[tor-talk] DOJ's Tor traffic estimates - reference?

2014-05-25 Thread Griffin Boyce

Hi all,

  Is there a good reference for the assertion by DOJ that 3% of Tor's 
traffic is "bad"/used for piracy/etc?  This has been referenced in a few 
talks, but was just wondering if this is written anywhere that can be 
easily referenced.


thanks,
Griffin
--
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] DOJ's Tor traffic estimates - reference?

2014-05-25 Thread Andrew Lewman
On Sun, May 25, 2014 at 05:40:51AM -0400, grif...@cryptolab.net wrote 0.4K 
bytes in 0 lines about:
:   Is there a good reference for the assertion by DOJ that 3% of Tor's
: traffic is "bad"/used for piracy/etc?  This has been referenced in a few
: talks, but was just wondering if this is written anywhere that can be easily
: referenced.

There was an unpublished study in Nevada by some grad students who setup
a few malware defense appliances on the end of a tor exit relay. They
found 3% of the traffic passing through their exit relay was tagged as
malware, by however the appliance was configured to determine malware
or not.

They never published their research because they either couldn't get
ethics board clearance at their university and/or because of the Univ. of
Colorado exit relay issue at PETS.

I read a draft of the paper, which was subsequently pulled from
publication. I've talked to a few organization who allow Tor exits, but
track good/bad traffic (by their definition) who say 3% sounds high from
what they have seen. None of these orgs will go on the record, but they
are some of the largest social network and ecommerce sites in the world.

-- 
Andrew
pgp 0x6B4D6475
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] DOJ's Tor traffic estimates - reference?

2014-05-25 Thread Erik de Castro Lopo
Andrew Lewman wrote:

> On Sun, May 25, 2014 at 05:40:51AM -0400, grif...@cryptolab.net wrote 0.4K 
> bytes in 0 lines about:
> :   Is there a good reference for the assertion by DOJ that 3% of Tor's
> : traffic is "bad"/used for piracy/etc?  This has been referenced in a few
> : talks, but was just wondering if this is written anywhere that can be easily
> : referenced.
> 
> There was an unpublished study in Nevada by some grad students who setup
> a few malware defense appliances on the end of a tor exit relay. They
> found 3% of the traffic passing through their exit relay was tagged as
> malware, by however the appliance was configured to determine malware
> or not.

Indeed, detected as malware and *is* malware are two very different
things.

In addition any malware that is coming from the regular internet into
the Tor network should not be blamed ont Tor.

Erik
-- 
--
Erik de Castro Lopo
http://www.mega-nerd.com/
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] DOJ's Tor traffic estimates - reference?

2014-05-25 Thread force44
LOL, the DOJ is optimistic, I would say 90% is used for piracy etc...



 Original Message 
From: Griffin Boyce 
Apparently from: tor-talk-boun...@lists.torproject.org
To: Tor Talk 
Subject: [tor-talk] DOJ's Tor traffic estimates - reference?
Date: Sun, 25 May 2014 05:40:51 -0400

> Hi all,
> 
>Is there a good reference for the assertion by DOJ that 3% of Tor's 
> traffic is "bad"/used for piracy/etc?  This has been referenced in a few 
> talks, but was just wondering if this is written anywhere that can be 
> easily referenced.
> 
> thanks,
> Griffin
> -- 
> tor-talk mailing list - tor-talk@lists.torproject.org
> To unsubscribe or change other settings go to
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] DOJ's Tor traffic estimates - reference?

2014-05-25 Thread tor
I did run a tor exit with only port 25 blocked, did push 850 tb in 4 months
and did got 3 abuses so far, 3 % bad traffic is much to high i think
Am 25.05.2014 12:11 schrieb "Griffin Boyce" :

> Hi all,
>
>   Is there a good reference for the assertion by DOJ that 3% of Tor's
> traffic is "bad"/used for piracy/etc?  This has been referenced in a few
> talks, but was just wondering if this is written anywhere that can be
> easily referenced.
>
> thanks,
> Griffin
> --
> tor-talk mailing list - tor-talk@lists.torproject.org
> To unsubscribe or change other settings go to
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
>
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] DOJ's Tor traffic estimates - reference?

2014-05-25 Thread Zenaan Harkness
On 5/26/14, forc...@safe-mail.net  wrote:
> LOL, the DOJ is optimistic, I would say 90% is used for piracy etc...

Sure, anecdotal evidence can be useful. But I don't know how to turn
one anecdote, or even 1 million, into a useful statistic. What we see
that's published may be minimal, but it's what someone's observed and
recorded over time and published the result.
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] DOJ's Tor traffic estimates - reference?

2014-05-25 Thread I
How can any true assessment be made of illegal content if it is encrypted?

Robert


-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] DOJ's Tor traffic estimates - reference?

2014-05-26 Thread Griffin Boyce

Andrew Lewman wrote:
There was an unpublished study in Nevada by some grad students who 
setup

a few malware defense appliances on the end of a tor exit relay. They
found 3% of the traffic passing through their exit relay was tagged as
malware, by however the appliance was configured to determine malware
or not.


  Ahhh, many thanks for the clarification.  Details on this were very 
spotty, and I didn't want to speculate.


~Griffin
--
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] DOJ's Tor traffic estimates - reference?

2014-05-27 Thread Andrew Lewman
On Mon, May 26, 2014 at 09:41:50PM -0400, grif...@cryptolab.net wrote 0.6K 
bytes in 0 lines about:
:   Ahhh, many thanks for the clarification.  Details on this were very
: spotty, and I didn't want to speculate.

It would be safe to assume details are still spotty. Until someone
actually publishes a their numbers, this is the best we have.

-- 
Andrew
pgp 0x6B4D6475
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] DOJ's Tor traffic estimates - reference?

2014-05-27 Thread Patrick
> How can any true assessment be made of illegal content if it is encrypted?

I'm curious about this too. What exactly is being measured here?


On Sun, May 25, 2014 at 11:10 PM, I  wrote:

> How can any true assessment be made of illegal content if it is encrypted?
>
> Robert
>
>
> --
> tor-talk mailing list - tor-talk@lists.torproject.org
> To unsubscribe or change other settings go to
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
>
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] DOJ's Tor traffic estimates - reference?

2014-05-27 Thread krishna e bera
On 14-05-27 01:29 PM, Patrick wrote:
>> How can any true assessment be made of illegal content if it is encrypted?
> 
> I'm curious about this too. What exactly is being measured here?

Exit nodes can catch the domain names of sites being accessed.  They can
snoop the contents which would include passwords if people arent using
HTTPS.  Even with HTTPS, many people still click away SSL certificate
warnings without heeding them, so MITM attacks remain effective (though
unethical).

Another aspect is that "illegal" isnt the same in every jurisdiction.
Then it is a question of estimating what percentage of Tor usage is for
bypassing censorship.

We dont know what methodologies were used.  In other words, it would be
most edifying to our curiosity if someone were to anonymously leak the
allegedly unethical paper in question.

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] DOJ's Tor traffic estimates - reference?

2014-05-28 Thread Ed Carter
>> How can any true assessment be made of illegal content if it is
>> encrypted?
>
> I'm curious about this too. What exactly is being measured here?

They must be referring to traffic exiting the Tor network through an exit
node, after which it is unencrypted unless the user is also using https. 
The EFF's diagram labeled "Tor and No https" at
https://www.eff.org/pages/tor-and-https shows what this looks like.




-- 
Care about online privacy but can't run a Tor relay yourself?  My relays
accept Bitcoin donations:

https://atlas.torproject.org/#details/3C49A7D9BEBC668352F627CE60B1FE9B628DD2EA

https://atlas.torproject.org/#details/551B17B619A4A83174EDDCB2BB845055D47CD613


-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk