[tor-bugs] #17303 [DirAuth]: Add Fraud Detection On Tor Core.

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Nov 10 21:36:20 UTC 2015


#17303: Add Fraud Detection On Tor Core.
----------------------+----------------------------------
 Reporter:  ikurua22  |          Owner:
     Type:  defect    |         Status:  new
 Priority:  High      |      Milestone:  Tor: unspecified
Component:  DirAuth   |        Version:  Tor: unspecified
 Severity:  Critical  |     Resolution:
 Keywords:            |  Actual Points:
Parent ID:            |         Points:
  Sponsor:            |
----------------------+----------------------------------

Comment (by dcf):

 Here is a module for [https://github.com/NullHypothesis/exitmap exitmap]
 that checks for interference with HTTP redirects. It finds many (around
 50) exit nodes that are injecting port 8123 into redirects.
  * attachment:http-redirect.py

 To run it, copy http-redirect.py into exitmap's src/modules directory.
 Then run:
 {{{
 ./bin/exitmap http-redirect
 }}}
 The output lines that indicate interference look like this:
 {{{
 2015-10-17 10:54:42,052 [ERROR]: 473E58937CC637BF1CEA67F02738935A98C15177
 http://arstechnica.com:8123/tech-policy/2015/07/crypto-activists-announce-
 vision-for-tor-exit-relay-in-every-library/
 }}}
 It writes a file containing the full HTTP response for every interfering
 exit.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17303#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list