bauruine

Assuming there wont be any egress fess forever on Cloudflare R2 is a bit risky IMHO if you read stuff like [0]. Especially if you build a product on top of it.

[0]: https://news.ycombinator.com/item?id=40481808

Looks like your parents weren't evil enough to name you Bobby Tables.

https://xkcd.com/327/

Would this work for music? I assume it's a bit more complicated because it's not clear which bass you are getting at which location. Maybe if you wait for a new track? Has anyone tried something like that?

Sounds like XGS-PON which is limited to around 8Gbit/s and those are shared with up to 64 other customers. If you constantly use it at prime time they could get angry way sooner when the other customers on your PON tree start complaining.

Where do you get those 2 million IPs? The plaintext url list [0] only contains 90k entries and after filtering it to ips only and de duplication it's just 39k.

I've just added it to my firewall that does around 160Mbit/s right now using an ipset and the only increase in CPU I can see is a small blip from the ipset restore. And that's just an APU2 with a AMD GX-412TC (1GHz Quad core from 2014) and not a beefy box.

[0]: https://urlhaus.abuse.ch/downloads/text/

They seem to be partners of spamhaus. From the recent feed [0] it looks like it's often just IP addresses so you would need to add it to your firewall.

[0]: https://urlhaus-api.abuse.ch/v1/urls/recent/

Alternative reading http://www.theatlantic.com/magazine/archive/1982/02/have-you... (https://archive.ph/eFwVj9

Good article just one small clarification. The ContactInfo is public. It's displayed on the metrics site [0] for everyone.

[0] https://metrics.torproject.org/rs.html

Maybe I don't get it but if I search for my relays I only get the output of metrics.tpo and not the map. I hoped the filtered relays would be shown on the map.

That's https://mevspace.com/ but hetzner, scaleway, ovh, psychz.net, reliablesite.net etc. have similar pricing. If you increase your budget to 100 there are many, many more in Europe and the US.

Yeah it's more than absurd. I have a rented server that does 230TB egress a month. That's 4710$ in AWS egress fees (0.02$ per GB). I pay 40 Euros or about 0.0002 per GB and that includes an AMD Ryzen 5 3600 with 64GB RAM.

Not an expert at all but from my understanding a traffic correlation attack doesn't require someone to run the relay he just needs to see what traffic enters and leaves it. So the German BND for example can just go to Hetzner (15% Tor traffic) and ask them to mirror the traffic of all relays to them. They don't have to run any relays themselves.

Alt227 has a point but the Tor network is centered around a handful countries where traffic is cheap and there aren't that many huge IXs and Tier 1 ISPs where much of the traffic flows through.

I'm not saying that this is done but it's IMHO more likely than state actors running thousands of relays.

I don't have exactly what you want but you would be very disappointed by the result anyway. Tor isn't as nefarious as people tend to believe.

  [bauruine@tp:projects/misc]$ python check_ip_tor.py /tmp/malicious_ips.txt
  Got a total of 6303 malicious IPs
  Of which 15 are Tor relays

Edit: Small addendum here are the worst 5 ASNs.

  1607 TENCENT-NET-AP-CN
  738  DIGITALOCEAN-ASN
  483  KIXS-AS-KR 
  205  GOOGLE-CLOUD-PLATFORM
  115  OVH

There are no incentives. I'm pretty sure the vast majority does it for altruistic reasons. At least all those I've met. Many run relays with spare resources they pay for anyway. Others rent a cheap VPS to run a relay. $10 gives you a surprisingly large amount of bandwidth if you avoid the cloud like the plague.

Governments have other possibilities. Why should they run a relay if they can force the ISP to mirror the traffic of all relays to them?

>IPv6 was the culprit in a lot of networking issues that just magically "go away" when disabled... so, they disable

Why do you think your IPv7 will magically just work? There will be problems with it and IT departements will still disable it.

"Just don't use X" and "Works for my use case" used to be Linux memes.

Hey 50$ for 3TB is 0.016 per GB. Still cheaper than the 0.02 AWS EC2 egress fees! Oh there is also the 120$ base price. 170$ for 3 TB is 0.055 per GB. Still cheaper than the 0.085 Cloudfront egress fee.

If you want to help censored users there is a guide on how to setup your own webtunnel bridge. [0] All you have to do is to forward some random path like https://example.com/Phahsaeghie1eiV/ on your reverse proxy (there is an example for nginx but it should work with others too) to Tor. There is a docker container to make the Tor part as easy as possible.

[0]: https://community.torproject.org/relay/setup/webtunnel/

Fastly blocked it two weeks ago.

https://gitlab.torproject.org/tpo/applications/tor-browser/-...

You can run a webtunnel bridge behind Cloudflare. It also works behind AWS Cloudfront but that's just way too expensive if you don't get a reasonable rate from them like 99% reduction.

Yes they can block the domain if they find out it's used by a webtunnel bridge. Bridges aren't public that's the whole point of bridges. They are basically unlisted relays.

You can use the session link [0] in incognito so you don't have to login each time.

[0] https://kagi.com/settings?p=user_details

It's all just lost profit. It doesn't cost AWS more than it does you copying 190TB to your NAS over LAN.

Receiving e-mails is easy sending them on the other hand can be a huge pain in the ass. But you can self host and use a service to send e-mails (smarthost is the keyword).

In my experience what is done is they send you an e-mail, shut it down if you don't pay and send another mail that they delete it after x time where x is mostly a single digits days.

Something like this [0] where they try to contact you by phone and snail mail and keep your stuff online for more than half a year even if you don't pay is a paid exception and not the norm.

[0] https://www.infomaniak.com/en/secure/renewal-warranty

I've just checked his blacklist against the BADASN list. Less than 30 IPs of the 6862 IPs on the IPBL list are from those BADASNs. On the other hand Cogent has over 700, Amazon over 600 and Microsoft over 200.

>TOREXIT

No it's not a list of exits but a list of ALL Tor relays. Please don't use this there is an official list [0] just use that if you need to.

Maybe the others are better maintained but this leaves a very bad impression.

>AS397702 1776 Solutions

Nice virtue signaling. This list is described as opionated so I guess it's fine.

[0] https://check.torproject.org/torbulkexitlist

The main issue is that you can port scan all those IPv4 addresses in minutes. It's impossible for v6 so the issue, even without a firewall, isn't a big issue.

I know you can do address harvesting like it was done with pool.ntp.org by shodan but if you don't use any public services your IoT devices are basically protected by the 128bit address space. So you need a address harvesting possibility, and people are watching for this as seen in the shodan case, and an exploitable issue at the same time. Not impossible and you should use a firewall but orders of magnitude less scary than a public routable IPv4 address.

Or drop table|database or delete from. To _nearly_ lose data it took multiple clueless engineers and not detecting the issue for months.

I wonder how Diversion handles operations that possibly delete data. Whats their solution?

So multiple people did a git reset --hard origin/master and nobody complained or checked what and why this was done? That's not "one data scientist with the wrong command" but the whole team that fucked up hard IMHO.