[tor-bugs] #25137 [Obfuscation/Censorship analysis]: Tor blocked in UAE
Tor Bug Tracker & Wiki
blackhole at torproject.org
Tue Feb 6 23:40:03 UTC 2018
#25137: Tor blocked in UAE
---------------------------------------------+---------------------
Reporter: mwolfe | Owner: dcf
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Obfuscation/Censorship analysis | Version:
Severity: Normal | Resolution:
Keywords: censorship block ae | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
---------------------------------------------+---------------------
Comment (by cypherpunks):
Replying to [comment:9 dcf]:
> Thanks for this information. I didn't know that. Do you know what the
port numbers are, or any additional information? If so, please add it to
the table at [[doc/MetricsTimeline#Unknown]]. (Seems like there should be
a ticket for the UAE anomalies, but
Took a bit of DDG search but I finally found the article that was talking
about that: https://www.bleepingcomputer.com/news/security/nearly-one-
million-systems-provide-guest-smb-access-most-are-linux/
> There are 2,306,820 devices connected to the Internet at the moment that
feature open ports for SMB services, the same protocol that was used to
infect hundreds of thousands of computers with the WannaCry ransomworm a
month ago.
>
> Of these, 42%, or nearly 970,000, provide "guest" access, meaning anyone
can access data shared via the SMB file-sharing protocol without needing
to provide authentication. [...] Samba itself is also plagued by a
vulnerability called SambaCry that affects all Samba installations
released in the past seven years. This flaw has been used to take over
Linux servers with open SMB ports and install cryptocurrency miners. [...]
Matherly points out that almost half of the devices that have Samba SMB
guest access enabled are '''located on the network of Etisalat, a large
ISP in UAE.'''
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25137#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list