- tor-relays - lists.torproject.org

relaygroup in entry and exit position
by nusenu 14 Nov '16

14 Nov '16

Hi, thanks for running entry _and_ exit tor relays! You are one out of (currently) 7 relay operators [1] running entry _and_ exit relays (with guard probability > 0) without proper 'MyFamily' configuration. This can be dangerous for tor clients because they might choose you as entry _and_ exit relay. Please help protect tor clients by properly specifying the MyFamily configuration in your torrc files. MyFamily example configuration (a single line with all your relay fingerprints separated by comma): MyFamily 4A549160BEFA50EA10C2F4D6D80E9AFE20DBAF95,88C3708A9D71ECEC1910B63C3FAA5BF60CD7E199 https://atlas.torproject.org can help you show MyFamily misconfiguratons as well. If you need any help please let us know. kind regards, nusenu This list is auto-generated on a daily basis: [1] https://raw.githubusercontent.com/ornetstats/stats/master/o/potentially_dan…

1 0

Re: [tor-relays] torworld relays in entry and exit position
by nusenu 14 Nov '16

14 Nov '16

> We're just asking for an example line Example: MyFamily 4A549160BEFA50EA10C2F4D6D80E9AFE20DBAF95,88C3708A9D71ECEC1910B63C3FAA5BF60CD7E199 > But never the less we'll add this very soon to most of our nodes. "most"? > We're still testing our servers to see which ones will stay or get > cut from the network. We believe that next month on the 1st of > December would be a good time to add this feature. This way we'll be > done with our network testing, and the final cuts to it. This way; we > don't have to keep messing with the MyFamily line over and over > again. We've developed our own in house system for updating all the > nodes, and maintaining them. If there is an automated central management, there is no messing required at all ;)

1 0

Re: [tor-relays] torworld relays in entry and exit position
by nusenu 13 Nov '16

13 Nov '16

(resending this - not sure if the first attempt made it through) > Thank you for bringing this to our attention. We'll go a head, and do > proper research and add the MyFamily tags to all nodes. If you'd like > to give us an example copy to go off of that would be much > appreciated. If responding by email is too slow you're more than > welcomed to join our Slack team, and discuss this further in their. > https://slack.torworld.org > > Again thank you for reaching out to us. The MyFamily torrc setting is just a single line listing all your relay fingerprints. This setting tells tor clients "these are my relays: ... don't use more than one of my relays in any single circuit". This is particularly relevant if the entry _and_ exit probability of your group of relays is > 0% and your relays are spread across more than a single /16 network. Atlas.torproject.org can help you verify that the configuration is set up correctly (effective family has to list all your relays). If you expect to add/remove relays or adjust exit policies in the future on a more or less regular basis, I would suggest you use a configuration management like ansible or puppet to manage your relays - for your own convenience. I'm maintaining an ansible role to help tor relay operators manage MyFamily automatically - no more manual hassle (in addition to configure them using security features like 'OfflineMasterKey'). https://github.com/nusenu/ansible-relayor If you have any further questions - just let us know. regarding your slack group: I prefer to discuss this on the tor-relays mailing list instead of creating yet another place to discuss these topics.

1 0

Re: [tor-relays] torworld relays in entry and exit position
by nusenu 13 Nov '16

13 Nov '16

> Thank you for bringing this to our attention. We'll go a head, and do > proper research and add the MyFamily tags to all nodes. If you'd like > to give us an example copy to go off of that would be much > appreciated. If responding by email is too slow you're more than > welcomed to join our Slack team, and discuss this further in their. > https://slack.torworld.org > > Again thank you for reaching out to us. The MyFamily torrc setting is just a single line listing all your relay fingerprints. This setting tells tor clients "these are my relays: ... don't use more than one of my relays in any single circuit". This is particularly relevant if the entry _and_ exit probability of your group of relays is > 0% and your relays are spread across more than a single /16 network. Atlas.torproject.org can help you verify that the configuration is set up correctly (effective family has to list all your relays). If you expect to add/remove relays or adjust exit policies in the future on a more or less regular basis, I would suggest you use a configuration management like ansible or puppet to manage your relays - for your own convenience. I'm maintaining an ansible role to help tor relay operators manage MyFamily automatically - no more manual hassle (in addition to configure them using security features like 'OfflineMasterKey'). https://github.com/nusenu/ansible-relayor If you have any further questions - just let us know. regarding your slack group: I prefer to discuss this on the tor-relays mailing list instead of creating yet another place to discuss these topics.

1 0

Tor Fails to Start on Ubuntu 16.04
by heartsucker 13 Nov '16

13 Nov '16

Hey everyone I have a fresh install of Ubuntu 16.04 that is unable to start Tor. Some useful output: root@tor-1 ~ # uname -a Linux tor-1 4.4.0-47-generic #68-Ubuntu SMP Wed Oct 26 19:39:52 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux root@tor-1 ~ # apt-cache policy tor tor: Installed: 0.2.8.9-1~xenial+1 Candidate: 0.2.8.9-1~xenial+1 Version table: *** 0.2.8.9-1~xenial+1 500 500 http://deb.torproject.org/torproject.org xenial/main amd64 Packages 100 /var/lib/dpkg/status root@tor-1 ~ # journalctl -u tor ... Nov 13 00:52:39 tor-1 systemd[1]: Starting Anonymizing overlay network for TCP (multi-instance-master)... Nov 13 00:52:39 tor-1 systemd[1]: Started Anonymizing overlay network for TCP (multi-instance-master). <and then nothing else as it hangs> Tor fails to get beyond this message for any config I have tried (including the default). I tried replacing the systemd unit file with one of my own and was able to start Tor, however it would crash every 5 minutes (though the logs. The commands used in the systemd file and the command init.d script are both able to start Tor correctly if I run them in a TTY as I can see from a second terminal. Is anyone else running Tor on Xenial, and if so, have they run into this problem? -h

4 4

Automatic IPv6 address detection in Tor
by diffusae 11 Nov '16

11 Nov '16

Hi! Is this already solved in 0.2.8.9-1 for addresses with global scope? https://trac.torproject.org/projects/tor/ticket/17153 I was trying to configure a global reachable IPv6 address, but getting the following error: "unable to use configured ipv6 address "[::]" in a descriptor." The only way ist to set a clear global address in the config. The ISP is changing the 64 bit prefix a bit from time to time and I don't want to configure it manually every two weeks or so. Best regards,

2 7

Research - Tor and the shaping of resistance technologies
by COLLIER Ben 09 Nov '16

09 Nov '16

Hello all, Greetings from (currently freezing cold) Scotland and apologies for the cross-posting. I'm a researcher at the University of Edinburgh studying antisurveillance technologies, software development and how these are shaped at different levels by ideas about crime and surveillance. I'd describe my work as criminological but with a strong critical dimension - my research isn't about "fighting crime" or developing cybersecurity policy. I'm interested instead in exploring the power relationships, social and technological factors which determine how actions and communities are labelled criminal, and include harms caused by states and other powerful actors which may not traditionally be considered as "crimes". >From this perspective, I would like to explore how the values and perspectives of people who develop software to resist surveillance and promote anonymity online shape the technologies they work on, and whether this expertise changes how they see these issues. I have a background in (statistical) programming and I'm particularly interested in finding out how people see these issues playing out in practice in their work. While I'd like to carry out more in-depth research in the new year, at this stage I'm interested in making sure I'm asking the right questions. As such, I'd be very grateful if anyone involved in Tor development, either as a core developer or as a volunteer, would be interested in having a chat, or if possible a short interview. Any discussions would be anonymous and carried out in accordance with the ethics policy of the University of Edinburgh, and you would be able to withdraw consent for participation at any time for any reason - or none at all. I'll be contactable at this email address (listed in my signature) and on the IRC channels as JHistone - if you're interested (or just want to say hi or have a chat) please feel free to get in touch. Best wishes, Ben Collier Doctoral Researcher The University of Edinburgh SCCJR profile: http://www.sccjr.ac.uk/about-us/people/ben-collier/ Edinburgh University profile: http://www.law.ed.ac.uk/research/students/viewstudent?ref=339 Twitter: @JohnnyHistone Email: s1263350(a)sms.ed.ac.uk The University of Edinburgh is a charitable body, registered in Scotland, with registration number SC005336.

1 0

Tor relay balks with "router_pick_published_address(): Success: chose address x.x.x.x"
by Tobias Sachs 08 Nov '16

08 Nov '16

Hey, my Tor relay https://atlas.torproject.org/#details/B567E8E39641F61091C1F2CAAAF73D3D1BF9C… balks with the following message which is repeated in the log with the "info" logging level up to 23251 times at the exact same millisecond. The relay responds at :9030/tor/server/authority with a 503 error. router_pick_published_address(): Success: chose address 'x.x.x.x' This is a counting from the log with the corresponding timestamp. Nov 01 18:37:13.000 - 23251 Nov 01 18:37:22.000 - 59 Nov 01 18:38:17.000 - 23195 Nov 01 18:38:22.000 - 57 Nov 01 19:19:22.000 - 50 Nov 01 19:19:23.000 - 312 Nov 01 19:19:24.000 - 333 Nov 01 19:19:25.000 - 74 Nov 01 19:20:22.000 - 52 Nov 01 19:38:17.000 - 23207 Nov 01 20:38:17.000 - 23232 140 times exactly 49 repeats in around 2 hours. Interesting is that there is no error about this 503 error in the log only my monitoring is aware of the issue. I hope you coul'd help me out with this issue. Best Regards Tobias

3 3

Drop in consensus weight
by r1610091651 08 Nov '16

08 Nov '16

Hi all The consensus weight of the relay I'm running drop recently (5th of nov) to almost half of previous value. To my knowledge there was no changes on my end. https://atlas.torproject.org/#details/36EE8D47E570B8D5515460A9972F3CFD9EDFD… Is there a way to identify the cause of this drop? Is there anyone else in same situation? Thanks Seb

3 8

Interrogated by Finnish police for alleged idendity crimes, fraud and attempts of fraud
by Juuso Lapinlampi 08 Nov '16

08 Nov '16

Putting the word out: I was interrogated by the Finnish police today for multiple alleged counts (15+) of identity crimes, fraud and attempts of fraud. The invitation letter to be interrogated was sent out on 2016-10-21 and received by me on 2016-10-25. Today is 2016-10-31. The police suspects me because of an "IP-address assigned to my name", which I can't confirm or deny to have a relation to me. As a suspect, I was not told what this aclaimed IP-address was on a specific date to my knowledge. It is only speculation if these allegations wrongly against me have something to do with my relation with the Tor community or activism about digital rights online. Pending ongoing investigation, I am not allowed by law to share more specific details about to the investigation. I'd be glad to reveal more details about the case once the investigation is over and share/hear how I became a suspect, once I know about it. (Note that my story is at least slightly opinionated.) I had a witness with me and I feel like my rights were being violated during the interrogation. The officer (not to be named publicly in respect for privacy) didn't want to allow me to write down their badge number by taking the badge away from me while trying to write down the numbers. The officer looked slightly anxious. After refusing to comment on few questions (to which I have a legal right as a suspect), soon after me and my belongings with me were searched for aclaimed "security reasons" and "making sure I'm not recording this interrogation (with a phone)". I'll let you decide on the implications on unwarranted searches and individual legal protection. (See supreme court decision KKO:1990:36.) I audibly and multiple times in calm manner protested to not consent to searches, but alas it happened against my will without being suspected of wrongdoing at the police station in front of my witness. I didn't physically resist but also didn't voluntarily help the officer. The officer asked me inappropriate questions which were not related to the investigation. I was asked about my previous involvement with the police, how much I knew about the law and unsolicited advice about how "it will be easier for me if I talked". I demanded the officer to write down every question since the beginning of interrogation to the interrogation minutes, including the inappropriate ones, but the officer refused, trying to make up a fake reason how they were "irrelevant". The officer raised their voice once or twice during the 45 minutes of interrogation, apparently angry that I would not "make a confession" or "help out and tell more" to prove innocence. Confronting the officer again with a simple question "am I a suspect or a witness" to confirm my position, I was confirmed again that I was a suspect in the case. Subtly reminding that "I have my rights" that should be respected, the officer replied among the lines of "I have my rights too" with disrespect. After the interrogation minutes did not rightfully represent what was actually questioned, the only sensible thing to me was to not sign the minutes. The officer after the officer made threatening claims about how I "would be going to court" over this, but didn't spend too much effort on trying to get my signature. Once the interrogation was concluded, the officer made an unsolicited comment of "gladly not seeing people like [me] often". I told that I would be in contact with my lawyers. I am glad that I was not detained in a cell or arrested, which in my opinion I can likely attribute to having a witness with me. Looking back at what just happened at the police station, I should have demanded a lawyer immediately to the interrogation after having my rights violated, but I'm relying on my witness for now to make a testimony if necessary. I repeat that I absolutely deny being guilty of any suspected crimes. Be safe out there, tor-relays@ and all. (I have legal support behind me and have never been particularly worried about the investigation or outcome of this case.) Proof of invitation letter: https://wubthecaptain.eu/files/legal/2016-10-21-alleged-fraud-identity-crim…

8 11