Re: [tor-relays] [tor-talk] Tor diversity (was: Explain yourself Conrad Rockenhaus)

To: "tor-relays@xxxxxxxxxxxxxxxxxxxx" <tor-relays@xxxxxxxxxxxxxxxxxxxx>

Subject: Re: [tor-relays] [tor-talk] Tor diversity (was: Explain yourself Conrad Rockenhaus)

Date: Thu, 2 May 2019 20:26:27 +0200

Delivery-date: Thu, 02 May 2019 14:33:25 -0400

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=patatje.eu; s=patatje; t=1556821591; bh=KYjE+JoRPAn05nRPcogwwfZMGHrIO4NTr5+VNxcP9qc=; h=Date:From:To:In-Reply-To:References:Subject:From; b=Za0nEpUsqir7qPATbfOmmrJ7hw24dT9OHnBHkb8qgQTKPmfjkwk8bjomKOauFuJxM qgDR4ScnpnVKKNm911uz5XMfdbgfX1p8kgFYZG7SCw66KHXzE267j5Ad3gD36G5B/i IDLmTAprVWRbJ+laWAkEOsvyc5k/hqeyRPkNiN6ayrAik0roBO3hJ87sf0EVxlhXZY lBQr/4vWYaUu5a2qbU8TObmdXS1x+131VAS+SveppDjuEoHI7Vc13eLgCKvUcopJet YPS1gDfU0V13IN9V+pZtbTu6JQHdIyn70178RUHb1+IlgN796iAfp4Bmd4TOenaNTu LeJPkULxNIwGk0e+aS4PSChI1QfiuvHvexwtlUukGk3g+Ir4Ts1rbwWfmpkDQDGoK2 jMraDL/OsB706oI4KTSXbzImgQRRkc7AeKtFus6LukeoPY+twA1IQRMHaBEQFfAroj 6feZptuA/MaLlwgZMbdt4dwB5LFfgeYuIFBBm6XcsGzQF3K1AYcPB4IQTwz93vWh2u H+J9ImS5otQLDoMdLelo5OvbS+XM/3ib7w91SR3WUOB5pPCEehkDjJ+n/dIa6fivWB tWsgexqakhWlfFT1Udq+ui+xYk4GMmZJgrgWr9EZ9uNWjZHcizFbX/1+JSvk+DX0pf PdTFzVLSOLVldVRzbmEBP4JM=

In-reply-to: <ah0f6XUrLo-6PrhZ2qjrhrbyogLkjS_cAlVVmAbZ2B39Q6WsA_IVc4EJfa6a-c7FKpHsZaIT-ReYUO7u-VzAXkLR3vL2fnfcuNmSktgEgtY=@protonmail.com> <CADL2u4j_qh0MwvQJ-UuGgZi3CSOQZcp3o0-K3vea6C31rasn4g@mail.gmail.com>

List-archive: <http://lists.torproject.org/pipermail/tor-relays/>

List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>

List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>

List-post: <mailto:tor-relays@lists.torproject.org>

List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>

List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>

References: <CADL2u4j_qh0MwvQJ-UuGgZi3CSOQZcp3o0-K3vea6C31rasn4g@mail.gmail.com>

Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx

Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

It is of course possible to run it in a vm, but that doesn't solve the issue of diversity. If your host gets pwned the vm is a sitting duck. So better to just go with what you are familiar.

Regards

On 2 May 2019 at 20:03, <digitalist00> wrote:

Hello!
I want to run a relay on a root server (IPAX) with the following possible OS':
Ubuntu 18.04 LTS
Ubuntu 16.04 LTS
Debian 9
Debian 8
CentOS 7
CentOS 6

Is it possible to install FreeBSD beside or which OS should I choose to run the relay with.

Yours
Digitalist

Sent with ProtonMail Secure Email.

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
Am Donnerstag, 2. Mai 2019 12:10 schrieb René Ladan <r.c.ladan@xxxxxxxxx>:

Op do 2 mei 2019 09:43 schreef Tor Revolution <isupportthenewrevolution@xxxxxxxxxxxxxx>:
You are probably trying to push hacked FreeBSD or that hacked HardenedBSD stuff that no one cares about anyway. If people cared about more FreeBSD on Tor they would do it but obviously it's not a big issue!!!

Ignoring half-baked accusations against Conrad for now.

Having relays running something else than Ubuntu *is* an important issue. This does not have to be FreeBSD/HardenedBSD, it can also be OpenBSD/NetBSD, MacOS, or even Windows. The point is that if someone (say the NSA) discovers a bug in Ubuntu which they can use to take over relays, and 95% (or so) of the relays run Ubuntu, then they can take over Tor. If a significant part of the relays run something else, then those relays are safe for the exploit and consequently becomes harder for the NSA to take over Tor.

As for why 95% of the relays runs on Ubuntu, I guess it is legacy. At least https://support.torproject.org/#operators advertises multiple operating systems.

See also https://torbsd.github.io/

René (running "ymkeo" on FreeBSD for almost 5 years now)
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

_______________________________________________ tor-relays mailing list tor-relays@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays