Slashdot Mirror


Tor Anonymity Network Reaches 100 Verified Nodes

James A. Y. Joyce writes "Tor is an onion routing anonymous network. It routes your data transfers through a series of encrypted links between random nodes in the network; the greater the number of nodes, the greater the anonymity afforded. To commemorate the 100th verified node in the Tor network, the EFF are putting up a request for other organisations and personal users to start up Tor nodes of their own. (Tor has been mentioned on Slashdot twice before.)"

332 comments

  1. Thoughts from a Tor user by IO+ERROR · · Score: 4, Interesting
    I've been using Tor as only a client for a while now, and I have to say that it seems maybe a bit overloaded; I ran into a LOT of latency on interactive sessions; anywhere from 3 to 30 seconds or more would be normal. It could just be that intermediate routers were having trouble, but it's not yet something I can use daily for interactive sessions.

    Normal web browsing is fine, albeit quite a bit slower than you're used to. Then again, that's the price of anonymity, I suppose.

    As far as contributing, if I had the bandwidth to spare, I'd set up a Tor server and contribute. I do have Tor linked from my web site, though, for what that's worth.

    --
    How am I supposed to fit a pithy, relevant quote into 120 characters?
    1. Re:Thoughts from a Tor user by Beryllium+Sphere(tm) · · Score: 4, Interesting

      This is the same problem Mixmaster has, along with any anonymizing network that hides you by mixing you with a crowd.

      The more people you mix with, the longer you have to wait for enough to show up to confuse an attacker. If you had zero latency,then timing alone would identify your traffic.

    2. Re:Thoughts from a Tor user by Anonymous Coward · · Score: 5, Informative

      Tor isn't designed to shield you from timing attacks (read the Tor website - they specifically disclaim this).

    3. Re:Thoughts from a Tor user by cortana · · Score: 1

      It seems to have gotten a lot slower recently, now that idiots are routing BitTorrent traffic through the network.

    4. Re:Thoughts from a Tor user by jp10558 · · Score: 0

      mmm, how does I2P compare for running data intensive services vs TOR? I was always under the impression that TOR was basically browsing only...

      --
      Opera, Proxomitron-Grypen,GPG 0x0A1C6EE3
    5. Re:Thoughts from a Tor user by Suddenly_Dead · · Score: 1

      Perhaps it's because bittorrent users have begun to use/abuse Tor? The network can't handle that type of bandwidth.

    6. Re:Thoughts from a Tor user by sp0rk173 · · Score: 1

      No, tor is for anything you can use a proxy for basically. I use it for IRC, which is think is a larger threat to my privacy than webbrowsing

    7. Re:Thoughts from a Tor user by X0563511 · · Score: 1

      Unfortunatly places with non-broken proxy scanners kick you out. Freenode.net refuses my connection most of the time when I try to use Tor.

      Annoying.

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    8. Re:Thoughts from a Tor user by Anonymous Coward · · Score: 0

      Well I only use tor for webrowsing. Running hidden tor services is futile, there is just too much latency and it lacks the needed interfaces and such to really make such activities worthwhile.

      If the eff is really looking to support development of something like tor, they should pick i2p. It already works far better than even the latest tor development releases. Running and browsing websites, irc servers, email, nntp, bittorrent and other filesharing on the i2p network is already fast and works very well. The i2p network needs more in and outproxies though. There is one downside to i2p it doesn't yet scale large enough (better scaling coming as of version 0.6). Also don't let the version numbering fool you, i2p is already far ahead of tor's development, certainly in features and client software. I look forward to the day I can stop using tor for webrowsing in favor of i2p for everything.

      If the eff really cares they could help get i2p's udp networking developed and working. Besides that there are many other ways they could contribute to the i2p project. So far the only thing truely better about tor is it's exposure, the eff has advertised it all too well. Yeah I know i2p has been mentioned before in reply's to previous tor posts. Some latest news about i2p, network has over 200 nodes and recently a gnutella client has been ported to i2p which seems to work great.

      Also don't forget about other great projects like entropy (yes it is still around and it's network is alive and kicking, it just needs more users and better client applications).

    9. Re:Thoughts from a Tor user by exhilaration · · Score: 1

      I thought they blocked all P2P protocols, especially BT.

  2. Sooo... by Anonymous Coward · · Score: 4, Insightful

    Something "bad" gets onto the network. Something that the authorities don't want out there.

    The authorities find out.

    The network has 100 nodes.

    The authorities arrest the operators of all 100 nodes.

    ....profit?

    1. Re:Sooo... by Anonymous Coward · · Score: 2, Insightful

      Something bad gets out onto the Internet. Something that the authorities don't want out there.

      The authorities find out.

      The internet has a gagiliion nodes.

      The authorities arrest the operators of all gagillion nodes.

      In this case, if the network is public, aren't these nodes just acting as an ISP or pipe rather than an end user. You don't go arresting an ISP because of the pirating commited by one of its users (Sure, you might try get the details of that end user from them).

    2. Re:Sooo... by Anonymous Coward · · Score: 0

      They're not going to arrest the operators of all 100 nodes because it would cost too much. I'd think it would be hard to make the charges stick, as well, but IANAL.

    3. Re:Sooo... by dirtyhippie · · Score: 1

      With the EFF backing tor, you don't really have to worry about this scenario - they'd likely take the brunt of any legal suit, and I would imagine would provide legal assistance to any user of the tor network that got sued.

    4. Re:Sooo... by Anonymous Coward · · Score: 3, Funny

      They're not going to arrest the operators of all 100 nodes because it would cost too much. I'd think it would be hard to make the charges stick, as well, but IANAL.

      That would certainly make detective novels quicker. "The murderer had to be one of the 12 people in this room... so rather than waste any more time on it we've decided to arrest you all."

    5. Re:Sooo... by cheaphomemadeacid · · Score: 1

      good thing this planet is stuffed with different countries how can barely agree on anything these days... doubt they'll make a world-wide coalition to destroy the big and mighty Tor and his hammer :)

    6. Re:Sooo... by Anonymous Coward · · Score: 0

      But, in the UK at least, that can't happen - as they cannot get anywhere without actually knowing the individual who committed the offence.

      You cannot punish a group of people for the actions of one, (it is in the Universal Declaration of Human Rights) and if you did you would be a dictatorship/fascist country...

    7. Re:Sooo... by Anonymous Coward · · Score: 0

      Which authorities?

      The internet is international. Law enforcement is not.

    8. Re:Sooo... by Mad+Bad+Rabbit · · Score: 3, Insightful
      That would certainly make detective novels quicker. "The murderer had to be one of the 12 people in this room... so rather than waste any more time on it we've decided to arrest you all."

      More like, "All 12 of you deliberately helped to conceal the murderer's identity, so we'll arrest you all for aiding and abetting, conspiracy, and obstruction of justice.

      (but IANAL...)

      --
      >;k
    9. Re:Sooo... by masklinn · · Score: 0, Offtopic

      'cept that it wouldn't be deliberate at all in this case...

      --
      "The way we can tell it's C# instead of Haskell is because it's nine lines instead of two." -- wadler
    10. Re:Sooo... by tha_mink · · Score: 2, Funny

      With the EFF backing tor, you don't really have to worry about this scenario - they'd likely take the brunt of any legal suit, and I would imagine would provide legal assistance to any user of the tor network that got sued.

      Yeah, it's not like the EFF has ever lost a lawsuit.

      --
      You'll have that sometimes...
    11. Re:Sooo... by deetsay · · Score: 2, Funny

      "lol you're all under arrest"
      "omg what's the charge?"
      "stfu, ianal"

      --
      "The looser the waistband, the deeper the quicksand", or so I have read.
    12. Re:Sooo... by smoany · · Score: 3, Informative

      You seem to be using the Sandra-Bullock (read: incorrect) definition of network.

      Something "bad" gets onto the network.

      First of all, the tor network is for redirect of data transfer only, not for storage. This isn't a P2P kind of service. There's no FS involved. Files don't get onto the network, they pass through it.

      The network has 100 nodes.

      Secondly, the network has 100 dedicated server nodes, and god-knows how many clients. The servers are not necessarily the origin or destination of the packets in question... so... where does the roundup come in?

      Unless you are implying that the government would have no qualms about rounding up a network of completely legal information redirecting nodes for the crime of potentially a client logging on to one of the servers, I'd say that you're wrong. And I'd also say that the government could not do such a thing. There's absolutely no legal precedent (IANAL) for that.

    13. Re:Sooo... by westlake · · Score: 1
      'cept that it wouldn't be deliberate at all in this case...

      But it can become deliberate if you continue to obstruct an investigation after being warned of the danger.
      You can't "take the fifth," defy a search warrant, if there is reason to believe that criminal traffic is being routed through your node, or relevant information stored on your hard drive.

    14. Re:Sooo... by Anonymous Coward · · Score: 0

      There's no need for one to do this, though. Just let them do/take whatever they want. They would have to compromise too many nodes to make it worthwhile.

    15. Re:Sooo... by westlake · · Score: 1
      They would have to compromise too many nodes to make it worthwhile.

      I am not convinced that 100 nodes would be out of reach of the FBI, which has co-ordinated the investigation and arrest of hundreds of suspects and fugitives in a single campaign. But, if even as few as ten nodes are compromised, who will trust the remaining ninety?

    16. Re:Sooo... by Baricom · · Score: 1

      There's absolutely no legal precedent (IANAL) for that.

      IANAL either, but do you believe the government does things if and only if it has the legal authority to? For example, do you think every action of the military in Guantanamo Bay is in complete compliance with U.S. law?

  3. Wrong URL by Anonymous Coward · · Score: 5, Informative

    Should be tor.eff.org.

    1. Re:Wrong URL by Anonymous Coward · · Score: 0

      I hope Slashdot will be reimbursing the owner of tor.org for his bandwidth bill this month

    2. Re:Wrong URL by tsadi · · Score: 1

      i was wondering why the linked to page had nothing about TOR but had baby pics and running schedules ... his site is still up though as of this posting

    3. Re:Wrong URL by Monoman · · Score: 2, Funny

      Maybe /. should cover this guys hosting bill this month?

      --
      Keep the Classic Slashdot.
  4. I guess the question is by Anonymous Coward · · Score: 0

    At least it isn't as bad as Freenet, right?

    1. Re:I guess the question is by Irashtar · · Score: 1

      Hm, I could swear they ate onions as well.

  5. relationship to TOS by Anonymous Coward · · Score: 3, Interesting

    I'd be interested in seeing where this falls on the TOS of internet providers. I have a fat unmontiored (non-student) university pipe.... ;)

    Also, the imageshack links aren't working...?

    1. Re:relationship to TOS by IO+ERROR · · Score: 2, Informative

      The image graphs can be found here.

      --
      How am I supposed to fit a pithy, relevant quote into 120 characters?
    2. Re:relationship to TOS by larytet · · Score: 1

      may i invite you to participate in testing of open source project Rodi ICQ#: 82857660

  6. What about the jerks? by drdink · · Score: 5, Informative

    While I think Tor is a great idea, I also think it makes it way too easy to be a bad netizen.
    With Tor, you can flood sites and services such as IRC, web boards, instant messaging, and so forth. You could possibly use it to spam as well. All of this would be done by seemingly random IP addresses. In essence, it is an inflated case of Open Proxy Syndrome. The only remedy that the victims have is to block all Tor sites by using some of the RBLs that exist for doing just that. I'd really like to allow legit use of Tor on my services, but there are some jackasses that flood from within Tor that make it impossible.
    With anonymity comes a lack of recourse. I understand that this is the point of anonymity and Tor, but it isn't always good.

    --
    Beware, Nugget is watching... See?
    1. Re:What about the jerks? by SlashdotMeNow · · Score: 4, Interesting

      Well sure, but sites that are likely targets of DDOS attacks tends to be larger, more commercial sites. Microsoft.com or Yahoo.com or Ebay or whoever CAN disallow Tor traffic (using blacklists) without really inconveniencing a significant portion of their users. And that's fine for me - why would I want to hide the fact that I'm downloading patches from MS? However if I'm looking at sites that may flag my IP with the CIA or FBI or whoever, it's likely that those sites will be fairly low on the list of likely DDOS targets. So it's not really and issue for me. Maybe others out there has different ideas of how they would like to use an anonymous browser, but I'm happy with what it is. In short: Meh.

    2. Re:What about the jerks? by Rosco+P.+Coltrane · · Score: 4, Insightful

      With Tor, you can flood sites and services such as IRC, web boards, instant messaging, and so forth. You could possibly use it to spam as well. All of this would be done by seemingly random IP addresses. In essence, it is an inflated case of Open Proxy Syndrome.

      I'm sure dissidents in the PRC or other dictatorships, who look forward to a way of publishing things that go against their governments without losing their heads, are happy to hear you're worried about IRC crapflooding...

      That's the price of freedom: preserving it comes at a cost, something citizens in the America of the DHS should remember too one of these days, incidentally.

      --
      "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
    3. Re:What about the jerks? by gbulmash · · Score: 3, Insightful
      Have to agree here. I don't want to sound like an RIAA or MPAA lawyer, but I see like 100 methods of abusing anonymity for each valid reason to have anonymity.

      Aside from stuff like rape victims posting to support group boards with anonymity (one of the justifications people used for the old anon.penet.fi anonymizers) or protecting whistle blowers, I'm not getting the need for a public anonymizing network or how it will benefit us more than it hurts us.

      What stops all sorts of jerks from trying to abuse it for spam, slander, harrassment, hacking, etc.? And if there are no safeguards, then how does the benefit of this outweigh the harm?

      Seems to me like a bunch of geeks doing something because it can be done and worrying about the consequences later.

      - Greg (who once used the anon.penet.fi server to post alt.personals ads from "Heddy", a disembodied head looking for people to chat with after the scientists left the lab for the night)

    4. Re:What about the jerks? by Anonymous Coward · · Score: 0

      "By being against allowing free action, you are against freedom."

      You forgot to add: "...and with the terrorists."

    5. Re:What about the jerks? by Hatta · · Score: 4, Insightful

      That's just not true. The people involved with
      shady websites are often (but not always) shady
      themselves. You get a kid who's ego is tightly
      wrapped up with, say, admining a board then there's
      some spat and he's ousted. Now he doesn't have
      anything better to do than DDOS the site and get
      whatever satisfaction that can give him.

      --
      Give me Classic Slashdot or give me death!
    6. Re:What about the jerks? by geekboy642 · · Score: 1

      Well sure, if by people you mean a fourteen-year-old and his army of Win-zombies, and by fight back you mean trying to settle a grudge over being modded down.

      And yeah, you forgot "terrists!"

      --
      Just another "DOJ fascist authoritarian totalitarian bootlicker" -- Zeio
    7. Re:What about the jerks? by Anonymous Coward · · Score: 0

      There's another problem too - what it's mostly used for. If you pirate movies/music using bittorrent or whatever, the chances of you being caught are pretty much none, so there's no real reason to use Tor for that sort of thing.

      However, if you go on the net and use it to get child porn (or something similarly disgusting), or use it to trade in things like credit card details, then you have a much greater chance of being caught. This is where Tor comes in. You're all going to rant at me and mod me down for this, but it's true - anyone who requires that level of anonymity is almost certainly doing something seriously wrong.

    8. Re:What about the jerks? by Anonymous Coward · · Score: 0

      Are you talking about Michael Sims?

    9. Re:What about the jerks? by Anonymous Coward · · Score: 0

      Shouldn't ya be doin' somethin' 'bout them Duke boys?

      I ain't payin' ya t' spend ya time jawin' on these heah forums.

      Git on out there an' git them Dukes or I'll be givin' yer job t' Cletus.

    10. Re:What about the jerks? by OverlordQ · · Score: 1

      No, No, and No.

      Myself being in a gaming clan who has a . . . reputation, getting a DDoS is pretty regular even though we're not large, nor commercial.

      --
      Your hair look like poop, Bob! - Wanker.
    11. Re:What about the jerks? by interiot · · Score: 1
      Anonymity isn't always good, and anonymity isn't always bad. Yes, there's some tension here, but the solution isn't that difficult: we simultaneously need technical measures to ensure anonymity in some circumstances, and we also need technical measures to enhance verification of identity in others. The same internet can and SHOULD support both non-anonymous blog comments, and at the same time allow chinese dissidents to post anonymously to other areas of the internet.

      Anonymous and non-anonymous postings can co-exist without threatening each other, using only technical means. There is no need for law to interfere in this area of the internet.

      Email was originally conceived to be semi-anonymous. Some people now wish to be able to receive identity-verified email. We shouldn't force all email to be verified, but we should at least give people the option of receiving non-anonymous email.

    12. Re:What about the jerks? by Kidbro · · Score: 2, Insightful

      I'm sure dissidents in the PRC or other dictatorships, who look forward to a way of publishing things that go against their governments without losing their heads, are happy to hear you're worried about IRC crapflooding...

      - IRC crapflooding is a form of DoS attack.
      - DoS attack renders the forum to which they are applied practically useless (thus its name - Denial of Service).
      - Practically any internet base publishing format is vulnerable to DoS attacks.
      - Dissidents in the PRC or other dictatorships won't be able to publish anything while their choice of publishing format has been rendered practically useless.

      Tell me again, why should they not be worried about IRC crapflooding?

      For the record: I don't really agree with GP, and I think Tor is a very good idea. I just want to point out that your logic is flawed (or non existant!).

    13. Re:What about the jerks? by Anonymous Coward · · Score: 0

      You get a kid who's ego is tightly
      wrapped


      "whose".

      Also, please let the textbox do your line-wrapping for you.

    14. Re:What about the jerks? by Anonymous Coward · · Score: 0

      They're too wrapped up with if they could, they didn't stop to think if they should! Now they've patented it, packaged it, and slapped it on a plastic lunch box and they want to give it away!

    15. Re:What about the jerks? by Anonymous Coward · · Score: 5, Insightful

      There are hundreds of methods for abusing cars as well. I could drive my car through a crowded flea market every Tuesday wearing sunglasses and using stolen license plates. That's both abusive and anonymous. But it's not a reason to take away cars. Or sunglasses. Or license plates. Or the screwdrivers used to steal and install license plates. Or flea markets. Neither is potential abuse a reason to take away anonymity.

    16. Re:What about the jerks? by Anonymous Coward · · Score: 0

      "Greg (who once used the anon.penet.fi server to post alt.personals ads from "Heddy", a disembodied head looking for people to chat with after the scientists left the lab for the night)"

      That was you? Why didn't you return my phone calls?

    17. Re:What about the jerks? by TheoMurpse · · Score: 3, Insightful

      Assume that no one can DoS the entire internet for a second. Thus, a censored people, prior to Tor, had no recourse of action to speak their mind safely. After Tor, they have a chance (remember, we assumed that no one can DoS the entire internet!).

      I posit that, by stating that any forum a Chinese person would join would be DoSed, you made the assumption that the entire internet can be DoSed simultaneously, bringing the entire internet crashing down. Now doesn't that sound a bit silly?

    18. Re:What about the jerks? by CableModemSniper · · Score: 1

      - Greg (who once used the anon.penet.fi server to post alt.personals ads from "Heddy", a disembodied head looking for people to chat with after the scientists left the lab for the night)

      You bastard. You stood me up!

      --
      Why not fork?
    19. Re:What about the jerks? by pi_rules · · Score: 1
      Aside from stuff like rape victims posting to support group boards with anonymity (one of the justifications people used for the old anon.penet.fi anonymizers) or protecting whistle blowers, I'm not getting the need for a public anonymizing network or how it will benefit us more than it hurts us.
      When the time comes that we need an anonymous network it will be too late to build it. It doesn't look very beneficial now, but when/if it ever is it will be invaluable.
    20. Re:What about the jerks? by Illserve · · Score: 1

      but I see like 100 methods of abusing anonymity for each valid reason to have anonymity.

      It's not about numbers. Those few reasons valid reasons are far more important for humanity as a whole than the huge number of potential abuses.

    21. Re:What about the jerks? by Anonymous Coward · · Score: 0

      Tor admins can still ID you.

    22. Re:What about the jerks? by Woy · · Score: 1

      Your concerns are addressed in the FAQ. And I can not thing of a single "reason to have anonymity" for each of your "100 methods of abusing anonymity". Its exactly for the reasons we can't think of that we need it.

      --
      "If God created us in his own image we have more than reciprocated." - Voltaire
    23. Re:What about the jerks? by NoMoreNicksLeft · · Score: 1

      What stops all sorts of jerks from trying to abuse it for spam

      Anyone who wants to use anonymity but would ever reply to spam, is the biggest fool of them all. Replying to spam, which might be tracked down to the individual message, decloaks you in the most dangerous way possible.

      So, assuming that people are aware of this, and assuming they are smart enough to want anonymity, spammers would starve trying to spam anonymous people. I do wonder if it's true that "if people stopped buying, they'd stop spamming", but if that is the case...

      Now, this doesn't stop spammers from abusing Tor to spam regular joe retards on the internet proper. And this is why an out-proxying network like Tor is poorly designed.

      slander, harrassment

      If we do get the perfect anonymous network, drop off the internet proper, start lurking there. You'll be anonymous, and no one will be able to harrass you there.

      hacking

      There are solutions to this too.

    24. Re:What about the jerks? by Anonymous Coward · · Score: 0

      I'd really like to allow legit use of Tor on my services, but there are some jackasses that flood from within Tor that make it impossible.

      there's nothing stopping you from blindly blocking access to your own servers; however in most cases, that'd probably be just an overreaction.

      there are hundreds, if not thousands, of publically accessible proxys and anonymous surfing tools besides tor. you'd likely spend more time trying to keep your filter or block lists up-to-date than you would dealing with any mess left behind if you didn't bother.

      you could set up multi-tiered authentication for whatever services you needed to.

      for instance. you run a web blog or wiki that allows anonymous postings. you could easily disallow anon postings from users coming in via tor exit nodes or other anon services, while not restricting the anon posting privs to others.

      note that tor's default configuration disables outgoing port 25 traffic. it is up to an end node to enable it if they wanted to (deal with the potential flood of abuse emails).

      read more at tor's faq: http://wiki.noreply.org/noreply/TheOnionRouter/Tor FAQ#head-ee021d915c36011fbd7dd70bd922b14d3aaed95a

      besides tor's anon features (and using privoxy to scrub out the junk); tor has the added benefit of an encrypted connection from client to the tor 'network' (see http://tor.eff.org/overview.html) meaning it's a nice added layer of web security when you're connected to the web via a wireless connection, whether it's a home network, your isp connection, or you're at a hotspot somewhere; especially considering the number of sites and services out there that don't use SSL at all, not even for authentication.

    25. Re:What about the jerks? by Edward+Faulkner · · Score: 1

      You could possibly use it to spam as well.

      Every Tor node sets its own exit policy. But the default policy forbids any outbound connections on port 25.

      So yes, you can become a spam relay. But it takes extra effort, and as of now there are no Tor nodes that actually allow it.

      Exit policies are quite nice for other reasons too. If you want to just carry internal traffic and never expose yourself as an exit or entrance point, you can do that. If you want to restrict what kinds of outbound traffic you're willing to carrying, you can do that too.

      --
      "The danger is not that a particular class is unfit to govern. Every class is unfit to govern." - Lord Acton
    26. Re:What about the jerks? by Anonymous Coward · · Score: 0

      D00D, You are right. Fools with botnets are as likely to DDOS a random IP address as a specific target. You don't think these 13 year olds are sitting around DDOSing their school principle, and any other random party that is in the wrong place in the wrong time. I have been in these channels on irc, and they'll ddos an ip address on the strangest of whims.

    27. Re:What about the jerks? by smoany · · Score: 0, Troll

      There are not hundreds of methods for abusing cars per legitimate method for using them (which was the initial context of the poster.

      You may say "but I can come up with thousands of (outlandish) scenarios of how to abuse cars for ever legitimate use."

      Bravo. You have a good imagination. Seriously though, with any technology/freedom/right, one has to weigh the legitimate uses versus the illigitimate uses. It's a relatively dimple equation if you're a utilitarianist:

      Sum(percentage of usage on good use 'i' * "goodness" of use 'i') - Sum(percentage of usage on bad use 'j' * "badness" of use 'j').

      If the result is positive, keep the tech/freedom. If it's negative, ditch it.

      For sunglasses & cars & screwdrivers the answer is overwhelmingly positive. For this technology, it may wery well be negative. I'm not going to coment on the result for this specific tech.

      B.T.W. I'm only responding to the AC in this case because it's been modded up. THis is only insightful in that it doesn't pay attention to the parent and is restating a philosophical trusm (in my opinion).

    28. Re:What about the jerks? by daigu · · Score: 1

      I agree with your central point. However, it seems to me to be an issue of trust. Freedom implies that people will do things that you do not believe are appropriate. However, trust is the mechanism for balancing freedom. Perhaps Tor needs a more sophisticated method for verifying users based on a web of trust while at the same time providing anonymity.

      I'm imagining something where people vouch for others in something like a PGP web of trust and then when something occurs from a particular sub-segment of the web that most people think is a violation of trust - people have to reverify their connections. There are problems with this too - but there seems like there might be some combination that would offer a solution.

    29. Re:What about the jerks? by Anonymous Coward · · Score: 0

      It's really worth reading the Tor FAQ on this. Most of these questions are answered - it's very hard, for instance, to use Tor for mail spam. And Tor is a lot easier to block, should you need to, than a zombie network or an open proxy list, or any of the other ways to flood sites. They even give you a way to list all the IPs that could potentially attack your site so you can block them.

    30. Re:What about the jerks? by Anonymous Coward · · Score: 0

      You can't use an equation like that because it includes the unquantifiable variables "goodness" and "badness".

      What may be good to me is not good to you. I may value something far more than you do, and vice versa. Thus, the equation will have a different answer depending on who's calculating it.

      All of the abuses that tor permits are already possible anyways. To deny someone access or shut it down only hinders the legit reasons for using it.

    31. Re:What about the jerks? by drdink · · Score: 1

      there's nothing stopping you from blindly blocking access to your own servers; however in most cases, that'd probably be just an overreaction.
      there are hundreds, if not thousands, of publically accessible proxys and anonymous surfing tools besides tor. you'd likely spend more time trying to keep your filter or block lists up-to-date than you would dealing with any mess left behind if you didn't bother.


      I disagree. The combination of the Blitzed Open Proxy Monitor List and the TOR DNSBL do a pretty good job of weeding out abusive proxy possibilities. I agree that there are more out that these won't catch, but these do a much better job than you seem to think possible. It is sad that these have to be used, but there is little choice when abuse comes from these and there is no way to single out the bad person.
      --
      Beware, Nugget is watching... See?
    32. Re:What about the jerks? by larytet · · Score: 1
      "That's the price of freedom: preserving it comes at a cost,"

      not neccessary. Bouncers do not always come together with spam. see http://larytet.sourceforge.net/rodiAnonymity.shtml

  7. Yeah, and I got slapped by slashdot for using it.. by killpog · · Score: 5, Interesting

    Can't post to slashdot using Tor, and a couple servers have been banned by slashdot entirely, for flooding the site.

  8. what about ext? by Anonymous Coward · · Score: 0

    Tor? What about Ext? you can't have Tor without Ext?!?!?

    Only true math nerds need to reply.

  9. The defunct Freedom Network had a good idea by Beryllium+Sphere(tm) · · Score: 4, Interesting

    Zero Knowledge systems made their anonymizng network pseudonymous instead of truly anonymous, and (here's the good part) you had to pay for a pseudonym.

    If you acted like a jerk people would block you, your pseudonym would become useless, and replacing it would cost actual money.

    I don't know how they avoided making the nyms traceable via the payment system. There is high magic in the crypto world that might have made it possible to break that linkage.

    BTW I bow with respect toward your low user id.

    1. Re:The defunct Freedom Network had a good idea by aggles · · Score: 1

      One of the factors that helped Zero Knowledge become defunct was their funding from the CIA. Can you say "conflict of interest"?

    2. Re:The defunct Freedom Network had a good idea by whitis · · Score: 1

      One of the factors that helped Zero Knowledge become defunct was their funding from the CIA. Can you say "conflict of interest"?

      Perhaps you have confused Zero Knowledges Freedom Network with SafeWeb. Articles about the closure of the partially CIA funded Safeweb also mentioned the recent closure of Freedom Network. Similarly, slashdot discussions of Freedom Network 's closure also discussed safeweb's CIA connections.

    3. Re:The defunct Freedom Network had a good idea by Anonymous Coward · · Score: 0

      "BTW I bow with respect toward your low user id"

      I'm curious as to why anyone would respect something such as a user ID, let alone bow to it.

    4. Re:The defunct Freedom Network had a good idea by larytet · · Score: 1
      " Zero Knowledge systems made their anonymizng network pseudonymous instead of truly anonymous"

      Identification server in the Rodi network solves the same problem. Publisher (seed) in Rodi should establish relationships with bouncers. Private and public keys can be used to recognize trusted publishers. Bouncer adds routing rule manually according to explicit request from the publisher. see also http://larytet.sourceforge.net/userManual.shtml#ho wdoesitbesecure

  10. Issues of running a Tor node by Anonymous Coward · · Score: 2, Insightful

    There are many questionable issues to deal with when you run a Tor server..

    Child Pornography
    I dont know if you are legally responsible, but do you want to help the anonomous distribution of child pornography, especially if the children are actually being harmed?

    Terrorism
    Networks like this would make it easy and untracable for terrorists to send their commuinications without being traced to a location. Do you want to be unwittingly helping Osama bin Laden send out messages and hide his location?

    Spam
    Do you want to be responsible for people who use Tor to spam (not just email, which I believe is blocked by default)?

    This also applies to any other illegal activity.. Do you want to help people commit crimes?

    1. Re:Issues of running a Tor node by Anonymous Coward · · Score: 0

      What if your taxes are used by the government to commit crimes against other nations?

    2. Re:Issues of running a Tor node by Anonymous Coward · · Score: 0

      Taxes are taken from you involuntarily.

      Running a tor node is voluntary.

    3. Re:Issues of running a Tor node by Anonymous Coward · · Score: 5, Insightful
      yea, wont somebody please think of the children?

      Terrorism Networks like this would make it easy and untracable for terrorists to send their commuinications without being traced to a location.
      Do you not want to help civil rights campaigners in China defeat political suppression? Do you not want to help the Iraqi people fight against American terrorism and get their country back from the evil empire?

    4. Re:Issues of running a Tor node by Anonymous Coward · · Score: 2, Insightful

      What does this have to do with the issues I raised?

      Do you think that child pornography is not a legitimate issue?

      Just beucause there are GOOD uses of Tor does not mean there are VERY BAD uses of it. The Good does not negate the Bad.

    5. Re:Issues of running a Tor node by mincognito · · Score: 5, Insightful

      Yes anonymous internet use should be banned. Thank you for your insightful post Mr. Coward.

    6. Re:Issues of running a Tor node by aussie_a · · Score: 1

      do you want to....[bad stuff]

      Nope. But I see it as an unfortunate, but necessary, part of providing plenty of people, such as people in countries where they're being persecuted, to speak out and remain anonymous. Will bad people use it? Unfortunately yes. But will good people use it? Yes. And it's them I provide the service for. If I could stop child pornographers from using my service, I would. But I can't, and I'm not going to not offer the service because of terrorists. Once I do that, the terrorists (and the government) win.

    7. Re:Issues of running a Tor node by shutdown+-p+now · · Score: 2, Insightful

      These questions can be raised against any system which allows its users to stay anonymous while distributing contents. A more general question then is, are you against any communication mechanism which allows all parties to stay anonymous? Do you believe that any communication channel must have provision to be wiretapped? If your answer is "no", then how Tor (or FreeNet etc) should be any different. If you answer "yes", you should understand that it is basically the same as the infamous "Fair citizens need not be afraid, after all, only criminals have something to hide". Make your choice.

    8. Re:Issues of running a Tor node by Anonymous Coward · · Score: 0

      Child pornographers use cameras... we should ban them.

      Osama uses a gun... we should ban them.

      Terrorists use the telephone... we should ban them.

      Terrorists use camcorders... we should ban them.

      Terrorists use box cutters... we should ban them.

      Spammers use toothbrushes... we should ban them.

    9. Re:Issues of running a Tor node by h4rm0ny · · Score: 4, Insightful


      What does this have to do with the issues I raised?

      Do you think that child pornography is not a legitimate issue?

      Just beucause there are GOOD uses of Tor does not mean there are VERY BAD uses of it. The Good does not negate the Bad.


      That's a good point and a better reply to it than the one the parent got is that if your counter to something bad requires you to throw out something very good with it, then find a different counter. Terrorists abusing the technology that enables free speech? Don't block free speech, remove the causes of terrorism. It can only thrive in a sympathetic environment. Without that it just becomes isolated psychos.

      This isn't a absolute argument, but it's worth keeping in mind. Similar arguments can be made for other things. There are multiple approaches to every problem - you focus on the best one.

      --

      Aide-toi, le Ciel t'aidera - Jeanne D'Arc.
    10. Re:Issues of running a Tor node by WhatAmIDoingHere · · Score: 2, Insightful

      It's thinking like that that makes the people who don't wear their asses as hats very angry.

      If (something) has a use that is "bad" (something) = bad

      That's just wrong. bittorrent has illegal and legal uses. VCRs have illegal and legal uses. Guns have legal and illegal uses. Cars have legal and illegal uses.

      Someone could use a car to get kiddie pr0n, OMG! BAN CARS!!!!11oneonethree.

      You can't ban something because it may be used to do something bad, that's just wrong.

      --
      Not a Twitter sockpuppet... but I wish I was.
    11. Re:Issues of running a Tor node by Anonymous Coward · · Score: 0
      OMGpedophiles: check
      OMGterrorists: check

      Troll verified.

    12. Re:Issues of running a Tor node by Mnemia · · Score: 1

      You can even raise this issue against the entire Internet (disregarding the anonymity issue altogether): should we ban the Internet because people distribute child pornography through it? Are ISPs legally held responsible when their users distribute child porn without their knowledge? The answer is no, because ISPs are a common carrier and are not required to police their users unless the government (or others, like the DMCA notices) brings specific evidence of wrongdoing to them. How is Tor any different? The people who run nodes are only acting as a carrier channel for whatever passes through and do not have to police the traffic or be held responsible.

      I can see governments getting pissed off if things like Tor get too powerful and popular, since it would undermine their ability to eavesdrop on people EASILY. However, governments and societies managed just fine before they could instantly and anonymously spy on their own citizens. They just used other means to find the information about who was breaking laws. Technology should not be an excuse for allowing a surveillance society just so that it's more convenient to catch "bad guys".

    13. Re:Issues of running a Tor node by Anonymous Coward · · Score: 0

      OMG it's like the post service all over again! I don't know how those postal workers can sleep at night knowing they've been helping chuild pornographers, terrorists and junk mailers. The whole lot of them should be thrown behind bars.

    14. Re:Issues of running a Tor node by smittyoneeach · · Score: 1

      Piling on, if you make these networks somehow illegal in country A, how are you going to enforce the jurisdiction elsewhere?
      What are you going to do about a ship with >12 mile wireless capability sitting off the coast in international waters?
      I submit that the answer may be the other extreme: networks whose entry requires total transparency at all times, whose on-ramps actually cost money, so that users can simply access them and do what they gotta do without an privacy beyond username/password.
      If the rules themselves are transparent, no one can cry 'foul'.

      --
      Get thee glass eyes, and, like a scurvy politician, seem to see things thou dost not.--King Lear
    15. Re:Issues of running a Tor node by Anonymous Coward · · Score: 0

      Do you not want to help the Iraqi people fight against American terrorism and get their country back from the evil empire?

      What's your point? That the suicide bombers blowing themselves up in market squares are freedom fighters fighting American occupation?

      Perhaps you should pull your head out of Michael Moores' ass.

    16. Re:Issues of running a Tor node by JohanV · · Score: 1
      At least in the EU the legal issues are very clearly spelled out in the E-commerce Directive.
      Article 12

      "Mere conduit"

      1. Where an information society service is provided that consists of the transmission in a communication network of information provided by a recipient of the service, or the provision of access to a communication network, Member States shall ensure that the service provider is not liable for the information transmitted, on condition that the provider:
      (a) does not initiate the transmission;
      (b) does not select the receiver of the transmission; and
      (c) does not select or modify the information contained in the transmission.
      [..]
      Use of the provided service for purposes that may not conform to your own standards are an inevitable risk of providing any service whatsoever. It is exactly the same risk with operating a telecommunications network or even a road: some child molester might use that road. Is that a reason not to build any roads anymore?
    17. Re:Issues of running a Tor node by Anonymous Coward · · Score: 1, Insightful
      Here is my take on the c.p. issue raised by the grandparent (shamelessly attached to your +5 post so that my cowardly post will get noticed and my points debated, refuted, whatever.)

      I hold the following opinions.

      1. Anonymous c.p. floods the market with free stuff (since there is no payment mechanism I'm aware of), reducing the incentive to seek out the paid suppliers that produce the material.

      2. C.p. allows perverts to relieve themselves virtually, reducing the tension buildup that eventually drives them over a threshold to commit an actual act. If a pervert does his sick stuff privately and virtually without involving (new) victims, isn't society better off?

      These are minority opinions, to be sure, but I haven't seen any convincing, reliable evidence otherwise. In particular I'm not sure I buy into the "addiction" theory that c.p. drives people to commit actual acts - I think that is propaganda. I would venture that most people abused as children, usually by relatives, were abused by someone who had probably never even seen c.p. And I would guess that the overwhelming majority of c.p. users confine their activities to themselves.

    18. Re:Issues of running a Tor node by RedLaggedTeut · · Score: 1

      You are right when talking about Tor as it is, but not in respect to the general concept. The problem of accountability can be worked around somewhat by using trust based networks, see www.advogato.org trust rating for the concept.

      Terrorists don't need safe and secret networks to communicate in secret, they can communicate quite well using unsafe and supervised networks. Admittedly a Tor network offers some more protection, but probably not as much as you are making it out.

      Spam is sent out by email in masses, and as long as no solution to spam in email is found, there is no need for spammers to take recourse to something like Tor. Admittedly, Tor could assist in hacking websites, but for this to work there has to be a primary vulnerability in the website, which could be exploited anyway, and most of the time can be exploited in principle anonymously because tracing back to the initial IP of the infection is ineffective.

      --
      I'm still trying to figure out what people mean by 'social skills' here.
    19. Re:Issues of running a Tor node by killpog · · Score: 1

      "Do you want to help people commit crimes?" Nah, but I'm not going try to take away everybody's self evident right to privacy and due process through instilling fear in the populace, either. Governmental law enforcement needs to learn to work with the tools they have already have (which they have demonstrably not done to date), not force a police state down our throats. I refuse to give away a tool that can be used in areas in the world where state scrutiny of communication can have extremely dire consequences to a person who chooses to criticise their state, and attempts to peacefully organise resistance against said state. If we in the free world allow these rights and tools for freedom to be taken away, what hope do people in less advantaged areas of the world have?

    20. Re:Issues of running a Tor node by Anonymous Coward · · Score: 0
      OK, as soon as you pull your head out of Bush's...

      The majority of attacks are against American forces and their Iraqi allies: people aiming to become policemen (and thus agents of the Republic^W^W America).

      As for marketplaces sure its bad but it has a political objective and since America doesn't hesitate to kill civilians, and it does so knowingly and deliberately: whoever is not for us is against us , so it's typical American hypocrisy to say that it's bad only for others to do it.

    21. Re:Issues of running a Tor node by Bongzilla · · Score: 0

      yeah. nobody's been thinking of the children.

      y'all need to pull sally struthers out of your ass. if this is the face of compassion, I would recommend signing up to be a paid killer instead.

      --

      ;///////////////////////////////////////////////// /
    22. Re:Issues of running a Tor node by Anonymous Coward · · Score: 0

      go watch cnn you ignorant american bastard!
      freedom of speach is not available everywhere in the world. not everwhere do you have whiney laywers around every corner, chacing car accident victims or suing mcdonalds.

      what you have as dictators, military rule, and even look at china (which by the way will own america in 50 years).. they have a massive massive proxy server to filter out content.

      point it, ask the opressed guy if he cares about child pornography when this gives him the ability to speak his mind, and educate his mind.

      further to that. consider this,
      with freedom you are entitled to behave as you wish. this means, you can choose to be a god fearing man, devil worshiper, child pornographer, or just a simple baker who makes good bread.

      and, i'm posting this comment anonymously.

    23. Re:Issues of running a Tor node by legirons · · Score: 1

      "I dont know if you are legally responsible, but do you want to help the anonomous distribution of child pornography, especially if the children are actually being harmed?"

      Is there some variation of godwin's law that states that any technology you care to mention can be rubbished by mentioning that it can be used for child pornography?

      It seems that any time a new network or protocol appears, someone jumps in with the same old "but it could be used for..." hype. I mean, what's the point?

      Child pornographers drive cars too. Ban all automobiles on that basis, and then come back for the pseudononymous networks.

    24. Re:Issues of running a Tor node by Anonymous Coward · · Score: 0
      > Do you not want to help civil rights campaigners in China defeat political suppression? Do you not want to help the Iraqi people fight against American terrorism and get their country back from the evil empire?

      No, I get half my stuff from China, and it costs half of what it did 20 years ago.

      Fuck no, I'm part of that empire! They can join us, or they can reject civilization and continue to get voted off the planet by a margin of around 3.5 billion to 1.5B. (Remember, in addition to around 0.5B Western redneck types, the planet's got about 1.5B Hindu and 1.5B Chinese, all of whom would be just fine with seeing Islam gone.)

    25. Re:Issues of running a Tor node by Anonymous Coward · · Score: 0
      > If we in the free world allow these rights and tools for freedom to be taken away, what hope do people in less advantaged areas of the world have?

      None at all, but what of it?

      But perhaps it's better to have grown up never having known "freedom" than to have been raised to think of it as an ideal, only to have to reject it (or rather, to change its definition :) later in life.

      The Chinese are pretty content with their lot - the world's first stable police state, featuring a growing middle class and increasing prosperity levels. What of us Yanks - where we're migrating towards the Chinese model in order to merely preserve our standard of living, but aware that all the "freedom stuff" that we grew up with has to go?

    26. Re:Issues of running a Tor node by Anonymous Coward · · Score: 0

      Don't block free speech, remove the causes of terrorism. It can only thrive in a sympathetic environment. Without that it just becomes isolated psychos.

      So, nuke Israel. Convert the U.S. to Islam or nuke it. Oh yes, and make sure every citizen of a third world country wins the $50 million jackpot. Problem solved?

      They ARE psychos -- PERIOD. Glorified gang bangers.

    27. Re:Issues of running a Tor node by Anonymous Coward · · Score: 0

      People can do all of these illegal/objectionable activities already. Not running a TOR server doesn't impede this activity.

    28. Re:Issues of running a Tor node by Anonymous Coward · · Score: 0

      This also applies to any other illegal activity.. Do you want to help people commit crimes?

      Tor was initially designed and developed as part of the U.S. Naval Research Laboratory's Onion Routing program with support from ONR and DARPA.

      Please go to tor.eff.org and read the second to last paragraph on the home page.

    29. Re:Issues of running a Tor node by Anonymous Coward · · Score: 0

      Nice troll.

    30. Re:Issues of running a Tor node by Anonymous Coward · · Score: 0

      Actually it's more like "Stop fucking with them like we have for the past 50 years." They don't hate us for who we are, they hate us for what we do.

    31. Re:Issues of running a Tor node by JasonTik · · Score: 1

      Just beucause there are GOOD uses of Tor does not mean there are VERY BAD uses of it. The Good does not negate the Bad.

      Nor does the Bad negate the Good.

    32. Re:Issues of running a Tor node by whitis · · Score: 1

      I dont know if you are legally responsible, but do you want to help the anonomous distribution of child pornography, especially if the children are actually being harmed?

      Well, given that it can be difficult to transmit money anonymously, why not? If the distribution is not providing incentive for people to create new pornography and in the process victimize children I don't have a big problem with it. I would rather see old child porn and synthetic child porn distributed than create a market for new child porn. Attempts at censorship are likely to create a financial incentive. Fantasies have no morality. It is actions that have morality. By analogy, it is ok (and probably quite common) to fantasize about killing your boss but acting on those fantasies is not ok. Often repeated claims that pornography causes people to victimize others are not supported by the facts. People have a very broad range of sexual fantasies and for almost all of them there are ethical ways to act out or sublimate those desires. Trying to supress those desires instead of accepting them is more likely to result in behavior that is harmful to others. Repression is linked to sex crimes. Turned on primarily by children? Find an adult who is into age play. Most child sexual abuse is not perpetrated by people primarily attracted to children but is situational expediency. Interestingly, those who are fixated on children tend to see themselves as children and are seeking what they perceive as other children rather than an adult-child power dynamic. Protecting the children is an argument often used to infringe on the rights of adults.

      Paypal is used to give some level of anonymity in financial transactions but the US government would have no trouble obtaining paypal records. Yes, people could transmit money by swiss bank accounts but the US government now has access to swiss bank accounts.

      Systems like Tor have limited capacity that limits how much spammer's can send. So SPAM may hurt tor much more than tor helps spammers. Also, spamers produce large amounts of traffic that can be detected and blocked at the point where it enters the tor network.

      As for the terrorism argument, one must first put terrorism in perspective. Even in 2001, the year of the 9/11 and anthrax attacks, you were about ten times more likely to die of suicide than of a terrorist attack. In 2001, terrorism accounted for about 0.1% of all deaths in the US. Or your chances of dying from terrorism that year were around 0.001%. More Americans died of Asthma in 2001 than terrorism. Likewise for malnutrition, ulcers, medical mistakes, and drowning. Protecting against terrorism has been used as an argument to undermine constitutional freedoms. Far more people have been killed by their own governments than by terrorism. In the last century worldwide, genocide has probably killed around 1% of the population and that does not count governments killing political opponents.

    33. Re:Issues of running a Tor node by sp0rk173 · · Score: 1

      Personally, I love making the internet a more chaotic place, because then i can go on slashdot and watch more people bitch. Passing of child porn? I have reservations about that. But terrorism?! Psh, just the free spread of ideological information, like right-wing christian sites that post addresses of abortion clinics and of doctors who perform abortions. As for spam, well, I don't get any spam; so it's possible to live in the modern age spam-free. Perhaps those who get swampped by spam are just morons?

    34. Re:Issues of running a Tor node by Anonymous Coward · · Score: 0

      Keep going buddy. 50 years...why do you stop there?

      Why don't you pick up a few good books, since you seem so concerned about history. Go back to the time of the Crusades. Read about Mohammed. Then, go back a little further to when this poor, down trodden class of folks main mission in life was to enslave and destroy others, as it still is to this day.

      The Islamic wackos (I am referring to the wackos as I still believe there may be a few Muslims with good intentions) cry and moan about Israel constantly. Why?? Not everything, but because the second class (yes, they are treated as such) Arabs whom are citizens of Israel are treated better, have more rights, and have a better standard of living than ANY peon Arab in ANY Arab nation.

      The Jewish people were ran out of THEIR land, Israel, by the Arab people thousands of years ago. In 1947, after nearly being destroyed by the Nazis, they were given their home back. A small chunk of land in a vast Arab area.

      I, for one, do not believe in this constant stretching back to the wrongs and rights of the past. But, I make an exception for the Israeli cause due to their incessant persection over the years and considering the vast territories controlled by the Arabs. Let us stop it here. It is up to the Muslim people to stop spending 95% of each of their days dreaming of a world without Israel and plotting ways of making that come about. Ditto for their hatred of the west in general.

    35. Re:Issues of running a Tor node by Oracle+of+Bandwidth · · Score: 1

      There are many questionable issues to deal with when you run a networked server.. Child Pornography I dont know if you are legally responsible, but do you want to help the anonomous distribution of child pornography, especially if the children are actually being harmed? Terrorism Networks like this would make it easy and untracable for terrorists to send their commuinications without being traced to a location. Do you want to be unwittingly helping Osama bin Laden send out messages and hide his location? Spam Do you want to be responsible for people who use the internet to spam (not just email, which I believe is blocked by default)? This also applies to any other illegal activity.. Do you want to help people commit crimes? I guess it's time we end the internet so no one can use it to commit crimes.

    36. Re:Issues of running a Tor node by Anonymous Coward · · Score: 0

      Oh come on now. By this assinine logic, ISPs are "helping people commit crimes" by running routers that route all of this "internet filth".

      Grow up.

    37. Re:Issues of running a Tor node by surprise_audit · · Score: 1
      Terrorism

      Ummmm, yeah... Terrorists don't even need to use an anonymising network - just have a spammer send out a couple of million emails, some of which go to the desired recipients if they've carefully seeded the net with email addresses. The actual message could easily be embedded in those nonsense sentences spammers are using to get through filters.

  11. 100 nodes, since when? by frovingslosh · · Score: 4, Interesting

    The point of this post seems to be that TOR now has 100 verified nodes. But the Wikipedia article at http://en.wikipedia.org/wiki/Onion_Routing that this points to says they had 100 nodes as of February 2005. Is TOR no longer growing, or is the math off somewhere?

    --
    I'm an American. I love this country and the freedoms that we used to have.
    1. Re:100 nodes, since when? by Anonymous Coward · · Score: 0

      Should note that someone has changed the wikipedia entry for this and the current page contains a NWS image.

    2. Re:100 nodes, since when? by dirtyhippie · · Score: 3, Informative

      A verified node is not the same as a node, and we now have 100 VERIFIED nodes. RTFFAQ

      My node, lemonmirangue, is within the past month, so was probably in the 90s. Someday, I'll get to brag about that.

    3. Re:100 nodes, since when? by alien+at+large · · Score: 2, Funny

      Ah, well, latency in the TOR network caused the news to arrive a bit later

  12. Bad idea by remmy1978 · · Score: 1, Interesting

    While I can see the need for people to be able to be "anonymous" online, I think there are more down- than upsides to this. As it is, I already feel that the internet suffers from too much anonimity rather than too little. There is no accountability and both law enforcement and ISP's are not interested enough in taking needed steps against abuse. When people can still DOS sites without consequences, flood newsgroups without as much as a slap on the wrist, and make death threats that get laughed off at by the police, I say that we need more responsibility and not more anonimity.

    1. Re:Bad idea by zappepcs · · Score: 4, Insightful

      I have to disagree with this. The Internet, as it was invented, intended, and as it has been adopted ... none of these things ever included regulation. All efforts are being, and have been made to work around network problems.

      The fact that the Internet exists doesn't translate to a need for the government or anyone else to guarantee that it operates without hiccups. I tire very easily of those that take the stance that the Internet and services based on the Internet should work flawlessly, and if needed, the network should be regulated to ensure that they do.

      This kind of thinking is socialist in nature, and the Internet (as it is now defined) is totally antihtesis to this notion.

      There is no current methodology for regulating a global phenomenon. No single government, despite their aspirations, can achieve regulation of a global network. Spam comes from every corner of the globe, and like fire ants, when you think you have eliminated it, it will show up from some other spot you have no control over.

      Anonymity, or stealth on the Internet is part and parcel of what it is. Tracing someone's work over the Internet necessarily should be difficult. That people have made efforts to make it even more difficult is nothing more than living in the spirit of free flow of information without retribution.

      While some of you might feel that this is not needed, there are disidents in some countries that really would like to have this kind of anonymity. Who are we to deny it to them on the basis of our view of the world?

      Liberty and freedom only happens when you truly are free to say and do as you please (so long as you don't violate anyone else's freedom) and publishing what you think and feel is not against that. There are actual valid reasons for ultra privacy.

      To say that netizens or Internet users should be responsible is to intimate that there is a set of regulations that they should abide by that is significant and pertains only to the Internet.

      There are laws and social norms of decency that all should abide by whether they are on the Internet or in the local convenience store.

      Sure, there will be those that abuse any leniencey, but there always is, no matter what the law or social morality says. Those that think there should be more regulation on the Internet might be better off staying off of the Internet... go get an AOL subscription... or something like that.

      Just two cents worth

    2. Re:Bad idea by chucks86 · · Score: 1

      I believe what you said was at least three cents worth. People always seem to forget that the Internet was designed to withstand a full-blown nuclear attack. And with the other story today mentioning that some university (if I recall) getting a cockroach to control a robot, there should be sys admins if bombs are dropped. heh.

      I think it's pretty funny when someone suggests local/national laws regulating an entity designed against this.

      --
      Help a poor college student. Send a couple cents via paypal to chucks86@gmail.com
    3. Re:Bad idea by Anonymous Coward · · Score: 0

      I disagree, I think people suffer from too much anonYmity in their homes.I think there are more down - than upsides to this. As it is, I already feel that those who stay at home suffer from too much anonYmity rather than too little.

      Why should we be allowed privacy in our own homes, we could be up to no good. You think terrorists and child pornographers do the bulk of their business online?

      People can plot murders, make pipebombs, rape children, all in the anonymity of their homes!

      I propose that along with Tattooing serial numbers onto everyone's foreheads, that we should start implanting RFID chips into all citizens, as well as install wireless surveillance cameras in and around every home, office and building.

      Only then can we be (relatively) safe from the evils that plague this world! /Sarcasm

    4. Re:Bad idea by tres3 · · Score: 4, Insightful
      I have to agree with the above comment and disagree with its parent: anonymous speech is neccessary in a free country. This is espicially true now that our current president has retaliated against people for speaking out against him and/or his policies and the current media sometimes persecutes those for speaking their mind too. The Governor of Colorado and The University of Colorado's Board of Regents are trying to strip a Boulder professor (at CU) of his tenure for publishing and speaking out on the war in Iraq and the attacks on 9/11. Now I don't want to get into whether he is right or wrong but persecuting him for speaking about his beliefs is wrong. The right to critize the goverment is so engrained in what it means to be American it became the First Amendment to The Constitution. (Incidently there were some against outling rights, as in The Bill of Rights, because -- and I'm paraphrasing here -- "If we outline our rights then sooner or later some fool is going to come along and assume that anything that we didn't outline here is not a right.") The problem is that the current administration is equating anybody that speaks out against their policies as unpatriotic! And with the Patriot Act and the government's huge new campaign to gather information on all who question it, not just the ones that are potential terrorists as they claim, does anyone want to make the list? Yes, I know, I just made the list (again). So much for being able to get on an airplane in the near future. :-( Are you starting to see the need for anonimity?

      I would like to provide a very profound example of the need for privacy: The U.S. Constitution. One of the biggest aids to getting the Constitution ratified in 1789 were the series of essays later entitled The Federalist Papers and although they were written by Alexander Hamilton, James Madison, John Jay, and others they were published under the pseudonyms Ceasar, Publius, amoung others. See: ClassicNote on The Federalist Papers.

      The Federalist Papers are the single greatest interpretive source of the Constitution of the United States, the best insight and explanation of what the Founding Fathers purpose was in the passage of the document that governs the United States of America.

      Supporting freedom of speech is not going to your local church on Sunday and hoopin' and hollerin' along with the priest, minister, rabbi, or whatever title they may possess. Supporting freedom of speech is seeing someone on their soap box spewing forth the most vile, soul wrenching diatribe you can imagine and while disagreeing with the message being given you still stand up and fight for their right to voice the opinion. Unfortunately many opposing points of view must be expressed anonymoously to avoid any repurcussions (like the no-fly list).

    5. Re:Bad idea by Anonymous Coward · · Score: 0

      While I can see the need for people to be able to be vote "anonymous", I think there are more down- than upsides to this. As it is, I already feel that the elections suffer from too much anonimity rather than too little. There is no accountability and both law enforcement and voting committees are not interested enough in taking needed steps against abuse.

    6. Re:Bad idea by Anonymous Coward · · Score: 0

      The Governor of Colorado and The University of Colorado's Board of Regents are trying to strip a Boulder professor (at CU) of his tenure for publishing and speaking out on the war in Iraq and the attacks on 9/11. Now I don't want to get into whether he is right or wrong but persecuting him for speaking about his beliefs is wrong.

      You're talking about "Chutch."

      Ward Churchill.

      The man who called victims of 9/11 "Little Eichmanns." The man who said 9/11 was "chickens coming home to roost."

      Well what is happening now is that Ward's own personal chickens are coming home to roost.

      Two of the chickens currently approaching Ward's roost at near-terminal velocity are lying about being a Native American to get his job and plagerism.

    7. Re:Bad idea by remmy1978 · · Score: 1

      I don't disagree with you that there should be an opportunity for free speech on the internet. I agree that it is important that everyone, no matter where from, has a chance to say what they want to say.

      However, this is not what tor is about, no matter what nice sugar coated stories people come up with. I've seen tor being abused in order to instigate fights, flood as well as other unlawful activities.

      Is it a good idea that people can use tor to spam freely? I don't think so, and I'm surprised that people would be willing to accept all possible abuses for so little positive opportunities. If it can be used to send child porn without being traced, is that what we really want? How many of us are appaled by such things? And how many of us actively seek out the people in dictorial countries in order to listen to their opinion or cause?

      It is a weak argument that tor is needed to protect free speech on the internet. There are plenty of decent ISP's that are willing to protect free speech at all costs without causing any of the problems that networks such as tor brings with it.

      You might be high and noble by saying "I may disagree with you but will defend to death your right to say it", but when the use of tor is 95% abuse, and only 5% legit use, I think that it is more a sign of being out of touch with reality.

      Furthermore, I also find it a remarkable irony that someone who doesn't agree with the majority opinion on a "free speech" issue is moderated down and marked troll for offering his honest opinion. This last comment is not directly related at you, but at the moderators who are trigger happy.

    8. Re:Bad idea by interiot · · Score: 2, Insightful
      Spam and anonymous political speech are two different things.

      Yes, the internet routes around damage. And information wants to be free. BUT, information does not want to molest people.

      Most geeks don't want EBay to be constantly DDOS'd, and they don't want to be constantly spammed. And by all respects, we're making progress towards these goals. And these goals are NOT in conflict with the open design of the internet. Famously, the main underpinning of the internet is that all of the intelligence is at the endpoints, not in the center. As a result, it is difficult for governments to step in the middle of the internet and impose their will from a central place. However, there ARE places where intelligent decisions are made about whether information is passed on... at the endpoints.

      If either end of a communication decides that the communication shouldn't take place (eg. if it's not consensual), then the communcation can and should be stopped. A free and open internet can simultaneously encourage the free-flow of information from individuals without government intrusion, and also inhibit the proliferation of spam and spyware. We only need to give individuals the tools to make more intelligent decisions about what kinds of data they accept, but in the end, it's up to every individual to make their own choices.

      Spam and spyware are more about communicating false data to further their own goals than they are about freeing up information (eg. "here is the information you requested", "go ahead and download our nice P2P software... there's nothing undesirable hiding here"). Hopefully and fortunately, our philosophical underpinnings do not require us to tolerate such behavior.

    9. Re:Bad idea by Anonymous Coward · · Score: 0

      Strange definition of non-socialist. The internet as it is now known was originally funded largely by ARPA, universities both public and private, and Ma Bell, a government-sponsored monopoly.

      Al Gore didn't invent it, but he did fund it! Socialist vs non-socialist is an angel on the head of a pin. Get over it.

    10. Re:Bad idea by hsmith · · Score: 1

      thus why everyone should oppose city governments offering free wifi, they are trying to take control of the pipes. once tehy own the pipes they can filter out what they don't want.

    11. Re:Bad idea by onechard · · Score: 2, Insightful

      I think that you are falling in to the trap of thinking that free speech means the ability to say anyting you like without repercussion. This is patently false the constitution gives you the ability to utilize free speech without fear of reprisal from the GOVERNMENT, it does not follow that it gives you the right to think that there will be no repercussion from your peers. In other words you may speak your mind, but be aware and take the consequences of your actions. Freedom is all about personal responsibility. The Federalist papers were written under pseudonyms because at the time there was no freedom of speech guarantee hence freedaom of speech becoming a cornerstone of the rights protected under the constitution.

    12. Re:Bad idea by bcrowell · · Score: 1

      The Governor of Colorado and The University of Colorado's Board of Regents are trying to strip a Boulder professor (at CU) of his tenure for publishing and speaking out on the war in Iraq and the attacks on 9/11. Now I don't want to get into whether he is right or wrong but persecuting him for speaking about his beliefs is wrong.
      This article says their stated reasons for trying to fire him are that they've accused him of plagiarism and lying.

    13. Re:Bad idea by Anonymous Coward · · Score: 0

      If the psychopathic professor from U of C had posted his comments anonymously, no one would have listened to the nut job.

      Liberals have a, pardon my French, FUCKED up view of what freedom of speech is. They all whined and claimed the Dixie Chick's right to freedom of speech was trampled on when radio stations quit playing their songs, stores stopped selling their records, and consumers quit buying them. Saying stupid shit HAS consequences. The Constitution merely protects you from federal intereference in your right to say stupid shit. It does not guarantee that I must still purchase your lousy fucking CD after you piss me off. It does not mean that, I, as a record store owner, MUST sell your lousy record after you either piss me or my customers off. And, it does not mean that, I, as a radio station owner, must continue to play your lousy shit after you pissed me, my advertisers, or my listeners off.

      Likewise, it does not protect you from being fired for saying stupid shit. This is a given in private industry. Unfortuneately, asses that work on the tax dollar get away with all kinds of crap before they get fired. The U of C is a taxpayer funded entity and its customers have spoken: This nimrod is a NUT JOB. Get rid of him like any private business would have done long ago.

      Once again, had he posted his comments anonymously, there would be no issue...no one would have listened because being anonymous just doesn't carry the weight of a professorship, even for NUT JOBS. If our schools keep allowing freaks of this sort to work for them, there will eventually be no difference between anonymous BS and BS from a professor. This is probably one of the top reasons for firing this NUT JOB.

    14. Re:Bad idea by Anonymous Coward · · Score: 0

      When the Internet was invented, there were no anonymous nodes. Nor was there perceived a need
      for anonymity. If blug@foo.bar.edu acted like a jerk, root@foo.bar.edu would lower the boom on blug, and that was the end of it.

      It's easy to repeat the revisionist history that says "the internet started out free" ... but only as long as one's history doesn't have to reflect what actually happened.

    15. Re:Bad idea by Anonymous Coward · · Score: 0

      Ward Churchill totally deserves to be fired. OTOH, the wailing lefty voices calling for the firing of the Harvard president for far far less egregious remarks is troubling (and totally hypocritical).

    16. Re:Bad idea by Anonymous Coward · · Score: 0

      Supporting freedom of speech is not going to your local church on Sunday and hoopin' and hollerin' along with the priest, minister, rabbi, or whatever title they may possess. Supporting freedom of speech is seeing someone on their soap box spewing forth the most vile, soul wrenching diatribe you can imagine and while disagreeing with the message being given you still stand up and fight for their right to voice the opinion.

      No it fucking isn't. I prefer freedom FROM such bullshit speech, like the vile diatribes Ward Churchill spews. If I was a student as CU, I definitely wouldn't want my tuition supporting such a fuckhead. Nor do I want my tax dollars supporting him. Let a piece of shit like him try spewing his rants on a street corner.

    17. Re:Bad idea by Anonymous Coward · · Score: 0

      Moderation is only a suggestion. Score:-1 comments are still there for anyone who thinks they might be worth reading (yes, I do read at -1).

  13. I've posted to Slashdot using TOR. by ahfoo · · Score: 4, Informative

    Here, I'll try and do it again right now.

    1. Re:I've posted to Slashdot using TOR. by Anonymous Coward · · Score: 0

      I'll try and do it again

      "try to do it".

  14. If it's anonymous... by grasshoppa · · Score: 3, Insightful

    then how do we know there are a hundred nodes?

    Seriously, think about it for a moment: If it's completely anonymous, then how can we count the nodes. By counting a node, we now know where it is, virtually speaking, and can translate that into a physical location.

    So either we don't know where all the nodes are, or this isn't really anonymous.

    --
    Mod me down with all of your hatred and your journey towards the dark side will be complete!
    1. Re:If it's anonymous... by Anonymous Coward · · Score: 1, Funny

      To commemorate the 100th verified node in the Tor network (graphs of throughput and nodes mirrored at Imageshack), the EFF are putting up a request for other organisations and personal users to start up Tor nodes of their own.

      Emphasize mine. Seriously. Not RTFA is one thing. Not reading the little summery is something else. Yes, I now. I must be new here.

    2. Re:If it's anonymous... by aussie_a · · Score: 5, Informative

      The nodes are what people use to remain anonymous. They nodes themselves need to be well-known so they can be used. 100 people use node X. Someone from China could use node X or someone from America could use Node X or someone from England could use Node X. How do you know where any of those people live, by knowing where node X is?

      Answer: You can't know. Hence the people using Node X remain anonymous.

    3. Re:If it's anonymous... by Anonymous Coward · · Score: 0

      You must be new here.

    4. Re:If it's anonymous... by Anonymous Coward · · Score: 0

      The nodes are what people use to remain anonymous. They nodes themselves need to be well-known so they can be used. 100 people use node X. Someone from China could use node X or someone from America could use Node X or someone from England could use Node X. How do you know where any of those people live, by knowing where node X is?

      You get a court order for the operators of Node X to hand over the information, of course. This is how things normally work where "Node X" is equivalent to "ISP".

    5. Re:If it's anonymous... by Norgus · · Score: 2, Insightful

      Doesnt knowing where the node is allow countries/organisations/ISPs/whoever to block access to all Tor nodes? If access to them can be blocked, doesn't that mean that the people with the most need for an anonymous network (Chinese maybe) may not even get access.

    6. Re:If it's anonymous... by Unnamed+Chickenheart · · Score: 1

      But if the nodes are wellknown, can't China get the IP for the nodes, and search its internettraffic for any matches?

      --
      urd
    7. Re:If it's anonymous... by RPoet · · Score: 1

      The problem is that while the operator of Node X can tell that his node has been used to access alqaida.com, there is no way to know who requested that his node access that site. The real culprit has used a chain of TOR servers, where each neighboring server in the chain can't tell if his neighbor is directly connected to the culprit or if his neighbor is just a blind middleman. The only way to be able to tell this, is to control a significant amount of the TOR servers, but since each server is accepted only after a review process, we can assume this is not the case.

      --
      "Oppression and harassment is a small price to pay to live in the land of the free." -- Montgomery Burns.
    8. Re:If it's anonymous... by NoMoreNicksLeft · · Score: 0

      Yes, the FBI certainly couldn't pass the review process. Down at EFF headquarters, in the Hall of Freedom, Batman and Superman vett all the applications with their giant mainframe computer, which not only turns up whether the applicant is a secret KGB agent but can also determine whether he is an evil alien from Beta Promiculi.

      My anonymous network would have been more successful, but I was only able to recruit the Silver Surfer, and our Hall of "$60 per month 10'x20' Storage" only has a beatup 486 with AOL access.

  15. Okay, here it comes through TOR. by ahfoo · · Score: 2, Informative

    I suspect it will work.
    And what I did was to turn on my proxy settings in Firefox and then go to an IP check site. My current IP is being reported as other than any in the range of my ISP.

    1. Re:Okay, here it comes through TOR. by killpog · · Score: 1

      Okay, I'll try this..

    2. Re:Okay, here it comes through TOR. by killpog · · Score: 1

      And I got blocked again!

    3. Re:Okay, here it comes through TOR. by Anonymous Coward · · Score: 0

      Did it block you completely i.e. no front page? If not then did you try to login? A sensible approach would be to for Slashdot to ban anonymous posting throgh Tor but to permit 'trusted' logged in users.

    4. Re:Okay, here it comes through TOR. by killpog · · Score: 1

      Nope, does it when I'm logged in, too, try to post, bam, returns you can't post to this page.

    5. Re:Okay, here it comes through TOR. by killpog · · Score: 1

      And it ain't Privoxy, either

  16. Wikipedia Link by obsol33t · · Score: 1

    I guess this is why most Slashdot articles don't link to wiki pages....

    1. Re:Wikipedia Link by Anonymous Coward · · Score: 0

      It has been vandalized a number of times, and we have reverted it the same number of times. And then they started vandalizing our user pages, so I banned all the IPs and started mailing abuse addresses for each IP. Eleven down so far.

      I locked the article from editing, which is unfortunate, but necessary in this situation. If this was working correctly, the sudden influx of readers would improve the article.

      [[User:Brockert]]

    2. Re:Wikipedia Link by aussie_a · · Score: 1

      But they were using Tor, so how could you know their IP?

    3. Re:Wikipedia Link by Anonymous Coward · · Score: 0

      IP address

  17. Gozer the Gozarian by The+Original+Yama · · Score: 3, Funny

    Wait for a sign from Gozer the Traveler; he will come in one of the pre-chosen forms.
    During the rectfication of the Voldrani, the Traveler came as a large and moving Tor.
    Then, during the third reconciliation of the last of the Machetrik Supplicants,
    they chose a new form for him -- that of a Giant Slor!
    Many Shevs and Zuls knew what it was to be roasted in the depths of the Slor that day I can tell you!

    1. Re:Gozer the Gozarian by ashridah · · Score: 1

      Which came first, the language or the compiler?

      This is completely Off topic, but I have to comment on your signature.

      The language, of course, came first. This doesn't even come close to Chicken Vs. Egg.

      To write a programming language, one needs a grammar. The grammar provides syntax and form for the language (and also governs the language's capabilities), but the grammar is not a compiler by itself.

      Once one has a grammar (and hence, a language), one can write a parser/compiler, not before.

      (although possibly during, but even then, the partial representation of the language still preceeds the compiler, since one has to write the compiler to parse the language, before one can use it to parse the language :) )

      ashridah
      PS, the egg came first too, if one accepts the theories of evolution. After all, whatever creature laid the first egg may have been something other than a classical chicken, and the first chicken may have come from an evolved/viably mutated egg, or the byproduct of an odd breeding pair.

    2. Re:Gozer the Gozarian by Anonymous Coward · · Score: 0

      AFAIK all that theory about parsers and grammars was developed years after the first languages and compilers were in production use. At first they just hacked together something that worked, without caring about corner cases that no one would ever meet except by accident. In a sense, this means that both the language and the compiler were developed in the same time. On the other hand, the first languages were assemblers and then smarter and smarter macro assemblers, so one could say that the designers of the first CPUs designed the first languages, without a compiler in sight.

    3. Re:Gozer the Gozarian by Anonymous Coward · · Score: 0

      ummm... it looks like a simple joke to me. I don't think it's meant to be taken seriously.

  18. Hey, at least it wasn't.... by Anonymous Coward · · Score: 0

    Hey, at least it wasn't another informative image of anal expansion? If you read the page history; you'll find this vandalism has been ongoing. Someone really doesn't want the article text read.

  19. Wikipedia acting up? by Anonymous Coward · · Score: 0

    Ok, ya'll gonna think I'm crazy, but the link to Wikipedia, "Onion routing" gave me a nice big picture of a woman's vagina, with the clitoris, labia minora, and the vaginal opening clearly identifed.

    I don't need any of that information (just ask your mom!), but I think someone is playing a trick, because when I reloaded (while holding down Shift) it was gone and replaced with the right article.

    Information about the image (from Firefox):

    Location:
    http://upload.wikimedia.org/wikipedia/commons/3/32 /Clitoris-Vivero-Becker.jpg
    Description:
    http://en.wikipedia.org/wiki/Image:Clitoris-Vivero -Becker.jpg

    All right ... Edit history for the article shows that there is some vandalism taking place, but I'll still post this, mostly because of the "your mom" comment, which I think is ace.

    I will post anonymously, though ...

    1. Re:Wikipedia acting up? by Anonymous Coward · · Score: 0

      how funny -- a slashdotter pretending to know what a vagina looks like

    2. Re:Wikipedia acting up? by Anonymous Coward · · Score: 0

      Hey, it's only 50 bucks you know.

  20. Wikipedia vandalized by Anonymous Coward · · Score: 0

    the onion routing entry have been replaced by adult content - go there at your own risk

  21. Prospective Node-op Concerns by heretic108 · · Score: 5, Interesting
    It's crossed my mind to run a Tor node myself, but I do have some questions/concerns.

    Particularly related to situations where my node ends up last in the chain for given http hits.

    From a low enforcement point of view, I am accountable for any and all outbound http hits from my network.

    At worst case, if my node does the actual http hits to sites like www.some-secret-kiddie-pr0n-site.com or www.some-phishing-victims-bank.com, then in all likelihood I'll be getting a visit from the police.

    In such a case, there's no acceptable outcome:

    If I encrypt my disks and refuse to hand over keys, I'm looking to do time for accessing the sites.

    If I tell cops about the Tor node, and mount a 'plausible deniability' defense, there's the possibility of 'accessory' or 'contributory negligence/liability' charges.

    Even if I beat all these charges and escape conviction, I still have to suffer:
    • stress from police harassment
    • time wasted in police interviews and court appearances
    • loss of my PC for a year or more, while computer forensics cops go through my hard disks with a fine tooth comb
    None of these outcomes are very appealing.

    Any thoughts on this?
    --
    -- In the beginning was the WORD, and the WORD was UNSIGNED, and the main(){} was without form and void...
    1. Re:Prospective Node-op Concerns by Anonymous Coward · · Score: 0

      One valid concern you have, I might add. Police are generally ignorant about technology -- when you have an entire workforce allowing mere German Shepherds to have a significant say as to whether or not your seat cushions will be torn up on a false positive on a "random" car stop, what are the chances the police will understand the concepts of anonymous intravenous node-based proxy networking? And if they do, what are the chances they'll understand it? "Anonymous? Just what are you hiding, boy? Organized crime?"

      This issue was brought up previously on another Slashdot posting here and here a few weeks ago.

    2. Re:Prospective Node-op Concerns by L.Bob.Rife · · Score: 1

      I think its more fair to say that most people are ignorant about technology. Police understanding of social-technology issues doesn't seem much different from the general public to me. I work with several police officers and speak to them often about the introduction of new laws related to p2p, anonymity, computer crimes, and the like.

      Even the geeks here debate whether truly anonymous speech is a good thing or not. (Personally I believe the good outweighs the bad, but make no mistake, there are drawbacks.) I followed those links that you've posted as an AC, and it provides the perfect argument of why anonymity isn't always positive.

    3. Re:Prospective Node-op Concerns by khallow · · Score: 1
      hen you have an entire workforce allowing mere German Shepherds to have a significant say as to whether or not your seat cushions will be torn up on a false positive on a "random" car stop,

      As long as the dog is properly trained, it's not part of the problem. I certainly don't have a problem with a properly justified and conducted police search searching for legitimate dangers to society like say a pipe bomb and tearing up your seat cushions based on a properly trained dog's nose. The dog is a tool and they often are pretty good at their job.

    4. Re:Prospective Node-op Concerns by register_ax · · Score: 4, Informative
      From TFM (http://tor.eff.org/cvs/tor/doc/tor-doc.html#clien t-or-server),

      Note that you can be a server without allowing users to make connections from your computer to the outside world. This is called being a middleman server.

    5. Re:Prospective Node-op Concerns by Anonymous Coward · · Score: 0

      "From a low enforcement point of view, I am accountable for any and all outbound http hits from my network."

      Just because it's their point of view doesn't mean it's going to hold up in court. I realize you don't want to go to court, but if we just roll over because the police are abusing the law, don't you think they will just learn to abuse it more? Keep in mind you would probably get free legal counsel in the form of the EFF. You would still want your own lawyer of course.

      "At worst case, if my node does the actual http hits to sites like www.some-secret-kiddie-pr0n-site.com or www.some-phishing-victims-bank.com, then in all likelihood I'll be getting a visit from the police."

      You mean 1 time out of 1 billion. Try calling the police and reporting a child porn website or phishing scam. If they even talk to you, it will just be to smooth your feathers. They don't follow up on stuff like that. They *might* send the report on to the FBI, who you should probably have contacted in the first place. The FBI *might* actually look into it for a few minutes, or at least see if it crosses any of their current cases. If they decide they have any interest, they will snoop your Internet connection for a while, find out you're running a Tor server, and go away. That is 1,000,000 times more likely than any of the scenarios you describe.

    6. Re:Prospective Node-op Concerns by Have+Blue · · Score: 1

      There is no "good" solution here. You are responsible for what passes through your system, end of story. That's what responsibility is- where the shit splatters after it hits the fan. And that's why I'm not going to let anyone I don't already trust touch my systems in a million years.

    7. Re:Prospective Node-op Concerns by westlake · · Score: 1
      Any thoughts on this?

      I think you have pretty well summed up why no one is chomping at the bit to host Freenet or Tor. If you can't define and limit your exposure, the risk is not acceptable. If free speech is the rallying cry, but the trade in child pornography the reality, you can make a principled decision to opt out.

    8. Re:Prospective Node-op Concerns by larytet · · Score: 1
      "You are responsible for what passes through your system, end of story"

      Frankly i do not understand how Tor is in any way better than Mute or Ants.

      Tor network reached 100 servers recently. it means that there are 100 IP addresses which are needed to be blocked to shutdown the whole network.

      i must say that Websense blocks about 10K websites related to proxy severs. Websense blocks lists of Proxys, commercial proxys like anonymizer and open source projects like HTTPTunnel. What prevents any government or ISP to block 100 IPs ? The following screenshot was taken a couple of minutes ago http://larytet.sourceforge.net/betaTesting/websens e_Tor.PNG

      i truly do not understand all the fuss about the application. With all respect to EFF, i think it was wrong to choose one application among may be 10 others. I will put it bluntly - i think EFF makes mistake encouraging this or that specific project.

  22. Re:Yeah, and I got slapped by slashdot for using i by WhatAmIDoingHere · · Score: 1

    I think that may be what that "I'm using an open proxy, ban me!" posts were about. Getting open proxies banned.

    --
    Not a Twitter sockpuppet... but I wish I was.
  23. Screw the children! by poptones · · Score: 5, Insightful

    And screw the chinese. It amazes me how people still drag out this inflamed and rancid red herring every time there is a discussion of anonymity on the net.

    Remember when it was SUPPOSED to be about freedom of speech? Yeah even when it's the "bad" kind. Look how they keep these kiddie porn pictures locked away where only a tiny few detectives and the pervs who obsessively seek out the images can find them. When they FINALLY admit defeat and roll out a few carefully altered pictures worldwide in an unprecedented "have you seen this place" (still cannot see the kid who probably could have been identified much quicker) they find out the guy was locked up and the girl has been safe now for YEARS!

    How many years did she go on being abused because the friends and neighbors of this kid never had the chance to identify her?

    Now, having said that let me remind you of something else: "child porn" is a moving target and especially in the US there is a VERY heavy footed march toward defining anyone under the age of 18 as a "child."

    And the primary motivation for this is NOT to stop at "child porn" but to stamp out every modeling site and every ADULT porn publisher by overloading them and binding them with red tape and overzealous, politically correct "laws" brought about through uniting the most intrusive elements of the right wing religious nuts and the left wing feminist nuts. The door was thrown open decades ago when the court said "intent" was good enough for prosecution even in cases of pictures where no "harm" was done to the children and that was all about one thing: punishing people for beiung who they are and not punishing them for their actions.

    I've said this before here and people go "oh they can';t get away with tat we have the supreme court" well yeah, it was the SCOTUS that sent down the first ruling and did so even in a much more liberal atmosphere, think of how that might go today. Better yet just look around, watch the news over the next few weeks and you will see it being played out right before you.

    In germany magazines target at 13 to 15 year olds have frontal nudity and articles on buying condoms and giving head. They prepare kids for adulthood and recognize their right to their own bodies and their own sexuality. In the US and UK the political machination is moving in the exact opposite direction, seeking to strip away even adults from their inalienable liberty of self.

    Just watch... you'll see soon enough.

    1. Re:Screw the children! by Gibsnag · · Score: 1

      'Tis a good point. At 16 in the UK, I can now sleep with a girl, marry her, start a family. But if I were to take a picture of us having sex then I'd be a paedophile.

      Weird, no?

      Almost as irritating is general conservative attitude on youth's loss of morals, teenage pregnancy on the rise etc, but then they talk of raising the legal age for sex. Whats the best way to make a teenager want to do something? Make it illegal of course. Duh!

    2. Re:Screw the children! by baadger · · Score: 1

      At 16 I believe you still need parental consent on marriage. At 18 you can marry even if they oppose the marriage.

      I could be wrong

    3. Re:Screw the children! by poptones · · Score: 1

      Where I live a girl of 13 is "legal" if she is no longer a virgin. But if you are more than a few years older you can still be tried if she is under 16. Yet you can marry her with her parent's consent as young as 14.

      It's a screwed up mess and the way things are heading it is only going to get worse. I know a couple of teenage girls who model for websites, I can assure you they are not "victims" except to those who insist on "protecting" them from their own desire for expression - and they do not seem at all happy about the way the puritans running the show right now are taking things, either. These are real people - kids - who make money from those sites, one of them is stashing it away for college and every one of the "crackdowns" like has been going on lately drives off customers and impacts them financially as well as emotionally.

      Ye olde backlash can be a real bitch... and these kids are soon going to be of voting age. I just hope they start hitting their marks before the courts are able to completely overturn the constitution.

    4. Re:Screw the children! by Gibsnag · · Score: 1

      Yeah, you do need parental permission. Although, not if you elope to Scotland or something.

      One sure fire way to piss your parents off.

    5. Re:Screw the children! by Anonymous Coward · · Score: 0

      These "teen models" and their parents are hustling your pedo ass, you don't really know what they think.

    6. Re:Screw the children! by Bontux · · Score: 1

      Oh yes, I was perpared for adulthood by learning how to fuck properly.

      Isn't there a difference between knowing your own sexuality and perversion. I bet you in Germany those 13 to 15 year olds are buying the magazines for the articles. I bet you also that they probably put those pictures in the magazines so that they will sell more and if they could do that here in North America, they would.

      --
      I stole this signature
    7. Re:Screw the children! by Anonymous Coward · · Score: 0
      If you don't know how to please a lover and how not to ruin your life doing it, you certainly aren't prepared for adulthood.

      Of course there's a difference--"perversion" is everyone else's sexuality, not your own.

  24. Tor DNSBL by OverlordQ · · Score: 4, Informative

    And dont forget the TOR DNSBL, since you know TOR is just itching to be abused.

    --
    Your hair look like poop, Bob! - Wanker.
  25. What is the use of anonymous networking? by photonic · · Score: 4, Interesting
    The ones I can think of are
    1: political groups trying to hide from censorship
    2: diplomatic/spy-agency messages
    3: P2P
    4: criminal/terrorist/pedophile activity

    I think most people would agree that the great benefit of such a network is number 1. Number 2 is well accepted practice over the last 100 years, so I think there are not much objections against that. Number 3 might be the biggest selling point of this technique, allthough somewhat ethically debatable. I think this problem will be solved in the next 10 years by either the collapse of the content industry or the availibility of better alternatives. That leaves number 4. Is there anything that can be done against that or must this be seen as 'collateral damage'?

    --
    karma police: arrest this man, he talks in maths; he buzzes like a fridge, he's like a detuned radio. [radiohead]
    1. Re:What is the use of anonymous networking? by Anonymous Coward · · Score: 1, Insightful

      1: political groups trying to hide from censorship
      2: diplomatic/spy-agency messages
      3: P2P
      4: criminal/terrorist/pedophile activity


      Number 1 is a sub-category of number 4, they should be grouped together. Hiding from government censorship is invariably a criminal offense.

    2. Re:What is the use of anonymous networking? by kfg · · Score: 1

      That leaves number 4. Is there anything that can be done against that or must this be seen as 'collateral damage'?

      Yes, just as using envelopes and wrapping paper must be seen as causing similar "collateral damage" during use of the postal system.

      KFG

    3. Re:What is the use of anonymous networking? by Crus7y · · Score: 1

      Many websites attempt to 'customize' the information a visitor sees according to location/IP number, browser type, or your past history. I object to any website filtering in this manner and therefore see the value in anonymous networking.

    4. Re:What is the use of anonymous networking? by photonic · · Score: 1
      Number 1 is a sub-category of number 4, they should be grouped together. Hiding from government censorship is invariably a criminal offense.
      With number 1 I was thinking in terms of freedom of speech, e.g. the student movement before the revolutions in Serbia and Ukraine. What is illegal locally might be interpreted as resistance from a global perspective. The border between terrorists and freedom-fighters is a shady/subjective one, but it is a border nevertheless.
      --
      karma police: arrest this man, he talks in maths; he buzzes like a fridge, he's like a detuned radio. [radiohead]
    5. Re:What is the use of anonymous networking? by Lifewish · · Score: 1

      Well, when I clicked on the ImageMagic link in the article I got the lovely message "Your IP has been logged. Please enter your email address so we can send you the link you wanted".

      I don't want my IP address to be logged. My computer has been portscanned twice in the last week (which is freaking my uni's computer dept out slightly). Apparently I pissed someone off and they're looking for ways to get back at me. The more information on me and my computer that's spread round the net, the easier this is. It's not paranoia if they really are out to get you.

      As such, I will hopefully be using anonymous proxies in future, as soon as I figure out how to set up yaph so that the computer dept won't complain.

      --
      For the love of God, please learn to spell "ridiculous"!!!
    6. Re:What is the use of anonymous networking? by tp9674 · · Score: 2, Interesting

      If the great benefit is allowing people to hide from censorship, how about having a whitelist of sites that can be visited through your Tor Server?

      A good start might be all the appicable sites currently blocked by the great firewall of China (e.g. BBC and goolge).

      I know I'd be a lot happier to run a server if I knew that my computer would not be publicly accessing dodgy stuff.

      Admittedly this would somewhat limit the usefullness of the tool, and there is always the question of who decides what is on the list, but given the potentail number of new people that would start running servers I think it would be good if this was at least an option.

    7. Re:What is the use of anonymous networking? by khallow · · Score: 1
      I don't want my IP address to be logged. My computer has been portscanned twice in the last week (which is freaking my uni's computer dept out slightly). Apparently I pissed someone off and they're looking for ways to get back at me. The more information on me and my computer that's spread round the net, the easier this is. It's not paranoia if they really are out to get you.

      You're kidding? Unless your university is some sort of spy agency, two port scans in a week is pretty light.

    8. Re:What is the use of anonymous networking? by ziekke · · Score: 1

      Of course, in the case of using Tor you will just be getting targeted data for the last IP address in the chain of Tor nodes.

      I doubt these websites have mechanisms in place to say "Oh you're using tor, I guess we won't filter for you!"

      So instead of getting stuff targeted for you, you'll be getting stuff targeted for someone else. Seems to be lose/lose for this argument.

      --
      // Ziekke
    9. Re:What is the use of anonymous networking? by sydb · · Score: 1

      So do you agree with the gp or not? Your first sentence says you don't, the rest says you do.

      --
      Yours Sincerely, Michael.
    10. Re:What is the use of anonymous networking? by sydb · · Score: 2, Interesting

      You may restrict what an anonymous user accesses with whitelists, but without allowing unrestricted posting capability you have removed most of the benefit of an anonymous network.

      Also, restricting the Chinese to viewing the BBC and Google(? how does that work then? They can search but not link? ) is still censorship. Who makes the whitelist, and by which criteria?

      If it's down to the server operator, they become government enforcement agenies by virtue of their local laws.

      --
      Yours Sincerely, Michael.
    11. Re:What is the use of anonymous networking? by photonic · · Score: 1

      What I meant to say was that it is not a sub-category, but clearly a different category (I'm in favour of 1 not of 4). That said, I think the line between them is hard to draw and depends on your perspective (my 'western european democratic kapitalist' vision, that of a palestinian Hamas member or that of the North Korean government).

      --
      karma police: arrest this man, he talks in maths; he buzzes like a fridge, he's like a detuned radio. [radiohead]
    12. Re:What is the use of anonymous networking? by Anonymous Coward · · Score: 0

      Freedom of speech is now illegal to US governments and they are now working on removing that from the constitution via Patriot acts etc..

      Welcome to the Soviet states of amerika were speech censors you.

    13. Re:What is the use of anonymous networking? by Adult+film+producer · · Score: 1

      Well, I saw an episode of Penn & Teller's: Bullshit the other night, so I go online to find it's website and some more info about it..

      SORRY

      We at Showtime Online express our apologies;
      however, these pages are intended for access
      only from within the United States.

      WTF ! Here's the link, http://www.sho.com/site/ptbs/home.do

      Guess I'll have to anonymize myself with Tor to visit that webpage. (possibly having to press reload a few times to make it work.)

    14. Re:What is the use of anonymous networking? by Anonymous Coward · · Score: 0

      I have to say WTF just the same. I've never seen the advantage to country discriminating the people going to your bloody website.

      FYI, the google cache seems to not mind Canadians (like me) - try your luck at http://64.233.167.104/search?q=cache:5CxXjgz2VZgJ: www.sho.com/site/ptbs/+&hl=en&client=firefox

    15. Re:What is the use of anonymous networking? by Lifewish · · Score: 1

      As far as I can tell, that's incorrect. What generally happens is that script kiddies run scans by vulnerability rather than by computer - why waste time thoroughly scoping one box out when there are thousands more like it? As a result, portscans of just one computer are fairly rare, and tend to imply malicious intent - the last one was a script kiddie I ended up chatting to who got annoyed at me.

      --
      For the love of God, please learn to spell "ridiculous"!!!
    16. Re:What is the use of anonymous networking? by Anonymous Coward · · Score: 0

      well I'm familiar with a student project that is implementing online voting with onion routing being a core component of their solution.

    17. Re:What is the use of anonymous networking? by daveschroeder · · Score: 1

      No, that's not incorrect at all.

      If we worried about machines getting portscanned here, we'd need a whole new department dedicated to nothing but worrying about portscanning.

      And that includes machines that appear to be portscanned individually.

    18. Re:What is the use of anonymous networking? by Lifewish · · Score: 1

      That's interesting... cos my uni's computing service sends out individual emails to anyone getting portscanned which, as far as I can tell, are individually written (rather than just being automatically produced).

      For example:
      Our traffic logs note that xxx.xxx.xxx.xxx (xxxxx.xxxxxx.cam.ac.uk) was portscanned by 193.195.51.234 (no-dns-yet.demon.co.uk) around 17:00 to 17:20 yesterday.
      Are you aware of any reason for the portscan - I believe this is the second one to your system this month?
      Stella


      I'm at a reasonably large university, so you'd have thought that it'd be fairly representative. Any thoughts? I know they don't notice intrauniversity portscanning - could that be the source of the discrepancy?

      --
      For the love of God, please learn to spell "ridiculous"!!!
    19. Re:What is the use of anonymous networking? by DirePickle · · Score: 1

      It's just viewed as collateral damage. Though, the rationale behind it is that those sorts of people would be using less legal means of being 'anonymous' regardless. Stealing credit cards and cellphones and identities and using those, etc.

    20. Re:What is the use of anonymous networking? by Anonymous Coward · · Score: 0

      Your university is probably the only one in the world to give a rat's ass about port scans. Tell Stella that if her network is so insecure it can't handle being scanned, then something's wrong.

    21. Re:What is the use of anonymous networking? by Anonymous Coward · · Score: 0

      This is probably a good example of a "machine that goes ping" - someone has some package that notifies them of port scans, and because they had never taken the time to watch real network traffic - they don't realize that the net is buzzing with random traffic and therefore they msitakenly think that a few port scans are significant. - I wonder what she does about the ssh brute force attempts that happen daily on every box on the net that has port 22 open and responding...

      Does Stella realize that /. scans a bunch of ports on your machine when you try to post comments? - If not, you may be getting some more emails from her soon.

    22. Re:What is the use of anonymous networking? by TCM · · Score: 1

      possibly having to press reload a few times to make it work

      You can visit http://serifos.eecs.harvard.edu:8000/cgi-bin/exit. pl and pick a node in a preferred region and then use that node as a preferred exit node. Check the TOR manual.

      --
      Of course it runs NetBSD. BTC: 1NT7QvbetmANwaMzhpVL6
    23. Re:What is the use of anonymous networking? by TCM · · Score: 1

      4: criminal/terrorist/pedophile activity

      What disturbs me the most is that you had to tear out the terrorists and pedophiles separately. Are they not criminal or somewhat special criminals?

      Ah right, they hit a nerve. My bad. </sarcasm>

      --
      Of course it runs NetBSD. BTC: 1NT7QvbetmANwaMzhpVL6
    24. Re:What is the use of anonymous networking? by TCM · · Score: 1

      RTFM:

      ExitPolicy policy,policy,...
      Set an exit policy for this server. Each policy is of the form "accept|reject ADDR[/MASK]:PORT". If /MASK is omitted then this policy just applies to the host given. Instead of giving a host or network you can also use "*" to denote the universe (0.0.0.0/0). PORT can be a single port number, an interval of ports "FROM_PORT-TO_PORT", or "*".

      So, yes, you can filter what people can connect to from your node. This can range from middleman-only mode with a reject *:* to a conservative acceptance of some select SSL-only services or port 80 if you can take the heat. Or you could restrict the nets that people can connect to.

      --
      Of course it runs NetBSD. BTC: 1NT7QvbetmANwaMzhpVL6
  26. About the RIAA/MPAA by Anonymous Coward · · Score: 0

    The problem I see running a Tor node is that when someone is using Tor to hide their p2p traffic and gets routed thru you as the last node, the RIAA/MPAA is likely to see you as the up/downloader and sue you.

    I have thought about using Tor to be the bad netizen your post refers to.
    Like many University instead of free speech my university has a PC based speech code that threatens expulsion (or reeducation) if what you say is judged to be politically incorrect. Ironically, the speech codes are not there to allow free exchange of ideas, but there to keeps the University safe FROM ideas.
    Also, we know that to get a good grade in many essay based classes you need to figure out the professor's philosophy and parrot it back to them. For example, I had an English class where the best way to get an A was to relate everything to death. In Freshman English every paper had to be about how the women of the piece were oppressed. I got good grades in both classes.
    I have been forced to post in class related forums and have read my professor's blogs. Often I have thought "Wouldn't it be nice to be able to say something that I believed in." I would like the anonymous protection Tor offers. I run my own website at it would be trivial for these people to find out who I am from the IP address of the post. And, I have seen disagreements with these people's ideas lead to physical attacks, keying of cars, ostracizing, bad grades, and of course, the ever popular violation of the speech code charges.
    The use of systems like Tor would allow what some people may characterize as bad netizen behaviour.

  27. Eat it too? by kristopher · · Score: 1

    So does this mean that I can have my porn and .. Eat it too?

  28. DDOS at 70Kb.second... by poptones · · Score: 4, Interesting

    I use tor routinely. I'm using it right now. I have it on my laptop, too. It goes browser>privoxy>tor>website. There are only a tiny few sites where I go around this chain (slashdot here is one of them, but not the "affiliated" sites). Is it because I have something to hide?

    Yeah, I do. Just like I put on pants before I leave the house, the same way I keep my money in a wallet and not on a chain around my neck.

    I have a right to a reasonable expectation of privacy and this allows me to have some of that. When I am on my laptop on the filthy campus network I don't have to worry someone sitting across the hall with a packet sniffer on his laptop is eavesdropping on my browsing. And if I want to go haul in something off edonkey or even the evil mean and nasty freenet I can do so from anywhere on campus even behind the firewall that filters out all p2p traffic to the commons areas.

    But to say people are going to use this to ddos sites is just stupid. Use the network before making such claims and see for yourself how it works. People who ddos sites don't need tor and wouldn't bother, it's too slow, too easy to trace via timing analysis, and the convenience factor alone means it will probably remain slow due to contantly being overloaded.

    The people who ddos sites are going to run a scanner on a couple of irc servers, track down the same poorly configured and/or rooted out proxies all the script kiddies sharing movies and wanking in front of webcams are trying to hide behind, and set up a few chains with some decent bandwidth to stage an attack...

    1. Re:DDOS at 70Kb.second... by big+tex · · Score: 1

      Is it because I have something to hide?

      Yeah, I do. Just like I put on pants before I leave the house...


      Way to let the cat out of the bag, Nancy.

      Me, I wear pants because sunburns down there hurt.

      --
      I think I need a new sig here.
    2. Re:DDOS at 70Kb.second... by poptones · · Score: 1

      Tha name is Mary, frank.. and don't you forget it!

    3. Re:DDOS at 70Kb.second... by hacker · · Score: 4, Informative
      "But to say people are going to use this to ddos sites is just stupid. Use the network before making such claims and see for yourself how it works. People who ddos sites don't need tor and wouldn't bother, it's too slow, too easy to trace via timing analysis, and the convenience factor alone means it will probably remain slow due to contantly being overloaded."

      You may think its stupid, but unfortunately, its reality. The reality is that even though it slower, its still effective.

      Here is an example of some log entries of spammers using Tor to forge referers and trackback spam to domains I host. Whatever tool they're using "broke" the url because they lowercased it (the url is valid, if the 'q' is uppercased).

      At first I thought it was a new worm hitting us, but its coming too fast from far too many IPs in a very predictable pattern to be a random worm. The list of countries represented is very un-wormlike.

      We survived 2 slashdottings 2 days in a row last week, barely a blip on our network radar, bu t a few days later, we were hit with this mountain of traffic from random locations, all within a 10-15 minute span, and only about an hour after I blocked the entire country of Brazil from reaching port 25 (the whole 200.0.0.0). Its definately maliscious, and definately intentional. I'm fending off attacks on our servers almost daily now, from netbios floods to SYN and TIME_WAIT attacks, to other things. I've been using the TARPIT module in iptables to slow things down, but they keep on coming, from thousands of unique IPs, across all range of our open ports (22, 53, 80, 2401, whatever).

      So yes, Tor is most-definately being used to spam and DDoS sites, that is a fact and reality, which I can consistently prove with graphs, logs, and charts.

      But it does serve a valid purpose, so I don't block the Tor IP range... yet.

    4. Re:DDOS at 70Kb.second... by hacker · · Score: 1
      (Replying to myself here)..

      I just did some more searching with geoip, and this is the current sorted, unique list of countries currently spamming us with this Poker trackback DDoS crap:

      GeoIP Country Edition: AE, United Arab Emirates
      GeoIP Country Edition: AR, Argentina
      GeoIP Country Edition: AT, Austria
      GeoIP Country Edition: AU, Australia
      GeoIP Country Edition: BO, Bolivia
      GeoIP Country Edition: BR, Brazil
      GeoIP Country Edition: CA, Canada
      GeoIP Country Edition: CH, Switzerland
      GeoIP Country Edition: CI, Cote D'Ivoire
      GeoIP Country Edition: CN, China
      GeoIP Country Edition: CO, Colombia
      GeoIP Country Edition: CY, Cyprus
      GeoIP Country Edition: DE, Germany
      GeoIP Country Edition: DK, Denmark
      GeoIP Country Edition: DZ, Algeria
      GeoIP Country Edition: EE, Estonia
      GeoIP Country Edition: EG, Egypt
      GeoIP Country Edition: ES, Spain
      GeoIP Country Edition: FR, France
      GeoIP Country Edition: GB, United Kingdom
      GeoIP Country Edition: GR, Greece
      GeoIP Country Edition: GU, Guam
      GeoIP Country Edition: HK, Hong Kong
      GeoIP Country Edition: HN, Honduras
      GeoIP Country Edition: HU, Hungary
      GeoIP Country Edition: IL, Israel
      GeoIP Country Edition: IN, India
      GeoIP Country Edition: IP Address not found
      GeoIP Country Edition: IR, Iran, Islamic Republic of
      GeoIP Country Edition: IT, Italy
      GeoIP Country Edition: JO, Jordan
      GeoIP Country Edition: JP, Japan
      GeoIP Country Edition: KR, Korea, Republic of
      GeoIP Country Edition: KY, Cayman Islands
      GeoIP Country Edition: KZ, Kazakhstan
      GeoIP Country Edition: LB, Lebanon
      GeoIP Country Edition: MX, Mexico
      GeoIP Country Edition: MY, Malaysia
      GeoIP Country Edition: NG, Nigeria
      GeoIP Country Edition: NL, Netherlands
      GeoIP Country Edition: NO, Norway
      GeoIP Country Edition: NZ, New Zealand
      GeoIP Country Edition: PH, Philippines
      GeoIP Country Edition: PL, Poland
      GeoIP Country Edition: PT, Portugal
      GeoIP Country Edition: RO, Romania
      GeoIP Country Edition: RU, Russian Federation
      GeoIP Country Edition: SA, Saudi Arabia
      GeoIP Country Edition: SD, Sudan
      GeoIP Country Edition: SE, Sweden
      GeoIP Country Edition: SG, Singapore
      GeoIP Country Edition: SV, El Salvador
      GeoIP Country Edition: TH, Thailand
      GeoIP Country Edition: TN, Tunisia
      GeoIP Country Edition: TR, Turkey
      GeoIP Country Edition: TW, Taiwan
      GeoIP Country Edition: US, United States
      GeoIP Country Edition: VE, Venezuela
      GeoIP Country Edition: VN, Vietnam
      GeoIP Country Edition: ZA, South Africa
      GeoIP Country Edition: ZW, Zimbabwe
    5. Re:DDOS at 70Kb.second... by farble1670 · · Score: 2, Funny
      Yeah, I do. Just like I put on pants before I leave the house

      don't flatter yourself. no one cares what is in your pants.

    6. Re:DDOS at 70Kb.second... by poptones · · Score: 1

      [i]You may think its stupid, but unfortunately, its reality. The reality is that even though it slower, its still effective.[/i]

      "Effective" in what way? that it is a nuisance? Or that it has knocked you into darkness? according to your parable there you haven't yet been knocked down by it and you don't talk like you are from cnet or Microsoft or someplace "big." If such an "attack" cannot even knock you down what chance does it have in a larger attack?

      the fact some absuse goes on is both to be expected and, given the purpose of tor in the first place, not entirely "bad." In a network of few central arteries where some degree of anonymity is the intended function having so many packets bouncing around willy nilly helps to clutter the channel, to reduce the likelihood of an atacker launcing a successful timing attack against someone with legitimate interests.

    7. Re:DDOS at 70Kb.second... by hacker · · Score: 1
      "If such an "attack" cannot even knock you down what chance does it have in a larger attack?"

      My point was that 10k of data from 100 concurrent hosts is barely noticable on the radar, but 10k of data from 100,000 concurrent random and always changing hosts is very disruptive to production services.

      I'm not denegrating the need for Tor, just that the OP stated that it couldn't be used to DDoS or abuse servers, and I've pointed out several cases where exactly that condition is occurring... daily.

    8. Re:DDOS at 70Kb.second... by Iamnoone · · Score: 2, Interesting
      I would agree with abuse, I just think that the term ddos is used more for the cases of overwhelming traffic from thousands or tens of thousands or more different hosts. Since TOR has at most several hundred egress points, it seems that if the attacks are coming from thousands of IP addresses that there must be some non-tor attacks going on - or are they using their own separate TOR network?

      BTW, not sure if the firewall you are using can do this, but pf for OpenBSD can do SYN proxying and has per IP TCP connection and connection rate limits - so you can limit the total number of simultaneous TCP connections from one IP and auto-blacklist an IP for exceeding X number of connection attempt per Y timeframe.

      Cool netstat graphs, what are you using to create those?

      I count only 225 TOR egress points right now, maybe you could compare these to your list of attackers (I spot checked some from your example and I don't see them on the list):
      wget -q -O - 'http://serifos.eecs.harvard.edu:8000/cgi-bin/exit .pl?addr=1' | perl -ne 'if (/whois.pl\?q=(\d+\.\d+\.\d+\.\d+)/) { print $1."\n"}'
    9. Re:DDOS at 70Kb.second... by Anonymous Coward · · Score: 0

      You would if he was a waiter serving you at a restaurant and came to work without pants or underwear!

      "Here's the sausage you ordered, sir!"

    10. Re:DDOS at 70Kb.second... by drdink · · Score: 1

      I took a sample of 6 IPs from your IP list. None of them were listed in the Tor DNSBL (tor.dnsbl.sectoor.de). However, all of the ones that were still online had open HTTP or HTTP POST proxies. I'm going to postulate that you are not being attacked by a Tor drone network but instead a standard drone network of infected machines.
      That said, it doesn't disprove Tor as being available and usable for abuse. I have seen it being used to cause high volumes of spam. As others have said, Tor is slower and you may have problems pumping a lot of data through it. However, nothing prevents you from having many connections into the Tor network and getting the job done with high volumes of data instead of the rate of data. If you have enough bandwidth to work with and enough different points into the Tor network (so you don't saturate it badly), you're set.

      --
      Beware, Nugget is watching... See?
    11. Re:DDOS at 70Kb.second... by Iamnoone · · Score: 1

      Last time I checked no one had egress for port 25 open on their nodes and the TOR docs mentioned that IIRC. Personally, I'd like to be able to send non-spam via TOR for testing and low volume uses, but I'd have to run a port 25 enabled exit node myself.

    12. Re:DDOS at 70Kb.second... by drdink · · Score: 1

      Or find/use a server that listens on Submit (587/tcp).

      --
      Beware, Nugget is watching... See?
    13. Re:DDOS at 70Kb.second... by dgatwood · · Score: 1
      Talking to yourself is the first sign of madness.... :-D

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

  29. If I didn't know better... by whitetiger0990 · · Score: 1

    I'd say
    How can you verify you have nodes on an anonymous network if they're anonymous and can't be seen?

    Sheesh silly people. I bet the 101th is just hiding there.


    But then again... I know better.

    --
    You have been warned.
  30. Anecdotal data point by Cally · · Score: 4, Interesting

    I've a friend, a Mac freak, who'se in Beijing on an intensive Chinese language course. I suggested he try tor out, expecting to have lots of hassles walking thru his first ever configure / make / install cycle. Eventually he tried it out & got it working without any help from me - just let me know he was using it, it was working fine, and to remind him to give a donation to the EFF (I'd mentioned making a donation myself a few weeks earlier.)

    --
    "None are more hopelessly enslaved than those who falsely believe they are free." -- Goethe
  31. Same handle? by noidentity · · Score: 1

    Let me guess, everyone's handle is "Tor"? "Sorry officer, you'll have to tell us which Tor you're looking for."

    1. Re:Same handle? by Lesson+No.+25 · · Score: 1
      Let me guess, everyone's handle is "Tor"? "Sorry officer, you'll have to tell us which Tor you're looking for."
      I'm Sparticus!
  32. Read: VERIFIED by poptones · · Score: 2, Informative

    it is 100 verified nodes. To become "verified" is to be "blessed" wiht a certain level of trust. It means your node is held somewhat accountable, it can be trusted to not be intercepting packets. Although every packet is re-encrypted at each node and it knows only the IP of the next and last in the chain, honeypots could do some damage because there is likely to be some incriminating content inside the packet itself - cookies, usernames, etc. So the tor net is setup by default that the first and last hops go through "trusted" nodes but traffic in the middle may go through untrusted nodes - and anyone can setup an untrusted node and, in fact, tor comes OOTB ready to run as an untrusted server if it detects you have a decent connection to do so. So in this respect the TOTAL number of nodes is constantly changing as people enter and leave the network. The total number of nodes is separate and not directly related at all to the number of TRUSTED, registered nodes.

    1. Re:Read: VERIFIED by Anonymous Coward · · Score: 0

      So the tor net is setup by default
      anyone can setup an untrusted node

      "set up". ("setup" is a noun.)

  33. Blame the MPAA/RIAA? by Anonymous Coward · · Score: 1, Insightful

    Since people like to blame each other for anything these days, here's an interesting thought:

    1. RIAA/MPAA starts to sue file-sharers, thus increasing the worldwide number of "criminals" by several million, while nobody asks for the reasons why filesharing is so popular and how to prevent people from "pirating" by, for example, lowering prices.

    2. Millions of newly declared criminals need a way to protect themselves; they create anonymous P2P networks and/or participate in them. The decreased trust in the music/movie industry encourages piracy even more, so these networks get highly popular.

    3. Real criminals profit from the anonymous networks.

    So, in the end, why not blame the MPAA/RIAA for making terrorism and distribution of illegal pornography a lot easier?

    But instead of trying to fight the reasons for IP-theft, they're just gonna respond with new laws that'll prohibit any form of anonymous communication, which will lead to even more criminal activity; more and more restrictive copy protections will be developed that won't be tolerated by customers who will refuse to buy it and download it instead. The response will be harder laws. It's a vicious circle that can only be broken by re-enforcing trust between the industry and their customers.

  34. Don't "MOD G'PARENT DOWN" by megrims · · Score: 1

    Parent is an idiot.

  35. Re:Arrest the children! by L.Bob.Rife · · Score: 4, Interesting

    Reminds me of the girl who was arrested for possession and distribution of kiddie porn with pictures of herself.

    Please explain to me again how throwing a teenage girl in jail, and making her become a registered sex offender for the rest of her life, does something positive and helps her.

    How can somebody be both the victim and the abuser?

  36. That's a superficial argument. by rjh · · Score: 4, Insightful

    You're arguing freedom is worth any price, without considering what the word freedom means. Do the Chinese possess the human right to criticize their government freely, to talk to their fellow citizens without worrying about secret police, etc.? Absolutely so--and that the Chinese government insists on interfering with this human right is proof, in my book, that the Chinese government is illegitimate.

    But we cannot buy human rights for people in China at the expense of the human rights of people in America or Europe. I have the exact same right to speak my mind freely, to make effective use of public forums to disseminate my ideas and my views. The original poster was remarking, quite correctly, that the total lack of accountability which Tor facilitates leads directly to a radical diminishment of his ability to effectively and freely communicate.

    So you're saying that the right of Chinese dissidents to speak their minds freely is more important than my right to speak my mind freely? That I should be forced to endure a diminishment of my ability to express my views on the Internet, in order to ensure that Chinese dissidents can get their views out?

    Congratulations: you're a character in a George Orwell book. The book is Animal Farm, and you're the character that tells the farm animals all pigs are created equal, just some of them more equal than others.

    It is immoral to buy one person's freedom with another person's freedom.

    The only moral way out of this which I can see is to devise protocols which guarantee everyone's freedom--the freedom of Chinese dissidents to criticize their government without the secret police knocking, and my freedom to have the Internet available for me to publish and disseminate my own information without dealing with a crapflood of spam.

    1. Re:That's a superficial argument. by m50d · · Score: 3, Insightful

      Crapflooding doesn't make speech impossible. The right to free speech is far more important than the right to be listened to.

      --
      I am trolling
    2. Re:That's a superficial argument. by RayBender · · Score: 1
      It is immoral to buy one person's freedom with another person's freedom.

      Oh. So locking up kidnappers is immoral? Criminals in general? Trerrorists?

      People who make broad moralistic statements of black and white are wrong.

      --
      Human genome = 3 billion base pairs = 6 GBit. Windows + Office = 20 Gbit. Which is more impressive?
    3. Re:That's a superficial argument. by JadeNB · · Score: 5, Insightful

      Your ability to speak your mind freely is not impeded by a flood of spam and crap posts. Your ability to find the information you want, and the ability of other users to find the (presumably valuable) information you have provided, is indeed impeded -- but, while self-expression is a fundamental right, the `right to be heard' is not. If the price of a Chinese citizen's right to criticise his government was that I could no longer criticise mine (which, as an American, I increasingly am not allowed to do anyway), then that would be an illegitimate trade-off; but surely if the price of that same right is that I have to sort through a few (or very many) more messages to get to the ones I want, then it is selfish in the extreme to claim that the price is too high for me to pay. It is not that a Chinese citizen is `more equal' than I, only that a huge benefit accrues for a relatively small price.

    4. Re:That's a superficial argument. by Illserve · · Score: 1

      Freedom for one person always comes at the expense of freedom for another.

      My freedom to punch you in the face comes by taking away your freedom to not be punchbed in the face by me. It's a fundamental tradeoff.

      What's important is not sticking to some impossible moral high ground, but accepting that this whole governing business involves a series of clever compromises, and then figuring out what those compromises should be.

    5. Re:That's a superficial argument. by Woy · · Score: 1

      How about you get out of your high horse, and read the FAQ.

      "It is immoral to buy one person's freedom with another person's freedom." applies as much here as saying "It is immoral to buy oranges at an Apple store". But hey, you forced your Orwell reference in. You're so cool.

      --
      "If God created us in his own image we have more than reciprocated." - Voltaire
    6. Re:That's a superficial argument. by rjh · · Score: 1

      You're turning freedom into a zero-sum game. Freedom's clearly not a zero-sum game, as can be seen by looking at history. History shows us the greatest advances in human history have been those times when people have taken a stand and demanded that freedom stop being viewed as zero-sum.

      I'm willing to accept compromise and I'm even willing to accept tradeoff. What I'm not willing to accept are cheap superficialities which say that we must give up our essential freedom in order to give other people their essential freedom, without first exhausting all possibility of increasing the amount of freedom for everyone first.

    7. Re:That's a superficial argument. by Illserve · · Score: 1

      That's why you have to find the best set of compromises that result in the most freedom for everyone.

      I never meant to imply anything as silly as a zero-sum game in which freedom is linearly quantifiable.

    8. Re:That's a superficial argument. by rjh · · Score: 1

      We're entirely agreed, then, except for one thing: when do we need to start looking for compromise? I don't think it's been shown yet that we need to start compromising. I don't think it's impossible to find a technological solution which will reduce the ability of malicious users to abuse Tor, while at the same time preserving the ability of legitimate users to make use of it.

      I think that until we've struck out on technological fixes, we should be very reluctant to start making compromises of freedom. Freedoms, once diminished, are a long and hard time in the regaining.

    9. Re:That's a superficial argument. by rjh · · Score: 1
      So locking up kidnappers is immoral? Criminals in general? Terrorists?
      Yes. However, in the cases described, it is more immoral to let them go free to continue to commit crimes. The net freedom of the nation is more impaired by not imprisoning people who harm others' freedom than by imprisoning them.

      That's not to say I give the state a free ride when it comes to the penal system. The recidivist rates are nothing short of appalling. But in principle, at least, yes, you're entirely right. Locking up criminals is immoral. The only instance in which it can be justified is as a last-ditch measure to limit the amount by which the world's freedoms are being diminished.
    10. Re:That's a superficial argument. by djdavetrouble · · Score: 1

      Your ability to speak your mind freely is not impeded by a flood of spam and crap posts. Your ability to find the information you want, and the ability of other users to find the (presumably valuable) information you have provided, is indeed impeded -- but, while self-expression is a fundamental right, the `right to be heard' is not.

      Well, I realized how much like real life it is. I can go through an entire day without hearing much speech of importance or interest. It is a constant crapflood of talk about the weather and
      other smalltalk, and the spam of advertisements that attack me from every direction (billboards, signs, bus posters, subway posters, planes flying in the freaking air towing ads, blimps imploring me to buy a certain brand of tires, television ads, radio ads, fucking google adsense ads on every page, etc etc.)

      --
      music lover since 1969
    11. Re:That's a superficial argument. by Anonymous Coward · · Score: 1, Informative

      And yet, here you are, posting this comment on Slashdot, which has a pretty effective mechanism for filtering out the crap. And your non-crap comment got a pretty good rating, too, so your freedom to publish is working out well here. Doesn't it seem that anonymity plus collaborative filtering gives you the best of both worlds?

    12. Re:That's a superficial argument. by Anonymous Coward · · Score: 0

      And why should the spammers and ddosing people have their freedom limited just because you want to have your ability to express your views?
      You're buying your own freedom with the freedom of the spammers, isn't that immoral?

    13. Re:That's a superficial argument. by Have+Blue · · Score: 1

      This attitude rarely survives having one's favorite online hangout attacked. Just wait, it will happen to you sooner or later.

    14. Re:That's a superficial argument. by MoneyT · · Score: 2, Insightful

      But if those who whish to listen to you can not, surely it makes the freedom os speech useless. After all, you can blather all day long about the evils of government from your solitary confinement cell. The government isn't restricting your free speech, just who can hear it.

      --
      T Money
      World Domination with a plastic spoon since 1984
    15. Re:That's a superficial argument. by MoneyT · · Score: 1

      Hmm, I've heard that the right to be heard is no guaranteed in the context of using someone elses platform to do your talking, but when using your own platform, the right of anyone who choses to listen (and therefore your right to be heard) should be unobstructed should it not? Else what good is the right to free speech? Can you not yell about the evils of the government just as loudly from a jail cell as from a soap box?

      --
      T Money
      World Domination with a plastic spoon since 1984
    16. Re:That's a superficial argument. by siriuskase · · Score: 2, Informative

      It's a small price that allows others to express themselves more safely. You don't need to listen.

      All it does is decrease the signal/noise ratio. You may have to work a little harder to find the good stuff, but you'll will find a way, or maybe an alternative. Reminds me of email filtering somehow. It is much harder when the sender doesn't have a stable identity. But, if all your legitimate senders have stable addresses, you can filter out the others. It also reminds me of seti, if you don't want to listen, you don't need to, there is probably someone more motivated than you.

      --
      If you must moderate, please moderate as irrelevent, not something bad, because I'm sure someone will find this interest
    17. Re:That's a superficial argument. by Illserve · · Score: 1

      Of course you need to start compromising. My freedom to send spam anonymously is fundamentally at odds with your ability to not receive spam.

      You can put in spam filters, but it will always be an arms race in which either you or I are winning at any moment.

    18. Re:That's a superficial argument. by JadeNB · · Score: 1
      Can you not yell about the evils of the government just as loudly from a jail cell as from a soap box?


      That's a very good point, and I agree, but I think there is an important distinction to be made between someone who is impeding your ability to be heard so as to silence you (a government censoring opposing opinions) and someone who is impeding your ability to be heard indirectly (a spammer who has no wish to drown out your post in particular). They cause the same, or much the same (because with a spammer at least your message can be seen, even if it is lost in a crapflood or marooned in a forum to which no attention is paid), end result, but I think it is the former sort of person who is the more threatening to society.
    19. Re:That's a superficial argument. by m50d · · Score: 1

      People can, it just takes a little more effort. No one expects the government to keep the streets clear so that you can have your conversation there. If there's a marching band going by and playing so you can't even hear yourself think, tough. You can arrange a private discussion if you want to.

      --
      I am trolling
    20. Re:That's a superficial argument. by MoneyT · · Score: 1

      Provided the marching band was scheduled of course. However, breech of peace is still law and people do expect the government to keep the streets reasonably clear. Were someone in a mask constantly running marching bands down the street every day all day, you can bet your ass the government would be stepping in.

      --
      T Money
      World Domination with a plastic spoon since 1984
    21. Re:That's a superficial argument. by Anonymous Coward · · Score: 0

      Doesn't it seem that anonymity plus collaborative filtering gives you the best of both worlds?

      Depends if you put a pack of pinko arse-pounders in charge of the collaborative filtering ;)

  37. Bot kiddiez by Anonymous Coward · · Score: 0

    All I've seen this used for is to hide irc bot origins. This is good in WHAT way?

  38. Anonymity is NOT about free speech... by Anonymous Coward · · Score: 2, Insightful

    If you're anonymous, than you're not speaking freely. Sure, it has it's place in allowing those who are in a position to provide a pointer to society in the direction of evil which may then be discovered when that person doing the pointing would othersie lose his privilege to said information by revealing his presence. Beyond that, it's counter productive in building liberty.

  39. Re:Working URL for graphics by Anonymous Coward · · Score: 0

    this is goatse

  40. Re:Thoughts from a Tor user and server by commanderfoxtrot · · Score: 2, Interesting

    I've been using tor for about six months now; not for all browsing, but for times when I want to be anonymous. It is a bit slower, but I personally value my anonymity for certain things. As someone below has pointed out, it's like leaving the house without wearing trousers.

    I've been running a verified server node for the last couple of months- it's a good way to give back to the community. It's really easy to set up and makes you feel good :-)

    Note you don't need to verify your node- you can just run it anyway. I didn't verify it until I received a nice friendly email from the EFF/tor people asking if I would register - from a human - and I did.

    The more tor routers there are, the faster the service may become.

    --
    http://blog.grcm.net/
  41. Bad link by The+Cisco+Kid · · Score: 1

    The link given in the summary was http://eff.tor.org/ , but that leads to some site that... well, Im not sure what it is (one link leads to a list of what appears to be footraces, the other link goes to some photos.)

    I beleive they meant to say http://tor.eff.org/

  42. url in story wrong by Anonymous Coward · · Score: 0
  43. A heddy the disembodied head post by Anonymous Coward · · Score: 0

    http://tinyurl.com/bk7x2

    Hi,

    A while back I was involved in a bizzarre accident. I lost my arms and
    legs in it. Yet I do try to keep a positive outlook even though my arms
    and legs aren't the only things I lost. Actually, I'm just a head being
    kept alive in a university lab. Of course, you can tell this will mean
    that petting and fucking are out of the question, but I give great blowjobs
    (if you grab my ears and move me around) and I LOVE having my neck kissed.
    Also, for the women, if you doubt my talents at using my tongue... how do you
    think I am typing this post?

    I'm sure, judging by what I've seen on this group, that there are guys
    out there who will be interested in dating a disembodied head and I'll
    get lots and lots of mail. Hopefully some of you lurking women will
    write too.

    I'm not interested in cybersex, but I'll be glad to invite you up to the
    lab. Just bring a bowling bag (without the ball in it) so you can sneak
    me out.

    Love and kisses,
    Heddy

  44. Tor Virtual Privacy Machine by Anonymous Coward · · Score: 0

    I have put together something similar to Metropipe's VPM, except that it's based on Tor. It includes iptables configured to only allow Tor traffic to enter/exit, a custom dns server that resolves addresses via Tor and all applicaitons preconfigured to connect with Tor. The package is called "Tor Desktop" and it sells for $45 with shipping on a 128MB Lexar USB JumpDrive. Also, some of the proceeds will help fund new Tor servers.

  45. You did forget one by Kythe · · Score: 5, Insightful

    5: Ordinary citizens who don't want their private information viewed/used against them either by hackers or by law enforcement personnel who abuse their power

    The more law enforcement is simply trusted to do the right thing, the more you will have bad apples who don't. The phrase "power corrupts" describes a very real phenomenon.

    --

    Kythe
  46. Some tor users are a nuissance on IRC by borgheron · · Score: 5, Interesting

    I am usually all for anything the EFF does, but...

    As an op, I've had to ban parts of tor because a lot of flooding, spamming, etc comes from that domain. Despite the EFF's push to create an "anonymous haven" it's basically turned into a thieves paradise which allows one to carry out attacks without fear of being detected.

    Later, GJC

    --
    Gregory Casamento
    ## Chief Maintainer for GNUstep
    1. Re:Some tor users are a nuissance on IRC by Anonymous Coward · · Score: 0

      Yes, many sites are banning tor IPs now because it seems to mostly be used for spamming and flooding.

      This is why truely anonymous connections will never work. The ratio of abuse to use will always be about 1000:1.

    2. Re:Some tor users are a nuissance on IRC by Phantasmo · · Score: 1

      Maybe the solution isn't "stop Tor" but "replace IRC?"

      --

      The US Army: promoting democracy through unquestioned obedience
    3. Re:Some tor users are a nuissance on IRC by borgheron · · Score: 1

      Any system is susceptible to abuse, no matter whether it's IRC or email or something else entirely.

      The fact is that anonymity encourages some people to be assholes. While some people will simply use it as it's intended, others will use it as a cloak to prevent any kind of tracibility so that they can flood, abuse, and otherwise be assholes without anyone having a hope of finding out who they are.

      For myself, I make it a point never to post anonymously, although it's my right to do so. I feel it's important that people know it's *me* expressing the views and that I have the courage to be identified with those views. Posting anonymously is similar to using tor as you can be a dick and not really have to pay the price for it. At least when/if I'm ever a dick people know it's me being one.

      Later, GJC

      --
      Gregory Casamento
      ## Chief Maintainer for GNUstep
  47. Re:Can't post to Wikipedia either by astralbat · · Score: 2, Interesting
    This from the Tor FAQ:

    Wikipedia is currently blocking many Tor server IPs from writing (reading still works), because they haven't figured out internally how to deal with the fact that they want to provide open access but they also have no ways to control abuse to their website. We're working with them to resolve this.

  48. Your Conclusion Has Some Problems. by nurb432 · · Score: 1

    Using your analogy, i guess we need to ban ( or monitor - 'safeguard' ) the rest of the internet too. Since there are '100's of bad uses'.

    Hell, with your menatlity we should also ban ( or monitor ) guns, sticks, cars, streets, shoes... books...

    We have a right to privacy. Regardless of how SOME incorrectly use that right. THEY should have that right restricted, not the rest of us.

    --
    ---- Booth was a patriot ----
  49. Re:Arrest the children! by Anonymous Coward · · Score: 0

    Because she's spreading that filth! Every time she sends out another vile picture of herself, she's abusing herself all over again. Who is going to protect her from disgusting monsters like her?

    (and now the obligatory violent send-off of kiddie porn posts) Her eyes should be poked out slowly with needles and then she should be strung up by the balls and slow roasted over a fire. That's the only way to deal with people like her who harbor such disgusting, perverted thoughts!

  50. Slow Bla bla Slow by nurb432 · · Score: 2, Insightful

    Im sure there will be plenty of complaints 'but its slow, it sux'.

    Having a anonymous network or a fast one are mutually exclusive.

    If you want to be anonymous you have to give up speed, its the trade off.

    If you want speed, then you give anonymity up.

    --
    ---- Booth was a patriot ----
  51. That's an amazingly twisted argument by swillden · · Score: 2, Informative

    The crapflooding doesn't prevent you from speaking at all. At worst it makes your speech harder to find, but it in no way prevents those who want to hear you from listening, or you from speaking.

    The most bizarre part of your argument, however, is the assumption that lack of anonymity cannot possibly hurt your ability to speak. I'll grant you that the western world does a much better job of allowing you to say what's on your mind than China does, but if you believe that no censorship happens here, you're sadly mistaken. Consider SLAPP suits, for one example.

    Anonmyous communication helps those with suppressed views in the west just as much as it helps those with suppresed views in China. It also helps those who just like to flood the world with crap. The solution is better filtering and ways to reduce the incentive to spam, not eliminating anonymous speech.

    --
    Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    1. Re:That's an amazingly twisted argument by rjh · · Score: 1

      I never argued against anonymity. It would be absolutely crazy of me to do so; anonymity has a long and honored tradition in American political theater. After all, the Federalist Papers were originally published anonymously, and I'm of the belief they're among the most important political tracts in human history.

      I only argued against the (in my mind grotesque) belief that it's acceptable to purchase essential human rights for one oppressed party at the price of essential human rights for a privileged party. The right to speak freely and the right to assemble (online or offline) are essential human rights without respect to whether you're rich or poor, whether you're privileged or underprivileged, whether you live in China or America. It's just as immoral to deprive a free American of those rights to give it to Chinese dissidents as it would be to further oppress a Chinese citizen in order to enhance American freedom.

    2. Re:That's an amazingly twisted argument by swillden · · Score: 1

      I only argued against the (in my mind grotesque) belief that it's acceptable to purchase essential human rights for one oppressed party at the price of essential human rights for a privileged party.

      That's true.

      What does it have to do with the discussion at hand?

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    3. Re:That's an amazingly twisted argument by rjh · · Score: 1

      The parent poster was justifying Tor's existence by making a claim that the freedom of, e.g., Chinese dissidents was worth us in the West giving up some of our freedoms to effectively communicate.

      If it were truly a zero-sum game, I might be tempted to agree with the parent. But it's not a zero-sum game. We don't know that it's impossible to increase freedoms for everyone--to give, e.g., Chinese dissidents the freedom to criticize their government, while at the same time giving us in the West freedom from those who abuse anonymity.

      The only time a compromise of freedom can be justified is when every reasonable method at increasing everyone's freedom has failed. What so offended me was the parent poster's glib assumption that it was necessary for us in the West to lose an essential freedom (the right to have our public forums be free from those who abuse anonymity) so that other people elsewhere might gain an essential freedom.

    4. Re:That's an amazingly twisted argument by MoneyT · · Score: 1

      And being thrown in jail doesn't prevent you from speaking at all, it just makes your speech harder to find.

      The parent is right, we need to try and find a solution which serves to further freedoms without denying those same freedoms from others.

      --
      T Money
      World Domination with a plastic spoon since 1984
    5. Re:That's an amazingly twisted argument by swillden · · Score: 1

      What so offended me was the parent poster's glib assumption that it was necessary for us in the West to lose an essential freedom (the right to have our public forums be free from those who abuse anonymity) so that other people elsewhere might gain an essential freedom.

      Okay, and what so offended me was your apparent assumption that we don't need to defend our own essential freedom to be anonymous, or that that essential freedom isn't more important than the inconvenience of spam, etc.

      Perhaps you didn't mean to say those things, but, if not, it wasn't obvious.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    6. Re:That's an amazingly twisted argument by swillden · · Score: 1

      And being thrown in jail doesn't prevent you from speaking at all, it just makes your speech harder to find.

      No, it allows the warden to choose what you can and cannot publish.

      There's a major qualitative difference between being able to publish your views to the world at large, even if they have to wade through a lot of crap to pick out your stuff, and not being allowed to publish your views to anyone other than your cellmates and guards. For that matter, if he wants to, in prison the warden can shut down your ability to share your ideas with anyone other than yourself.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    7. Re:That's an amazingly twisted argument by MoneyT · · Score: 1

      Much like someone crapfodding or DoSing your site can shut down your ability to share your ideas with anyone but yourself right?

      I thought the arguement was you don't have a right to be heard.

      --
      T Money
      World Domination with a plastic spoon since 1984
    8. Re:That's an amazingly twisted argument by rjh · · Score: 1

      Reread what I said. Nowhere did I ever mention anonymity; I only mentioned accountability. Anyone who reads my posts to be an attack against anonymity is reading stuff that clearly isn't there.

      You're also mistaken about "essential freedom isn't more important than the inconvenience of spam". You're subscribing to a zero-sum, guns-or-butter mentality. I reject that mentality altogether. I insist on essential freedom, and I'm going to continue to push for a solution to spam which still respects our essential freedoms. I don't believe in zero-sum liberty. I believe in growing liberties: increasing my freedom from unwanted intrusion, in the form of spam, while at the same time increasing other people's freedom to be anonymous.

      It's an extraordinarily hard thing to do, but it's important for the future that we make an attempt for it.

    9. Re:That's an amazingly twisted argument by swillden · · Score: 1

      Nowhere did I ever mention anonymity; I only mentioned accountability. Anyone who reads my posts to be an attack against anonymity is reading stuff that clearly isn't there.

      In practice, I think anonmymity and non-accountability are equivalent. Anonymity implies non-accountability because it's not possible to hold someone accountable unless you know who they are. Non-accountability doesn't necessarily imply anonymity, but it's very hard to have the former without the latter.

      You're subscribing to a zero-sum, guns-or-butter mentality.

      I simply do not believe that we can maintain free speech while giving up the ability to communicate without accountability. Enabling anonymous communication is important to maintaining many other freedoms.

      I insist on essential freedom, and I'm going to continue to push for a solution to spam which still respects our essential freedoms.

      You can push for what you like, but that doesn't mean it's possible.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    10. Re:That's an amazingly twisted argument by swillden · · Score: 1

      Much like someone crapfodding or DoSing your site can shut down your ability to share your ideas with anyone but yourself right?

      No. You can find another place to publish. A prisoner is specifically denied that option. And in the case of crapflooding, people who want to hear what you have to say have the option of wading through the crap, or filtering it.

      I thought the arguement was you don't have a right to be heard.

      Yes. But that's entirely different from whether or not someone else can silence you. The analogy with prison simply does not work.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    11. Re:That's an amazingly twisted argument by MoneyT · · Score: 1

      No. You can find another place to publish. A prisoner is specifically denied that option. And in the case of crapflooding, people who want to hear what you have to say have the option of wading through the crap, or filtering it.

      A prisoner can yell out the windows, and people who want to hear you always have the option of:

      a) visiting

      b) going to jail themselves

      Yes. But that's entirely different from whether or not someone else can silence you. The analogy with prison simply does not work.

      No one is silencing you in prison, you can still yell at the top of your lungs all you want.

      --
      T Money
      World Domination with a plastic spoon since 1984
    12. Re:That's an amazingly twisted argument by swillden · · Score: 1

      A prisoner can yell out the windows

      Solitary confinement rooms don't have windows. Prisoners in solitary don't have cellmates, or visitors.

      Prisoners' ability to communicate to anyone is controlled by the warden and the guards.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  52. You have no such right by Julian+Morrison · · Score: 1

    You don't have a right to expect other people privately using a protocol-linked inter-network (public by mutual implied consent) to act in ways that are personally convenient to you. If somebody does you actual harm, or trespasses into your property, go after them. But you have no "freedom" to require others not to do things for their own reasons that coincidentally make harm or trespass easier. That's what's known as "tough luck". Suck it up, or switch off your modem.

  53. Re:Thoughts from a Tor user and server by Anonymous Coward · · Score: 0

    > it's like leaving the house without wearing trousers

    I don't know, whenever I walk around naked the size of my dick is usually enough to scare most folk off.

  54. This is important by Anonymous Coward · · Score: 0

    Anonymous communication is likely to be the ONLY POSSIBLE WAY for citizens to coordinate thoroughly enough to, say, PEACEFULLY OVERTHROW THEIR GOVERNMENT. Citizens could avoid the bloodshed associated with regime change. It could be used by citizens to re-align their government when it gets too far out of whack. Actually, when you think about it, anonymous communication may ITSELF be the most perfect and least intrusive form of government.

  55. strip a Boulder professor ---facts are wrong by FerretFrottage · · Score: 4, Insightful

    That's not true, the professor in question has also made threats against those who people who disagree with him or came forward with unflattering evidence against. Such evidence includes plagiarism, falsification of credentials on his resume/application (claiming to be a native american when in fact he is not)...added to that is the fact he was granted tenure outside the normal tensure process (not his fault so much as CUs)--what he said and free speech are not the issue with the guy...that fact that he is a liar and a grifter is. Ward Churchill is the professor should anyone want to search what all the fuss is about.

    --
    "Look Lois, the two symbols of the Republican Party: an elephant, and a fat white guy who is threatened by change."
  56. Using Tor To Host by trogdor8667 · · Score: 1

    I use Comcast, and want to run my own server, but Comcast blocks the ports you would need. Do you think Tor could be used to get around this?

    1. Re:Using Tor To Host by larytet · · Score: 1
      what port we are talking about ?

      i am a principle developer of Rodi project. i invite you to participate in testing of Rodi ICQ#: 82857660

    2. Re:Using Tor To Host by trogdor8667 · · Score: 1

      I haven't tried it, because everything I've seen has said Comcast has it blocked. I'd love to help out, though.

    3. Re:Using Tor To Host by larytet · · Score: 1

      contact me larytet AT yahoo com

  57. Disingenuous by Anonymous Coward · · Score: 0

    That is all apologia and propaganda. The only reason the man is on the radar is because of what he said. If he is fired he will be fired because of what he said no matter what the CYA paperwork says. And if the university buckles - many academics, myself included will think twice before going there, and think twice about the research coming out of there...

    1. Re:Disingenuous by MoneyT · · Score: 1

      Such is the nature of speaking out. When you speak out and attempt to garner support or make people listen, you immediately invite attention to you and who you are. The same thing that allows us to find that a "reporter" is a paid government schill is the same thing that will lead to your downfall if you start speaking out with a sorrid past.

      When you make noise, people will pay attention, and they're going to want to know who's making the noise and why. It doesnt' matter that the attention came from the fact that people didn't like what he said, he still broke the rules, and now he's paying for it because he drew attention to himself.

      --
      T Money
      World Domination with a plastic spoon since 1984
  58. Re:Yeah, and I got slapped by slashdot for using i by ThisIsFred · · Score: 1

    One hundred nodes is a drop in the bucket. I wonder just how anonymous it is, say, compared to script kiddies that just use a stranger's compromised home PC, where there is a much larger pool of machines from which to choose. That's a "zero knowledge" system, since the host often isn't even aware of the fact.

    I also wonder how many of these nodes are already in my spammers list, where I've got 2,200+ blocked addresses and subnets already.

    --
    Fred

    "A fool and his freedom are soon parted"
    -RMS
  59. Why Does SlashDot Probe My System's Ports? by Anonymous Coward · · Score: 1, Insightful
    What is SlashDot doing and why? Why are particular ports scanned from SlashDot? Is SlashDot developing signatures from IP packet structure? To what end?

    Here's a typical firewall log of what happens when I post to SlashDot as AC:


    blocked access to your computer (HTTP) from slashdot.org (66.35.250.150) (TCP Port 58728).
    Time: 05/22/2005 10:47:08

    blocked access to your computer (TCP Port 444) from slashdot.org (66.35.250.150) (TCP Port 58732).
    Time: 05/22/2005 10:47:10

    blocked access to your computer (TCP Port 1080) from slashdot.org (66.35.250.150) (TCP Port 58736).
    Time: 05/22/2005 10:47:12

    blocked access to your computer (TCP Port 3127) from slashdot.org (66.35.250.150) (TCP Port 58738).
    Time: 05/22/2005 10:47:14

    blocked access to your computer (TCP Port 3128) from slashdot.org (66.35.250.150) (TCP Port 58740).
    Time: 05/22/2005 10:47:16

    blocked access to your computer (TCP Port 6588) from slashdot.org (66.35.250.150) (TCP Port 58742).
    Time: 05/22/2005 10:47:18

    blocked access to your computer (TCP Port 8000) from slashdot.org (66.35.250.150) (TCP Port 58744).
    Time: 05/22/2005 10:47:20

    blocked access to your computer (TCP Port 8080) from slashdot.org (66.35.250.150) (TCP Port 58747).
    Time: 05/22/2005 10:47:22

    blocked access to your computer (TCP Port 81) from slashdot.org (66.35.250.150) (TCP Port 58750).
    Time: 05/22/2005 10:47:24

    blocked access to your computer (TCP Port 1026) from slashdot.org (66.35.250.150) (TCP Port 58753).
    Time: 05/22/2005 10:47:26

    blocked access to your computer (TCP Port 3124) from slashdot.org (66.35.250.150) (TCP Port 58755).
    Time: 05/22/2005 10:47:28

    blocked access to your computer (TCP Port 3382) from slashdot.org (66.35.250.150) (TCP Port 58758).
    Time: 05/22/2005 10:47:30

    blocked access to your computer (TCP Port 7032) from slashdot.org (66.35.250.150) (TCP Port 58760).
    Time: 05/22/2005 10:47:32

    blocked access to your computer (TCP Port 8002) from slashdot.org (66.35.250.150) (TCP Port 58762).
    Time: 05/22/2005 10:47:34

    blocked access to your computer (TCP Port 8090) from slashdot.org (66.35.250.150) (TCP Port 58765).
    Time: 05/22/2005 10:47:36
    1. Re:Why Does SlashDot Probe My System's Ports? by petermgreen · · Score: 1

      i suspect its scanning for open proxies like many irc networks do

      whilst such scans are by no means perfect they do deal with a lot of proxies that are left open by accident.

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
  60. Not blinded by his lies--Re:Disingenuous by FerretFrottage · · Score: 1

    It may have put him on the radar and I agree unfairly just because people didn't like what he said (I was actually "for" him when it was just a freedom of speech issue), but like a plane if you've been spotted your 'id' is going to be checked and it looks like most of his "ids" and ideas are not his own, but more of a fabricated flight plan. This makes him look more like the very people he despises (the "Adolf Eichmanns" of the world) in own his writings/diatribes--perhaps a way of dealing with his own deceitful issues and trying to convinvce himself that he is a better Eichmann. He has reached a point where he has repeated his lies enough that even he believes them to be true.

    And based on how CU has been run the past several years I would tell anybody to think more than twice when considering CU.

    --
    "Look Lois, the two symbols of the Republican Party: an elephant, and a fat white guy who is threatened by change."
  61. Proxy Scan by Anonymous Coward · · Score: 0

    They're making sure that your computer isn't an open HTTP proxy. If it is, the post is rejected. It helps to prevent crapfloods.

  62. The greatest reason for anonymity: by suitepotato · · Score: 3, Insightful

    Preserving your right to privacy.

    As a friend once said, just because you have nothing to hide doesn't mean you can't hide it. It is still your nothing, not theirs.

    Do I have to wear an ID tag at the mall with a uniform that never changes so I am always identifiable? Do I have to file an itinerary ahead of time and stick to it? No. In whatever street clothes I'm in for the day, wherever I go and whenever, I'm anonymous unless I tell someone who I am. None of their business.

    Is there anything amazing in my e-mails to my family that I need to hide? Nope. Does this mean I don't have the right to hide them? Nope. My yard is boring and I have nothing to hide there. Do I tear down my fence? Nope. Do I sleep under the stars when camping instead of a tent just in case some agency wants to train their satellites on me? Do I stop wearing baseball caps and sunglasses? Nope.

    Do I invite the public into my home and on my journeys to peruse everything I have and do? Nope. None of their business.

    You may have nothing to hide, but it is still your nothing and if you allow the very ability to keep your own business private then you might as well move to the next step and keep a detailed by the second journal of everything you do, see, say, etc. and hand it over to the authorities, the news media, and the reality entertainment slime so you can report on yourself.

    If we allow our fear of what criminals might do with a thing to instantly overpower any rational thoughts considering what we might do positively with the thing, then we might as well adopt a police state right here, right now because that is what we're asking for when we reject our own naturally existing human freedoms based on FUD.

    If you'll excuse me, I have to IM and e-mail some people you don't know about subjects I'm not divulging to you through channels I don't feel like disclosing. I'm sure you'll probably be doing the same. If you don't tell me, that's just as anonymous and secretive as this system.

    --
    If my grammar and spelling are off, I am [distracted/tired/careless] (take your pick)
    1. Re:The greatest reason for anonymity: by borgheron · · Score: 1

      What you've described is the legitimate reason and legitimate use of anonymity. I must however, point out that, in order to get to the mall you'll likely have to drive and, as with most states, in order to drive you must have your driver's license on your person.

      Additionally, when paying with a credit card or check, while in the mall, some stores want to see said identification. So you are not completely anonymous and you do leave a trail behind you when you go to the mall. You are, in fact, more on the grid AT the mall than any place else for these reasons. You could argue that you can pay with cash and avoid the above, which is true. In which case you COULD maintain absolute anonymity.

      My personal problem lies with those who abuse the privilege that anonymity affords them.

      Thanks, GJC

      --
      Gregory Casamento
      ## Chief Maintainer for GNUstep
  63. Free speech is about content, not free speakers by Anonymous Coward · · Score: 0

    You're totally wrong.

    "Free speech" is about getting the content of the message out, not about the local conditions under which the speaker is forced to live.

    A person who is using a Tor-like system to send a message may currently be in prison or living in an oppressive society, yet still able to get his chosen message to its destination. The mechanism has given him free speech, despite him not being personally free.

    Indeed, you're so totally wrong on this that it's trivial to illustrate it: just notice that the very concept of "free speech" becomes meaningless when everyone is free to speak any message they wish anywhere without repercussions. So, if "free speech" were as you define it, there would be no need for it. The only reason why we need a mechanism for delivering speech anonymously is BECAUSE speakers are not free to speak in the first place.

  64. MOD PARENT UP by maztuhblastah · · Score: 1

    MOD PARENT UP

  65. More realistic - arrest a select few by davidwr · · Score: 1

    In some countries, possibly including the USA*, knowingly running a mixmaster that's open to the public while simultaniously knowing people who use mixmasters are significantly more likely to be engaging in illegal activity could be construed as aiding and abetting, which can get you some serious jail time.

    If a suspected terrorist or other undesirable is under survellance and the cops see he connects to TOR node 1.2.3.4 and the cops know what TOR is, the owner of that machine can expect to be investigated, and if he lives in an oppressive regime, arrested. The resulting publicity would spread a chill across that country's TOR users and servers.

    Defending, and even enabling, civil liberties is not without risk. To paraphrase Benjamin Franklin, those who are not prepared to defend civil liberties don't deserve them.

    *in the USA this is not yet the case, but if a terrorist used TOR to plan an attack, all bets are off.

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
    1. Re:More realistic - arrest a select few by Anonymous Coward · · Score: 0

      If a suspected terrorist or other undesirable is under survellance and the cops see he connects to TOR node 1.2.3.4 and the cops know what TOR is, the owner of that machine can expect to be investigated...

      If they know what Tor is, they would know that the node he connects to has no relationship to the node he is communicating with. On what grounds could they investigate that node's owner, when it's virtually impossible for him to know what is being communicated through it? If they have dirt on him anyway, fine, but there is zero connection between running a Tor node and being engaged in criminal activity. It's like saying that people who drive cars are likely to be carjackers.

      *in the USA this is not yet the case, but if a terrorist used TOR to plan an attack, all bets are off.

      This assumes that terrorists even bother with this kind of crap. Historically they have relied on not being detected at all. If using Tor makes you a suspect, why would anyone with something to hide use it?

    2. Re:More realistic - arrest a select few by davidwr · · Score: 1

      If they know what Tor is, they would know that the node he connects to has no relationship to the node he is communicating with. On what grounds could they investigate that node's owner, when it's virtually impossible for him to know what is being communicated through it?

      Repressive regimes don't need grounds, they will hassle him for the purpose of scaring others. As far as an "obstensible" reason, they may want to start tapping THAT node, so they can then branch out from there. If a good %age of TOR nodes are all in the same repressive government, pretty soon the gov't would have a good idea of where much of the traffic is going, end to end. They then could get warrants for keyboard loggers or van-based observation posts to look at both endpoints, assuming they cared about warrants in the first place.

      Along these lines, it wouldn't surprise me if repressive regimes are or plan to participate in TOR networks themselves just so they can divert some traffic to sites under their control. Any packet unlucky enough to travel through only gov't-controlled TOR machines would be open to route-tracking.

      Historically they have relied on not being detected at all. If using Tor makes you a suspect, why would anyone with something to hide use it?
      Some terrorists are like this, others are not so careful. Also, once the laws are in place to "hunt down terrorists" the same laws can and are used to abuse the civil liberties of others. Again, assuming the country isn't already a totalitarian regime.

      --
      Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
  66. That's a right to blog argument. by Anonymous Coward · · Score: 0

    "Hmm, I've heard that the right to be heard is no guaranteed in the context of using someone elses platform to do your talking, but when using your own platform, the right of anyone who choses to listen (and therefore your right to be heard) should be unobstructed should it not?"

    Isn't that the whole point of blogs?

    1. Re:That's a right to blog argument. by MoneyT · · Score: 1

      Indeed, but if someone is abusing the anonmity of some particular web service in order to DoS your site without reprocussions, then your blog is as useless as you yelling from within a prison.

      --
      T Money
      World Domination with a plastic spoon since 1984
  67. What about the ABSOLUTE jerks? by Anonymous Coward · · Score: 0

    Only if you assume that "causes and effects" need to be in absolute form before we start considering them valid.

  68. Another anonymous network with more content by Anonymous Coward · · Score: 0

    http://napshare.sf.net/

    The question is which is safer and which is faster?

  69. Re:Thoughts from a Tor user and server by Anonymous Coward · · Score: 0

    They probably assume having a dick that small is contagious and run away to avoid direct contact.

  70. Tor and slashdot by der+Kopf · · Score: 1

    Since I started using Tor last week (after it get mentioned right here), I've been banned from Slashdot three times for abuse of the RSS system. I'm using Safari on OS X 10.4, set to check for headlines every half hour.

    1. Re:Tor and slashdot by jamie · · Score: 1

      Because, obviously, other people using the same Tor network you're using have been abusing RSS feeds through it.

  71. Verified Anonymity? by morticus · · Score: 1

    lol