[tor-relays] webiron requesting to block several /24 subnet

[JusticeRage]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

I'm currently in the middle of a somewhat heated e-mail debate with
their vice-president.
Pasting the e-mails below would be indelicate, but their position is
that the Tor network is responsible for the abuse it generates and
should take measures to prevent/block malicious traffic.
They also state that according to their measurements, 99% of the
traffic coming out of Tor is hostile, and they're going to release a
report on the matter soon.

On my side, I've been arguing that 99% of bad traffic absolutely
doesn't imply 99% of bad users, since brute-force attacks generate a
massive amount of requests (i.e. that 99% of bad traffic may be
generated by 1% of the users for all we know) - and therefore I'm
unwilling to punish all of them because of an unruly few.
Besides, blocking whole /24 subnets seems overkill to me, and they
have yet to prove that they have the authority to speak for all the
IPs they are requesting.

I suggested that site owners who wish to block Tor traffic do so using
the DNSRBL, to which they replied that "hundreds of millions of site
owners who barely know how to do e-mail" shouldn't be asked to
configure their servers - or indeed do anything to protect themselves
because that's victim blaming.
They add that "what we have coming next in tackling abuses will make
your heads spin :)" and conclude that I'm an arrogant bastard (mildly
paraphrasing here).

So as far as I'm concerned, I'll just discard anything I receive from
them in the future. I've told my hosting provider that their automated
e-mails should be disregarded, and they are okay with that.

- --
JusticeRage

On 16/11/2015 13:52, Cristian Consonni wrote:

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=SkQB
-----END PGP SIGNATURE-----