Re: [tor-talk] DocTor's 'Possible Sybil Attack' (2015-06-03) report

2015-06-05 Thread Philipp Winter
On Fri, Jun 05, 2015 at 12:14:56PM +, nusenu wrote: > How have they been excluded? (specific IPs, entire IP blocks, > fingerprints, ...) The relay list I put online? By fingerprint. > > All these relays were HSDirs and actively scanned hidden services > > they were responsible for. > > What

Re: [tor-talk] DocTor's 'Possible Sybil Attack' (2015-06-03) report

2015-06-05 Thread nusenu
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 >> Again, I really dislike the in-transparency here. > > I agree that it needs improvement. In theory, we already have a > public repository for blacklisting relays: > > > In practice, nobody ha

Re: [tor-talk] DocTor's 'Possible Sybil Attack' (2015-06-03) report

2015-06-05 Thread Philipp Winter
On Fri, Jun 05, 2015 at 11:10:45AM +0200, Philipp Winter wrote: > I attached a list of fingerprints that were rejected by the directory > authorities around May 20. Apparently the mailing list won't let me. Here's a URL: Cheers, Phili

Re: [tor-talk] DocTor's 'Possible Sybil Attack' (2015-06-03) report

2015-06-05 Thread Philipp Winter
On Thu, Jun 04, 2015 at 10:39:03AM +, nusenu wrote: > > These relays have previously been excluded from the Tor network. > > They have now tried rejoining with new fingerprints. All of the > > following relays are confirmed as being managed by the same > > operator. > > Again, I really dislike

Re: [tor-talk] DocTor's 'Possible Sybil Attack' (2015-06-03) report

2015-06-04 Thread nusenu
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 > These relays have previously been excluded from the Tor network. > They have now tried rejoining with new fingerprints. All of the > following relays are confirmed as being managed by the same > operator. Again, I really dislike the in-transparenc

Re: [tor-talk] DocTor's 'Possible Sybil Attack' (2015-06-03) report

2015-06-04 Thread Donncha O'Cearbhaill
On 03/06/15 22:24, nusenu wrote: > > DocTor reported a possible sybil attack: > https://lists.torproject.org/pipermail/tor-consensus-health/2015-June/005842.html > > based on their signup and AS patterns this looks reasonable > > lookup based on *nicknames* (onionoo data from 2015-06-03 18:00:

[tor-talk] DocTor's 'Possible Sybil Attack' (2015-06-03) report

2015-06-03 Thread nusenu
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 DocTor reported a possible sybil attack: https://lists.torproject.org/pipermail/tor-consensus-health/2015-June/005842.html based on their signup and AS patterns this looks reasonable lookup based on *nicknames* (onionoo data from 2015-06-03 18:00: