[tor-relays] Tor Relay Automatic PMTU Testing

2024-02-22 Thread pasture_clubbed242--- via tor-relays
Greetings, I believe there is a larger sized guard relay that has been having MTU issues for about a week. All connections with packets above a certain size are dropped. This results in partially loaded or broken webpages, broken file downloads, etc. Do Tor directory authorities test MTU (impli

Re: [tor-relays] Tor Relay Automatic PMTU Testing

2024-02-22 Thread pasture_clubbed242--- via tor-relays
relay MTUs, but I'm also unsure if it tests the largest cell size against relays either. Testing a very large cell size should identify if a relay is properly configured. Original Message On Feb 22, 2024, 5:47 AM, s7r - s7r at sky-ip.org wrote: > pasture_clubbed242---

[tor-relays] User advisory to check for xz-utils backdoor

2024-04-02 Thread pasture_clubbed242--- via tor-relays
Greetings, I do not normally use mailing lists such as this one to inform subscribers of security notices, but this issue is extreme enough where it may benefit the anonymity of Tor users if relay operators are aware of it sooner. The near-universally used 'xz' compression library has been fo

[tor-relays] DOS Protection mini RFC

2024-08-13 Thread pasture_clubbed242--- via tor-relays
Since it is still all fresh in our heads, I wanted to pitch an idea real fast. No idea if it was covered at a tor meeting at some point. For bridge relay operators, such as those with very low bandwidth, it may be worth it to keep lower-than-consensus-restrictions using the DOS flags here https

Re: [tor-relays] [Important] Update on an upcoming German broadcasting story about Tor/Onion Services

2024-09-16 Thread pasture_clubbed242--- via tor-relays
Greetings Marco, Something I always found confusing is what the difference is between the Vanguards Github project, and the version of Vanguards that Tor has implemented. I thought Vanguards was added into Tor no? Is the Vanguards project still useful despite this? I'm not sure if this spec i

Re: [tor-relays] Please check if your relay has fallen out of the consensus

2024-10-28 Thread pasture_clubbed242--- via tor-relays
Tossing this kdea out there since it is more an attack on bitcoin style decentralization rather than Tor style decentralization. I do not know if it applies to Tor. Could this be a form of an "Eclipse" attack? "Eclipse attacks occur when a node is isolated from all honest peers but remains co

Re: [tor-relays] Dear OBFS4 bridge operators, please enable timing and packet-size obfuscations to help clients facing timing analysis attacks.

2024-09-23 Thread pasture_clubbed242--- via tor-relays
Out of curiosity, can any other options be passed with ServerTransportOptions besides iat-mode? I could only find this article saying there is a 'cert=' option, which initially appear useful for Tor. https://hamy.io/post/000d/how-to-hide-obfuscate-any-traffic-using-obfs4/ Thank you On Monday,