[corrected format] Re: *Once again*...Exit node IP *not* showing up on TorCheck and others

[Chris Humphry]

Hi Andrew,

> --- On Mon, 7/6/09, Andrew Lewman <andrew at torproject.org> wrote:
>>On 07/06/2009 01:33 PM, Chris Humphry wrote:
>> Just now I came across another IP address:
>>
>> 78.53.96.30
>
>This IP shows up as:
>AntiVDS JiC1AwLB4RdItkOpClt9EssLCUM 0SeQf50QJSHTBlJoURme0LiMxdk
>2009-07-06 03:01:44 78.53.96.30 9001 0
>
>What was the exact time you saw the false negative on
>https://check.torproject.org?

I believe a few minutes before I sent that email.  The 3rd false-positive happened at about 5:30-5:40pm.



>I don't know what "TorCheck" is, so I'm possibly making a bad assumption
>it's https://check.torproject.org.

Your assumption is not correct but that's my fault.  When I wrote the
"TBB homepage" I meant ( https://check.torproject.org ).  When I wrote
"TorCheck" I meant ( https://torcheck.xenobite.eu/ ).  They both gave me
the same false-positive on all three occasions.

I normally would not be concerned and after the first false-positive I
thought it was a snafu, but I knew I was using the Tor network as shown
by using NEWNYM and re-testing at those two sites.  However, on the 2nd
occasion I started to think something was wrong or some bug was rearing 
it's head...and by the 3rd occasion (which happened shortly after the 
second) I started to get a little worried.


I am fairly well versed in Tor and how to use it correctly, but even I
was thrown off by the repeated false-positives.  I wonder how people new
to Tor would react?  Maybe adding a 'better' blurb about the false-
positives on the exit node check site run by Tor Project would be a good
idea ( https://check.torproject.org ) ?

Thank you