14 Jul '18

14 Jul '18

Dear friends, I am uncuccessfully running a bridge that uses obfs4 as pluggable transport. (At least it should.) Today I actually tried to connect to it and it is possible to connect to the bridge using the ORport. But when I tried to start tor browser with this setting to use obfs4: obfs4 12.345.67.89:1111 (only with the right numbers) it got stuck at "establishing an encrypted network connection". I checked on canyouseeme.org and both the vanilla ORport and the obfs4 port seem to be accessible from outside. My router is set to allow TCP and UDP on the port for obfs4. What could be causing the problem? Cheers, Lo Am Mittwoch, 11. Juli 2018 um 20:47 schrieb Keifer Bly <keifer.bly(a)gmail.com>: > > In comparison how much bandwidth would a Tor bridge user per month? > > It would be tough to give an exact answer to that is it depends on > how many people are connecting through your specific bridge. However > in general the bandwidth requirements would be much less, as bridges > are used for mostly areas where the tor network is blocked whereas > one of the exit relays is used by every client that uses tor at all. > > You can find more information on this topic here > > >> https://metrics.torproject.org/stats.html > > This page contains information about how much traffic different types > of relays generally send and receive over time, etc. > > PS, my apologies if this comes through twice for some reason. My > email client is acting a bit strange at the moment. > > On Wed, Jul 11, 2018 at 9:04 AM Nathaniel Suchy <me(a)lunorian.is> > wrote: >> Hi. I would like to run a public OBFS4 Tor Bridge. Digitalocean’s >> price changes made running an exit too expensive. In comparison how >> much bandwidth would a Tor bridge use per month? >> >> Cheers, >> Nathaniel >> _______________________________________________ >> tor-relays mailing list >> tor-relays(a)lists.torproject.org >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

3 3

Relay Search feature request: add consensus weight line/graph
by nusenu 12 Jul '18

12 Jul '18

I filed a RS feature request that should help you better understand / interpret relay trending (relay doing better or worse?) https://trac.torproject.org/projects/tor/ticket/26767 Relay Search has two graphs showing bw history data and relative values (fraction and probabilities): consensus weight fraction middle probability guard probability exit probability written bytes per second read bytes per second One of the most relevant question for a relay operator is: How is my relay doing? Is it doing better or worse than usually? A good data point to answer this is to look at the cw value over time (not cw fraction) since the probabilities and fraction values are relative and not directly controllable by the operator (i.e. other operators add relays). This will allow relay operators to answer questions like: "My cw fraction decreased, was it because my cw decreased or did my cw remain stable and someone else added more resources?" a graph showing the ratio between cw fraction to cw would also be nice since it answers above question more directly without having to compare the cw and cw fraction lines manually onionoo data: https://metrics.torproject.org/onionoo.html#weights_relay_consensus_weight the onion box displays a cw graph: https://raw.githubusercontent.com/ralphwetzel/theonionbox/master/docs/images/weights.png

1 0

Bridge bandwidth usage?
by Nathaniel Suchy 12 Jul '18

12 Jul '18

Hi. I would like to run a public OBFS4 Tor Bridge. Digitalocean’s price changes made running an exit too expensive. In comparison how much bandwidth would a Tor bridge use per month? Cheers, Nathaniel

2 1

Re: [tor-relays] Thoughts on automatically updating tor software on macos High Sierra
by Keifer Bly 10 Jul '18

10 Jul '18

Tried that twice now and it has not worked. It’s strange, the error terminal returns when trying to launch the script to upgrade tor is this iMac:~ oldimac$ launchctl load -w /Library/LaunchDaemons/starttorupgrade.plist /Library/LaunchDaemons/starttorupgrade.plist: Path had bad ownership/permissions This is very odd. I set the permissions to read and write for all users, but yet this error is still happening. I changed the permissions for the whole lanchdaemons folder as well and still no resolve to this. I even tried signing into the root user in Terminal to see if that would resolve the issue, it did not. Here is the code for the two scripts I wrote, they were too big to send as attachments. Perhaps I am doing something wrong? I do not know. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Label</key> <string>com.oldimac.upgradetor</string> <key>ProgramArguments</key> <array> <string>/Library/LaunchDaemons/upgradetor.plist </string> </array> <key>StartInterval</key> <integer>80000</integer> </dict> </plist> code for upgradetor.plist: > brew upgrade tor > On Jul 9, 2018, at 8:45 PM, Keifer Bly <keifer.bly(a)gmail.com> wrote: > > Tried that twice now and it has not worked. It’s strange, the error terminal returns when trying to launch the script to upgrade tor is this > > > iMac:~ oldimac$ launchctl load -w /Library/LaunchDaemons/starttorupgrade.plist > /Library/LaunchDaemons/starttorupgrade.plist: Path had bad ownership/permissions > > This is very odd. I set the permissions to read and write for all users, but yet this error is still happening. I changed the permissions for the whole lanchdaemons folder as well and still no resolve to this. I even tried signing into the root user in Terminal to see if that would resolve the issue, it did not. I’ve attached the scripts I created if someone wouldn’t mind helping me take a look tp see if anything is wrong? Thank you.

2 2

Thoughts on automatically updating tor software on macos High Sierra
by Keifer Bly 10 Jul '18

10 Jul '18

Hello list, So for a while I have been struggling to find a way to automatically update the tor relay software on macOS High Sierra. What I am currently doing is running a batch file that runs the command “brew upgrade tor” continuously. However, I am attempting to find a way to do this automatically on macos High Sierra where the process doesn’t have to be running every second. Here’s the unfortunate thing, on the newest macos operating systems, it appears there is no possible way to run terminal commands automatically, as crontab has been disabled / removed from newer mac operating systems (I discussed this with Apple technical support) and applications to run scripts automatically are incompatible with newer macos. Any thoughts on this would be appreciated, thank you.

3 2

DNS Time Outs
by Paul Templeton 09 Jul '18

09 Jul '18

Hi all, how often does the site https://arthuredelstein.net/exits/ update. 'coffswifi4' was reporting 60% timeouts but I have setup a stand alone DNS for it and would like to know if its resolved the problem. I think this is why it kept on being dropped from the consensus... For nusenu - Yes I have setup DNSSEC :-) Regards, Paul 137CF322859E400455E457DB920F65FFDD222CDF

3 3

Re: [tor-relays] DNS Time Outs
by Paul Templeton 09 Jul '18

09 Jul '18

> Exits don't get dropped from the consensus for DNS failures. > The directory authorities only check ORPort connectivity. Then I have two separate problems...

1 0

tor alpha users: if you are still running 0.3.3.5-rc..
by nusenu 08 Jul '18

08 Jul '18

Dear debian/ubuntu tor alpha repo users, there is an oddly high number of relays running 0.3.3.5-rc which was the last version before the 0.3.3.x alpha repo has been discontinued. If you are doing apt upgrades and don't get tor v0.3.3.7 your sources list is likely incorrectly setup (only containing the experimental lines without the tor stable lines), please ensure you copy and paste the sources.list lines from https://www.torproject.org/docs/debian.html.en#ubuntu after choosing your settings from the drop down. Note: as already noted on this list, the page is slightly outdated. If you want to help testing 0.3.4.x you should replace '0.3.3.x' with '0.3.4.x' in your sources.list bonus points if you want to share the reason why you had a misconfigured sources.list file (maybe we can improve / avoid that somewhere) -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

3 8

Is a relay on mobile broadband possible in Australia?
by I 07 Jul '18

07 Jul '18

6 22