[tor-talk] Doctor's possible sybil attack report from 2015-07-02 - 'cloudvps' (XL Internet Services)
ter.one.leeboi at hush.com
Thu Jul 2 21:53:02 UTC 2015
I'm glad you asked. Why don't they have the exit flag? It probably has
something to do with MinMeasuredBWsForAuthToIgnoreAdvertised being 500
by default. If you look at consensus-health  you see much more than
500. This means, and I'm only quoting the spec , that these relay
need measured bandwidth to have a weight assigned to them. In the
absence of a consensus weight (note they're all zero), these relay
have 0 probability of being chosen. So they need to respond to a
bandwidth scan, and they haven't.
Is it any consolation that the running relay are, by default, in two
family? 184.108.40.206/16, and 220.127.116.11/16 form a family by default in
tor (unless EnforceDistinctSubnets is 0).
More information about the tor-talk