Re: [tor-relays] Contact info obfscation
Nice. Perhaps nusenu can add that to the spec. The current spec has gpg support and keybase user, but perhaps there is a case for specifying the gpg server as well (like in Marco's case). Eran On Mon, Jul 2, 2018 at 10:30 AM Marco Predicatori wrote: > > > > Keifer Bly wrote on 30/06/2018 02:22: > > Hello, > > > > I am aware that email addresses used in the “ContactInfo: “ in a > > relay operator’s torrc file is publicly listed on the tor relay. > > However, what I am wondering, is there a way to obfuscate the > > email address on > > http://torstatus.blutmagie.de/router_detail... > > Publish a GPG key instead. Spammers will have to go fetch your email > from a keyserver. > This is how I did it: > > http://torstatus.blutmagie.de/router_detail.php?FP=a4e74410d83705eeff24bc265de2b2ff39bda56e > > My two cents, bye, Marco > > > > -- > > https://metrics.torproject.org/rs.html#details/A4E74410D83705EEFF24BC265DE2B2FF39BDA56E > > > > ___ > tor-relays mailing list > tor-relays@lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Contact info obfscation
Keifer Bly wrote on 30/06/2018 02:22: > Hello, > > I am aware that email addresses used in the “ContactInfo: “ in a > relay operator’s torrc file is publicly listed on the tor relay. > However, what I am wondering, is there a way to obfuscate the > email address on > http://torstatus.blutmagie.de/router_detail... Publish a GPG key instead. Spammers will have to go fetch your email from a keyserver. This is how I did it: http://torstatus.blutmagie.de/router_detail.php?FP=a4e74410d83705eeff24bc265de2b2ff39bda56e My two cents, bye, Marco -- https://metrics.torproject.org/rs.html#details/A4E74410D83705EEFF24BC265DE2B2FF39BDA56E signature.asc Description: OpenPGP digital signature ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Contact info obfscation
Very well, I will change it back. I just wish there was an easier way to block spammers… From: Eran Sandler Sent: Sunday, July 1, 2018 11:37 PM To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] Contact info obfscation If you are worried about putting a real address you can use a forwarding only address under a different domain. Do you think it would be useful if you had been given an address like aab...@torexitnode.net? As part of a different thread on this list I asked what are some of the services and thinga Tor relay operators are missing. Perhaps an easy forwarding only email address that will hide to some degree the real email address. It also makes it very easy to filter and figure out if it's spam or not. Wdyt? On Mon, 2 Jul 2018, 9:24 , wrote: Keifer Bly: > Will doing this make it more difficult for spammers to reach my address? Yes. However, I think you should consider publishing your unobfuscated email address, for clarity and convenience to those who are legitimately trying to contact you. I don't obfuscate my email address in the ContactInfo field, and I receive at most a few handfuls of spam messages per month. Most of these are caught by my email provider's spam filter, which I already have set to its least aggressive setting possible. alkyl ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Contact info obfscation
If you are worried about putting a real address you can use a forwarding only address under a different domain. Do you think it would be useful if you had been given an address like aab...@torexitnode.net? As part of a different thread on this list I asked what are some of the services and thinga Tor relay operators are missing. Perhaps an easy forwarding only email address that will hide to some degree the real email address. It also makes it very easy to filter and figure out if it's spam or not. Wdyt? On Mon, 2 Jul 2018, 9:24 , wrote: > Keifer Bly: > > Will doing this make it more difficult for spammers to reach my address? > > Yes. However, I think you should consider publishing your unobfuscated > email address, for clarity and convenience to those who are legitimately > trying to contact you. > > I don't obfuscate my email address in the ContactInfo field, and I > receive at most a few handfuls of spam messages per month. Most of these > are caught by my email provider's spam filter, which I already have set > to its least aggressive setting possible. > > alkyl > ___ > tor-relays mailing list > tor-relays@lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays > ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Contact info obfscation
Keifer Bly: > Will doing this make it more difficult for spammers to reach my address? Yes. However, I think you should consider publishing your unobfuscated email address, for clarity and convenience to those who are legitimately trying to contact you. I don't obfuscate my email address in the ContactInfo field, and I receive at most a few handfuls of spam messages per month. Most of these are caught by my email provider's spam filter, which I already have set to its least aggressive setting possible. alkyl ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Contact info obfscation
Le 30/06/2018 à 09:02, nusenu a écrit : > https://github.com/nusenu/ContactInfo-Information-Sharing-Specification#email > Does this have any chance to be adopted inside Tor or will it stay a side project? -- Johan Fleury PGP Key ID : 0x5D404386805E56E6 ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Contact info obfscation
> On 1 Jul 2018, at 21:10, Keifer Bly wrote: > > How do I reload the relay without restarting it? To reload all the tor instances on your machine: killall -HUP tor To reload just one tor instance: kill -HUP `cat tor.pid` If you have "PidFile tor.pid" in your torrc. T ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Contact info obfscation
How do I reload the relay without restarting it? Thank you. From: nusenu Sent: Sunday, July 1, 2018 2:07 AM To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] Contact info obfscation Keifer Bly: > So I just changed my torrc file contactinfo to Keifer dot bly at > gmail dot com > > Do I need to restart my relay for this to take effect? restart is not required but you need to reload it > Will doing this make it more difficult for spammers to reach my > address? yes, probably (for some spammers/harvesters) but updating the contactinfo will not remove older contactinfo strings since they are all archived and so spammers can still see the former (non-obfuscated) version of that contactinfo string > Will that make it more difficult for people who legitimately want to > contact the relay operator who aren’t spammers to contact me? If they want to do it automatically: yes if they do it manually: probably not -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Contact info obfscation
Keifer Bly: > So I just changed my torrc file contactinfo to Keifer dot bly at > gmail dot com > > Do I need to restart my relay for this to take effect? restart is not required but you need to reload it > Will doing this make it more difficult for spammers to reach my > address? yes, probably (for some spammers/harvesters) but updating the contactinfo will not remove older contactinfo strings since they are all archived and so spammers can still see the former (non-obfuscated) version of that contactinfo string > Will that make it more difficult for people who legitimately want to > contact the relay operator who aren’t spammers to contact me? If they want to do it automatically: yes if they do it manually: probably not -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu signature.asc Description: OpenPGP digital signature ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Contact info obfscation
Terribly sorry, one last question I just thought of. Will that make it more difficult for people who legitimately want to contact the relay operator who aren’t spammers to contact me? Thank you. From: Keifer Bly Sent: Saturday, June 30, 2018 7:36 PM To: tor-relays@lists.torproject.org Subject: RE: [tor-relays] Contact info obfscation So I just changed my torrc file contactinfo to Keifer dot bly at gmail dot com Do I need to restart my relay for this to take effect? Will doing this make it more difficult for spammers to reach my address? Thanks. From: nusenu Sent: Saturday, June 30, 2018 12:54 PM To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] Contact info obfscation Keifer Bly: > Ok. So if that’s not being used anymore, what is the “ContactInfo: “ > string used for? ContactInfo is not used by (past) Tor Weather implementations but it is still very much useful when people want to reach the operator. Some potential reasons to reach the operator are: - misconfiguration - security issues - disfunctional relay > Is there still a way I can subscribe my email > address to tor project for such things? as I say in my last email there is no such service (Tor Weather) replacement (yet) -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Contact info obfscation
So I just changed my torrc file contactinfo to Keifer dot bly at gmail dot com Do I need to restart my relay for this to take effect? Will doing this make it more difficult for spammers to reach my address? Thanks. From: nusenu Sent: Saturday, June 30, 2018 12:54 PM To: tor-relays@lists.torproject.org Subject: Re: [tor-relays] Contact info obfscation Keifer Bly: > Ok. So if that’s not being used anymore, what is the “ContactInfo: “ > string used for? ContactInfo is not used by (past) Tor Weather implementations but it is still very much useful when people want to reach the operator. Some potential reasons to reach the operator are: - misconfiguration - security issues - disfunctional relay > Is there still a way I can subscribe my email > address to tor project for such things? as I say in my last email there is no such service (Tor Weather) replacement (yet) -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Contact info obfscation
Keifer Bly: > Ok. So if that’s not being used anymore, what is the “ContactInfo: “ > string used for? ContactInfo is not used by (past) Tor Weather implementations but it is still very much useful when people want to reach the operator. Some potential reasons to reach the operator are: - misconfiguration - security issues - disfunctional relay > Is there still a way I can subscribe my email > address to tor project for such things? as I say in my last email there is no such service (Tor Weather) replacement (yet) -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu signature.asc Description: OpenPGP digital signature ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Contact info obfscation
Ok. So if that’s not being used anymore, what is the “ContactInfo: “ string used for? Is there still a way I can subscribe my email address to tor project for such things? Thank you. > On Jun 30, 2018, at 8:40 AM, nusenu wrote: > > > > Keifer Bly: >> What I mean is tor project, the system that sends an email when it >> notices that a relay has been unavailable for 48 hours or the relays >> not working right. > currently there is no such service as far as I know, > in the past (when Tor Weather still existed) they didn't use > ContactInfo data to send emails, but operators would subscribe and submit > their email address via a website, subscription email addresses weren't > public (unlike ContactInfo) > -- > https://twitter.com/nusenu_ > https://mastodon.social/@nusenu > > ___ > tor-relays mailing list > tor-relays@lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Contact info obfscation
Keifer Bly: > What I mean is tor project, the system that sends an email when it > notices that a relay has been unavailable for 48 hours or the relays > not working right. currently there is no such service as far as I know, in the past (when Tor Weather still existed) they didn't use ContactInfo data to send emails, but operators would subscribe and submit their email address via a website, subscription email addresses weren't public (unlike ContactInfo) -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu signature.asc Description: OpenPGP digital signature ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Contact info obfscation
What I mean is tor project, the system that sends an email when it notices that a relay has been unavailable for 48 hours or the relays not working right. Sent from my iPhone > On Jun 30, 2018, at 6:02 AM, nusenu wrote: > > >> I am aware that email addresses used in the “ContactInfo: “ in a >> relay operator’s torrc file is publicly listed on the tor relay. >> However, what I am wondering, is there a way to obfuscate the email >> address on >> http://torstatus.blutmagie.de/router_detail.php?FP=db1af6477bb276b6ea5e72132684096eee779d30 >> to appear as “k—f---...@g-ail.com” or something of the sorts, while >> keeping the real email address readable for tor cloud > > I'm not sure I know what you mean with "tor cloud" can you > describe what you mean? > > >> It seems like obfuscating the email address in the torrc file >> would cause it to become unreadable to the tor project as well. > > the contact info string will be published the same way you put it in your > torrc configuratin file if you want to make it harder for email address > harvesters / spammers to send you email you can obfuscate > it however you like. > > in the following spec I'm using a specific way to obfuscate the "@" > sign with a "[]" so I can process email addresses automatically, > but it is up to you how you obfuscate your address > > https://github.com/nusenu/ContactInfo-Information-Sharing-Specification#email > > > -- > https://twitter.com/nusenu_ > https://mastodon.social/@nusenu > > ___ > tor-relays mailing list > tor-relays@lists.torproject.org > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
Re: [tor-relays] Contact info obfscation
> I am aware that email addresses used in the “ContactInfo: “ in a > relay operator’s torrc file is publicly listed on the tor relay. > However, what I am wondering, is there a way to obfuscate the email > address on > http://torstatus.blutmagie.de/router_detail.php?FP=db1af6477bb276b6ea5e72132684096eee779d30 > to appear as “k—f---...@g-ail.com” or something of the sorts, while > keeping the real email address readable for tor cloud I'm not sure I know what you mean with "tor cloud" can you describe what you mean? > It seems like obfuscating the email address in the torrc file > would cause it to become unreadable to the tor project as well. the contact info string will be published the same way you put it in your torrc configuratin file if you want to make it harder for email address harvesters / spammers to send you email you can obfuscate it however you like. in the following spec I'm using a specific way to obfuscate the "@" sign with a "[]" so I can process email addresses automatically, but it is up to you how you obfuscate your address https://github.com/nusenu/ContactInfo-Information-Sharing-Specification#email -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu signature.asc Description: OpenPGP digital signature ___ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
