- tor-relays - lists.torproject.org

Fallback Directory Update: May 2017
by teor 17 May '17

17 May '17

Dear Relay Operators, We have rebuilt the list of fallback directory mirrors in Tor[0] for the upcoming 0.3.1 release. The new list will also be backported to Tor 0.2.8 and later. If you're asking: Q: What's a fallback directory mirror? See [1]. Q: Is my relay on the list? Search [2] for your relay fingerprint or IP address and port. (I used to BCC this email to all operators on the list, but that's a lot of work!) Q: What do I need to do if my relay is on the list? Keep the same IP address, keys, and ports. Email me or this list if the relay's details change. Q: Can my relay be on the list next time? We need fast relays that will be on the same IP address and port for 2 years. Email me to get on the potential relay list[3], or to update the details of your relay. Every release or two we run a script to choose about 150-200 relays for the list. Q: Why didn't my relay get on the list this time? We check a relay's uptime, flags, and speed[4]. Sometimes, a relay might be down when we check. That's ok, we will check it again next time. It's good to have some new relays on the list every release. That helps tor clients, because blocking the whole list is harder. Tim [0]: https://gitweb.torproject.org/tor.git/commit/src/or/fallback_dirs.inc?id=5b… [1]: https://trac.torproject.org/projects/tor/wiki/doc/FallbackDirectoryMirrors [2]: https://gitweb.torproject.org/tor.git/tree/src/or/fallback_dirs.inc [3]: https://gitweb.torproject.org/tor.git/tree/scripts/maint/fallback.whitelist [4]: https://trac.torproject.org/projects/tor/attachment/ticket/21564/fallbacks_… T -- Tim Wilson-Brown (teor) teor2345 at gmail dot com PGP C855 6CED 5D90 A0C5 29F6 4D43 450C BA7F 968F 094B ricochet:ekmygaiu4rzgsk6n xmpp: teor at torproject dot org ------------------------------------------------------------------------

1 0

WannaCry fallout FYI
by Jon Gardner 16 May '17

16 May '17

From the SNORT folks... http://blog.talosintelligence.com/2017/05/wannacry.html?m=1 ".... Additionally, organizations should strongly consider blocking connections to TOR nodes and TOR traffic on network. Known TOR exit nodes are listed within the Security Intelligence feed of ASA Firepower devices. Enabling this to be blacklisted will prevent outbound communications to TOR networks." <>< Jon L. Gardner Mobile: +1 979-574-1189 Email/Skype/Jabber: jon(a)brazoslink.net AIM/iChat/MSN: jlg(a)mac.com

8 14

Tor and ufw
by je suis 15 May '17

15 May '17

Hello everyone One of my friends got a ransomware and, even if I am on Linux and I take care when browsing, with such a proof beside me I thought I'd secure myself a bit, so I got ufw. I am running a middle relay, and so far it went just fine with ~2.5MB bandwidth, even if only in the daytime, morning to evening (laptop...; I do plan in getting a RaspberyPi in the future). I followed this page for setting up ufw with tor: https://help.ubuntu.com/community/TorDedicatedUser , even if I have Archlinux. I didn't use all in there, only the part right below "Traffic redirection", with ufw in the command line. Now, if I see the relay with 25kB, it's a miracle. So, obviously, I did something wrong. Is there a page with proper explanations for dummies like me? If it helps, my net comes from a router that handles cable TV and phone, as well. Vlad

1 1

A Naïve Question About ARM
by Kenneth Freeman 13 May '17

13 May '17

This is possibly a naïve question, but I like to compile and run the alpha/unstable version of Tor, but for the life of me I can't figure out how to get ARM to run the latest version. I'm currently running Anosognosia (Fingerprint: 9536B457F01F40696B131A72BC102343759F46AA), but it's stuck in the unrecommended Tor 0.2.7.5 and I'd like it to run 0.3.0.5-rc. Please explain it to me like I'm eight. Thanks! P.S. I understand that ARM is crufty is shall be updated, and furthermore, I miss Vidalia.

2 2

niftybunny relays: MyFamily configuration needs an update
by nusenu 11 May '17

11 May '17

Hi Markus, thanks for running so many tor relays. One [1] of your relays recently got a new key (2017-04-27), please update your MyFamily setting accordingly to help protect tor clients from using your entry+exit at the same time. thanks, nusenu https://raw.githubusercontent.com/ornetstats/stats/master/o/potentially_dan… [1] https://atlas.torproject.org/#search/niftychinchilla -- https://mastodon.social/@nusenu https://twitter.com/nusenu_

1 1

schlarman.org relays: MyFamily configuration
by nusenu 09 May '17

09 May '17

Hi, thanks for running tor relays [1]. Please update your MyFamily [2] setting to help protect tor clients from using your entry+exit at the same time. thanks, nusenu [1] https://atlas.torproject.org/#search/contact:tor@schlarman.org [2] https://www.torproject.org/docs/tor-manual.html.en#MyFamily -- https://mastodon.social/@nusenu https://twitter.com/nusenu_

1 0

Relay has Low Consensus and No Exit Flag Following Upgrade
by Chris 07 May '17

07 May '17

Hello, I recently upgraded my tor exit relay's tor version to 0.2.8.12. The uptime is 51 days and it has valid, running and stable flags. However, it no longer has the exit node flag and the consensus is very low (20). It also is not listed as a directory. I suspect something else during the upgrade has broken it as I had some SELinux issues binding to the ports before - which I resolved. There are no errors in ARM although the log is non existent? - permissions error? The fingerprint is 575F2C60045805ABFDB2B7D7A78982F9571BC277 Where should I start to fix this? Best Wishes, Chris -- Protect your privacy: encrypt your communications GPG: CF7F98B2

5 5

Actual user demographics?
by Jivan Amara 03 May '17

03 May '17

The counter they made has a good point, that you really don't know who is using it; but to suggest that means it's entirely used by criminals is also ridiculous. What can be known is *how* TOR is being used by setting up studies at exits and seeing what kind of services people are connecting to. From that, some inference of *who* is using TOR is possible. Maybe it's the same guy buying cocaine from a black market seller that posts articles on a civil rights abuses site, but it would be silly to make that assumption. From the usage stats I've seen, the TOR website paints a prettier picture than the truth, but at the same time opponents paint a significantly darker one. On 05/03/2017 05:00 AM, tor-relays-request(a)lists.torproject.org wrote: > Good morning, > > I recently presented to a group of ten local police chiefs on the topic of Tor and its more common, though less publicized, civil usage, as opposed to the more publicized criminal usage. During my presentation I emphasized this fact, and they countered that because its usage is entirely anonymous, it is reasonable to assume that it could be used entirely by criminals and none of the oppressed as I had claimed. > > Which brings me to my question. Other than private individuals saying "Hey, I use Tor for X", how does the overall network know what the network is used for, even approximately? > > Make your day great, > Isaac Grover, Senior I.T. Consultant > Aileron I.T. - "Practical & Proactive I.T. Solutions" > > O: 715-377-0440, F:715-690-1029, W: www.aileronit.com -- Cheers, Jivan Amara --- Senior Full-Stack Developer Development(a)JivanAmara.net (619) 549-4497

4 4

Actual user demographics?
by Isaac Grover, Aileron I.T. 02 May '17

02 May '17

Good morning, I recently presented to a group of ten local police chiefs on the topic of Tor and its more common, though less publicized, civil usage, as opposed to the more publicized criminal usage. During my presentation I emphasized this fact, and they countered that because its usage is entirely anonymous, it is reasonable to assume that it could be used entirely by criminals and none of the oppressed as I had claimed. Which brings me to my question. Other than private individuals saying "Hey, I use Tor for X", how does the overall network know what the network is used for, even approximately? Make your day great, Isaac Grover, Senior I.T. Consultant Aileron I.T. - "Practical & Proactive I.T. Solutions" O: 715-377-0440, F:715-690-1029, W: www.aileronit.com

3 2

tornull
by Dirk 01 May '17

01 May '17

Dear all, I was made aware of the Tor Null Advisory BL [1] which is also mentioned in trac here [2]. Block Botnets does not seem like a bad idea in principal. But the page has no listing of a responsible person neither any criteria listed which it chooses to identify "bad" IPs. Looking at some of the links I found 1 which had a date from 2011 [3]. As will I miss information an when and how often it is updated. Therefore it looks slightly suspicious to me. And it surely has an abuse potential. Does anyone have more information on the background or recommendations here ? best regards Dirk [1] https://tornull.org/ [2] https://trac.torproject.org/projects/tor/wiki/doc/ReducedExitPolicy [3] https://www.spamhaus.org/sbl/query/SBL113323

4 4