[metrics-team] worrying about the bug that allows operators to "hide" their relays

[Karsten Loesing]

On 2017-12-25 13:27, nusenu wrote:
> I'd like to raise concerns about the hotfix for [1].
> 
> As far as I understood the comments about the "hotfix" on trac,
> it allows (malicious) operators to avoid getting listed in onionoo data.
> This is beneficial for entities that try to fly under the ornetradar.
> People on bad-relays@ apparently rely also on onionoo (not just consensus data / collector).
> 
> Karsten writes on [1]:
>> will simply not show up in Onionoo
> 
> 
> Would you mind adding a stop-gap solution that sends a notification 
> to this list or me whenever onionoo excludes such relays so we have 
> some visibility about how much data we are "loosing" (if any at all)
> until a fix is deployed?

Good point.

I just checked whether there are currently any relays trying to hide,
but there are none.

I raised priority of the ticket to high. We should fix this soon.

Thanks for pointing this out!

All the best,
Karsten


> 
> thanks,
> nusenu
> 
> 
> 
> [1] https://trac.torproject.org/projects/tor/ticket/22594
> 
> 
> 
> _______________________________________________
> metrics-team mailing list
> metrics-team at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/metrics-team
> 


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 528 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/metrics-team/attachments/20180108/ff6de3c4/attachment.sig>