Finding relay Sybils / Groups [re: relay_early/blackhat]

As a project then to production development, someone should go back through the entire history of descriptors and look for groups coming online... dates, IP's, contacts, tor/OS versions, nicknames, ISP's, geoip, numbers coming online over sliding timeframes, correlation to 'news events', etc. There may be more questionable relays to be found. We were talking about such influxes around july 4 09, ironically, or not.

Hi grarpamp. Actually we do have a rudimentary Sybil checker and it *did* pick up on those relays back in January... https://lists.torproject.org/pipermail/tor-consensus-health/2014-January/003... We had some internal discussions about them but the thread lost momentum before they were flagged. This is a large part of the motivation for why Philipp and I are taking over responsibility for this... https://blog.torproject.org/blog/how-report-bad-relays https://trac.torproject.org/projects/tor/wiki/doc/ReportingBadRelays Previously it wasn't truly maintained by anyone so bad relay reports got dropped on the floor. Cheers! -Damian On Wed, Jul 30, 2014 at 11:10 AM, grarpamp <grarpamp@gmail.com> wrote:
As a project then to production development, someone should go back through the entire history of descriptors and look for groups coming online... dates, IP's, contacts, tor/OS versions, nicknames, ISP's, geoip, numbers coming online over sliding timeframes, correlation to 'news events', etc. There may be more questionable relays to be found. We were talking about such influxes around july 4 09, ironically, or not. -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
participants (2)
-
Damian Johnson
-
grarpamp