Re: Heads UP! Possible Huge TOR Bug Discovered

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

["Followup-To:" header set to alt.privacy.anon-server.]
On Wed, 16 Aug 2006 08:09:29 -0400, Labiodental Fricative wrote in
Message-Id: <ebv1ts$66i$1@bananasplit.info>:

> I then counted all the 149.9.XXX.XXX/154.35.XXX.XXX, there were 35, which
> begs the question; Does the CIA own 149* and the NSA own 154* ? Or vise
> versa? o_0

This isn't really a bug, there are just a lot of exit-nodes within two
/16 networks. It could be a TLA running lots of nodes, or it could be
just a couple of invididuals running (for example) vmware with a load of
Tor test nodes on a single box.

Even if it is a bad guy, you are still safe providing you have one
honest node in your circuit. The next release of Tor will include a
check to ensure that two nodes within the same /16 are treated as "same
operator".


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iQEVAwUBROMoY2oLu9HNUqmMAQq5XQf/cDnGv/UOJKf6FAXRiFlafvaYi1FL97lL
AQl2R971PcckIMRXOqOcimkdFP5HlJkQwasTItNpLh4ah7U1hs MzGYdn/aZrPwK8
wl+Fc2oG4BMWC86GTJrYKUHPjZYPKoCMi89bNQlRBYRXw3HkLW R5V5+lv0OHXh0w
j2xG79402eKsN4W3q3ZVhkRksjk3BZR9lqANKN4uJEXWllTuHp vT4PVT8AVnSz4o
bM9JYsFOAk4tbfbsqKTbworhET+XtVpQ0BnXAVVfMPNQTYLVOI tRAzcUf8y4ayjH
/O4DV2SBvhAMCjHsZTzm54Zkw48MCu8+S1qPEohi6gDMf0X7Qzs hVg==
=EO1B
-----END PGP SIGNATURE-----