[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] DocTor's 'Possible Sybil Attack' (2015-06-03) report



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

>> Again, I really dislike the in-transparency here.
> 
> I agree that it needs improvement.  In theory, we already have a
> public repository for blacklisting relays: 
> <https://gitweb.torproject.org/authdirbadexit.git/>
> 
> In practice, nobody has had time yet to put all existing rules in
> the new repository.

Yes, it appears empty..


How have they been excluded? (specific IPs, entire IP blocks,
fingerprints, ...)


>> Why have they been excluded?
> 
> I attached a list of fingerprints that were rejected by the
> directory authorities around May 20.

list based on your fingerprints:

https://raw.githubusercontent.com/nusenu/tor-network-observations/master/2015-05-20_102HSDirs_rejected.txt

They did not even bother to change IPs, ORport or nicknames.

> All these relays were HSDirs and actively scanned hidden services
> they were responsible for.

What does 'scanned' mean in this context? TCP SYN scans or more tor
specific like 'relay early' attacks (something that came up again when
I saw they all run tor 0.2.4.x).
-----BEGIN PGP SIGNATURE-----
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=2a8z
-----END PGP SIGNATURE-----
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk