hi, well having run a relay for just under 2 weeks, I've got my first spam on this email address. As you will no doubt have guessed, this is not my usual email address, it is only used for the Tor relay contact details, this email list and a very few other projects that will not have published my email address anywhere. So I guess that this spam is as a result of my email address appearing on Atlas or Globe or similar as a result of it being the contact address for my Tor relay. I know this possibility is mentioned in the Tor documentation; I read it somewhere. I guess there's not much to be done about it; I wouldn't want to remove contact details - the address is already in the public domain anyway, and I want to be contactable with any problems. I guess I just have to use the standard spam filtering and combating measures. Could those with experience of running a relay for longer, please advise if this will become a major problem? Will spam increase substantially? Also, any suggestions very gratefully received. Thank you! KQ --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
On Thu, 26 Jun 2014 15:06:44 +0100 kingqueen <kingqueen@btnf.tw> wrote:
hi,
well having run a relay for just under 2 weeks, I've got my first spam on this email address. As you will no doubt have guessed, this is not my usual email address, it is only used for the Tor relay contact details, this email list and a very few other projects that will not have published my email address anywhere.
So I guess that this spam is as a result of my email address appearing on Atlas or Globe or similar as a result of it being the contact address for my Tor relay.
I know this possibility is mentioned in the Tor documentation; I read it somewhere. I guess there's not much to be done about it; I wouldn't want to remove contact details - the address is already in the public domain anyway, and I want to be contactable with any problems. I guess I just have to use the standard spam filtering and combating measures.
Could those with experience of running a relay for longer, please advise if this will become a major problem? Will spam increase substantially? Also, any suggestions very gratefully received.
You put your IP on a web page, crawlers can harvest it and use for spam. I've just tried and easily found your E-Mail using search engines such as Google and others. If you didn't want it to be harvested for spam purposes, you could have used at least some minimal obfuscation, e.g. "user AT example DOT com". But instead you just published it there in the clear form. Nothing surprising or even strictly speaking Tor-related. -- With respect, Roman
Hello Roman,
You put your IP on a web page, crawlers can harvest it and use for spam. I've just tried and easily found your E-Mail using search engines such as Google and others.
Really? kingqueen@btnf.tw ? https://www.google.co.uk/search?q=kingqueen%40btnf.tw#q=%22kingqueen%40btnf.... lists only a Tor node list.
But instead you just published it there in the clear form.
in .torrc and thus in node lists, yes. kingqueen@btnf.tw is only published on webpages in relation to tor. It is not on any other webpages. That address - the one I am using to correspond on this list - is the one I am now receiving spam on. I suggest you double check your facts. --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
On Thu, 26 Jun 2014 16:47:49 +0100 kingqueen <kingqueen@btnf.tw> wrote:
just tried and easily found your E-Mail using search engines such as Google and others.
Really? kingqueen@btnf.tw ? https://www.google.co.uk/search?q=kingqueen%40btnf.tw#q=%22kingqueen%40btnf.... lists only a Tor node list.
And that Tor node list is, in fact, a web page. Which is exactly what I meant. Your E-mail is in that list, the list is on the web, and if crawlers from Google and other search engines could find it, then also web crawlers which collect E-Mails to be used for spamming purposes could find it just as easily. One workaround is to obfuscate the E-Mail you use in your contact details as I mentioned, either lightly or not, I have seen some really creative ways people obfuscate their E-Mail to avoid spam-crawlers. -- With respect, Roman
On 26 June 2014 17:08:51 BST, Roman Mamedov <rm@romanrm.net> wrote:
And that Tor node list is, in fact, a web page.
Yes, I understand how it happens. I was just asking how much of an inconvenience spam caused by such listings causes, and for any tips for if it is a major inconvenience. I'm glad to discover it has proven to not be a major inconvenience for other relay owners. Thanks for the obfuscation suggestion, but I guess it would be bolting the stable door after the horse has bolted in my case, at most damage limitation, as my email address is now already out there, so to speak. I shall make judicious use of the delete key. Thanks -- Sent from my Android device with K-9 Mail. Please excuse my brevity.
Hi,
On Thursday, June 26, 2014 4:57 PM, kingqueen <kingqueen@btnf.tw> wrote:
On 26 June 2014 17:08:51 BST, Roman Mamedov <rm@romanrm.net> wrote:
And that Tor node list is, in fact, a web page.
Yes, I understand how it happens. I was just asking how much of an inconvenience spam caused by such listings causes, and for any tips for if it is a major inconvenience.
I'm glad to discover it has proven to not be a major inconvenience for other relay owners.
Thanks for the obfuscation suggestion, but I guess it would be bolting the stable door after the horse has bolted in my case, at most damage limitation, as my email address is now already out there, so to speak. I shall make judicious use of the delete key.
Had a similar situation. My take is - it is never too late to obfuscate. It does matter. -kali-
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 You have to take care, that your mail provider has appropriate tools to recognize Spam like Spamassassin. On 27. Juni 2014 10:18:52 MESZ, Kali Tor <kalitor42@yahoo.com> wrote:
Hi,
On Thursday, June 26, 2014 4:57 PM, kingqueen <kingqueen@btnf.tw> wrote:
On 26 June 2014 17:08:51 BST, Roman Mamedov <rm@romanrm.net> wrote:
And that Tor node list is, in fact, a web page.
Yes, I understand how it happens. I was just asking how much of an inconvenience spam caused by such listings causes, and for any tips for if it is a major inconvenience.
I'm glad to discover it has proven to not be a major inconvenience for other relay owners.
Thanks for the obfuscation suggestion, but I guess it would be bolting the stable door after the horse has bolted in my case, at most damage limitation, as my email address is now already out there, so to speak. I shall make judicious use of the delete key.
Had a similar situation. My take is - it is never too late to obfuscate. It does matter.
-kali- _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
- -- We don't bubble you, we don't spoof you ;) Keep your data encrypted! Log you soon, your Admin elrippo@elrippoisland.net Encrypted messages are welcome. 0x84DF1F7E6AE03644 - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.11 (GNU/Linux) mQINBFH797MBEAC0Y0NeI7lmDR9szTEcWuHuRe0r/WjSRC0Nr5nXsghuMcxpJ3Dd BOBimi4hdMMK4iqPVMwNw6GpKYR3A9LHHjbYRXHUKrJmB+BaJVyzJXN5H6XvxTTb UfX+DaXAGJW/G+3cBB3qm/QaU8QGkBKfXq0DLTaTGPkGKxEAldj/8onGZhawdJs+ B92JrW+S2HDh15pIuXzSqe7eCcIOdvvwfWe0fJi2AraA7LYGpxP6GcC/b9JJpbq5 Y6DfE2Aun9ZK3iHqURyrms0Whbv1CgmUahL2MVYCsTsXwe0GwlAxxKvjXAiXuo+R 9wO5wsXvVVSVNqsk9Yqi+wYzdPKndTU0GyxSApQHroF+cxaZ8Lk0xloj18+LdCSs e5IiTSXH0MMsDdWWdHlrgk+bgDG+0Gu3ne4vMwGdKO7AhYgQW/ueMy4RnkG/nsV9 jry5BO4gGAI1Ij8KvqUzEnvJFGE3ptJogU+zazWWDUWmL3ecKb3aDRlJFnZ3kJ5h q8GolZVjpk99V+4B5WVRPXdej/p5J19tXycK/jdNmr4oC8NyUhIpe8xHELnfoB4z +rxiTx+KMnW0rY8EQg8O2ixEYt5my90IwQkxcxIxextVrqjJjYn8extc2/v8yGzI KmTEJxdADB5v/Jx4HiLHNDSfBUb8gfONCkNSTYvTcSwTjWzHOkXeE/9ZbQARAQAB tD5lbHJpcHBvIChrZWVwIHlvdXIgZGF0YSBlbmNyeXB0ZWQpIDxlbHJpcHBvQGVs cmlwcG9pc2xhbmQubmV0PokCOAQTAQIAIgUCUfv3swIbLwYLCQgHAwIGFQgCCQoL BBYCAwECHgECF4AACgkQhN8ffmrgNkT8+BAAoAXBqu4/O2Cs5FSWWZpzgScNEgq7 uHhOKeYmRfgKlOUPoYlPB1DBqdOAXSKb9OvsmyOvpoGnqijB7aAJBoyQYW/OCQgd U8L4eTCf4yRZnfFLdgskcPfN1p0Rs/yinGEooBJFtYa7mT6J0UTW2JjCLZK2AFCW oF+KBu5JICXGBXigb2ZbX1jWjxP5H1RidQw6HF5z4z34SjLWAOOeZ8B/Xfz6Fs0s IAuLu2O4HE4DI8Qu196LhSVHHgr3uMTkvN1t5nKwyjrRQztwXXk9qIomII3ydNYb BYAGdWNNMfLb1kmDwC5wQHAFvSP1aiMF3aKAY+gl2wXSGO6JqM0SteJS3dytIljI kzu0atc9HuGs/HDQgdmpAS4WU2YefEr/WieltSiAKlwuC+3wg+CONJ6TE1vgNDU/ axerttb0jq7UQb/nAp05bsrB7XH1Vs+1ON9lUPEfWRmwQcrVK5JUrUWa/4tA/UeM XvFcPFtFluGTlLewgJIqcvjPXFwpbDZprXJsMkwew/A6B6n3+0sbgf7p3QSGkVbi dwQAymTbHdYqLnbcnKZhjto3Wjw1J5QB2wuiRYlpjV3i7AWTGlqoSTOWCCV+HamQ qeFYNYAWNFx3+J/oi7xDi8t9bHVNA205equ+y2sj3G5uGJ6LSHQ8AXp9uOipUUvU 1MJN0yLXr9PIwvi5Ag0EUfv3swEQAL0+MnxHGrTjSYdfdua4SBpmytDONM1EngeY s+WyaC/760MughKbaysI/nK2LB1vnwEY7f3NM4fxBx8u2T7VBm6Ez6Fs23Bb8Rkz f97bPSdxCmg64GPHfLA9uwTIXcYS+MpI86WOf6eWY0rRpf7Y9Nl7YoUNvzOyUPqc ggdcnHce8zYv7A/WS8flZDm8tVFPsHrQDEwNMws7ZhiNnHkeZeRJrvCuB7oEVich O/ROYoA5o6NozWYQbjxe1f6Yur4Q10qgVcxVnyLFJSbg6vZSzL7KYh3Z5iBOzPHt 7cwEDrW8W4Kl2Qj8rhJ4Wxs94CAtua7IXK44sVZWQbyHcOXRikgGMZKkEZzVCQa5 KD1u1ZrcBCyuMAir0hsmS3jhCUwpiE2c3SRk8O8CgixhTcBk0X/k9ZFu3Hbi1JMB FLzs/Nq3tYAYvVivhPloSxmYBPsafYHCZM83yBNNsralXh5zjB+di90G+AMXt2PN LTcdovZuWtC0s8/jrx+zv/AA4FAGYU9OVl+YL9ybFX8gSdMEcixyzQcKfiFBjpWv 5iFrwIuDlaXMcheyrhc9aGOxfx44OXc505+VjO/1Q/8EOWlJ6UwOi6GMkj5T+RFJ MDyP0UixS7dt6wTuD5t6PRuyWWxZswgrbL9hjwGFr154Z19TWeNWc23pWtUvQJos UCxl2nFHABEBAAGJBD4EGAECAAkFAlH797MCGy4CKQkQhN8ffmrgNkTBXSAEGQEC AAYFAlH797MACgkQJEPd69lQ0evA+Q/+M7lSFlrQWiRsFqDjh+kTJc+0OEBCvnfo N2KPyXXbfc//qup55PfEygE6C60zvrlv3WE33GZ5GS5MLuDMP82b+a5Yt16NQU7L WtAg1g0S0BvazW+28TgnfO8bhbGaFeE9ccw3xLmlbwZQ3f3LtMKdwFIROiG6hvAs 9U54QYti3tv9DowRYYWpdr0Ga8RqeGNtCKc0v2opy51MpzKWjwUW0i3XlSlyY8Lj 1KT8PyznNPw32nYpmDizz+0OUJNnn/kT+GnFoR3DJnFosTOrnxFJp+N+nejMp/gW r9NM0/E7H+P53IiytBOt5/0vsOaCFGdYGhKEjmJi3dHS4Xk1ObD1mjdD1YDOlWWU 3Md6BDHd4W7Q8gT7oQfTIMLd3HzV+WNPIdocPLBaeA/tRD8Pg5CCmncAmSub4F5T An7FlnACtSOv3cIWQ0TymS42DihDaJ5d1RvNzKw+zHYdPvf471JFZR3TDhkPbLIr 9czR7kbpnXRwchgwXQn306NVWf37TgA8wpbnFTazZ38iOeqcb9oKprqnbgEdr3PN OhKSlMTkzAqf3MEi2Fyua4BADMhS3oBwCRgDTlt6wquEytpNSlZaHnyiyIgOpekF Uy5K3w8NhHqeifRPrNb/UcCbXtXz+puqIEZHMenpv6FRlTTKpdoHoVXSkp1TPMGN /VaCiLbP4Z3xEw/9EbAJJkhmmx1Qw3ueoqc4h1MmhUtIdxSZ/oA9SjwlnY++zvaZ 6w1wTS4P+OUkETNDtItdpxXMJ9qfSy9voAQc2K43WMZCCmpPJYSdqaZZNPFj+Ne8 6FNtNKuUkXREybpHwlVAXnHzInmFOOM9RAmF70r3zEmKt77W1ztBLo2o9X79gPgL u9ThgrH6Oc2k46n+9nc3joccr7miiX/bp976DNWcWdOYThiSSOCb8Zw9/Zs935i1 wUVkYTj24tmBH4H5ov9ib7RPmU21ru458RbUKG0ONAqBtAHNyXHzUnXsrke+D4VW MI06YcXSk8YeYgQ8GxgHQc+W2bb8LIbKN1hEYJ0wzM62vKR2/Oiwuf8lXutIKTuz +v7Vj1PQd66DGHsxtWRaWnr1c54JTL2wICHJYKFH4grp7864+GL/uQ1O/Z/XxVku E1JQ/AnwBGU1M1S6otwWGWVRjzEzQtxsfcCEPvV/9td3FIFQAbGTPb+48XFU+TY9 8AlcXBlDzXq7c5f8Evn/oSIsZDt63K4HNTmMGqOTl/p1aA0e4eyX76LczY06rDP5 GMSNs+AHmYgZiS4RYhRUIvS9uLXMnnDAMYst0SDl2orDUUeHBTzu0rchyknBZMGP p5wQuWQ9CFlV+dj3UYbrBwC1lTkAMXRG2vlhA0V0TZqos7A5D4VHgSUQQjE= =otlL - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: APG v1.1.1 iQJcBAEBCgBGBQJTrSzQPxxlbHJpcHBvIChrZWVwIHlvdXIgZGF0YSBlbmNyeXB0 ZWQpIDxlbHJpcHBvQGVscmlwcG9pc2xhbmQubmV0PgAKCRAkQ93r2VDR66wfEACa gt29oQ7wFYHod5SeNu6AmjMdc+Sjly+Xem0goEEYMQsrrB+RRDaA38I8ILyXTXK5 NXx7Mhjd7obsZ5j9no9OtU8qXjokcFBc89RGadrGjviXVPi5qXNMBR/W7j5Wmiai S6faeWy5k9LCh2JKSO2kF+jX8JtgUEL5TbaK/GKGJA6B6jxuNora1lgZ5DqV7lXB e+JUVdC/5So4h6ch55Eu40pR0CivPQAKtewY4IC8/FypETIzWHOmhDCQ4qIs0+ut 1odBNj9y73BbECNi9Y78Hv9Bhkb8fgy/3Igy5fD49oDrJ4bgTbSmgTSLwM46g6gC +ats31FodyBSHCt0WFTkkUqfroVTi/Yqq57E90lVsx4dXmwsBM0Ie0Wvv1eFoGza 0kcfBzbZQAWcjSZuyFOfU5YIgdNb4hvI2gWfyiE+QYtuyNNJIp+gyjULXf7GjkRu 3CJOjp630iQSlIeEwhx7dDJhh7i+VGpwUXm2txCfk+Ld6uwQCm31xmxja/Sh5t5O Ei4g/SF+LRD0vcTXtXBZYl7OJ5mbYFDdDK5szXCVQ894Y4RiQgk4XkbBfI1EZP6W gsMWwcDn2yOave8WxezfJeSGiOJyHYXJ7/6rbSUysZlm1GFcu0bfI5SVdh0EVbQz 7eNQv0s/5bik8YjQcjQD6Grqat3CpJJHg6UP1aXwaw== =que6 -----END PGP SIGNATURE-----
Hello Kali,
Had a similar situation. My take is - it is never too late to obfuscate. It does matter.
Thank you! I have done. Random Person <ROT13 xvatdhrra@ogas.gj> --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com
On Fri, 27 Jun 2014 09:41:53 +0100 kingqueen <kingqueen@btnf.tw> allegedly wrote:
Had a similar situation. My take is - it is never too late to obfuscate. It does matter.
Thank you! I have done. Random Person <ROT13 xvatdhrra@ogas.gj>
I think that is the first time I have seen ROT13 used as a form of email obfuscation. I have seen images (usually PNG) being used - but then I have also seen that ruined by the use of the mailto: tag around the image..... Mick --------------------------------------------------------------------- Mick Morgan gpg fingerprint: FC23 3338 F664 5E66 876B 72C0 0A1F E60B 5BAD D312 http://baldric.net ---------------------------------------------------------------------
On Thu, Jun 26, 2014 at 10:08:51PM +0600, Roman Mamedov wrote:
One workaround is to obfuscate the E-Mail you use in your contact details as I mentioned, either lightly or not, I have seen some really creative ways people obfuscate their E-Mail to avoid spam-crawlers.
Which is a great thing in case the torproject decides to mail the owners of all relays that are vulnerable to some attack.
I was receiving some spam after a couple weeks so I changed it to "user at domain dot com" e.g. cbritt at hush dot com It seems to have solved the problem. I think I remember reading somewhere that newer versions automatically reformat email addresses to combat the aforementioned spam issue. Hopefully that helps! On 06/26/2014 at 10:56 AM, "kingqueen" wrote:hi, well having run a relay for just under 2 weeks, I've got my first spam on this email address. As you will no doubt have guessed, this is not my usual email address, it is only used for the Tor relay contact details, this email list and a very few other projects that will not have published my email address anywhere. So I guess that this spam is as a result of my email address appearing on Atlas or Globe or similar as a result of it being the contact address for my Tor relay. I know this possibility is mentioned in the Tor documentation; I read it somewhere. I guess there's not much to be done about it; I wouldn't want to remove contact details - the address is already in the public domain anyway, and I want to be contactable with any problems. I guess I just have to use the standard spam filtering and combating measures. Could those with experience of running a relay for longer, please advise if this will become a major problem? Will spam increase substantially? Also, any suggestions very gratefully received. Thank you! KQ --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
On 26 June 2014 16:51:11 BST, "cbritt@hush.com" <cbritt@hush.com> wrote:
I was receiving some spam after a couple weeks so I changed it to "user at domain dot com" e.g. cbritt at hush dot com
It seems to have solved the problem. I think I remember reading somewhere that newer versions automatically reformat email addresses to combat the aforementioned spam issue.
Hopefully that helps!
It does. Thank you! -- Sent from my Android device with K-9 Mail. Please excuse my brevity.
participants (8)
-
cbritt＠hush.com -
Elrippo -
grarpamp -
Jann Horn -
Kali Tor -
kingqueen -
mick -
Roman Mamedov