On Tue, 24 Sep 2013 03:13:30 +0000 <[email protected]> wrote:
> Dear Andrew, > > This news certainly do not help. > > http://www.welivesecurity.com/2013/07/24/the-rise-of-tor-based-botnets/ > > Grateful for your views Thanks for asking, rather than just assuming poorly written press is accurate. Our blog post says it all, https://blog.torproject.org/blog/how-to-handle-millions-new-tor-clients They aren't using exit relays, they are only using hidden services. This means that http://ec.europa.eu wouldn't see bot requests coming through tor. I bet even by blocking tor, http://ec.europa.eu still sees endless botnet requests and other attacks. I'd love to see data relating to what http://ec.europa.eu is seeing specifically from tor versus non-tor IP addresses (both ipv4 and ipv6). Something like quantity of attacks from tor vs. non-tor, breakdown of those requested deemed an attack into their specific type of attack, and other basic metrics. -- Andrew http://tpo.is/contact pgp 0x6B4D6475 -- Liberationtech is public & archives are searchable on Google. Violations of list guidelines will get you moderated: https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, change to digest, or change password by emailing moderator at [email protected].
