[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: Wikipedia & Tor & ... moderators?
Eugen Leitl wrote:
> If you're using them, you can just add Tor exit points into your
> RBL subscription, in the unlikely case they are not already there
> (trust me, they will be there).
Yes, we are usually blocking Tor exit points as a part of our broader
blacklisting strategy. (We don't use outside services for this.)
This works just fine for us -- with the side effect that Tor is that
much less useful for the people we want it to be able to help.
> As long as Tor doesn't support pseudonyms, and prestige accounting
> there won't be a better way. Anonymity by definition is associated
> with zero prestige. Current Tor is designed for anonymity, not
> pseudonymity. A hidden trusted server could be used as a hack to
> implement pseudonyms and prestige tracking. This would not scale,
> and be easy to DoS, however.
>
> If it is not to be a hack a distributed cryptographic filestore
> need to be added to the Tor client. It would require nym prestige
> to prevent floods. This is not easy to get right.
I am not an expert on the design of such things, and I only offer what
seem to me to be fairly straightforward ways of dealing with this
problem. I am well aware that getting it right is not easy. But it is
not an easy task that we have chosen for ourselves, so try we must.
> I hope I'm being clear. From your comments, I'm having the
> impression we're talking orthogonally to each other.
The main thing I want people to take away from this conversation is that
answering questions about abuse of services like Wikipedia by attacking
Wikipedia as privacy-hating or by saying that we should ask people for a
credit card before editing or etc. etc. is not acceptable. It is
important _for Tor_ for the _goals of Tor_ that these problems be solved
to the maximal extent possible _by Tor_.
Wikipedia is a friend; we will do what we can. But you're not designing
a system which should only be usable with privacy-friendly websites.
You're designing a system which, to the end user, should to the maximal
extent possible allow them to speak privately and _on equal footing with
everyone else on the Internet_.