Re: [tor-relays] improving the badexit flag process

[Philipp Winter <phw@xxxxxxxxx>]

On Mon, Jul 14, 2014 at 10:32:27PM +0000, Nusenu wrote:
> How long does it usually take to detect a newly started badexit?

I have an unfinished code branch which should handle continuous
scanning.  Ideally, that would make it possible to detect bad relays
within a couple of hours.

> quote: "we scanned all exit relays several times a week."
> So I guess less than 2days to detect a new malicious exit?

It depends on when you run it.  At this point, I run it every other day.

> Did your scanner detect this occurrence (D9B6E8F3) before it has been
> reported on this mailing list?

No, I didn't run it before this email showed up.

> Is there already a mailing list for automated scan result alerts?
>  - I haven't found one.

No.

> What do you think about creating one where every scanner sends its
> alerts to?
> (something similar to the consensus-health ML)

There are still several issues which have higher priority but that might
be useful.

Cheers,
Philipp
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays