Re: Answer by perfect-privacy.com Re: perfect-privacy.com, Family specifications, etc.

2010-05-20 Thread Sebastian Hahn
All that would do would be to say to all clients, Don't include this node in the same circuit as any of the blutmagie nodes. How would that be an attack? I can list all the nodes I don't control... *** To unsubscribe,

Re: Answer by perfect-privacy.com Re: perfect-privacy.com, Family specifications, etc.

2010-05-20 Thread Scott Bennett
On Thu, 20 May 2010 08:23:34 +0200 (CEST) Sebastian Hahn m...@sebastianhahn.net wrote: All that would do would be to say to all clients, Don't include this node in the same circuit as any of the blutmagie nodes. How would that be an attack? I can list all the nodes I don't

Re: perfect-privacy.com, Family specifications, etc.

2010-05-20 Thread The23rd Raccoon
On Thu, May 20, 2010 at 5:47 AM, Scott Bennett benn...@cs.niu.edu wrote:     On Thu, 20 May 2010 00:40:42 -0400 =?utf-8?Q?Jerzy_=C5=81ogiewa?= jerz...@interia.eu wrote: I apologize for altering the nature of this thread, but can someone = please summarize what this discussion is about? Who is =

Re: perfect-privacy.com, Family specifications, etc.

2010-05-20 Thread Scott Bennett
On Thu, 20 May 2010 07:37:17 + The23rd Raccoon the.raccoo...@gmail.com wrote: On Thu, May 20, 2010 at 5:47 AM, Scott Bennett benn...@cs.niu.edu wrote: =A0 =A0 On Thu, 20 May 2010 00:40:42 -0400 =3D?utf-8?Q?Jerzy_=3DC5=3D81og= iewa?=3D jerz...@interia.eu wrote: I apologize for altering

Re: Answer by perfect-privacy.com Re: perfect-privacy.com, Family specifications, etc.

2010-05-20 Thread Jim
Roger Dingledine wrote: On Mon, May 17, 2010 at 09:44:21PM +0200, Moritz Bartl wrote: Original Message Subject: Re: - Medium - Tor servers, Tor community wants to disable your nodes - General Date: Mon, 17 May 2010 13:46:04 +0200 From: Perfect Privacy Administration

Re: Answer by perfect-privacy.com Re: perfect-privacy.com, Family specifications, etc.

2010-05-20 Thread Moritz Bartl
On 20.05.2010 06:25, Roger Dingledine wrote: The trouble here is that if we make family declarations one-sided, then I can tell everybody that I'm in blutmagie's family (and X's family and Y's family and Z's family and ...), and suddenly I'm influencing the path selection of other clients in a

Re: Answer by perfect-privacy.com Re: perfect-privacy.com, Family specifications, etc.

2010-05-20 Thread Oguz
On 5/20/10, Moritz Bartl t...@wiredwings.com wrote: On 20.05.2010 06:25, Roger Dingledine wrote: The trouble here is that if we make family declarations one-sided, then I can tell everybody that I'm in blutmagie's family (and X's family and Y's family and Z's family and ...), and suddenly I'm

Family specifications (was: Re: perfect-privacy.com, Family specifications, etc)

2010-05-20 Thread Moritz Bartl
On 20.05.2010 13:28, Oguz wrote: I too do not understand this. Already an evil entry node can list all nodes that it does _not_ control in its family option to try to force circuit through the nodes it controls, though it would obviously be a dead give away listing many unrelated nodes as

Re: Answer by perfect-privacy.com Re: perfect-privacy.com, Family specifications, etc.

2010-05-20 Thread Flamsmark
Though I appreciate Jim's signature proposal, that could become difficult and convoluted to implement quite quickly. I think that perfectprivacy's initial suggestion was actually quite compelling: allow ``#include'' type statements to be used in a torrc. Currently, an operator of multiple relays

Re: Family specifications (was: Re: perfect-privacy.com, Family specifications, etc)

2010-05-20 Thread andrew
On Thu, May 20, 2010 at 01:31:47PM +0200, t...@wiredwings.com wrote 0.9K bytes in 19 lines about: : From what I understand, yes, at the moment both partners have to list : each other. That's what the fuss is all about, because this becomes hard : to manage when you run a lot of nodes. Yes, this

Re: Family specifications (was: Re: perfect-privacy.com, Family specifications, etc)

2010-05-20 Thread Paul Syverson
On Thu, May 20, 2010 at 07:44:51AM -0400, and...@torproject.org wrote: On Thu, May 20, 2010 at 01:31:47PM +0200, t...@wiredwings.com wrote 0.9K bytes in 19 lines about: : From what I understand, yes, at the moment both partners have to list : each other. That's what the fuss is all about,

Re: Family specifications (was: Re: perfect-privacy.com, Family specifications, etc)

2010-05-20 Thread Flamsmark
On 20 May 2010 07:44, and...@torproject.org wrote: If Mallory lists Alice and Bob, but neither Alice nor Bob list Mallory, it's not a valid Family. Otherwise, Mallory could list every node in the network and screw everyone. Why would this screw everyone? I admit that I don't fully

Re: Family specifications (was: Re: perfect-privacy.com, Family specifications, etc)

2010-05-20 Thread Watson Ladd
On May 20, 2010, at 08:39 AM, Flamsmark wrote: On 20 May 2010 07:44, and...@torproject.org wrote: If Mallory lists Alice and Bob, but neither Alice nor Bob list Mallory, it's not a valid Family. Otherwise, Mallory could list every node in the network and screw everyone. Why would this

Re: Answer by perfect-privacy.com Re: perfect-privacy.com, Family specifications, etc.

2010-05-20 Thread Damian Johnson
The trick is that both parties need to list each other as family for this to work. As per the man page.. When two servers both declare that they are in the same 'family'... The attacker would need to be listed in every other relay's torrc for the attack you described to work. I'm pretty sure

Re: Answer by perfect-privacy.com Re: perfect-privacy.com, Family specifications, etc.

2010-05-20 Thread Damian Johnson
Oops, apologies - didn't realize this had already been answered. (a pox upon thread forking...) On Thu, May 20, 2010 at 7:03 AM, Damian Johnson atag...@gmail.com wrote: The trick is that both parties need to list each other as family for this to work. As per the man page.. When two servers

Re: Family specifications (was: Re: perfect-privacy.com, Family specifications, etc)

2010-05-20 Thread Andrew Lewman
On Thursday May 20 2010 09:39:00 Flamsmark wrote: On 20 May 2010 07:44, and...@torproject.org wrote: If Mallory lists Alice and Bob, but neither Alice nor Bob list Mallory, it's not a valid Family. Otherwise, Mallory could list every node in the network and screw everyone. Why would

Re: Family specifications (was: Re: perfect-privacy.com, Family specifications, etc)

2010-05-20 Thread Anders Andersson
On Thu, May 20, 2010 at 1:31 PM, Moritz Bartl t...@wiredwings.com wrote: On 20.05.2010 13:28, Oguz wrote: I too do not understand this. Already an evil entry node can list all nodes that it does _not_ control in its family option to try to force circuit through the nodes it controls, though it

Re: Answer by perfect-privacy.com Re: perfect-privacy.com, Family specifications, etc.

2010-05-20 Thread xiando
[snip] The trouble here is that if we make family declarations one-sided, then I can tell everybody that I'm in blutmagie's family (and X's family and Y's family and Z's family and ...), and suddenly I'm influencing the path selection of other clients in a way I shouldn't be able to. We

Re: Family specifications (was: Re: perfect-privacy.com, Family specifications, etc)

2010-05-20 Thread Scott Bennett
Oh. My. Goodness. Gracious! I go to sleep for a few hours, and the discussion descends into total confusion because a number of participants, including some tor developers, did not bother to read the proposal by Bruce from perfect-privacy.com. He did *not* propose, for example, any

Re: Answer by perfect-privacy.com Re: perfect-privacy.com, Family specifications, etc.

2010-05-20 Thread Scott Bennett
On Thu, 20 May 2010 12:31:17 +0200 Moritz Bartl t...@wiredwings.com wrote: On 20.05.2010 06:25, Roger Dingledine wrote: The trouble here is that if we make family declarations one-sided, then I can tell everybody that I'm in blutmagie's family (and X's family and Y's family and Z's family

Re: Family specifications (was: Re: perfect-privacy.com, Family specifications, etc)

2010-05-20 Thread Paul Syverson
On Thu, May 20, 2010 at 01:44:36PM -0500, Scott Bennett wrote: Oh. My. Goodness. Gracious! I go to sleep for a few hours, and the discussion descends into total confusion because a number of participants, including some tor developers, did not bother to read the proposal by Bruce from

Re: Family specifications (was: Re: perfect-privacy.com, Family specifications, etc)

2010-05-20 Thread Scott Bennett
Hi Paul, On Thu, 20 May 2010 15:12:38 -0400 Paul Syverson syver...@itd.nrl.navy.mil wrote: On Thu, May 20, 2010 at 01:44:36PM -0500, Scott Bennett wrote: Oh. My. Goodness. Gracious! I go to sleep for a few hours, and the discussion descends into total confusion because a number of

Re: Family specifications (was: Re: perfect-privacy.com, Family specifications, etc)

2010-05-20 Thread Paul Syverson
On Thu, May 20, 2010 at 02:36:01PM -0500, Scott Bennett wrote: Hi Paul, On Thu, 20 May 2010 15:12:38 -0400 Paul Syverson syver...@itd.nrl.navy.mil wrote: Your interpretation of what Bruce said makes sense. But it is not how I parsed, BelongToFamily xyz in his message. I read it the

Re: Family specifications (was: Re: perfect-privacy.com, Family specifications, etc)

2010-05-20 Thread andrew
On Thu, May 20, 2010 at 01:44:36PM -0500, benn...@cs.niu.edu wrote 4.7K bytes in 91 lines about: : including some tor developers, did not bother to read the proposal by Bruce : from perfect-privacy.com. He did *not* propose, for example, any equivalent : to #include statements. He did *not*

Re: Family specifications (was: Re: perfect-privacy.com, Family specifications, etc)

2010-05-20 Thread andrew
On Thu, May 20, 2010 at 08:50:00PM +0200, bacardic...@gmail.com wrote 1.1K bytes in 28 lines about: : Would it be possible for my to include myself in the MyFamily line? Yes. When I ran 10 nodes, this is what I did. One config for all 10 was easier to maintain than 10 unique configs. --

Re: Answer by perfect-privacy.com Re: perfect-privacy.com, Family specifications, etc.

2010-05-19 Thread Robert Marquardt
In the meantime, perfect-privacy.com should advise this list as soon as its torrc files are in compliance, while the rest of us should feel free to use the NodeFamily information I posted earlier with, apparently, the addition of 17 more node fingerprints that I missed when I grepped the

Re: perfect-privacy.com, Family specifications, etc.

2010-05-19 Thread Roger Dingledine
On Sun, May 16, 2010 at 12:45:22AM -0500, Scott Bennett wrote: The tor man page gives a not very edifying description of the NodeFamily statement. The man page says that the NodeFamily statement may be used more than once in a given torrc file. Does each use define a different Family?

Re: Answer by perfect-privacy.com Re: perfect-privacy.com, Family specifications, etc.

2010-05-19 Thread Roger Dingledine
On Mon, May 17, 2010 at 09:44:21PM +0200, Moritz Bartl wrote: Original Message Subject: Re: - Medium - Tor servers, Tor community wants to disable your nodes - General Date: Mon, 17 May 2010 13:46:04 +0200 From: Perfect Privacy Administration ad...@perfect-privacy.com

Re: perfect-privacy.com, Family specifications, etc.

2010-05-19 Thread Jerzy Łogiewa
I apologize for altering the nature of this thread, but can someone please summarize what this discussion is about? Who is perfect-privacy.com and why are they of concern to Tor users? I am having a difficult time following the threads. -- Jerzy Łogiewa -- jerz...@interia.eu

Re: Answer by perfect-privacy.com Re: perfect-privacy.com, Family specifications, etc.

2010-05-19 Thread Scott Bennett
On Thu, 20 May 2010 00:25:33 -0400 Roger Dingledine a...@mit.edu wrote: On Mon, May 17, 2010 at 09:44:21PM +0200, Moritz Bartl wrote: Original Message Subject: Re: - Medium - Tor servers, Tor community wants to disable your nodes - General Date: Mon, 17 May 2010 13:46:04

Re: perfect-privacy.com, Family specifications, etc.

2010-05-19 Thread Scott Bennett
On Thu, 20 May 2010 00:40:42 -0400 =?utf-8?Q?Jerzy_=C5=81ogiewa?= jerz...@interia.eu wrote: I apologize for altering the nature of this thread, but can someone = please summarize what this discussion is about? Who is = perfect-privacy.com and why are they of concern to Tor users? I am =

Re: perfect-privacy.com, Family specifications, etc.

2010-05-17 Thread CyberRax
While some of them appear to be guards, none is running as an exit node, so this should not be possible. Thanks for pointing that out, Paolo.  I had missed that.  However, it should not be possible to get more than one of them in any given circuit route, but because they are not grouped

Answer by perfect-privacy.com Re: perfect-privacy.com, Family specifications, etc.

2010-05-17 Thread Moritz Bartl
Hi, What I did was just file a report at the company's website. It took them only minutes to get back to me. Scott, I don't know why, but you probably didn't get their response in the first place. Original Message Subject: Re: - Medium - Tor servers, Tor community wants to

Re: perfect-privacy.com, Family specifications, etc.

2010-05-16 Thread Scott Bennett
On Sun, 16 May 2010 23:18:59 +0300 =?UTF-8?Q?ilter_y=C3=BCksel?= ilteryuk...@gmail.com top-posted (please don't do that): Isn't there any way to detect automatically if these 28 relays in same family? Why do you need configure your torrc file manually? See the MyFamily statement's

perfect-privacy.com, Family specifications, etc.

2010-05-14 Thread Scott Bennett
There is someone going by the name of perfect-privacy.com who is listed in the contact information of roughly 28 relays' descriptors with widely varying throughput capacities in the tor directory. These relays' descriptors are grouped into quite a few separate Family specifications, although