Re: [tor-talk] SKKU43 Tor relay (was Re: Metrics fast exit page)

2014-02-10 Thread Hyoung-Kee Choi
Roger,

We are the academic research group located in Seoul, Korea. One of my
students happened to misconfigure the bandwidth parameter in his Tor during
his research on the Tor bandwidth scanner. Then, the advertised bandwidth
jumped up to the high number and drew a number of circuits in the last days
or so. We switched the number back to the automatic adjustment right after
checking your email in this list. We are still running SKKU43  in order for
the advertised bwauth value to return to normal.

I apologize for this happening to you and the Tor community.

Regards,

Hyoung-Kee


On Mon, Feb 10, 2014 at 12:45 PM, Roger Dingledine a...@mit.edu wrote:

 On Tue, Feb 04, 2014 at 02:24:39AM +0100, Karsten Loesing wrote:
  There are two new graphs available as replacement:
 
  https://metrics.torproject.org/network.html#advbwdist-perc
 
  https://metrics.torproject.org/network.html#advbwdist-relay

 Wow -- check out those URLs today.

 And then see

 https://compass.torproject.org/#?exit_filter=all_relayslinkssort=cwsort_reversecountry=top=10

 which currently lists SKKU43 as 11% of the advertised bandwidth, and
 7.3% of exit weights:

 https://atlas.torproject.org/#details/9E4C3E2597AD49CED745BE024ED620B88BBBF002

 This relay advertises a self-measured bandwidth of 1GByte/s:

 https://exonerator.torproject.org/serverdesc?desc-id=2c414fc08f7cbb3b4b09a5cd5014cf03d12d20ca
 which is fine because self-measured bandwidth isn't used (at least
 not directly) by clients. But then the torflow bwauths measure it at
 w Bandwidth=1 Measured=123 (moria1's opinion)
 w Bandwidth=1 Measured=67000   (gabelmoo's opinion)
 w Bandwidth=1 Measured=145 (tor26's opinion)
 w Bandwidth=1 Measured=617000  (maatuska's opinion)

 Leading to a median of 617000 weight, which is more than twice the
 second-most-weighted relay:

 https://atlas.torproject.org/#details/E0113C18726D3AD74D6081C43D2539CA9A0A8745

 I think IPredator is actually carrying the traffic it claims. But I find
 SKKU43's bandwidth line fishy-looking:
 bandwidth 12 12 10

 So I guess the first question is, does it look like SKKU43 is actually
 as good at carrying traffic as it appears to be?

 And the second question is, should we lower the caps in torflow on how
 much weight it will give a single relay? Or are the caps already low
 and there's a bug?

 Fun times,
 --Roger

 --
 tor-talk mailing list - tor-talk@lists.torproject.org
 To unsubscribe or change other settings go to
 https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] IMAPS login errors

2014-02-10 Thread Philipp Winter
On Sat, Feb 08, 2014 at 11:11:16PM +, ar...@runbox.no wrote:
 I'm using IMAPS over Tor for email purposes.  Sporadically I get
 'password incorrect' errors which usually go away when I click 'Retry'.
  Is this some kind of MitM attack?

Real MitM attacks typically don't cause password incorrect error messages.

Incidentally, there are two exit relays whose IMAPS traffic is modified by
security software:
https://atlas.torproject.org/#details/E5A75EE11A35F9DAF74B13BBA9D3CF0AA8F3AD2D
https://atlas.torproject.org/#details/B40A3DC61FD7C18B8FFFA62FFA98CA7AAF8D8107

The former uses a Fortinet device whereas the latter uses an antivirus scanner.

Cheers,
Philipp
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] IMAPS login errors

2014-02-10 Thread arnst
Philipp Winter:
 On Sat, Feb 08, 2014 at 11:11:16PM +, ar...@runbox.no wrote:
 I'm using IMAPS over Tor for email purposes.  Sporadically I get
 'password incorrect' errors which usually go away when I click 'Retry'.
  Is this some kind of MitM attack?
 
 Real MitM attacks typically don't cause password incorrect error messages.

Yes, I thought not, but it's strange behavior nonetheless as it never
happens except over Tor with my provider, and it is always transient
(one, maybe two failed auths, then things work - it makes me suspicious).

 Incidentally, there are two exit relays whose IMAPS traffic is modified by
 security software:
 https://atlas.torproject.org/#details/E5A75EE11A35F9DAF74B13BBA9D3CF0AA8F3AD2D
 https://atlas.torproject.org/#details/B40A3DC61FD7C18B8FFFA62FFA98CA7AAF8D8107
 
 The former uses a Fortinet device whereas the latter uses an antivirus 
 scanner.

Is this not sufficient to get BadExit flag?

Arnst
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] IMAPS login errors

2014-02-10 Thread arnst
Gerardus Hendricks:
 On 2/9/14 12:11 AM, ar...@runbox.no wrote:
 I'm using IMAPS over Tor for email purposes.  Sporadically I get
 'password incorrect' errors which usually go away when I click 'Retry'.
   Is this some kind of MitM attack?
 
 That's not enough information to judge.
 
 Assuming the attacker doesn't have a valid certificate, Thunderbird
 would give you a certificate warning upon connection, not after sending
 any password.

That's what I was hoping! But after Flame and the novel MD5 break... one
can't be too paranoid I guess?

 It could as well be the legitimate IMAP server, plainly failing to
 authenticate you.

The strange thing is this only happens over Tor with my mail provider,
and it's not a timeout.  That's why I thought it was funny...

Arnst
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Hulu now blocks Tor

2014-02-10 Thread Joshua Datko
For completeness (nobody likes a story with a hanging  ending :p ),
access to Hulu is restored.  Below is the email I sent them and their
response.

My msg:
-

Hello,

I run a non-exit Tor relay on my home network. This allows Internet users,
who are censored, to access the Internet and protects users who wish to
keep their privacy while online. There is a great description of who uses
Tor at: https://www.torproject.org/about/torusers.html.en

As you can tell, my IP is based in the U.S. and I would like to access
Hulu. Can you please lift the blacklist on my IP?

Josh

Response:


Hi Joshua,

Thank you for contacting us. I'm sorry about the anonymous proxy message
you're seeing. A proxy is a server that acts as an intermediary between
your computer and the Internet. It's possible to use an anonymous proxy and
not realize it.

However, after further investigation, I've confirmed that your IP address
was incorrectly categorized to be an anonymous proxy. I have submitted a
request to approve your IP address for use and you should be up and running
in about 3-5 days. If the error appears after this time definitely reach
out to us and we'll be happy to dig a bit deeper.

Once again, I'm very sorry for the inconvenience. If anything else comes
up, please don't hesitate to write back.

Thanks,
Hulu Support



On Fri, Feb 7, 2014 at 12:52 PM, Joshua Datko jbda...@gmail.com wrote:

 So, I should clarify:

 The computer on which I received this error was not running Tor at all.
  Not as a daemon; not the TBB.

 I run a non-exit relay, on my same home network and thus the same public
 facing IP as my public facing relay.

 My conclusion that Hulu blocks Tor was based on the following: I run a
 public relay - my IP is listed as running a Tor relay - I received this
 Hulu nasty message - therefore Hulu must be blacklisting my IP because I
 run a Tor relay.

 Sorry for the confusion.




 On Fri, Feb 7, 2014 at 12:09 PM, Missouri Anglers 
 missouri.angl...@gmail.com wrote:

 Hulu requires JavaScript to work properly.
 If you enable  JavaScript when visiting the site
 does that not defeat the purpose of using TOR?


 On Thu, 6 Feb 2014 17:54:41 -0700
 Joshua Datko jbda...@gmail.com wrote:

  As I tried to watch Family Guy, I received this message from Hulu:
 
  
  Based on your IP address, we noticed you are trying to access Hulu
 through
  an anonymous proxy tool.  Hulu is not currently available outside the
 U.S.
   If you're in the U.S., you need to disable your anonymizer to access
  videos on Hulu.
 
  If you think you're receiving this message in error, please submit this
  form.
  
 
  I run a non-exit node (On a BeagleBone Black) and I'm in the U.S.
 
  **Sigh**
 
  Once the wife sees this, my BeagleBone might have an *accident*.
  Although
  I'm not sure that will get our IP off the blacklist :P
 
  Josh
  --
  tor-talk mailing list - tor-talk@lists.torproject.org
  To unsubscribe or change other settings go to
  https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


 --
 Missouri Anglers missouri.angl...@gmail.com
 --
 tor-talk mailing list - tor-talk@lists.torproject.org
 To unsubscribe or change other settings go to
 https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk



-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Hulu now blocks Tor

2014-02-10 Thread Griffin Boyce
That's great to hear ^_^ 

Joshua Datko wrote:
 For completeness (nobody likes a story with a hanging  ending :p ),
 access to Hulu is restored.  Below is the email I sent them and their
 response.

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk