Re: [tor-relays] I'm Running A Tor Exit Node And NEVER Initiated It

[Mirimir]

On 05/29/2016 05:28 PM, Greg Moss wrote:
> OMG - I had the same thing happen to me back a few years. What I did was
> completely destroy ALL computer equipment with a hammer. The weird part
> about it was it keeps coming back now even 10 years later.
> On May 29, 2016 3:23 PM, "Percy Blakeney"  wrote:

:)

Less work to just burn it all ;)


___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] I'm Running A Tor Exit Node And NEVER Initiated It

[Greg Moss]

OMG - I had the same thing happen to me back a few years. What I did was
completely destroy ALL computer equipment with a hammer. The weird part
about it was it keeps coming back now even 10 years later.
On May 29, 2016 3:23 PM, "Percy Blakeney"  wrote:

> I did just that.  TWICE.  I now have a total of 5 phones, 3 laptops, 2
> desktops 2 printers, and I'm now on my third router/modem.  Whomever,
> whatever this is knows how to get into the firmware.  I know this sounds
> crazy but it's true. I'd give anything for someone to come here and see for
> themselves.
>
> On Sun, May 29, 2016 at 3:53 PM, Mirimir  wrote:
>
>> On 05/29/2016 10:27 AM, Percy Blakeney wrote:
>> > Whomever is and has been behind this is selective with what I can and
>> can't
>> > see.  I KNOW our electronics are and have been controlled since we moved
>> > here January 2014.  I know this because at one time "they" were
>> interacting
>> > with me on via my desktop.  I was asked if "they" could run a d-bus
>> session
>> > on another computer I have connected.  Not knowing what a d-bus session
>> was
>> > "they" gave me a step by step run down on how to do it.  I did what
>> "they"
>> > asked because it was kind of exciting.  Now in retrospect it's more
>> scary
>> > than anything else. ...
>>
>> Given what you've said, you might want to replace all of your
>> electronics. The router, and all computers and other devices that have
>> been connected to it, through wires or WiFi. Maybe also change ISP.
>>
>> That may seem extreme. For computers, it might be sufficient to replace
>> HDDs/SSDs. But smartphones, you should just replace entirely. The
>> concern is that malware can be hidden in other components, not just in
>> HDDs/SSDs.
>>
>> Also, be very careful about transferring files from old machines. If you
>> must, transfer individual files, not entire folders. Ideally, you would
>> scan each file for malware in an intermediate throwaway machine, running
>> a different OS. Maybe OSX, if your other machines are Windows and Linux.
>> Or Windows, if your other machines are OSX and Linux. You can use USB
>> flash drives. But use a given one only for a given pair of machines, to
>> reduce the risk of transferring malware.
>>
>> 
>>
>> ___
>> tor-relays mailing list
>> tor-relays@lists.torproject.org
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>
>
>
> ___
> tor-relays mailing list
> tor-relays@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>
>
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] I'm Running A Tor Exit Node And NEVER Initiated It

[Percy Blakeney]

I did just that.  TWICE.  I now have a total of 5 phones, 3 laptops, 2
desktops 2 printers, and I'm now on my third router/modem.  Whomever,
whatever this is knows how to get into the firmware.  I know this sounds
crazy but it's true. I'd give anything for someone to come here and see for
themselves.

On Sun, May 29, 2016 at 3:53 PM, Mirimir  wrote:

> On 05/29/2016 10:27 AM, Percy Blakeney wrote:
> > Whomever is and has been behind this is selective with what I can and
> can't
> > see.  I KNOW our electronics are and have been controlled since we moved
> > here January 2014.  I know this because at one time "they" were
> interacting
> > with me on via my desktop.  I was asked if "they" could run a d-bus
> session
> > on another computer I have connected.  Not knowing what a d-bus session
> was
> > "they" gave me a step by step run down on how to do it.  I did what
> "they"
> > asked because it was kind of exciting.  Now in retrospect it's more scary
> > than anything else. ...
>
> Given what you've said, you might want to replace all of your
> electronics. The router, and all computers and other devices that have
> been connected to it, through wires or WiFi. Maybe also change ISP.
>
> That may seem extreme. For computers, it might be sufficient to replace
> HDDs/SSDs. But smartphones, you should just replace entirely. The
> concern is that malware can be hidden in other components, not just in
> HDDs/SSDs.
>
> Also, be very careful about transferring files from old machines. If you
> must, transfer individual files, not entire folders. Ideally, you would
> scan each file for malware in an intermediate throwaway machine, running
> a different OS. Maybe OSX, if your other machines are Windows and Linux.
> Or Windows, if your other machines are OSX and Linux. You can use USB
> flash drives. But use a given one only for a given pair of machines, to
> reduce the risk of transferring malware.
>
> 
>
> ___
> tor-relays mailing list
> tor-relays@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] I'm Running A Tor Exit Node And NEVER Initiated It

[Mirimir]

On 05/29/2016 10:27 AM, Percy Blakeney wrote:
> Whomever is and has been behind this is selective with what I can and can't
> see.  I KNOW our electronics are and have been controlled since we moved
> here January 2014.  I know this because at one time "they" were interacting
> with me on via my desktop.  I was asked if "they" could run a d-bus session
> on another computer I have connected.  Not knowing what a d-bus session was
> "they" gave me a step by step run down on how to do it.  I did what "they"
> asked because it was kind of exciting.  Now in retrospect it's more scary
> than anything else. ...

Given what you've said, you might want to replace all of your
electronics. The router, and all computers and other devices that have
been connected to it, through wires or WiFi. Maybe also change ISP.

That may seem extreme. For computers, it might be sufficient to replace
HDDs/SSDs. But smartphones, you should just replace entirely. The
concern is that malware can be hidden in other components, not just in
HDDs/SSDs.

Also, be very careful about transferring files from old machines. If you
must, transfer individual files, not entire folders. Ideally, you would
scan each file for malware in an intermediate throwaway machine, running
a different OS. Maybe OSX, if your other machines are Windows and Linux.
Or Windows, if your other machines are OSX and Linux. You can use USB
flash drives. But use a given one only for a given pair of machines, to
reduce the risk of transferring malware.



___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] I'm Running A Tor Exit But Never Initiated It

[Percy Blakeney]

Oh yes.  My wifi is not only secure but I monitor my router on a daily
basis.  One thing should also be mentioned, ALL my passwords, master
passwords and encryptions go from 14 to 40 characters in length with the
use of uppercase, lowercase, numbers and punctuation marks.  It doesn't
matter what I use or how I use it, it always gets cracked into.  To date
I'm up to 143 passwords I've used since November/December 2015.  Even when
I use LUKS encryption with any of the distros I've used they WILL get
broken into.  Am I allowed to give out my location and name?

On Sun, May 29, 2016 at 3:23 PM, david.carlson@gmail.com <
david.carlson@gmail.com> wrote:

> Two thoughts:
>
>
> I did not see mentioned whether your Wi-fi is secured.
>
> If your running a guest machine in a vm you will not know about the host.
>
> Have you tried booting into a rescue DVD?
>
>
> David C
>
>
> Sent from my LG G Pad 7.0 LTE, an AT 4G LTE tablet
>
>
> -- Original message--
>
> *From: *ng0
>
> *Date: *Sun, May 29, 2016 12:36 PM
>
> *To: *tor-relays@lists.torproject.org;
>
> *Subject:*Re: [tor-relays] I'm Running A Tor Exit But Never Initiated It
>
>
> On 2016-05-29(04:32:12+), kr...@anche.no <+kr...@anche.no> wrote:> Hey 
> there,>> This situation sounds really weird. Could you try running> sudo
>  cat /var/lib/tor/fingerprint> on one of your Tor-machines? Then we can 
> determine whether you are> really running an exit relay.>> As Arjen stated 
> before, you can probably remove the Tor package with> sudo apt-get install 
> torCorrection: apt-get remove tor> Best regards,> KRutt>> Percy Blakeney:> > 
> There is NO ONE else in this house that uses my computers other than my 13> > 
> year old daughter who plays Minecraft on hers.  I have one Dell desktop> > 
> that runs Linux Mint Rosa, however, sometimes when I turn it on a black> > 
> screen appears with a message stating "VirtualBox restarting."   Neither my> 
> > child nor myself installed VirtualBox on the desktop.  I also have an Acer> 
> > laptop that runs Linux Mint Mate and a Lenovo that runs Windows 10.  When 
> I> > try to install the Tor browser on my Acer it tells me I already have it 
> and> > it's running, however when I try to open it I'm told I don't have it.  
> Yet> 
>  t; my folders and files tell me otherwise.  I have so much to get out that> 
> > once again I'll apologize for my ADD responses.> >> > On Sun, May 29, 2016 
> at 11:23 AM, kr...@anche.no <+kr...@anche.no>  wrote:> >> >> Hey percy,> >>> 
> >> I can't image a single reason why Tor should be configured to run a> >> 
> relay without the system admins knowledge. Are there any other useres> >> 
> with root access at those machines?> >> You could issue "(sudo) ls -al" on 
> that folder to find out when the Tor> >> configs were created. Are there any 
> other settings set in your torrc?> >>> >> I'm not quite sure but this could 
> be a "good" crypto locker too.> >>> >> Best regards,> >> KRutt> >>> >> Percy 
> Blakeney:> >>> According to files and folders I have on two separate 
> computers in my> >>> house, I am ru
>  nning a Tor exit but I absolutely have nothing to do with> >>> it.  I am 
> only able to physically view certain files ie; var/log/tor,> >>> 
> etc/tor/torrc, while other files like var/lib/tor/lock the content is> >>> 
> invisible.  I am MORE than willing to talk to anyone who may be able to> >>> 
> help.--♥Ⓐ ng0 | 
> http://www.n0.is/u/n4096R/13212A27975AF07677A29F7002A296150C201823___tor-relays
>  mailing listtor-relays@lists.torproject.orghtt 
> <+listtor-relays@lists.torproject.orghtt>ps://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>
>
> ___
> tor-relays mailing list
> tor-relays@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>
>
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] I'm Running A Tor Exit But Never Initiated It

[david . carlson . 417]

Two thoughts:
I did not see mentioned whether your Wi-fi is secured.If your running a guest 
machine in a vm you will not know about the host.Have you tried booting into a 
rescue DVD?
David C
Sent from my LG G Pad 7.0 LTE, an AT 4G LTE tablet



-- Original message--From: ng0Date: Sun, May 29, 2016 12:36 PMTo: 
tor-relays@lists.torproject.org;Subject:Re: [tor-relays] I'm Running A Tor Exit 
But Never Initiated It
On 2016-05-29(04:32:12+), kr...@anche.no wrote:> Hey there,>> This 
situation sounds really weird. Could you try running> sudo cat 
/var/lib/tor/fingerprint> on one of your Tor-machines? Then we can determine 
whether you are> really running an exit relay.>> As Arjen stated before, you 
can probably remove the Tor package with> sudo apt-get install torCorrection: 
apt-get remove tor> Best regards,> KRutt>> Percy Blakeney:> > There is NO ONE 
else in this house that uses my computers other than my 13> > year old daughter 
who plays Minecraft on hers.  I have one Dell desktop> > that runs Linux Mint 
Rosa, however, sometimes when I turn it on a black> > screen appears with a 
message stating "VirtualBox restarting."   Neither my> > child nor myself 
installed VirtualBox on the desktop.  I also have an Acer> > laptop that runs 
Linux Mint Mate and a Lenovo that runs Windows 10.  When I> > try to install 
the Tor browser on my Acer it tells me I already have it and> > it's running, 
however when 
 I try to open it I'm told I don't have it.  Yet> > my folders and files tell 
me otherwise.  I have so much to get out that> > once again I'll apologize for 
my ADD responses.> >> > On Sun, May 29, 2016 at 11:23 AM, kr...@anche.no  
wrote:> >> >> Hey percy,> >>> >> I can't image a single reason why Tor should 
be configured to run a> >> relay without the system admins knowledge. Are there 
any other useres> >> with root access at those machines?> >> You could issue 
"(sudo) ls -al" on that folder to find out when the Tor> >> configs were 
created. Are there any other settings set in your torrc?> >>> >> I'm not quite 
sure but this could be a "good" crypto locker too.> >>> >> Best regards,> >> 
KRutt> >>> >> Percy Blakeney:> >>> According to files and folders I have on two 
separate computers in my> >>> house, I am running a Tor exit but I absolutely 
have nothing to do with> >>> it.  I am only able to physically view certain 
files ie; var/log/tor,> >>> etc/tor/torrc, while other files like var
 /lib/tor/lock the content is> >>> invisible.  I am MORE than willing to talk 
to anyone who may be able to> >>> help.--♥Ⓐ ng0 | 
http://www.n0.is/u/n4096R/13212A27975AF07677A29F7002A296150C201823___tor-relays
 mailing 
listtor-relays@lists.torproject.orghttps://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] I'm Running A Tor Exit But Never Initiated It

[ng0]

On 2016-05-29(04:32:12+), kr...@anche.no wrote:
> Hey there,
>
> This situation sounds really weird. Could you try running
> sudo cat /var/lib/tor/fingerprint
> on one of your Tor-machines? Then we can determine whether you are
> really running an exit relay.
>
> As Arjen stated before, you can probably remove the Tor package with
> sudo apt-get install tor

Correction: apt-get remove tor

> Best regards,
> KRutt
>
> Percy Blakeney:
> > There is NO ONE else in this house that uses my computers other than my 13
> > year old daughter who plays Minecraft on hers.  I have one Dell desktop
> > that runs Linux Mint Rosa, however, sometimes when I turn it on a black
> > screen appears with a message stating "VirtualBox restarting."   Neither my
> > child nor myself installed VirtualBox on the desktop.  I also have an Acer
> > laptop that runs Linux Mint Mate and a Lenovo that runs Windows 10.  When I
> > try to install the Tor browser on my Acer it tells me I already have it and
> > it's running, however when I try to open it I'm told I don't have it.  Yet
> > my folders and files tell me otherwise.  I have so much to get out that
> > once again I'll apologize for my ADD responses.
> >
> > On Sun, May 29, 2016 at 11:23 AM, kr...@anche.no  wrote:
> >
> >> Hey percy,
> >>
> >> I can't image a single reason why Tor should be configured to run a
> >> relay without the system admins knowledge. Are there any other useres
> >> with root access at those machines?
> >> You could issue "(sudo) ls -al" on that folder to find out when the Tor
> >> configs were created. Are there any other settings set in your torrc?
> >>
> >> I'm not quite sure but this could be a "good" crypto locker too.
> >>
> >> Best regards,
> >> KRutt
> >>
> >> Percy Blakeney:
> >>> According to files and folders I have on two separate computers in my
> >>> house, I am running a Tor exit but I absolutely have nothing to do with
> >>> it.  I am only able to physically view certain files ie; var/log/tor,
> >>> etc/tor/torrc, while other files like var/lib/tor/lock the content is
> >>> invisible.  I am MORE than willing to talk to anyone who may be able to
> >>> help.


--
♥Ⓐ ng0 | http://www.n0.is/u/n
4096R/13212A27975AF07677A29F7002A296150C201823
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] I'm Running A Tor Exit Node And NEVER Initiated It

[Percy Blakeney]

Back in March I was taking screenshots and pictures with my android of the
different folders and files.  Days after I started to accumulate them I
started to notice they were disappearing from both my phone and computer so
I started to write down everything in a binder.  This was the first files I
found:

Tor accept 192.168.0.0/16
control port 9051
hashed control password
16:872860B76453A77D60CA2BB8C1A7042072093276A3D701AD684053EC4C
hidden service port 80 127.0.0.1:80
hidden service port 22 127.0.0.1:22 (e.g. advertise 443 but bind to 9090)
outgoing traffic 10.0.0.5
nicknamed ididntedittheconfig
each period starts daily at midnight each period starts on the 3rd of the
month at 15:00
contact google Random Person 
directory connections 9030 (e.g. advertise 80 but bind to 9091)
entry guard 4B7B73D5A1F789ED2411A90E03C49C91652FDB95
entry guard AA1B026EE0C8A958E29C67C7D8885FF27572269D
entry (Alligator) 774969EEAA906F269C4E4E1D2E3D8711DA601491
exit fast guard HSDir running stable V2Dir Valid
Pascal 7 Raspberry PI Tor Relay torhbasd brasshornrelay11 cryptonanus
fingerprint ED03BB616EB2F60BEC80151114BB25CEF515B226
tor pid 1597
network manager pid 906
IPv6 privacy RFC4941
ssh agent 1377

When I ran a several different network scans from my android I found my
2.4ghz and 5 ghz wifi names along with HOME-E2DE 2.4 and 5.  My wifi
networks run off channel 6 while the 'HOME' one runs off channel 1.

On Sun, May 29, 2016 at 12:27 PM, Percy Blakeney  wrote:

> Whomever is and has been behind this is selective with what I can and
> can't see.  I KNOW our electronics are and have been controlled since we
> moved here January 2014.  I know this because at one time "they" were
> interacting with me on via my desktop.  I was asked if "they" could run a
> d-bus session on another computer I have connected.  Not knowing what a
> d-bus session was "they" gave me a step by step run down on how to do it.
> I did what "they" asked because it was kind of exciting.  Now in retrospect
> it's more scary than anything else.  There are files on my Linux computers
> that show me what to display if I run a netstat command or nstat command so
> even when I try to figure things out I'll continue to get the same results
> every time. Terminal fortune cookies were installed without me installing
> them.  One time upon opening up my terminal the little penguin's thought
> cloud said this: "I am number 2.  You are number 6."  Though I know a
> terminal only takes commands I impulsively typed back within it, "I am not
> a number.  I'm a free man!"  Immediately after I typed that in this popped
> up after my sentence, "I am not a number.  I'm a free man-tor!"  And it was
> then that I started going through my folders and files and found everything
> Tor related.  Even some link that told me I was running through a Tor
> router.
>
> On Sun, May 29, 2016 at 12:09 PM, Arjen  wrote:
>
>> On 05/29/2016 05:28 PM, Percy Blakeney wrote:
>>
>>> Like I stated a few minutes ago, I am and have been running Tor from my
>>> location yet I have nothing to do with it.  I have been sitting on this
>>> for a while.  Before anyone comes down on me for it, you have to
>>> understand what I've been going through with my network.  Tor is only
>>> the tip of the iceberg.  This is as of today:
>>>
>>> usr/share/tor/tor-service-defaults-torrc
>>>
>>> DataDirectory /var/lib/tor
>>> PIDFile /var/run/tor/tor.pid
>>> RunasDaemon 1
>>> user debian-tor
>>> control socket /var/run/tor/control
>>> control socket group writable 1
>>> cookie authentication 1
>>> cookie auth file group readable 1
>>> cookie auth file /var/run/tor/control-authcookie
>>> log notice file /var/log/tor/log
>>>
>>> etc/tor/torrc
>>>
>>> contact info 0x Random Person 
>>> #Dirport 80 No Listen
>>> #Dirport 127.0.0.1:9091  No Advertise
>>> #Dirport front page /etc/tor/tor-exit-notice.html
>>> #Exit Policy Accept *:6660-6667, reject *:* #allow irc ports but no more
>>> #accept *:119 # accept nntp as well as default exit policy
>>>
>>>
>> The hashes (#) in from of the lines are part of the default inline
>> documentation in the torrc file, and should have no effect because they are
>> comments.
>> It looks like you or someone with root access installed Tor on your
>> computer. You did not send enough of the torrc file to see if it is
>> configured as an exit. It could just be the default configuration after a
>> "sudo apt-get install tor"...
>>
>> If you just want to remove Tor from your machine (which runs Debian?),
>> you could just do: sudo apt-get remove tor
>> However, that might remove any clues as to who installed Tor and why.
>>
>> var/lib/tor
>>>
>>> lock-Mon 16 May 2016 09:48:32 PM EDT (File content is not visible to me)
>>> cached-certs-Mon 16 May 2016 09:48:32 PM EDT (File content is not
>>> visible to me)
>>> cached-microdescs-Mon 16 May 2016 10:18:34 PM EDT (File content is not
>>> visible to me)
>>> 

Re: [tor-relays] I'm Running A Tor Exit But Never Initiated It

[Percy Blakeney]

I have.  Late September 2015 I took my desktop to one repair shop (NEVER
GEEK SQUAD) and took my laptop and flashdrive with Linux on it to a
different repair shop.  I was asked by both repairmen if someone had a
vendetta against me because they had never seen anything like it.  Both
HDDs were partitioned. I had to have brand new HDD replacement on both
computers.  As for the flashdrive the repairman told me he saw nothing out
of the ordinary.  I don't want to do anything to them now because I need
someone who knows what they're looking at to see things for themselves.

On Sun, May 29, 2016 at 12:22 PM, Jim Electro House <
torelectroho...@gmail.com> wrote:

> Try to check if your computers have a virus or sth else, there is no other
> explanation of what is happening in your house. If I was you, I would do a
> full backup and then format all of my computers..
>
>
> On Sun, May 29, 2016 at 7:16 PM, Percy Blakeney  wrote:
>
>> There is NO ONE else in this house that uses my computers other than my
>> 13 year old daughter who plays Minecraft on hers.  I have one Dell desktop
>> that runs Linux Mint Rosa, however, sometimes when I turn it on a black
>> screen appears with a message stating "VirtualBox restarting."   Neither my
>> child nor myself installed VirtualBox on the desktop.  I also have an Acer
>> laptop that runs Linux Mint Mate and a Lenovo that runs Windows 10.  When I
>> try to install the Tor browser on my Acer it tells me I already have it and
>> it's running, however when I try to open it I'm told I don't have it.  Yet
>> my folders and files tell me otherwise.  I have so much to get out that
>> once again I'll apologize for my ADD responses.
>>
>> On Sun, May 29, 2016 at 11:23 AM, kr...@anche.no  wrote:
>>
>>> Hey percy,
>>>
>>> I can't image a single reason why Tor should be configured to run a
>>> relay without the system admins knowledge. Are there any other useres
>>> with root access at those machines?
>>> You could issue "(sudo) ls -al" on that folder to find out when the Tor
>>> configs were created. Are there any other settings set in your torrc?
>>>
>>> I'm not quite sure but this could be a "good" crypto locker too.
>>>
>>> Best regards,
>>> KRutt
>>>
>>> Percy Blakeney:
>>> > According to files and folders I have on two separate computers in my
>>> > house, I am running a Tor exit but I absolutely have nothing to do with
>>> > it.  I am only able to physically view certain files ie; var/log/tor,
>>> > etc/tor/torrc, while other files like var/lib/tor/lock the content is
>>> > invisible.  I am MORE than willing to talk to anyone who may be able to
>>> > help.
>>> >
>>> >
>>> >
>>> > ___
>>> > tor-relays mailing list
>>> > tor-relays@lists.torproject.org
>>> > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>> >
>>> ___
>>> tor-relays mailing list
>>> tor-relays@lists.torproject.org
>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>>
>>
>>
>> ___
>> tor-relays mailing list
>> tor-relays@lists.torproject.org
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>
>>
>
> ___
> tor-relays mailing list
> tor-relays@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>
>
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] I'm Running A Tor Exit But Never Initiated It

[kr...@anche.no]

Hey there,

This situation sounds really weird. Could you try running
sudo cat /var/lib/tor/fingerprint
on one of your Tor-machines? Then we can determine whether you are
really running an exit relay.

As Arjen stated before, you can probably remove the Tor package with
sudo apt-get install tor

Best regards,
KRutt

Percy Blakeney:
> There is NO ONE else in this house that uses my computers other than my 13
> year old daughter who plays Minecraft on hers.  I have one Dell desktop
> that runs Linux Mint Rosa, however, sometimes when I turn it on a black
> screen appears with a message stating "VirtualBox restarting."   Neither my
> child nor myself installed VirtualBox on the desktop.  I also have an Acer
> laptop that runs Linux Mint Mate and a Lenovo that runs Windows 10.  When I
> try to install the Tor browser on my Acer it tells me I already have it and
> it's running, however when I try to open it I'm told I don't have it.  Yet
> my folders and files tell me otherwise.  I have so much to get out that
> once again I'll apologize for my ADD responses.
> 
> On Sun, May 29, 2016 at 11:23 AM, kr...@anche.no  wrote:
> 
>> Hey percy,
>>
>> I can't image a single reason why Tor should be configured to run a
>> relay without the system admins knowledge. Are there any other useres
>> with root access at those machines?
>> You could issue "(sudo) ls -al" on that folder to find out when the Tor
>> configs were created. Are there any other settings set in your torrc?
>>
>> I'm not quite sure but this could be a "good" crypto locker too.
>>
>> Best regards,
>> KRutt
>>
>> Percy Blakeney:
>>> According to files and folders I have on two separate computers in my
>>> house, I am running a Tor exit but I absolutely have nothing to do with
>>> it.  I am only able to physically view certain files ie; var/log/tor,
>>> etc/tor/torrc, while other files like var/lib/tor/lock the content is
>>> invisible.  I am MORE than willing to talk to anyone who may be able to
>>> help.
>>>
>>>
>>>
>>> ___
>>> tor-relays mailing list
>>> tor-relays@lists.torproject.org
>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>>
>> ___
>> tor-relays mailing list
>> tor-relays@lists.torproject.org
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>
> 
> 
> 
> ___
> tor-relays mailing list
> tor-relays@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
> 
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] I'm Running A Tor Exit Node And NEVER Initiated It

[Percy Blakeney]

Whomever is and has been behind this is selective with what I can and can't
see.  I KNOW our electronics are and have been controlled since we moved
here January 2014.  I know this because at one time "they" were interacting
with me on via my desktop.  I was asked if "they" could run a d-bus session
on another computer I have connected.  Not knowing what a d-bus session was
"they" gave me a step by step run down on how to do it.  I did what "they"
asked because it was kind of exciting.  Now in retrospect it's more scary
than anything else.  There are files on my Linux computers that show me
what to display if I run a netstat command or nstat command so even when I
try to figure things out I'll continue to get the same results every time.
Terminal fortune cookies were installed without me installing them.  One
time upon opening up my terminal the little penguin's thought cloud said
this: "I am number 2.  You are number 6."  Though I know a terminal only
takes commands I impulsively typed back within it, "I am not a number.  I'm
a free man!"  Immediately after I typed that in this popped up after my
sentence, "I am not a number.  I'm a free man-tor!"  And it was then that I
started going through my folders and files and found everything Tor
related.  Even some link that told me I was running through a Tor router.

On Sun, May 29, 2016 at 12:09 PM, Arjen  wrote:

> On 05/29/2016 05:28 PM, Percy Blakeney wrote:
>
>> Like I stated a few minutes ago, I am and have been running Tor from my
>> location yet I have nothing to do with it.  I have been sitting on this
>> for a while.  Before anyone comes down on me for it, you have to
>> understand what I've been going through with my network.  Tor is only
>> the tip of the iceberg.  This is as of today:
>>
>> usr/share/tor/tor-service-defaults-torrc
>>
>> DataDirectory /var/lib/tor
>> PIDFile /var/run/tor/tor.pid
>> RunasDaemon 1
>> user debian-tor
>> control socket /var/run/tor/control
>> control socket group writable 1
>> cookie authentication 1
>> cookie auth file group readable 1
>> cookie auth file /var/run/tor/control-authcookie
>> log notice file /var/log/tor/log
>>
>> etc/tor/torrc
>>
>> contact info 0x Random Person 
>> #Dirport 80 No Listen
>> #Dirport 127.0.0.1:9091  No Advertise
>> #Dirport front page /etc/tor/tor-exit-notice.html
>> #Exit Policy Accept *:6660-6667, reject *:* #allow irc ports but no more
>> #accept *:119 # accept nntp as well as default exit policy
>>
>>
> The hashes (#) in from of the lines are part of the default inline
> documentation in the torrc file, and should have no effect because they are
> comments.
> It looks like you or someone with root access installed Tor on your
> computer. You did not send enough of the torrc file to see if it is
> configured as an exit. It could just be the default configuration after a
> "sudo apt-get install tor"...
>
> If you just want to remove Tor from your machine (which runs Debian?), you
> could just do: sudo apt-get remove tor
> However, that might remove any clues as to who installed Tor and why.
>
> var/lib/tor
>>
>> lock-Mon 16 May 2016 09:48:32 PM EDT (File content is not visible to me)
>> cached-certs-Mon 16 May 2016 09:48:32 PM EDT (File content is not
>> visible to me)
>> cached-microdescs-Mon 16 May 2016 10:18:34 PM EDT (File content is not
>> visible to me)
>> cached-microdescs.new-Mon 16 May 2016 10:18:34 PM EDT (File content is
>> not visible to me)
>> state-Wed 25 May 2016 04:36:02 AM EDT (This one IS visible)
>> cached-microdesc-consensus-Sun 29 May 2016 09:17:15 AM EDT (File content
>> is not visible to me)
>>
>>
> The contents of the files and logs might only be readable by root, so
> using sudo might help to read them.
>
> tor.pid-32156
>>
>> /var/lib/tor/state
>>
>> #Tor state file last generated on 2016-05-25 04:36:02 local time
>> #Other times below are in UTC
>> #You *do not* need to edit this file.
>>
>> EntryGuard Jans 50586E25BE067FD1F739998550EDDCB1A14CA5B2 DirCache
>> EntryGuardAddedBy 50586E25BE067FD1F739998550EDDCB1A14CA5B2  0.2.4.27
>> 2016-04-28 16:16:20
>>
>> THERE'S WAY more to the above file but I'm not sure what I should and
>> shouldn't share on here.  As a matter of fact, I'm not sure what half of
>> this stuff means so I've spent the last few months trying to educate
>> myself on as much of this as possible.  Like I said, I am MORE than
>> willing to talk to anyone out there who may be able to help.
>>
>>
>> ___
>> tor-relays mailing list
>> tor-relays@lists.torproject.org
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>
>> ___
> tor-relays mailing list
> tor-relays@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>
___
tor-relays mailing list
tor-relays@lists.torproject.org

Re: [tor-relays] I'm Running A Tor Exit Node And NEVER Initiated It

[Ana Lucia Cortez]

On 29.05.2016 at 17:28, Percy Blakeney wrote:
> Like I stated a few minutes ago, I am and have been running Tor from my
> location yet I have nothing to do with it.  I have been sitting on this
> for a while.  Before anyone comes down on me for it, you have to
> understand what I've been going through with my network.  Tor is only
> the tip of the iceberg.  

Its not an Exit. So nobody will likely come down on you about it.


> EntryGuard Jans 50586E25BE067FD1F739998550EDDCB1A14CA5B2 DirCache
> EntryGuardAddedBy 50586E25BE067FD1F739998550EDDCB1A14CA5B2  0.2.4.27
> 2016-04-28 16:16:20

That long number is the fingerprint unique to every node. With this you
can see more about it here:
https://globe.torproject.org/#/relay/50586E25BE067FD1F739998550EDDCB1A14CA5B2

Apparently its running since August, 4 2015, 2 AM. Since nearly a year.

> 

Its not clear to me what kind of help do you want.

Do you want to stop running the Tor node?
What Linux distro and version are you running?


Is this iceberg a server you own? Why don't you have root/admin access
then? Who set it up?
Maybe just power the machine down?

Greetings from Zurich

Ana



signature.asc
Description: OpenPGP digital signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] I'm Running A Tor Exit But Never Initiated It

[Jim Electro House]

Try to check if your computers have a virus or sth else, there is no other
explanation of what is happening in your house. If I was you, I would do a
full backup and then format all of my computers..

On Sun, May 29, 2016 at 7:16 PM, Percy Blakeney  wrote:

> There is NO ONE else in this house that uses my computers other than my 13
> year old daughter who plays Minecraft on hers.  I have one Dell desktop
> that runs Linux Mint Rosa, however, sometimes when I turn it on a black
> screen appears with a message stating "VirtualBox restarting."   Neither my
> child nor myself installed VirtualBox on the desktop.  I also have an Acer
> laptop that runs Linux Mint Mate and a Lenovo that runs Windows 10.  When I
> try to install the Tor browser on my Acer it tells me I already have it and
> it's running, however when I try to open it I'm told I don't have it.  Yet
> my folders and files tell me otherwise.  I have so much to get out that
> once again I'll apologize for my ADD responses.
>
> On Sun, May 29, 2016 at 11:23 AM, kr...@anche.no  wrote:
>
>> Hey percy,
>>
>> I can't image a single reason why Tor should be configured to run a
>> relay without the system admins knowledge. Are there any other useres
>> with root access at those machines?
>> You could issue "(sudo) ls -al" on that folder to find out when the Tor
>> configs were created. Are there any other settings set in your torrc?
>>
>> I'm not quite sure but this could be a "good" crypto locker too.
>>
>> Best regards,
>> KRutt
>>
>> Percy Blakeney:
>> > According to files and folders I have on two separate computers in my
>> > house, I am running a Tor exit but I absolutely have nothing to do with
>> > it.  I am only able to physically view certain files ie; var/log/tor,
>> > etc/tor/torrc, while other files like var/lib/tor/lock the content is
>> > invisible.  I am MORE than willing to talk to anyone who may be able to
>> > help.
>> >
>> >
>> >
>> > ___
>> > tor-relays mailing list
>> > tor-relays@lists.torproject.org
>> > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>> >
>> ___
>> tor-relays mailing list
>> tor-relays@lists.torproject.org
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>
>
>
> ___
> tor-relays mailing list
> tor-relays@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>
>
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] I'm Running A Tor Exit But Never Initiated It

[Percy Blakeney]

There is NO ONE else in this house that uses my computers other than my 13
year old daughter who plays Minecraft on hers.  I have one Dell desktop
that runs Linux Mint Rosa, however, sometimes when I turn it on a black
screen appears with a message stating "VirtualBox restarting."   Neither my
child nor myself installed VirtualBox on the desktop.  I also have an Acer
laptop that runs Linux Mint Mate and a Lenovo that runs Windows 10.  When I
try to install the Tor browser on my Acer it tells me I already have it and
it's running, however when I try to open it I'm told I don't have it.  Yet
my folders and files tell me otherwise.  I have so much to get out that
once again I'll apologize for my ADD responses.

On Sun, May 29, 2016 at 11:23 AM, kr...@anche.no  wrote:

> Hey percy,
>
> I can't image a single reason why Tor should be configured to run a
> relay without the system admins knowledge. Are there any other useres
> with root access at those machines?
> You could issue "(sudo) ls -al" on that folder to find out when the Tor
> configs were created. Are there any other settings set in your torrc?
>
> I'm not quite sure but this could be a "good" crypto locker too.
>
> Best regards,
> KRutt
>
> Percy Blakeney:
> > According to files and folders I have on two separate computers in my
> > house, I am running a Tor exit but I absolutely have nothing to do with
> > it.  I am only able to physically view certain files ie; var/log/tor,
> > etc/tor/torrc, while other files like var/lib/tor/lock the content is
> > invisible.  I am MORE than willing to talk to anyone who may be able to
> > help.
> >
> >
> >
> > ___
> > tor-relays mailing list
> > tor-relays@lists.torproject.org
> > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
> >
> ___
> tor-relays mailing list
> tor-relays@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] I'm Running A Tor Exit Node And NEVER Initiated It

[Arjen]

On 05/29/2016 05:28 PM, Percy Blakeney wrote:

Like I stated a few minutes ago, I am and have been running Tor from my
location yet I have nothing to do with it.  I have been sitting on this
for a while.  Before anyone comes down on me for it, you have to
understand what I've been going through with my network.  Tor is only
the tip of the iceberg.  This is as of today:

usr/share/tor/tor-service-defaults-torrc

DataDirectory /var/lib/tor
PIDFile /var/run/tor/tor.pid
RunasDaemon 1
user debian-tor
control socket /var/run/tor/control
control socket group writable 1
cookie authentication 1
cookie auth file group readable 1
cookie auth file /var/run/tor/control-authcookie
log notice file /var/log/tor/log

etc/tor/torrc

contact info 0x Random Person 
#Dirport 80 No Listen
#Dirport 127.0.0.1:9091  No Advertise
#Dirport front page /etc/tor/tor-exit-notice.html
#Exit Policy Accept *:6660-6667, reject *:* #allow irc ports but no more
#accept *:119 # accept nntp as well as default exit policy



The hashes (#) in from of the lines are part of the default inline 
documentation in the torrc file, and should have no effect because they 
are comments.
It looks like you or someone with root access installed Tor on your 
computer. You did not send enough of the torrc file to see if it is 
configured as an exit. It could just be the default configuration after 
a "sudo apt-get install tor"...


If you just want to remove Tor from your machine (which runs Debian?), 
you could just do: sudo apt-get remove tor

However, that might remove any clues as to who installed Tor and why.


var/lib/tor

lock-Mon 16 May 2016 09:48:32 PM EDT (File content is not visible to me)
cached-certs-Mon 16 May 2016 09:48:32 PM EDT (File content is not
visible to me)
cached-microdescs-Mon 16 May 2016 10:18:34 PM EDT (File content is not
visible to me)
cached-microdescs.new-Mon 16 May 2016 10:18:34 PM EDT (File content is
not visible to me)
state-Wed 25 May 2016 04:36:02 AM EDT (This one IS visible)
cached-microdesc-consensus-Sun 29 May 2016 09:17:15 AM EDT (File content
is not visible to me)



The contents of the files and logs might only be readable by root, so 
using sudo might help to read them.



tor.pid-32156

/var/lib/tor/state

#Tor state file last generated on 2016-05-25 04:36:02 local time
#Other times below are in UTC
#You *do not* need to edit this file.

EntryGuard Jans 50586E25BE067FD1F739998550EDDCB1A14CA5B2 DirCache
EntryGuardAddedBy 50586E25BE067FD1F739998550EDDCB1A14CA5B2  0.2.4.27
2016-04-28 16:16:20

THERE'S WAY more to the above file but I'm not sure what I should and
shouldn't share on here.  As a matter of fact, I'm not sure what half of
this stuff means so I've spent the last few months trying to educate
myself on as much of this as possible.  Like I said, I am MORE than
willing to talk to anyone out there who may be able to help.


___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays


___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] I'm Running A Tor Exit Node And NEVER Initiated It

[Percy Blakeney]

I mean I didn't do any of this.  I did not create ONE Tor related file on
any of my computers.  It would appear by my files and folders that I'm
running this but I'm not.  When I contact my ISP regarding my router
configuration they seem to be seeing a different screen than what I'm
seeing or they're lying.  I'm new to all of this so my apologies if I'm
slow.  Until right now I was prevented from contacting anyone regarding
this issue.  What I mean by prevented is, either my email would refuse to
send or my connection would be lost or even my router resetting itself.
Because I was somehow being prevented from contacting anyone via my home
connection I went to two separate libraries wherein I tried to contact the
EFF.  Each time I clicked to send my concerning email my designated
computer would time out then shut down.  I know this sounds crazy but this
has been my life since September 2015, when I started to become more aware
and as self-educated as possible.  I want you to be aware there is an exit
out there coming from my computers that I am not in control of.

On Sun, May 29, 2016 at 11:47 AM, I  wrote:

> Percy,
>
> What do you mean when you say you have nothing to do with your exit node?
>
> What do you want help to do?
>
> Robert
>
> ___
> tor-relays mailing list
> tor-relays@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>
>
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] I'm Running A Tor Exit But Never Initiated It

[kr...@anche.no]

Hey percy,

I can't image a single reason why Tor should be configured to run a
relay without the system admins knowledge. Are there any other useres
with root access at those machines?
You could issue "(sudo) ls -al" on that folder to find out when the Tor
configs were created. Are there any other settings set in your torrc?

I'm not quite sure but this could be a "good" crypto locker too.

Best regards,
KRutt

Percy Blakeney:
> According to files and folders I have on two separate computers in my
> house, I am running a Tor exit but I absolutely have nothing to do with
> it.  I am only able to physically view certain files ie; var/log/tor,
> etc/tor/torrc, while other files like var/lib/tor/lock the content is
> invisible.  I am MORE than willing to talk to anyone who may be able to
> help.
> 
> 
> 
> ___
> tor-relays mailing list
> tor-relays@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
> 
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] I'm Running A Tor Exit Node And NEVER Initiated It

[I]

Percy,What do you mean when you say you have nothing to do with your exit node?What do you want help to do?Robert



___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

[tor-relays] I'm Running A Tor Exit Node And NEVER Initiated It

[Percy Blakeney]

Like I stated a few minutes ago, I am and have been running Tor from my
location yet I have nothing to do with it.  I have been sitting on this for
a while.  Before anyone comes down on me for it, you have to understand
what I've been going through with my network.  Tor is only the tip of the
iceberg.  This is as of today:

usr/share/tor/tor-service-defaults-torrc

DataDirectory /var/lib/tor
PIDFile /var/run/tor/tor.pid
RunasDaemon 1
user debian-tor
control socket /var/run/tor/control
control socket group writable 1
cookie authentication 1
cookie auth file group readable 1
cookie auth file /var/run/tor/control-authcookie
log notice file /var/log/tor/log

etc/tor/torrc

contact info 0x Random Person 
#Dirport 80 No Listen
#Dirport 127.0.0.1:9091 No Advertise
#Dirport front page /etc/tor/tor-exit-notice.html
#Exit Policy Accept *:6660-6667, reject *:* #allow irc ports but no more
#accept *:119 # accept nntp as well as default exit policy

var/lib/tor

lock-Mon 16 May 2016 09:48:32 PM EDT (File content is not visible to me)
cached-certs-Mon 16 May 2016 09:48:32 PM EDT (File content is not visible
to me)
cached-microdescs-Mon 16 May 2016 10:18:34 PM EDT (File content is not
visible to me)
cached-microdescs.new-Mon 16 May 2016 10:18:34 PM EDT (File content is not
visible to me)
state-Wed 25 May 2016 04:36:02 AM EDT (This one IS visible)
cached-microdesc-consensus-Sun 29 May 2016 09:17:15 AM EDT (File content is
not visible to me)

tor.pid-32156

/var/lib/tor/state

#Tor state file last generated on 2016-05-25 04:36:02 local time
#Other times below are in UTC
#You *do not* need to edit this file.

EntryGuard Jans 50586E25BE067FD1F739998550EDDCB1A14CA5B2 DirCache
EntryGuardAddedBy 50586E25BE067FD1F739998550EDDCB1A14CA5B2  0.2.4.27
2016-04-28 16:16:20

THERE'S WAY more to the above file but I'm not sure what I should and
shouldn't share on here.  As a matter of fact, I'm not sure what half of
this stuff means so I've spent the last few months trying to educate myself
on as much of this as possible.  Like I said, I am MORE than willing to
talk to anyone out there who may be able to help.
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

[tor-relays] I'm Running A Tor Exit But Never Initiated It

[Percy Blakeney]

According to files and folders I have on two separate computers in my
house, I am running a Tor exit but I absolutely have nothing to do with
it.  I am only able to physically view certain files ie; var/log/tor,
etc/tor/torrc, while other files like var/lib/tor/lock the content is
invisible.  I am MORE than willing to talk to anyone who may be able to
help.
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays