Re: bad exit node

2009-08-20 Thread KT
On 8/20/09, Scott Bennett benn...@cs.niu.edu wrote:
  On Wed, 19 Aug 2009 23:54:01 +0100 KT listcli...@gmail.com wrote:
Node 446E29C6F3D47C315B78EBB1BAC62C241C9F992 [1] completely overwrites

  The above is not a valid identifier.  It appears to be missing one
 character.


Sorry for confusion. The correct fp is 446E29C6F3D47C315B78EBB1BAC62C241C9F992A

KT


Bad exit node: freeMe69

2009-08-20 Thread KT
Exit node freeMe69 [1] is injecting the following snippet to response body:

script type=text/javascript
src=http://s.tobban.com/solver/cpt.php;/script

[1] http://tinyurl.com/mz9d7e


Re: Bad exit node: freeMe69

2009-08-20 Thread Tom Hek

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Aug 20, 2009, at 23:02 PM, KT wrote:

Exit node freeMe69 [1] is injecting the following snippet to  
response body:


script type=text/javascript
src=http://s.tobban.com/solver/cpt.php;/script

[1] http://tinyurl.com/mz9d7e


It's actually injected by it's ISP, Comcast. The IP which s.tobban.com  
resolves to is assigned to Comcast. I don't think the exit node admin  
can't do anything about it.

-BEGIN PGP SIGNATURE-
Version: GnuPG/MacGPG2 v2.0.11 (Darwin)

iEYEARECAAYFAkqNwDYACgkQUTmwq+6DeYDCtACeM0Zk9Vf4kU8Sp1d1fP8EmlK1
wPcAnj2b8bgB8DciQp/tEL6DZ0Z7bGMy
=rxjh
-END PGP SIGNATURE-


Re: Bad exit node: freeMe69

2009-08-20 Thread Flamsmark
On Thu, Aug 20, 2009 at 17:29, Tom Hek t...@tomhek.nl wrote:

 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1


 On Aug 20, 2009, at 23:02 PM, KT wrote:

  Exit node freeMe69 [1] is injecting the following snippet to response
 body:

 script type=text/javascript
 src=http://s.tobban.com/solver/cpt.php;/script

 [1] http://tinyurl.com/mz9d7e


 It's actually injected by it's ISP, Comcast. The IP which 
 s.tobban.comresolves to is assigned to Comcast. I don't think the exit node 
 admin can't
 do anything about it.


Wow, that sort of script injection sounds like something that the FCC might
have a problem with.


Re: Bad exit node: freeMe69

2009-08-20 Thread KT
On 8/20/09, Tom Hek t...@tomhek.nl wrote:
 On Aug 20, 2009, at 23:02 PM, KT wrote:

 Exit node freeMe69 [1] is injecting the following snippet to
 response body:

 script type=text/javascript
 src=http://s.tobban.com/solver/cpt.php;/script

 [1] http://tinyurl.com/mz9d7e

 It's actually injected by it's ISP, Comcast.

Excuse my ignorance...I can imagine it might be injected upstream but
you know this how?

 The IP which s.tobban.com
 resolves to is assigned to Comcast. I don't think the exit node admin
 can't do anything about it.

s.tobban.com resolves to the *IP address of the exit node* which is on Comcast.

regards
KT


Re: Bad exit node: freeMe69

2009-08-20 Thread Andrew Lewman
On 08/20/2009 08:28 PM, downie - wrote:
 iCharles Proxy, a 
 href=http://www.xk72.com/charles/;http://www.xk72.com/charles//a/i

The real charles proxy is at http://www.charlesproxy.com/ and is
generally used for debugging apps, but is also used to spy on people.
The innocent explanation is that someone left it on by accident.

-- 
Andrew Lewman
The Tor Project
pgp 0x31B0974B

Website: https://torproject.org/
Blog: https://blog.torproject.org/
Identi.ca: torproject


bad exit node

2009-08-19 Thread KT
Node 446E29C6F3D47C315B78EBB1BAC62C241C9F992 [1] completely overwrites
response body [2] when UA is IE. FYI.

KT

[1] http://tinyurl.com/nxfvux
[2] http://paste.ubuntu.com/255997/


Re: bad exit node

2009-08-19 Thread Scott Bennett
 On Wed, 19 Aug 2009 23:54:01 +0100 KT listcli...@gmail.com wrote:
Node 446E29C6F3D47C315B78EBB1BAC62C241C9F992 [1] completely overwrites

 The above is not a valid identifier.  It appears to be missing one
character.

response body [2] when UA is IE. FYI.

KT

[1] http://tinyurl.com/nxfvux
[2] http://paste.ubuntu.com/255997/


  Scott Bennett, Comm. ASMELG, CFIAG
**
* Internet:   bennett at cs.niu.edu  *
**
* A well regulated and disciplined militia, is at all times a good  *
* objection to the introduction of that bane of all free governments *
* -- a standing army.   *
*-- Gov. John Hancock, New York Journal, 28 January 1790 *
**


Re: bad exit node

2009-08-19 Thread grarpamp
Node 446E29C6F3D47C315B78EBB1BAC62C241C9F992 [1] completely
  The above is not a valid identifier.  It appears to be missing one

I'm sure anyone interested would look up a substring in the
descriptors, tack on an A and be done with it.


Bad Exit Node

2009-07-10 Thread Robert Marquardt

Hello everyone,

I've setup a tor exit node in russia yesterday and today it's flagged  
as Bad Exit.


Router Name: Romulus
Fingerprint: FF7D 3F88 EEB8 C7E1 0D04 005B 45D7 FD24 E572 93E9
Contact: Robert Marquardt email AT robert minus marquardt dot com
IP Address: 92.241.164.157
Hostname: tor-proxy-readme.robert-marquardt.com

Any advice?

Thanks
Robert 


Re: Bad Exit Node

2009-07-10 Thread Karsten Loesing
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 07/10/2009 07:36 PM, Robert Marquardt wrote:
 I've setup a tor exit node in russia yesterday and today it's flagged as
 Bad Exit.
 
 Router Name: Romulus
 Fingerprint: FF7D 3F88 EEB8 C7E1 0D04 005B 45D7 FD24 E572 93E9
 Contact: Robert Marquardt email AT robert minus marquardt dot com
 IP Address: 92.241.164.157
 Hostname: tor-proxy-readme.robert-marquardt.com

Why do you think it's flagged as Bad Exit?

This is what the current network status says about your node:

r Romulus /30/iO64x+ENBABbRdf9JOVyk+k wcVamAnXtevgQeBzsOZ5TuX0YAc
2009-07-10 15:48:21 92.241.164.157 9001 9030
s Exit Fast Running V2Dir Valid
v Tor 0.2.0.35
w Bandwidth=50
p reject 25,119,135-139,445,465,587,1214,4661-4666,6346-6429,6699,6881-6999


Where did you see that your node has the BadExit flag?

- --Karsten

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkpXf2IACgkQ0M+WPffBEmURtwCgycYvJrBq7YXZPmNcdTpPiJ0A
6tAAoJb5qw8+T947exnvosbxMmTOGerV
=yPUU
-END PGP SIGNATURE-


Re: Bad Exit Node

2009-07-10 Thread Robert Marquardt

In the directory entries:

http://torstatus.blutmagie.de/router_detail.php?FP=ff7d3f88eeb8c7e10d04005b45d7fd24e57293e9

Robert

On Jul 10, 2009, at 7:50 PM, Karsten Loesing wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 07/10/2009 07:36 PM, Robert Marquardt wrote:
I've setup a tor exit node in russia yesterday and today it's  
flagged as

Bad Exit.

Router Name: Romulus
Fingerprint: FF7D 3F88 EEB8 C7E1 0D04 005B 45D7 FD24 E572 93E9
Contact: Robert Marquardt email AT robert minus marquardt dot com
IP Address: 92.241.164.157
Hostname: tor-proxy-readme.robert-marquardt.com


Why do you think it's flagged as Bad Exit?

This is what the current network status says about your node:

r Romulus /30/iO64x+ENBABbRdf9JOVyk+k wcVamAnXtevgQeBzsOZ5TuX0YAc
2009-07-10 15:48:21 92.241.164.157 9001 9030
s Exit Fast Running V2Dir Valid
v Tor 0.2.0.35
w Bandwidth=50
p reject  
25,119,135-139,445,465,587,1214,4661-4666,6346-6429,6699,6881-6999



Where did you see that your node has the BadExit flag?

- --Karsten

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkpXf2IACgkQ0M+WPffBEmURtwCgycYvJrBq7YXZPmNcdTpPiJ0A
6tAAoJb5qw8+T947exnvosbxMmTOGerV
=yPUU
-END PGP SIGNATURE-




Re: Bad Exit Node

2009-07-10 Thread Karsten Loesing
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 07/10/2009 07:56 PM, Robert Marquardt wrote:
 In the directory entries:
 
 http://torstatus.blutmagie.de/router_detail.php?FP=ff7d3f88eeb8c7e10d04005b45d7fd24e57293e9

That page says that your node does not have the BadExit flag. All flags
are listed, but your node only has those with a green check mark. Your
node didn't have the BadExit flag the whole day.

HTH,
- --Karsten

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkpXhHcACgkQ0M+WPffBEmV36wCfYhOG5c6/QOx9xCWu5iEG9fd9
SDkAnAz2gtKHUA3uAiLjhvAym3NSxAUK
=I2D9
-END PGP SIGNATURE-