Problems with tor and the forum

[BadBear]

Protecting people's privacy is a fail policy?

[1714119250]

1714119250

[1714119250]

1714119250

[1714119250]

1714119250

[1714119250]

1714119250

[1714119250]

1714119250

[1714119250]

1714119250

[Morbo]

Protecting people's privacy is a fail policy?

Just in case if you missed the context - abusing the get new identity feature of tor to play lottery and find out an exit node that's not blocked by bitcointalk is the exact opposite of protecting people's privacy.

[Welsh]

Just in case if you missed the context - abusing the get new identity feature of tor to play lottery and find out an exit node that's not blocked by bitcointalk is the exact opposite of protecting people's privacy.

Care to elaborate? What's the harm to hitting that button every so often?

[bromide]

Just in case if you missed the context - abusing the get new identity feature of tor to play lottery and find out an exit node that's not blocked by bitcointalk is the exact opposite of protecting people's privacy.

Care to elaborate? What's the harm to hitting that button every so often?

The problem's more and more nodes are getting blacklisted, so there are times when I need to hit the button ~4 times in a row, which is pretty frustrating.  Sometimes this happens when i'm trying to post, losing everything I have written in the process.*

Spammers can circumvent this by scripting logon/posting, but these scripts are not an option when Tor is used for its intended purpose, security.

*Happened as I was trying to post this.

[Morbo]

Someone who is abusing the request new identity feature too often is creating an anomaly pattern by trying to use new circuits much more often than the tor protocol itself does internally (10 minutes I think). Match that against the access log to bitcointalk - there will be multiple requests for same URL coming from different tor exit nodes (because the identity has changed), add some browser fingerprint metadata and you get a correlation attack against the person who keeps requesting new identities to change the exit node.

When you have a list of proxies and half of them are banned, it's fine to iterate over them to find the unbanned ones by trial and error. But tor is not a proxy, tor is an anonymizer. And misusing it just as plain proxy harms the anonymity. That's why I keep calling the bitcointalk tor policy wrong, because it encourages misuse of tor to browse the forum. Having either all tor exit nodes whitelisted or all of them blacklisted would be much better.

[bromide]

Protecting people's privacy is a fail policy?

Please explain how banning Tor exit nodes protects people's privacy.  Not complaining, simply curious.

[Dogtanian]

I use TOR and was hardly able to post yesterday because after I'd logged in and waited the 6 minutes by the time I tried to post again it had changed over to a banned connection and I had to start the process over and this kept repeating. Saying that, it's only happened a few times today, but it was almost constant yesterday. Very frustrating when it happens.

[BadBear]

Protecting people's privacy is a fail policy?

Please explain how banning Tor exit nodes protects people's privacy.  Not complaining, simply curious.

It doesn't, but not letting mods see ips does, and since mods do the majority of the banning these days, it's bound to happen. There are flaws with most of the solutions I've seen posed but I'd rather not elaborate for various reasons.

[DeboraMeeks]

The problem is with spammers abusing tor and getting banned (and IP banned) making the node useless with the forum. One of the solutions is automatically un-banning tor nodes but that might increase spamming bots.

[Dogtanian]

I understand the reasoning for it, but obviously it doesn't really work against spammers or scammers as they'll just keep hitting new identity, but it is annoying to to other users.

Weirdly I had about 2-3 hours or browsing today without being booted off.

[Morbo]

Wouldn't a recaptcha help against spam bots? I'd certainly choose to guess a captcha occasionally than to rely on something that gets randomly baned.

[hilariousandco]

Wouldn't a recaptcha help against spam bots? I'd certainly choose to guess a captcha occasionally than to rely on something that gets randomly baned.

I think it's probably more just banning users/connections that are spamming and scamming as opposed to bots, but I could be wrong.