On November 15, 2014 2:33:23 PM Libertas libertas@mykolab.com wrote:
Hi,
Honestly, the safest thing to do is to NOT USE PASSWORD BASED LOGINS.
Im aware of that.
I wrote a script to scan the Tor network for password-based login availability. If I have the time and no one beats me to it, it'll lead to a site that warns relay operators about security problems with their servers. For example, I can combine it with basic, non-invasive nmap results to warn about non-essential network applications, old OS versions, and old Tor versions as well.
Awesome, like to see that.
Sebastian