On Fri, Oct 09, 2015 at 07:05:08PM +0200, Aymeric Vitte wrote:
Anyway I don't think that's really of the interest of this list except
that some exit nodes operators might envision to use something like the
dynamic blocklist, if some are often bothered by notices/letters we can
propose a trial to see if the list is adapted, which we think it is.
You are pretty right, your information isn't useful for anyone at all,
why would a operator of a exitnode allow a third party to control
his exit policy? Even partly, bad idea.
If and exit gets staturated by such traffic, it can reject
the default ports, like 6881 and the like, and Port-Ranges > 50.000,
that will provide much better results.
He could reject much more, without limiting usability of Tor.
If the few torrent-tracker operators would understand, that not
being able to scrape their trackers from a exit node is beneficary
for them too, we actually could achieve something here.
Anyway, given the distributed approach, protocols like BitTorrent, your
blacklist can only provide a false sense of security (the best case).
The problems, like being flooded by an adversary, I have addressed in
the previous posting. ;)
My coworkers and I call such services, either a racket or snakeoil.
The problem, of being held accountable for torrenting are much better
addressed by using a VPN. Since the law is different for most of
the pariticipants of this list, in some countries you can still download
without any problems, problematic is uploading (distributing) stuff
other than your own, or wich is covered by libre licenses.
If you, wrongly, got held accountable, ask the lawyer form rightscorp,
if their network services are secured against routing attacks, and how they
tend to proof that the origin is really you out of your network, that
hasn't such measures (like sourceroute verification).
If you still want to throw money, throw it either at your local tor-
organisation, the tor-project or the folks producing a libre torrentclient.
Sorry, for giving you the impression, that I may address you Ayms, I am
adressing all the other people, that may consider your approach of a
centralized entity (blacklist) for clients using protocols or networks
like BitTorrent or Tor, that are somehow distributed.
I don't see peersm adressing any r/l issues, that are adressed by other
approaches at all.
P.S: This list needs a policy for advertisng paid services, like
$1 per distributed message paybale to the torproject ;)