Re: [tor-relays] doc/HARDENING Draft

2014-11-25 Thread tor-exit0
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/24/2014 4:09 PM, Libertas wrote: > I thought I'd share an initial draft of doc/HARDENING. Please > share any opinions or contributions you have. This was written in a > little more than an hour, so it's still a work in progress. > However, in the

Re: [tor-relays] doc/HARDENING Draft

2014-11-25 Thread tor
Hi, On Tue, Nov 25, 2014 at 08:58:04PM +0100, tor-ad...@torland.me wrote: > Don't store identity keys on the hard disk. Keep them offliner. Use a ramdisk > for /var/lib/tor/keys/ and copy keys to it via scp before starting your tor > instance. Remove it from the ramdisk after startup. So the key

Re: [tor-relays] doc/HARDENING Draft

2014-11-25 Thread tor-admin
On Monday 24 November 2014 18:09:34 Libertas wrote: > Here's the relevant ticket: > > https://trac.torproject.org/projects/tor/ticket/13703 > > A specific topic of conversation is how much of the advice should be > in the document itself as opposed to linked sources. > > It could also use more O

Re: [tor-relays] Fast Exit Node Operators - ISP in US

2014-11-25 Thread Fabio Pietrosanti - lists
On 11/22/14 1:08 AM, SiNA Rabbani wrote: > Dear Relay Operators, > > I noticed there are very few US based exit nodes in the network. And more and > more > people are jumping on the same set of AS numbers in Europe. For who want to taste unusual place Tor Exit: https://www.exoticvps.com/ Send

Re: [tor-relays] Fast Exit Node Operators - ISP in US

2014-11-25 Thread Syrup-tan
> On Nov 22, 2014, at 4:21 PM, s7r wrote: > > Depending on your budget, Voxility has a datacenter in the US. > Unfortunately they provide only enterprise class servers with prices > directly proportional to the class. Maybe we can manage to pool $ in > order to create a bigger node with this prov

Re: [tor-relays] doc/HARDENING Draft

2014-11-25 Thread Zack Weinberg
On Mon, Nov 24, 2014 at 11:29 PM, Tor Operator wrote: > On Mon, Nov 24, 2014 at 06:09:34PM -0500, Libertas wrote: >> Be sure to stay up-to-date using apt-get, and consider using cron-apt to >> automatically update: >> https://www.debian.org/doc/manuals/debian-faq/ch-uptodate.en.html > > Maybe it a

Re: [tor-relays] doc/HARDENING Draft

2014-11-25 Thread Libertas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Thanks for the heads-up about unattended-upgrades, I hadn't heard of that. And I agree about SSHGuard. I've had a better experience with it, and it generally seems like a more carefully developed and more thoroughly documented project. Strangely, th