[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

"cracks" via tor

To: or-talk@xxxxxxxxxxxxx
Subject: "cracks" via tor
From: jeff <moe@xxxxxxxxxxxxxxxx>
Date: Tue, 1 Mar 2005 15:03:51 -0700
Delivered-to: archiver@seul.org
Delivered-to: or-talk-outgoing@seul.org
Delivered-to: or-talk@seul.org
Delivery-date: Tue, 01 Mar 2005 17:04:10 -0500
Organization: Brixton Linux Action Group
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx
User-agent: KMail/1.7.1

I just got a complaint from someone who said one of my servers 
(running a tor daemon) had a "hacker" on it trying to break 
into his website. He sent me some log entries, which had some 
pretty tame "foo.pl?user=bill" type of hits.

While this doesn't look like the crack of the century, it does 
pose an interesting question in that if someone is trying to do 
web exploits via tor, how can such a thing be prevented? I 
can't think of any way.

Could this have some dodgy legal implications for people running 
tor servers? I'm sure EFF has something to say about this. ;)

Thanks,

-Jeff

P.S. Fedora Core 3 tor RPMs @ 
ftp://ftp.blagblagblag.org/pub/BLAG/linux/30000/en/os/i386/BLAG/RPMS/

Follow-Ups:
- Re: "cracks" via tor
  - From: Simon Østengaard
- Re: "cracks" via tor
  - From: Martin Balvers
- Re: "cracks" via tor (GUESSES on the situation in Germany)
  - From: Matthias Fischmann
- Re: "cracks" via tor
  - From: Nick Mathewson

Prev by Author: Re: reconsidering default exit policy
Next by Author: fingerprinting
Next by thread: Re: "cracks" via tor
Index(es):
- Author
- Thread