From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from sog-mx-4.v43.ch3.sourceforge.com ([172.29.43.194] helo=mx.sourceforge.net) by sfs-ml-1.v29.ch3.sourceforge.com with esmtp (Exim 4.76) (envelope-from ) id 1XBj7M-0001PQ-Jt for bitcoin-development@lists.sourceforge.net; Mon, 28 Jul 2014 11:29:24 +0000 Received-SPF: pass (sog-mx-4.v43.ch3.sourceforge.com: domain of petertodd.org designates 62.13.149.95 as permitted sender) client-ip=62.13.149.95; envelope-from=pete@petertodd.org; helo=outmail149095.authsmtp.com; Received: from outmail149095.authsmtp.com ([62.13.149.95]) by sog-mx-4.v43.ch3.sourceforge.com with esmtp (Exim 4.76) id 1XBj7K-00054Q-F3 for bitcoin-development@lists.sourceforge.net; Mon, 28 Jul 2014 11:29:24 +0000 Received: from mail-c235.authsmtp.com (mail-c235.authsmtp.com [62.13.128.235]) by punt15.authsmtp.com (8.14.2/8.14.2/) with ESMTP id s6SBSO5a008274; Mon, 28 Jul 2014 12:28:24 +0100 (BST) Received: from [25.55.115.173] ([24.114.101.219]) (authenticated bits=0) by mail.authsmtp.com (8.14.2/8.14.2/) with ESMTP id s6SBSJB6000420 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 28 Jul 2014 12:28:20 +0100 (BST) User-Agent: K-9 Mail for Android In-Reply-To: References: <20140728024030.GA17724@savin> <53D5BB5F.2060200@bitwatch.co> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 From: Peter Todd Date: Mon, 28 Jul 2014 07:28:15 -0400 To: Mike Hearn , Gregory Maxwell Message-ID: X-Server-Quench: 47e282ee-164a-11e4-b396-002590a15da7 X-AuthReport-Spam: If SPAM / abuse - report it at: http://www.authsmtp.com/abuse X-AuthRoute: OCd2Yg0TA1ZNQRgX IjsJECJaVQIpKltL GxAVKBZePFsRUQkR aQdMdAoUEkAYAgsB AmIbWlZeUlV7W2I7 aQ5PbARZfEtOXhto UUFWRlRXCwQmQhpi dH1kIB9ydwVCen4+ ZEJmXnAVWEMvd05/ FxtJFGsCNHphaTUb TRJbfgVJcANIexZF O1F6ACIKLwdSbGoL NQ4vNDcwO3BTJTpY RgYVKF8UXXNDNzQ6 QAoHFDErDAUhTj88 IlQaLURUGkEdPw07 OlAsQU4ZNRBaDQta DglnATNSIFgHDzYx BA1UXEV2 X-Authentic-SMTP: 61633532353630.1023:706 X-AuthFastPath: 0 (Was 255) X-AuthSMTP-Origin: 24.114.101.219/465 X-AuthVirus-Status: No virus detected - but ensure you scan with your own anti-virus system. Content-Transfer-Encoding: quoted-printable X-MIME-Autoconverted: from 8bit to quoted-printable by punt15.authsmtp.com id s6SBSO5a008274 X-Spam-Score: -1.5 (-) X-Spam-Report: Spam Filtering performed by mx.sourceforge.net. See http://spamassassin.org/tag/ for more details. -1.5 SPF_CHECK_PASS SPF reports sender host as permitted sender for sender-domain -0.0 SPF_PASS SPF: sender matches SPF record X-Headers-End: 1XBj7K-00054Q-F3 Cc: Bitcoin Development Subject: Re: [Bitcoin-development] Abnormally Large Tor node accepting only Bitcoin traffic X-BeenThere: bitcoin-development@lists.sourceforge.net X-Mailman-Version: 2.1.9 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Jul 2014 11:29:24 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I've got a bitcoin-only exit running myself and right now there is absolu= tely no traffic leaving it. If the traffic coming from that node was legi= t I'd expect some to be exiting my node too. Multiple people have confirmed the node is connected to an abnormally lar= ge % of the Bitcoin network. Looks like a Sybil attack to me, trying to h= ide behind a Tor exit node for plausible deniability. On 28 July 2014 06:16:16 GMT-04:00, Mike Hearn wrote: >> As I pointed out above, =E2=80=94 it isn't really. Without the exit f= lag, I >> believe no tor node will select it to exit 8333 unless manually >> configured. (someone following tor more closely than I could correct >> if I'm wrong here) >> > >The "exit" flag doesn't mean what you would expect it to mean. The >reason >such a node won't get much traffic is that Tor speculatively builds >circuits at startup on the assumption they'll be used for web browsing. >Thus if you don't exit web traffic you won't get much in the way of >traffic >at least not until bitcoinj based wallets start shipping Tor mode. > >There's a perfectly reasonable explanation for why someone would run >such a >node. In fact I run a Tor exit that only allows port 8333 too: it's a >way >to contribute exit bandwidth without much risk of getting raided by the >cops. > >Occam's razor and all .... > > >------------------------------------------------------------------------ > >------------------------------------------------------------------------= ------ >Infragistics Professional >Build stunning WinForms apps today! >Reboot your WinForms applications with our WinForms controls. >Build a bridge from your legacy apps to the future. >http://pubads.g.doubleclick.net/gampad/clk?id=3D153845071&iu=3D/4140/ost= g.clktrk > >------------------------------------------------------------------------ > >_______________________________________________ >Bitcoin-development mailing list >Bitcoin-development@lists.sourceforge.net >https://lists.sourceforge.net/lists/listinfo/bitcoin-development -----BEGIN PGP SIGNATURE----- Version: APG v1.1.1 iQFQBAEBCAA6BQJT1jPPMxxQZXRlciBUb2RkIChsb3cgc2VjdXJpdHkga2V5KSA8 cGV0ZUBwZXRlcnRvZGQub3JnPgAKCRAZnIM7qOfwhcFSB/9Sr+2an63QQe7TpGMA zH5AG1bjcl4Tf/VGVBYK8K2kXsdtfEWNS+nJ9eCglPE1A7/Cc2LL3pksoJwdnt82 VyuH8FlWUXwnBeZvK/rYUvBz2FQupHYg5+ee+HZ6nYjKTDYrHuSUX+GlqMO2GPII D3FhQRIfluuTQTpYoN0ui0DXQ4QDqZgwxFXWiblctA2m986bKFrqrJ5ohZXTDCnE mTq//ZABykPPtEcou5G1kLjH9l5YMU4XeMyz6uzADXt0ZTHBDN3lOZ8sFPpJEi0z VGh4QlT6fRQIiYsq0AzMyUvopSwsCyQy6yeMt/bCOdanmAIcGm+l8og3mlX2Ml5g nQsg =3D/w5n -----END PGP SIGNATURE-----