[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] SIGAINT email service targeted by 70 bad exit nodes

To: "tor-talk@xxxxxxxxxxxxxxxxxxxx" <tor-talk@xxxxxxxxxxxxxxxxxxxx>
Subject: Re: [tor-talk] SIGAINT email service targeted by 70 bad exit nodes
From: Michael O Holstein <michael.holstein@xxxxxxxxxxx>
Date: Thu, 23 Apr 2015 19:21:39 +0000
Accept-language: en-US
Authentication-results: lists.torproject.org; dkim=none (message not signed) header.d=none;
Delivered-to: archiver@xxxxxxxx
Delivery-date: Thu, 23 Apr 2015 15:55:43 -0400
In-reply-to: <667A4388-0B4A-458B-BC47-8F49D949E09E@xxxxxxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-id: "all discussion about theory, design, and development of Onion Routing" <tor-talk.lists.torproject.org>
List-post: <mailto:tor-talk@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
References: <223eaa337204f5f94241636062f9a9e4.webmail@localhost> <20150423040805.GA7800@xxxxxxxxxxxxxx>, <667A4388-0B4A-458B-BC47-8F49D949E09E@xxxxxxxxxxxxxx>
Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-talk" <tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx>
Thread-index: AQHQfXMePNG97xGEbkuM2xlq6nwemZ1Z+0yAgABMdQCAALIzMQ==
Thread-topic: [tor-talk] SIGAINT email service targeted by 70 bad exit nodes

>The question to me is: Do they all have something in common? What was the vector of compromise?

>Curiously enough, they all run Debian stable (according to the SSH version string "SSH-2.0->OpenSSH_6.0p1 Debian-4+deb7u2” *ALL* of them spit out on port 22 — no exception!).

FWIW a lot of Rasberry PI devices use that version string.

Cheap embedded devices as chaff?

-Mike.
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

References:
- [tor-talk] SIGAINT email service targeted by 70 bad exit nodes
  - From: support
- Re: [tor-talk] SIGAINT email service targeted by 70 bad exit nodes
  - From: Roger Dingledine
- Re: [tor-talk] SIGAINT email service targeted by 70 bad exit nodes
  - From: Ralf-Philipp Weinmann

Prev by Author: Re: [tor-talk] What happened to Tor's Bridges?
Next by Author: Re: [tor-talk] Quantum Insert detection for everyone
Previous by thread: Re: [tor-talk] SIGAINT email service targeted by 70 bad exit nodes
Next by thread: Re: [tor-talk] SIGAINT email service targeted by 70 bad exit nodes
Index(es):
- Author
- Thread