Re: [tor-talk] Wikimedia and Tor

2014-10-02 Thread Andrew Lewman
On 2014-10-01 09:57, Derric Atzrott wrote: About once a year the topic of Tor comes up on Wikimedia's technical mailing list. I recently raised the topic again. For those who aren't aware of the situation, currently Wikimedia blocks all edits from Tor users. We are trying to find a way that

Re: [tor-talk] Wikimedia and Tor

2014-10-02 Thread Derric Atzrott
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 With Tor soft-blocked, this problem goes away. What am I missing? I'm not sure if you are saying Tor is soft-blocked, so what is the problem? or If we soft-blocked Tor there would be no problem. So I'm going to attempt to address both. ==Tor is

Re: [tor-talk] Wikimedia and Tor

2014-10-02 Thread Derric Atzrott
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thanks for joining the list and starting the conversation. Are there data sets or statistics which quantify tor usage at wikimedia? It might help to frame the discussion if we know the scale of the tor usage or the problem we're trying to

Re: [tor-talk] Wikimedia and Tor

2014-10-02 Thread Mirimir
On 10/02/2014 06:52 AM, Derric Atzrott wrote: SNIP I liked the GPG idea, and brought it back to Wikitech-l. I'll let you guys know if anyone there finds a way to completely break it. There's another possibility that's probably easier to implement and test, but isn't so broadly useful as a

Re: [tor-talk] Wikimedia and Tor

2014-10-02 Thread Derric Atzrott
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I liked the GPG idea, and brought it back to Wikitech-l. I'll let you guys know if anyone there finds a way to completely break it. There's another possibility that's probably easier to implement and test, but isn't so broadly useful as a

Re: [tor-talk] Wikimedia and Tor

2014-10-02 Thread Mirimir
On 10/02/2014 06:52 AM, Derric Atzrott wrote: SNIP I liked the GPG idea, and brought it back to Wikitech-l. I'll let you guys know if anyone there finds a way to completely break it. I've asked about this on gnupg-users, and have been disabused of the notion. I get that it's too hard to

Re: [tor-talk] Wikimedia and Tor

2014-10-02 Thread Mirimir
On 10/02/2014 01:15 PM, Mirimir wrote: On 10/02/2014 06:52 AM, Derric Atzrott wrote: SNIP I liked the GPG idea, and brought it back to Wikitech-l. I'll let you guys know if anyone there finds a way to completely break it. I've asked about this on gnupg-users, and have been disabused of

Re: [tor-talk] Wikimedia and Tor

2014-10-02 Thread Jann Horn
On Thu, Oct 02, 2014 at 01:15:32PM -0600, Mirimir wrote: What's needed, I think, is challenge-based (as opposed to reputation-based) proof-of-work that's very difficult to cheat. That sounds like Bitcoin, doesn't it? Yes, but a bit more like Hashcash given the usecase: http://www.hashcash.org/

[tor-talk] Wikimedia and Tor

2014-10-01 Thread Derric Atzrott
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Good day all, About once a year the topic of Tor comes up on Wikimedia's technical mailing list. I recently raised the topic again. For those who aren't aware of the situation, currently Wikimedia blocks all edits from Tor users. We are trying to

Re: [tor-talk] Wikimedia and Tor

2014-10-01 Thread z9wahqvh
On Wed, Oct 1, 2014 at 9:57 AM, Derric Atzrott datzr...@alizeepathology.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I was curious if any of you here might have any ideas? How can we verify that a person is who they say they are, and block them if they are abusive in such a

Re: [tor-talk] Wikimedia and Tor

2014-10-01 Thread Mirimir
On 10/01/2014 12:10 PM, Derric Atzrott wrote: SNIP Even imposing a nontrivial cost for creating accounts (say 10 BTC) would not help. Determined adversaries would pay it. And of course, that would exclude numerous innocents who wouldn't or couldn't pay. Yeah, I was just listing off some

Re: [tor-talk] Wikimedia and Tor

2014-10-01 Thread Derric Atzrott
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Is there any mechanism available by which, e.g., known trusted editors could request Tor access for specific login credentials/accounts, and Tor only allowed for those accounts? This would also help to address Derric's interest in allowing users

Re: [tor-talk] Wikimedia and Tor

2014-10-01 Thread Greg Curcio
hi people i am unfamiliar with this stuff. how many people can see/ read this here? Greg Curcio On Wed, Oct 1, 2014 at 11:34 AM, Mirimir miri...@riseup.net wrote: On 10/01/2014 12:10 PM, Derric Atzrott wrote: SNIP Even imposing a nontrivial cost for creating accounts (say 10 BTC) would

Re: [tor-talk] Wikimedia and Tor

2014-10-01 Thread z9wahqvh
On Wed, Oct 1, 2014 at 2:42 PM, Derric Atzrott datzr...@alizeepathology.com wrote: There is a mechanism for this. It is called an IP Block Exemption (IPBE), sadly it is very hard to get because people fear its abuse so much. I have actually only just got it after I brought up the topic of

Re: [tor-talk] Wikimedia and Tor

2014-10-01 Thread Derric Atzrott
hi people i am unfamiliar with this stuff. how many people can see/ read this here? The logs for this mailing list are publicly available. Don't say anything you don't want the world to know. Thank you, Derric Atzrott -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe

Re: [tor-talk] Wikimedia and Tor

2014-10-01 Thread Derric Atzrott
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 this is extremely interesting--thank you! but would this work for Tor, since presumably the IPs that are blocked are those of the exit relays? I am proposing keeping the IPs blocked but opening them up for certain logged-in accounts--I don't

Re: [tor-talk] Wikimedia and Tor

2014-10-01 Thread harmony
On 2014-10-01 13:57, Derric Atzrott wrote: Good day all, Hi, Thanks for bringing this up once more! The topic seems to recur even more frequently than once a year around here. Two recent and relevant discussions: Your colleague Lane Rasberry started a similar thread earlier this year and

Re: [tor-talk] Wikimedia and Tor

2014-10-01 Thread z9wahqvh
On Wed, Oct 1, 2014 at 3:50 PM, Derric Atzrott datzr...@alizeepathology.com wrote: Did that explain it any better? it did. very clear now. sorry for not grokking it better first time around. -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go

Re: [tor-talk] Wikimedia and Tor

2014-10-01 Thread Ted Smith
On Wed, 2014-10-01 at 15:50 -0400, Derric Atzrott wrote: this is extremely interesting--thank you! but would this work for Tor, since presumably the IPs that are blocked are those of the exit relays? I am proposing keeping the IPs blocked but opening them up for certain logged-in

Re: [tor-talk] Wikimedia and Tor

2014-10-01 Thread Derric Atzrott
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 it did. very clear now. sorry for not grokking it better first time around. No worries. Such things happen; I could have been more clear. Thanks for bringing this up once more! The topic seems to recur even more frequently than once a year