On Mon, Oct 02, 2017 at 07:08:35AM +0200, Moritz Bartl wrote:

On 01.10.2017 22:52, teor wrote:

...

AWS is an expensive way to run a relay, because they charge per GB. Capped providers can cost less, and you can use AccountingMax to limit your usage.

Here's a list of providers that allow tor:  https://trac.torproject.org/projects/tor/wiki/doc/GoodBadISPs

For non-exit relays, you actually don't have to limit yourself to ISPs that "allow Tor". Be careful with "unmetered/unlimited" offers. I would be honest up front in terms of data usage, and find out what kind of "fair use policy" the ISP has. Often, the customer support can give you an exact number, even if it's not stated anywhere on their website.

Thanks (to both you and Tim); this is really good advice. I'll look into it... assuming I can find the time, of course :/

I hope Alison can help you with the uni library. That's a really good idea. Internet and policies can be hugely different between different universities, so at least for non-exit relays, it should be pretty straightforward: Here also, I would suggest to first (without making a lot of noise about it) to find out what the rules around Internet usage are, and just set one up.

The problem is that logistically I can't without help, unfortunately. I don't have a spare machine to run it on and more importantly, I don't have access to a good wired connection. The only Ethernet jack I know of is in my dorm room and I can't imagine it's very good compared to a datacenter connection. So there's two things I'd need from IT.

Cheers,

AJ

Hi AJ,

not sure if anyone's brought this up, but you may want to look at:

https://libraryfreedomproject.org/

" Library Freedom Project is a partnership among librarians, technologists, attorneys, and privacy advocates which aims to address the problems of surveillance by making real the promise of intellectual freedom in libraries. By teaching librarians about surveillance threats, privacy rights and responsibilities, and digital tools to stop surveillance, we hope to create a privacy-centric paradigm shift in libraries and the communities they serve."

In practice as I understand it this in large part involves Libraries running Tor exits to facilitate their privacy and education goals.

-Jon

On Mon, Oct 02, 2017 at 11:51:42AM -0400, teor wrote: :On 2 Oct 2017, at 01:18, AJ Jordan alex@strugee.net wrote: : :>> find out what the rules around Internet usage :>> are, and just set one up. :> :> The problem is that logistically I can't without help, :> unfortunately. I don't have a spare machine to run it on and more :> importantly, I don't have access to a good wired connection. The only :> Ethernet jack I know of is in my dorm room and I can't imagine it's :> very good compared to a datacenter connection. So there's two things :> I'd need from IT. : :You might be surprised. : :When I was at university, the Ethernet in my room was one hop from :the campus fibre mesh network, so it was pretty good. :(Of course, it was in Australia, so it would never have sent much tor :traffic.) : :*If* it falls within your dorm's acceptable use policies, setting up a :relay with a low RelayBandwidthRate would be a good way to see :how well tor works on campus. : :But you need to make a judgement call, because having a dorm relay :shut down might affect the library's willingness to run one. : :Tim :_______________________________________________ :tor-relays mailing list :tor-relays@lists.torproject.org :https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

--

"Tor Node Admin @ SechsNullDrei.org" tor@sechsnulldrei.org wrote:

Hi AJ,

First, thank you for supporting Tor!

Second, you're smart to contact the library, as IT would immediately shut down the idea as they don't want to receive more abuse emails than they already do (I know we did when I worked in academia). An additional resource you may wish to research is the https://libraryfreedomproject.org/ by Alison Mecrina. The resources available on this site speak directly to librarians on such issues. Good luck!

AJ and any others in similar situations, I would add a few comments, beginning with the style of communications with your university library. When you wish to ask for some special consideration, find out whom you need to talk with about your request, and then make an appointment to visit his/her office in person. Sending an email message out of the blue and beginning it with "Heya!" is utterly inappropriate and is not at all likely to get you anywhere. You must act--and write--like an adult, and formality in your initial written communications is essential. They are not going to let someone acting like an ill-mannered adolescent run a server on their department's equipment. If you come across as a responsible adult who makes a good impression and provides a good case for satisfying the request, a case that looks good from the university's point of view, which is to say, convincing them that it would benefit the university in some way, then you may get somewhere with them. If you convince them, however, be prepared to find out that the staff has decided to run the relay itself. The department may well have to run it past the university's legal department. Because you are not acting as a university employee, either or both departments may not be willing to make the university liable for possible consequences of a non-employee's actions. I know that, as a systems programmer at the university here, I would never have let anyone out of our group, much less outside of our department, do anything like running a relay on a machine under my responsibility. I wouldn't have risked having to clean up someone else's mess, and my boss would have been apoplectic at the idea. The security issues would have overwhelmed everything. OTOH, you might still get lucky. It would definitely be worth your time to find out whether the university (e.g., through its computer center or library) or some other individual, department, or college office is already running one or more relays. Faculty members at some universities have been known to get special arrangements to run tor relays, even exits, on university- owned equipment. At some schools, faculty members would not likely even be questioned about it. Note, for example, that many individual faculty members and sometimes even (paid) graduate assistants run web servers to publicize their research and results. Note that any networking staff will want to know how much of the available network capacity your networking program (in this case, tor) would require if the decision were to allow it. Asking to run an exit is almost certain to subject your request to legal department scrutiny, so you might consider running a middle/entry node first for some time, say six or twelve months, before asking to upgrade your relay to an exit relay. That would give time to establish your skill at managing a relay, responding well and quickly when problems occur, to become personally known to the staff, and so forth. Once you've established a good reputation with them, they are more likely to oblige you. In any case, best wishes for your attempt. Please let us know whether you pull it off and, if so, what you did that succeeded.

Scott Bennett, Comm. ASMELG, CFIAG ********************************************************************** * Internet: bennett at sdf.org *xor* bennett at freeshell.org * *--------------------------------------------------------------------* * "A well regulated and disciplined militia, is at all times a good * * objection to the introduction of that bane of all free governments * * -- a standing army." * * -- Gov. John Hancock, New York Journal, 28 January 1790 * **********************************************************************

If for library regarding preserving knowledge, and other sales tactics....

You might be able to present for supporting an anonymous encrypted storage platform... such as Tahoe-LAFS, MaidSafe, IPFS, Bitcoin full nodes, Zensystem.io, a Wiki, NNTP, there are many more such "store of data / knowledge" things out there to choose from... all over Tor or I2P or CJDNS.

For anti-correlation reasons you're not supposed to run some services on the same box as a relay (or even anywhere administratively, logically, or physically near the box), especially if the service running on top does not itself fully encrypt and distribute the data out of reach thus making seizure moot. Depending on that analysis, you could present to also run the relay [on another box] to help supply the 7x bandwidth and cpu impact the onion service has on the relay network.

Anonymity overlay networks are nothing in themselves, it's the applications and usage people run over them that makes them useful. If the overlay network itself isn't interesting enough to attract funding / approval / internet / hardware from somewhere, maybe the applications riding on top can be.

You could also further tie it into doing some form of research, education, outreach, overview, tech in operation presentations... all "sponsored by: <sponsor>". Many entities will bend over backwards for a free name drop.

Or just sell it like a used car dealer... $1000 runs great! Good luck ;)