Hi Andrew,

> --- On Mon, 7/6/09, Andrew Lewman <[email protected]> wrote:
>>On 07/06/2009 01:33 PM, Chris Humphry wrote:
>> Just now I came across another IP address: 
>> 
>> 78.53.96.30
>
>This IP shows up as:
>AntiVDS JiC1AwLB4RdItkOpClt9EssLCUM 0SeQf50QJSHTBlJoURme0LiMxdk
>2009-07-06 03:01:44 78.53.96.30 9001 0
>
>What was the exact time you saw the false negative on
>https://check.torproject.org?

I believe a few minutes before I sent that email.  The 3rd false-positive 
happened at about 5:30-5:40pm.



>I don't know what "TorCheck" is, so I'm possibly making a bad assumption
>it's https://check.torproject.org.

Your assumption is not correct but that's my fault.  When I wrote the "TBB 
homepage" I meant ( https://check.torproject.org ).  When I wrote "TorCheck" I 
meant ( https://torcheck.xenobite.eu/ ).  They both gave me the same 
false-positive on all three occasions.

I normally would not be concerned and after the first false-positive I thought 
it was a snafu, but I knew I was using the Tor network as shown by using NEWNYM 
and re-testing at those two sites.  However, on the 2nd occasion I started to 
think something was wrong or some bug was rearing it's head...and by the 3rd 
occasion (which happened shortly after the second) I started to get a little 
worried.

I am fairly well versed in Tor and how to use it correctly, but even I was 
thrown off by the repeated false-positives.  I wonder how people new to Tor 
would react?  Maybe adding a 'better' blurb about the false-positives on the 
exit node check site run by Tor Project would be a good idea ( 
https://check.torproject.org ) ?

Thank you


      

Reply via email to