Re: [tor-talk] Please help us...

2015-09-29 Thread Erik de Castro Lopo
akendo wrote:

> I consider blocking of the network as an act of last resort.
> Instead you need to make the life for the spammer more difficult.

Very much agree with this. I like browsing over Tor and find it annoying
when web sites just block it completely.

> Having a moderator might be a better idea. Maybe moderate just the
> incoming posts from suspect IPs.

Yep, also requiring the user to register (with a working email address)
before being able to comment, and then manually moderating the first 
few comments by any newly registers user.

This does sound like a lot of work, but can easily be farmed out to trusted
users of your site who already value the site and would be more to help
maintain the quality of the site.

Cheers,
Erik
-- 
--
Erik de Castro Lopo
http://www.mega-nerd.com/
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Please help us...

2015-09-29 Thread Olaf Selke

Am 28.09.2015 um 12:08 schrieb Mr Claypole:



They use many, many more ips to post the abuse, this is just a small selection.


I have sent similar emails to the 'abuse' email address I have been able to 
find for these ip networks, will they be able to help us?


I don't fully understand how your system for anonymity works, however I do 
understand why such a system is needed, there are many regions and people in 
the work who need anonymous access to communication.


However, our current problem individual is using your services to perpetrate 
the very oppressive, abusive behaviour that your system is designed to help 
fight. Please let me know if there is anything you can do.


a list of all currently active Tor exit node ip addresses can be 
downloaded from


https://torstatus.blutmagie.de/ip_list_exit.php/Tor_ip_list_EXIT.csv

It's updated every 15 minutes or so.

cheers Olaf
--
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Please help us...

2015-09-29 Thread aka
Configure your message board software so all posts from Tor exit nodes
IPs need to be moderator approved. It takes seconds per post for a mod
to check and minutes for a malicious individual to post.
If your message board software doesn't support this, just block all Tor
exit nodes IPs for a week or so until the malicious individual gets bored.

If you have access to the .htaccess file:
http://www.reaper-x.com/2012/05/15/how-to-block-tor-on-apache-and-nginx/

Mr Claypole:
> Hello,
> 
> 
> I am an Admin for a message board in the UK. We have a non-registration 
> policy to allow free and open discussion about matters related to our 
> football club, it has served us well in the past to keep the club in business 
> and helps maintain transparency.
> 
> 
> Our admin roles call for us to periodically remove posts or ban user ips if 
> they have broken our message board rules (not that we have many).
> 
> 
> That is all we can do - remove posts and ban ip ranges.
> 
> 
> This all normally works OK, however we have a recent particularly nasty 
> individual that is constantly posting vile, racist, violent messages. The 
> person is constantly changing ip and repeatedly posting material that is 
> highly offensive and illegal.
> 
> 
> If you want an example of these abusive messages let me know, they usually 
> contain descriptions of torture or death for particular ethnic or religious 
> groups, it is exceedingly strange and nasty. We have no idea why they are 
> targeting our football club message board.
> 
> 
> They are using tor services to generate their multiple ips. Recent exit nodes 
> ips (is that the right terminology?) used on the 27/09/2015 have included:
> 
> 
> 194.150.168.95
> 192.99.154.24
> 85.10.210.199
> 
> 92.222.113.177
> 
> 178.20.55.18
> 
> 
> They use many, many more ips to post the abuse, this is just a small 
> selection.
> 
> 
> I have sent similar emails to the 'abuse' email address I have been able to 
> find for these ip networks, will they be able to help us?
> 
> 
> I don't fully understand how your system for anonymity works, however I do 
> understand why such a system is needed, there are many regions and people in 
> the work who need anonymous access to communication.
> 
> 
> However, our current problem individual is using your services to perpetrate 
> the very oppressive, abusive behaviour that your system is designed to help 
> fight. Please let me know if there is anything you can do.
> 
> 
> Thank you,
> 
> 
> Colin.
> 
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Please help us...

2015-09-28 Thread akendo
Hi 

Just my 50 cent to this.

I consider blocking of the network as an act of last resort.
Instead you need to make the life for the spammer more difficult.

Having a moderator might be a better idea. Maybe moderate just the incoming 
posts from suspect IPs.

Blocking implies always to exclude legit traffic as well. This removes the 
freedom of a user. In my experience there are chances that he find another way 
around. Then you need to update the list againmakes your life more 
difficult.

Hope this can help you.

best regards
akendo

On Mon, Sep 28, 2015 at 10:58:31AM +, Sharif Olorin wrote:
> Hi Colin,
> 
> > They are using tor services to generate their multiple ips. Recent exit 
> > nodes ips (is that the right terminology?) used on the 27/09/2015 have 
> > included:
> > 
> > [ ... ]
> 
> Yep, that's the right terminology.
> 
> > I have sent similar emails to the 'abuse' email address I have been
> > able to find for these ip networks, will they be able to help us?
> 
> They might be. If you email the exit node operators[0] and let them know
> you're receiving abusive traffic via the web (port 80/443), and include
> the IP address(es) of your forum, they may be able to restrict their
> exit policy to block traffic to your server. That said, there are
> currently over a thousand exit nodes, most of which allow web traffic,
> so this may not be the most efficient solution.
> 
> > However, our current problem individual is using your services to
> > perpetrate the very oppressive, abusive behaviour that your system is
> > designed to help fight. Please let me know if there is anything you
> > can do.
> 
> Another option is the Tor DNS blocklist[1]. If you have a dedicated
> server or VPS you can configure it to reject traffic from Tor exits
> (e.g., for Apache[2]). If you don't have a dedicated server or VPS, you
> might be able to set this up in the forum software itself (e.g., for
> phpBB[3]).
> 
> I hope the above is helpful. Once the troll gets bored and goes away, I
> hope you'll consider opening up your forum to well-behaved Tor users.
> 
> Regards,
> Sharif
> 
> [0] Most exits have this information on a webpage served from the exit
> node IP, e.g., http://92.222.113.177/; you can also often find this
> information via atlas, e.g.,
> https://atlas.torproject.org/#search/92.222.113.177.
> 
> [1] https://www.torproject.org/projects/tordnsel.html.en
> 
> [2] https://wiki.apache.org/spamassassin/DnsBlocklists
> 
> [3] https://www.phpbb.com/customise/db/mod/advanced_block_mod/
> 
> -- 
> OpenPGP: 6FB7 ED25 BFCF 3E22 72AE 6E8C 47D4 CE7F 6B9F DF57



> -- 
> tor-talk mailing list - tor-talk@lists.torproject.org
> To unsubscribe or change other settings go to
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk



signature.asc
Description: PGP signature
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Please help us...

2015-09-28 Thread Sharif Olorin
Hi Colin,

> They are using tor services to generate their multiple ips. Recent exit nodes 
> ips (is that the right terminology?) used on the 27/09/2015 have included:
> 
> [ ... ]

Yep, that's the right terminology.

> I have sent similar emails to the 'abuse' email address I have been
> able to find for these ip networks, will they be able to help us?

They might be. If you email the exit node operators[0] and let them know
you're receiving abusive traffic via the web (port 80/443), and include
the IP address(es) of your forum, they may be able to restrict their
exit policy to block traffic to your server. That said, there are
currently over a thousand exit nodes, most of which allow web traffic,
so this may not be the most efficient solution.

> However, our current problem individual is using your services to
> perpetrate the very oppressive, abusive behaviour that your system is
> designed to help fight. Please let me know if there is anything you
> can do.

Another option is the Tor DNS blocklist[1]. If you have a dedicated
server or VPS you can configure it to reject traffic from Tor exits
(e.g., for Apache[2]). If you don't have a dedicated server or VPS, you
might be able to set this up in the forum software itself (e.g., for
phpBB[3]).

I hope the above is helpful. Once the troll gets bored and goes away, I
hope you'll consider opening up your forum to well-behaved Tor users.

Regards,
Sharif

[0] Most exits have this information on a webpage served from the exit
node IP, e.g., http://92.222.113.177/; you can also often find this
information via atlas, e.g.,
https://atlas.torproject.org/#search/92.222.113.177.

[1] https://www.torproject.org/projects/tordnsel.html.en

[2] https://wiki.apache.org/spamassassin/DnsBlocklists

[3] https://www.phpbb.com/customise/db/mod/advanced_block_mod/

-- 
OpenPGP: 6FB7 ED25 BFCF 3E22 72AE 6E8C 47D4 CE7F 6B9F DF57


signature.asc
Description: PGP signature
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


[tor-talk] Please help us...

2015-09-28 Thread Mr Claypole
Hello,


I am an Admin for a message board in the UK. We have a non-registration policy 
to allow free and open discussion about matters related to our football club, 
it has served us well in the past to keep the club in business and helps 
maintain transparency.


Our admin roles call for us to periodically remove posts or ban user ips if 
they have broken our message board rules (not that we have many).


That is all we can do - remove posts and ban ip ranges.


This all normally works OK, however we have a recent particularly nasty 
individual that is constantly posting vile, racist, violent messages. The 
person is constantly changing ip and repeatedly posting material that is highly 
offensive and illegal.


If you want an example of these abusive messages let me know, they usually 
contain descriptions of torture or death for particular ethnic or religious 
groups, it is exceedingly strange and nasty. We have no idea why they are 
targeting our football club message board.


They are using tor services to generate their multiple ips. Recent exit nodes 
ips (is that the right terminology?) used on the 27/09/2015 have included:


194.150.168.95
192.99.154.24
85.10.210.199

92.222.113.177

178.20.55.18


They use many, many more ips to post the abuse, this is just a small selection.


I have sent similar emails to the 'abuse' email address I have been able to 
find for these ip networks, will they be able to help us?


I don't fully understand how your system for anonymity works, however I do 
understand why such a system is needed, there are many regions and people in 
the work who need anonymous access to communication.


However, our current problem individual is using your services to perpetrate 
the very oppressive, abusive behaviour that your system is designed to help 
fight. Please let me know if there is anything you can do.


Thank you,


Colin.
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


[tor-talk] Please help evaluate WebRTC for Tor Browser safety

2015-02-09 Thread Mike Perry
There seems to be a lot of interest in WebRTC Tor safety lately on this
list. The simple https://diafygi.github.io/webrtc-ips/ PoC does not work
against Tor Browser for two reasons:

1. We don't compile in WebRTC at all.
2. We set the pref 'media.peerconnection.enabled' to false.

We would like to change property #1 so that it is easier to support
QRCode-encoded bridge entry and bridge sharing in Tor Launcher
(https://trac.torproject.org/projects/tor/ticket/14837). In my testing,
and according to Mozilla security engineers, it should be safe for us to
compile WebRTC in and set media.peerconnection.enabled to false, but
there may be other vectors to this code that we've all missed to date.

Hence, this is a request to interested parties to try harder to bypass
Tor in a stock Firefox using WebRTC and associated protocols (RTSP,
SCTP) with media.peerconnection.enabled set to false. Again, the
existing PoC fails in this case for me, but we need more in-depth tests.

For more info, see:
https://trac.torproject.org/projects/tor/ticket/14836 and
https://gitweb.torproject.org/tor-browser-spec.git/tree/audits/FF31_NETWORK_AUDIT

-- 
Mike Perry


signature.asc
Description: Digital signature
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Please help promote Tor's Stack Exchange page

2013-06-13 Thread Runa A. Sandvik
On Wed, Jun 12, 2013 at 2:58 PM, Runa A. Sandvik runa.sand...@gmail.com wrote:
 * You will notice that while [3] has SSL enabled login, [1] does not.
 I have raised this issue with Stack Exchange already and hope to hear
 back soon.

They're working on it. See
http://meta.stackoverflow.com/questions/69171/why-doesnt-the-stack-overflow-team-fix-the-firesheep-style-cookie-theft/183034#183034
for details.

-- 
Runa A. Sandvik
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


[tor-talk] Please help promote Tor's Stack Exchange page

2013-06-12 Thread Runa A. Sandvik
Hi everyone,

We have been discussing setting up a QA page for a while now. Last
night, I proposed a Stack Exchange page for Tor on [1]. The detailed
version about how this process works can be found on [2], but here is
the tl;dr:

A user proposes a new page, other users follow said page, and users
create and vote on hypothetical questions. Each user can only ask 5
questions, I am not yet sure if there is a limit to how much you can
vote. Once the page reaches enough followers and questions with a high
score, the page moves into the Commit phase. A small number of users
will need to commit to help building the site. Once that's done, the
page goes live and is considered to be in Beta.

The proposal is currently in a Definition phase. To move to the next
phase, we need (1) a high number of followers of the page, and (2) a
collection of good, relevant questions.

If you want to help promote our Stack Exchange page, sign up on Stack
Exchange [3], visit our proposal page [2], log in*, follow, ask 5
questions, and vote on other questions.

Thanks!

* You will notice that while [3] has SSL enabled login, [1] does not.
I have raised this issue with Stack Exchange already and hope to hear
back soon.

[1]: 
http://area51.stackexchange.com/proposals/56447/tor-online-anonymity-privacy-and-security
[2]: http://area51.stackexchange.com/faq
[3]: https://stackexchange.com

-- 
Runa A. Sandvik
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


[tor-talk] Please help w...@lksne.go-plus.net

2012-12-29 Thread W. Alksne
*As I cannot get the Tor Browser to work I wanted to uninstall it BUT 
nowhere can I find an '_uninstall option_'.

I would appreciate your advice or recommendations .
Faithfully ,
*Wolfram Alksne .*
*
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Please help w...@lksne.go-plus.net

2012-12-29 Thread Simon Brereton
On Dec 29, 2012 3:10 PM, W. Alksne w...@lksne.go-plus.net wrote:

 *As I cannot get the Tor Browser to work I wanted to uninstall it BUT
nowhere can I find an '_uninstall option_'.
 I would appreciate your advice or recommendations .

Which operating system?  For Linux you just delete the directory you
extracted/renamed..

Simon
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Please help w...@lksne.go-plus.net

2012-12-29 Thread Matthew Finkel
On Sat, Dec 29, 2012 at 07:56:55PM +, W. Alksne wrote:
 *As I cannot get the Tor Browser to work I wanted to uninstall it BUT 
 nowhere can I find an '_uninstall option_'.
 I would appreciate your advice or recommendations .
 Faithfully ,
 *Wolfram Alksne .*
 *

Hi Wolfram,

The Tor Browser Bundle isn't actually installed. If you want to
uninstall it you only need to delete its directory/folder.

If you'd like some help getting it working, please feel free to join us
in the irc channel #tor on irc://irc.oftc.net:6667 (or with SSL on port 6697)
or send an email to h...@rt.torproject.orgi providing as many details as
possible (version of TBB, operating system (such as Windows XP, Mac OS X 10.7,
Ubuntu Linux 10.4, etc), any error messages you received, etc).

I hope this helps.

All the best,
Matt
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Please help me to resolve the following error

2011-09-14 Thread Faisal Rehman
Hi,

Anybody can help me please, this is the last issue I am facing.
 
With Best Regards,


Faisal Rehman



From: Faisal Rehman faisal.rehma...@yahoo.com
To: tor-talk@lists.torproject.org tor-talk@lists.torproject.org
Sent: Friday, September 9, 2011 5:46 PM
Subject: [tor-talk] Please help me to resolve the following error


Dear All,

Good Day!! I am configuring my own private tor directory server but I have 
finalized all the steps but when I run tor with my own configured tor 
configuration file, it gives me the following error:

Sep 09 12:44:39.953 [notice] Tor v0.2.1.30. This is experimental software. Do 
not rely on it for strong anonymity. (Running on Linux i686)
Sep 09 12:44:39.955 [warn] Failed to parse/validate config: Running as 
authoritative directory, but no ORPort set.
Sep 09 12:44:39.955 [err] Reading config failed--see warnings above.


Please can any body help to get rid off this error because I have to finish the 
configuration of directory server by the coming Sunday, so any help will be 
highly appreciated.


Thanks and Regards,


Faisal Rehman
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] Please help me to resolve the following error

2011-09-14 Thread Orionjur Tor-admin
On 14.09.2011 11:04, Faisal Rehman wrote:
 Hi,
 
 Anybody can help me please, this is the last issue I am facing.
  
 With Best Regards,
 
 
 Faisal Rehman
 
 
 
 From: Faisal Rehman faisal.rehma...@yahoo.com
 To: tor-talk@lists.torproject.org tor-talk@lists.torproject.org
 Sent: Friday, September 9, 2011 5:46 PM
 Subject: [tor-talk] Please help me to resolve the following error
 
 
 Dear All,
 
 Good Day!! I am configuring my own private tor directory server but I have 
 finalized all the steps but when I run tor with my own configured tor 
 configuration file, it gives me the following error:
 
 Sep 09 12:44:39.953 [notice] Tor v0.2.1.30. This is experimental software. Do 
 not rely on it for strong anonymity. (Running on Linux i686)
 Sep 09 12:44:39.955 [warn] Failed to parse/validate config: Running as 
 authoritative directory, but no ORPort set.
 Sep 09 12:44:39.955 [err] Reading config failed--see warnings above.
 
 
 Please can any body help to get rid off this error because I have to finish 
 the configuration of directory server by the coming Sunday, so any help will 
 be highly appreciated.
 
 
 Thanks and Regards,
 
 
 Faisal Rehman
 ___
 tor-talk mailing list
 tor-talk@lists.torproject.org
 https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
 
 
 
 ___
 tor-talk mailing list
 tor-talk@lists.torproject.org
 https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Did you indicate  ORPort in your torrc-file?
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


[tor-talk] Please help me to resolve the following error

2011-09-09 Thread Faisal Rehman
Dear All,

Good Day!! I am configuring my own private tor directory server but I have 
finalized all the steps but when I run tor with my own configured tor 
configuration file, it gives me the following error:

Sep 09 12:44:39.953 [notice] Tor v0.2.1.30. This is experimental software. Do 
not rely on it for strong anonymity. (Running on Linux i686)
Sep 09 12:44:39.955 [warn] Failed to parse/validate config: Running as 
authoritative directory, but no ORPort set.
Sep 09 12:44:39.955 [err] Reading config failed--see warnings above.


Please can any body help to get rid off this error because I have to finish the 
configuration of directory server by the coming Sunday, so any help will be 
highly appreciated.


Thanks and Regards,


Faisal Rehman___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


Re: [tor-talk] please help

2011-06-14 Thread Zaher F .



Date: Mon, 13 Jun 2011 01:22:12 -0700
From: sstollenw...@yahoo.co.nz
To: tor-talk@lists.torproject.org
Subject: [tor-talk] please help

u cant use flash at all with tor...3) can tor let me play flash games ( you can 
pronably tell why i am asking this)

___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk  
  ___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk


[tor-talk] please help

2011-06-13 Thread stefano stollenwerk
i was wondering about stuff
1) if this is not the right place to ask this, please tell me where i should ask
2) can tor get around campus watchdog?
3) can tor let me play flash games ( you can pronably tell why i am asking this)
___
tor-talk mailing list
tor-talk@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk