Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by phw):

 In late January 2020, the number of vanilla bridge connections from Iran
 [https://metrics.torproject.org/userstats-bridge-
 combined.html?start=2019-06-26&end=2020-03-25&country=ir dropped back to
 essentially zero].

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by dcf):

 Replying to [comment:33 dcf]:
 > In the recent past, I've seen two large but brief spikes of users from
 IP addresses located in Iran, on two of my vanilla bridges. (In the second
 case, the bridge is actually supposed to be a meek bridge, but the Iranian
 IP addresses were connecting to one of its exposed ORPorts.)

 Since 2019-11-26, it has been happening again: a sudden large number of
 users from IP addresses in Iran directly accessing the ORPort of what is
 normally a meek bridge. This time it is more sustained, more than a week
 now and counting.

 There are three meek bridges running on the same IP address. They each use
 a different ORPort. Two of the three are affected by the recent Iran-
 related activity; one is not. The non-meek bridge
 (272EB44C8992B8088BD8E8A12DB23B56478EB885) mentioned in comment:33 is not
 affected this time.

 
https://metrics.torproject.org/rs.html#details/AA033EEB61601B2B7312D89B62AAA23DC3ED8A34
 This is the same bridge as the second graph in comment:33; notice the
 sudden increase this time is even more marked than it was 3 months ago.
 [[Image(history-starman-20191207.png)]]

 
https://metrics.torproject.org/rs.html#details/C20658946DD706A7A2181159A1A04CD838570D04
 [[Image(history-maenad-20191207.png)]]

 
https://metrics.torproject.org/rs.html#details/D36B0328969EC57AB3085A4470882D99A09C0492
 [[Image(history-GAEuploader-20191207.png)]]

 You can use the hashed bridge fingerprints to look up the source
 measurements for the above graphs. For example, from
 https://collector.torproject.org/archive/bridge-descriptors/extra-infos
 /bridge-extra-infos-2019-11.tar.xz, here are descriptors from before and
 after the sudden increase.

 bridge-extra-infos-2019-11/2/7/27412c87fc1edd16cc2aa86512d6b1b644245f92
 {{{#!html
 
 @type bridge-extra-info 1.3
 extra-info maenad C20658946DD706A7A2181159A1A04CD838570D04
 master-key-ed25519 QnVpQ5ji4W6utd8W5keg8GZfKsr5Zn4LjB9iipjzJPg
 published 2019-11-27 08:59:09
 transport meek
 write-history 2019-11-26 23:40:17 (86400 s)
 1986285568,1133027328,1322062848,756112384,3282477056
 read-history 2019-11-26 23:40:17 (86400 s)
 2157205504,1290130432,1488071680,867490816,3426599936
 dirreq-write-history 2019-11-26 19:40:17 (86400 s)
 21617664,23964672,27646976,31479808,34509824
 dirreq-read-history 2019-11-26 19:40:17 (86400 s)
 1432576,1847296,2151424,2553856,2288640
 geoip-db-digest A131E1F283F4AD307248B03A70B0413E81ADF2A4
 geoip6-db-digest 0EFF3EE1E22927EC9A77BFFAFD703F3A5B32FA79
 dirreq-stats-end 2019-11-27 04:16:01 (86400 s)
 dirreq-v3-ips ir=32,by=8,de=8,mx=8,ru=8,ua=8,us=8
 dirreq-v3-reqs ir=56,ru=16,by=8,de=8,mx=8,ua=8,us=8
 dirreq-v3-resp ok=80,not-enough-sigs=0,unavailable=0,not-found=0,not-
 modified=32,busy=0
 dirreq-v3-direct-dl complete=0,timeout=0,running=0
 dirreq-v3-tunneled-dl
 
complete=68,timeout=8,running=0,min=14872,d1=31578,d2=69803,q1=86947,d3=104322,d4=121244,md=141232,d6=155268,d7=187619,q3=212539,d8=248890,d9=337787,max=1051412
 hidserv-stats-end 2019-11-27 04:16:01 (86400 s)
 hidserv-rend-relayed-cells 9975 delta_f=2048 epsilon=0.30 bin_size=1024
 hidserv-dir-onions-seen 11 delta_f=8 epsilon=0.30 bin_size=8
 padding-counts 2019-11-27 04:16:27 (86400 s) bin-size=1 write-drop=0
 write-pad=2 write-total=174 read-drop=0 read-pad=28 read-
 total=196 enabled-read-pad=28 enabled-read-total=187 enabled-
 write-pad=2 enabled-write-total=113 max-chanpad-timers=63
 bridge-stats-end 2019-11-27 04:16:27 (86400 s)
 bridge-ips ir=136,ru=16,us=16,??=8,be=8,br=8,by=8,de=8,fi=8,gb=8,mx=8,ua=8
 bridge-ip-versions v4=184,v6=0
 bridge-ip-transports =184
 router-digest-sha256 MnN83BPZD3TxNkGqLsSSTV3yg7X2NqWAFv4a8P2WIfc
 router-digest 27412C87FC1EDD16CC2AA86512D6B1B644245F92
 
 }}}

 bridge-extra-infos-2019-11/8/c/8c72e0590bb39cf43bb139a75d75cae1210cbc51
 {{{#!html
 
 @type bridge-extra-info 1.3
 extra-info maenad C20658946DD706A7A2181159A1A04CD838570D04
 master-key-ed25519 QnVpQ5ji4W6utd8W5keg8GZfKsr5Zn4LjB9iipjzJPg
 published 2019-11-30 06:42:12
 transport meek
 write-history 2019-11-29 23:40:17 (86400 s)
 756112384,3282477056,55211226112,225877932032,284260692992
 read-history 2019-11-29 23:40:17 (86400 s)
 867490816,3426599936,54093441024,220877935616,279221173248
 dirreq-write-history 2019-11-29 19:40:17 (86400 s)
 31479808,34509824,1802655744,10318318592,11527681024
 dirreq-read

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by dcf):

 * Attachment "history-starman-20191207.png" added.

 bw_months
 
https://metrics.torproject.org/rs.html#details/AA033EEB61601B2B7312D89B62AAA23DC3ED8A34

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by dcf):

 * Attachment "history-maenad-20191207.png" added.

 bw_months
 
https://metrics.torproject.org/rs.html#details/C20658946DD706A7A2181159A1A04CD838570D04

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by dcf):

 * Attachment "history-GAEuploader-20191207.png" added.

 bw_months
 
https://metrics.torproject.org/rs.html#details/D36B0328969EC57AB3085A4470882D99A09C0492

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by cohosh):

 * cc: cohosh (added)


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by xhdix):

 Replying to [comment:33 dcf]:

 Sorry. I didn't receive email about this replay!

 > How do you know that it was blocked using the CollecTor?

 This is just the closest conjecture to this method of blocking.
 - The  bridges were not blocked
 - My middle-relay was also blocked.
 - Following my tweet about the government's mistake, they removed Tor IPs
 from the block-list. (guess)
 https://twitter.com/xhdix/status/1145670655247036417


 > It would be an interesting experiment to go through CollecTor data and
 see if any other bridges have experienced spikes like this.

 Yes, It would be interesting. And I'm interested to know.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Old description:

> [[Image(userstats-relay-country-ir-2019-03-01-2019-06-11-off.png,600px)]]
> [https://metrics.torproject.org/userstats-relay-
> country.html?start=2019-03-01&end=2019-06-11&country=ir link]
>
> [[Image(userstats-bridge-country-ir-2019-03-01-2019-06-11.png,600px)]]
> [https://metrics.torproject.org/userstats-bridge-
> country.html?start=2019-03-01&end=2019-06-11&country=ir link]
>
> [[Image(userstats-bridge-combined-ir-2019-03-01-2019-06-11.png,600px)]]
> [https://metrics.torproject.org/userstats-bridge-
> combined.html?start=2019-03-01&end=2019-06-11&country=ir link]

New description:

 [[Image(userstats-relay-country-ir-2019-04-01-2019-09-03-off.png,600px)]]
 [https://metrics.torproject.org/userstats-relay-
 country.html?start=2019-04-01&end=2019-09-03&country=ir link]

 [[Image(userstats-bridge-country-ir-2019-04-01-2019-09-03.png,600px)]]
 [https://metrics.torproject.org/userstats-bridge-
 country.html?start=2019-04-01&end=2019-09-03&country=ir link]

 [[Image(userstats-bridge-combined-ir-2019-04-01-2019-09-03.png,600px)]]
 [https://metrics.torproject.org/userstats-bridge-
 combined.html?start=2019-04-01&end=2019-09-03&country=ir link]

--

Comment (by dcf):

 Replying to [comment:32 xhdix]:
 > and again..
 > The ability to connect directly to Tor was blocked, and it was blocked
 through the list of IPs in the collector.

 How do you know that it was blocked using the CollecTor?

 > It looks like an app (probably an unofficial telegram) uses . (Due
 to a sharp increase and decrease)

 In the recent past, I've seen two large but brief spikes of users from IP
 addresses located in Iran, on two of my vanilla bridges. (In the second
 case, the bridge is actually supposed to be a meek bridge, but the Iranian
 IP addresses were connecting to one of its exposed ORPorts.)

 It would be an interesting experiment to go through CollecTor data and see
 if any other bridges have experienced spikes like this. A hypothesis is
 that a Telegram app, or whatever it is, chooses one bridge to use for a
 day, then changes to another one. If that were the case, we would be able
 to identify spikes rolling temporally across multiple bridges.

 
https://metrics.torproject.org/rs.html#details/272EB44C8992B8088BD8E8A12DB23B56478EB885
 [[Image(history-eRYaZuvY02FpExln-20190903.png)]]

 
https://metrics.torproject.org/rs.html#details/AA033EEB61601B2B7312D89B62AAA23DC3ED8A34
 [[Image(history-starman-20190903.png)]]

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by dcf):

 * Attachment "history-starman-20190903.png" added.

 bw_months
 
https://metrics.torproject.org/rs.html#details/AA033EEB61601B2B7312D89B62AAA23DC3ED8A34

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by dcf):

 * Attachment "history-eRYaZuvY02FpExln-20190903.png" added.

 bw_months
 
https://metrics.torproject.org/rs.html#details/AA033EEB61601B2B7312D89B62AAA23DC3ED8A34

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by dcf):

 * Attachment "userstats-bridge-combined-ir-2019-04-01-2019-09-03.png"
 added.

 https://metrics.torproject.org/userstats-bridge-
 combined.png?start=2019-04-01&end=2019-09-03&country=ir

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by dcf):

 * Attachment "userstats-bridge-country-ir-2019-04-01-2019-09-03.png"
 added.

 https://metrics.torproject.org/userstats-bridge-
 country.png?start=2019-04-01&end=2019-09-03&country=ir

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by dcf):

 * Attachment "userstats-relay-country-ir-2019-04-01-2019-09-03-off.png"
 added.

 https://metrics.torproject.org/userstats-relay-
 country.png?start=2019-04-01&end=2019-09-03&country=ir&events=off

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by xhdix):

 and again..
 The ability to connect directly to Tor was blocked, and it was blocked
 through the list of IPs in the collector.
 [[Image(https://metrics.torproject.org/userstats-relay-
 country.png?start=2019-04-04&end=2019-09-02&country=ir&events=off,100%)]]


 [[Image(https://metrics.torproject.org/userstats-bridge-
 combined.png?start=2019-04-04&end=2019-09-02&country=ir,100%)]]

 It looks like an app (probably an unofficial telegram) uses . (Due to
 a sharp increase and decrease)

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by xhdix):

 Again, users from Iran can connect directly to Tor. :)

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by xhdix):

 Bridge usage is increasing:
 [[Image(https://metrics.torproject.org/userstats-bridge-
 combined.png?start=2019-03-30&end=2019-06-28&country=ir,100%)]]

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by xhdix):

 I can tell people to use the bridge, but there are two problems:

 1- The orbot app has not yet released its new update:
 https://bugs.torproject.org/30870

 2- This solution will be very difficult:
 https://github.com/termux/termux-packages/issues/3198
 Is there a better solution for installing via termux?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by mrphs):

 And it's gonna get back to ~0 shortly, since the direct connections to the
 tor network are blocked again.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by cypherpunks):

 half million just dropped

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by xhdix):

 Only servers that are listed in metrics.torproject.org have problems.
 Even middle-relays
 On the first day, from Iran, I could get the authority file from my
 middle-relay server, but attempting to connect SSH and HTTPS to my server
 received a timeout error in the handshake.

 [[Image(https://i.imgur.com/fxz4eEl.jpg,100%)]]

 [[Image(https://i.imgur.com/uSLA0GT.jpg,100%)]]

 [[Image(https://i.imgur.com/uP5lcML.jpg,100%)]]


 Fall down:
 [[Image(https://metrics.torproject.org/userstats-relay-
 country.png?start=2019-05-13&end=2019-06-25&country=ir&events=off,100%)]]

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by xhdix):

 Many users report that they can no longer be directly connected to Tor.
 Connections with Bridge also have problems for them. (Connected but not
 stable)

 There is a problem with handshake in SSL / TLS communication that the time
 of occurrence of the problem is different in each city and ISP.

 logs:
 https://paste.ubuntu.com/p/jrNQGhqBTx/

 [[Image(https://i.imgur.com/XbyPkPLl.jpg,100%)]]

 [[Image(https://i.imgur.com/G9kZEPtl.jpg,100%)]]

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by arma):

 Two more data points here:

 (A) I am coming to believe that our user count numbers are based on
 counting requests, not on counting successful deliveries of the consensus.
 So if a client gets far enough through the process to request a
 connection, but then has their connection cut, (1) we will count them as a
 user, and (2) they will come back somewhere else soon after to retry, and
 we'll count that next one as a new user. I am beginning to suspect that a
 factor in what's happening here. But that still doesn't explain why the
 number keeps going up -- it's not like clients start asking more and more
 frequently as they fail more often.

 (B) We do have a count of successful consensus deliveries, vs delivery
 attempts that time out. Dir mirrors can't tell whether the client receives
 all the bytes, but because the consensus takes more than one stream window
 worth of cells to deliver, the dir mirrors can tell that all but the last
 stream window (250KB) of cells were acknowledged by the client. *But*,
 with the advent of consensus diffs, the entire diff fits within a single
 stream window, so every time a client asks for a diff, we're going to
 count that delivery as a success, even if no bytes actually make it to the
 client.

 (B') And while we're on that topic, there actually *is* a way to learn
 whether the client received the last part -- see the concern in
 https://trac.torproject.org/projects/tor/ticket/30926#comment:3 where we
 get a stream-level sendme for an unknown streamid. That happens when we've
 finished sending all of the consensus bytes, and then we send the end
 cell, and then we close the stream on our side, and we get a sendme with
 an unknown streamid because we've already forgotten about the stream. But
 all of the data is there for us to be able to confirm that the client has
 received (nearly all of) the bytes, if we want to.

 We should probably make a bunch of tickets out of these various bugs and
 feature ideas, but I wanted to get them written up somewhere first.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by phw):

 Replying to [comment:22 difautsch]:
 > From the OONI forums, Iran's internet is down. Apparently, fiber optic
 cables have been cut.
 > https://twitter.com/sadjadb/status/1136646856652525568
 > I wonder if this related to the U.S. - Iran tensions?
 [[br]]
 The tweet is from June 6.
 
[https://ioda.caida.org/ioda/dashboard#view=inspect&entity=country/IR&lastView=overview&from=1559691990&until=1560210390
 According to IODA], it looks like there was indeed a noticeable drop in
 connectivity but it affected less than 5% of the address space that Iran
 announces over BGP:
 [[Image(iran-ioda.png)]]

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by phw):

 * Attachment "iran-ioda.png" added.

 IODA signals for Iran.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by difautsch):

 Replying to [comment:17 difautsch]:
 > So, according to a report released on May 30 from Iran Human Rights
 Watch, the Iranian government is supporting the development of a proxy
 tool, MTProto, so they can better 'manage' censorship circumvention.
 > https://iranhumanrights.org/2019/05/why-is-the-iranian-government-
 aiding-the-development-of-a-censorship-circumvention-tool/
 >
 > I believe that the new Tor users were previously using MTProto and then
 realized it's not keeping their privacy from the Iranian gov.
 > My evidence is a decline in 'Post Reach' on May 15, the same day Iranian
 Tor users began to grow:
 https://www.dropbox.com/s/ggin9dmkobowkve/MTProto%20Post%20Reach.png?dl=0
 > [[Image(MTProto Post Reach.png,100%)]]
 >

 From the OONI forums, Iran's internet is down. Apparently, fiber optic
 cables have been cut.
 https://twitter.com/sadjadb/status/1136646856652525568
 I wonder if this related to the U.S. - Iran tensions?
 > I don't know what specifically triggered the switch from MTP to Tor, but
 a significant and sustained drop of Post Reach is definitely suspicious.
 >
 > You can find all the metrics here: https://tgstat.com/channel/@MTProxies

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #30636 [Metrics/Analysis]: Something funky is going in Iran: numbers of relay users flies off to 1M+ (was: Something funky is going in Iran: numbers of relay users flies off to 400K)

[Tor Bug Tracker & Wiki]

#30636: Something funky is going in Iran: numbers of relay users flies off to 
1M+
--+--
 Reporter:  cypherpunks   |  Owner:  metrics-team
 Type:  task  | Status:  new
 Priority:  Medium|  Milestone:
Component:  Metrics/Analysis  |Version:
 Severity:  Normal| Resolution:
 Keywords:  ir|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Description changed by dcf:

Old description:

> [[Image(userstats-relay-country-ir-2019-01-01-2019-06-01-off.png,600px)]]
> [https://metrics.torproject.org/userstats-relay-
> country.html?start=2019-01-01&end=2019-06-01&country=ir link]
>
> [[Image(userstats-bridge-country-ir-2019-01-01-2019-06-01.png,600px)]]
> [https://metrics.torproject.org/userstats-bridge-
> country.html?start=2019-01-01&end=2019-06-01&country=ir link]
>
> [[Image(userstats-bridge-combined-ir-2019-01-01-2019-06-01.png,600px)]]
> [https://metrics.torproject.org/userstats-bridge-
> combined.html?start=2019-01-01&end=2019-06-01&country=ir link]

New description:

 [[Image(userstats-relay-country-ir-2019-03-01-2019-06-11-off.png,600px)]]
 [https://metrics.torproject.org/userstats-relay-
 country.html?start=2019-03-01&end=2019-06-11&country=ir link]

 [[Image(userstats-bridge-country-ir-2019-03-01-2019-06-11.png,600px)]]
 [https://metrics.torproject.org/userstats-bridge-
 country.html?start=2019-03-01&end=2019-06-11&country=ir link]

 [[Image(userstats-bridge-combined-ir-2019-03-01-2019-06-11.png,600px)]]
 [https://metrics.torproject.org/userstats-bridge-
 combined.html?start=2019-03-01&end=2019-06-11&country=ir link]

--

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs