From ebb287c75dc02689a6552ef1d5dc1358624b34dd Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Wed, 26 Jan 2011 11:13:57 -0500 Subject: Backport current tor-exit-notice to 0.2.1 --- contrib/tor-exit-notice.html | 72 +++++++++++++++++++++++--------------------- 1 file changed, 38 insertions(+), 34 deletions(-) (limited to 'contrib') diff --git a/contrib/tor-exit-notice.html b/contrib/tor-exit-notice.html index 4ab028fc7..8b37edc3f 100644 --- a/contrib/tor-exit-notice.html +++ b/contrib/tor-exit-notice.html @@ -1,5 +1,9 @@ - + + + + This is a Tor Exit Router - + -

This is a Tor Exit Router

This is a +Tor Exit Router

Most likely you are accessing this website because you had some issue with +

+Most likely you are accessing this website because you had some issue with the traffic coming from this IP. This router is part of the Tor Anonymity Network, which is -dedicated to providing +dedicated to providing privacy to people who need it most: average computer users. This router IP should be generating no other traffic, unless it has been -compromised. - -

+compromised.

- -

+ and serve it locally --> -

+ + +

-Tor sees use by many +

+Tor sees use by many important segments of the population, including whistle blowers, journalists, Chinese dissidents skirting the Great Firewall and oppressive censorship, abuse victims, stalker targets, the US military, and law @@ -59,44 +65,41 @@ powerful networks than Tor on a daily basis. Thus, in the mind of this operator, the social need for easily accessible censorship-resistant private, anonymous communication trumps the risk of unskilled bad actors, who are almost always more easily uncovered by traditional police work than by -extensive monitoring and surveillance anyway. +extensive monitoring and surveillance anyway.

- In terms of applicable law, the best way to understand Tor is to consider it a network of routers operating as common carriers, much like the Internet backbone. However, unlike the Internet backbone routers, Tor routers explicitly do not contain identifiable routing information about the source of a packet, and no single Tor node can determine both the origin and destination -of a given transmission. +of a given transmission.

- As such, there is little the operator of this router can do to help you track the connection further. This router maintains no logs of any of the Tor traffic, so there is little that can be done to trace either legitimate or illegitimate traffic (or to filter one from the other). Attempts to -seize this router will accomplish nothing. -

+seize this router will accomplish nothing.

- + +

Furthermore, this machine also serves as a carrier of email, which means that its contents are further protected under the ECPA. 18 USC 2707 explicitly allows for civil remedies ($1000/account -plus legal fees) +plus legal fees) in the event of a seizure executed without good faith or probable cause (it should be clear at this point that traffic with an originating IP address of FIXME_DNS_NAME should not constitute probable cause to seize the machine). Similar considerations exist for 1st amendment content on this -machine. - -

+machine.

+ fact reported DMCA harassment... --> +

If you are a representative of a company who feels that this router is being used to violate the DMCA, please be aware that this machine does not host or contain any illegal content. Also be aware that network infrastructure @@ -106,35 +109,36 @@ href="http://www4.law.cornell.edu/uscode/html/uscode17/usc_sec_17_00000512----00 "safe harbor" provisions. In other words, you will have just as much luck sending a takedown notice to the Internet backbone providers. Please consult EFF's prepared -response for more information on this matter. +response for more information on this matter.

For more information, please consult the following documentation: +

For more information, please consult the following documentation:

That being said, if you still have a complaint about the router, you may email the maintainer. If complaints are related to a particular service that is being abused, I will consider removing that service from my exit policy, which would prevent my router from allowing that traffic to exit through it. I can only do this on an IP+destination port basis, however. Common P2P ports are -already blocked. +already blocked.

You also have the option of blocking this IP address and others on +

+You also have the option of blocking this IP address and others on the Tor network if you so desire. The Tor project provides a python script to -extract all IP addresses of Tor exit nodes, and an official web service +to fetch a list of all IP addresses of Tor exit nodes that allow exiting to a +specified IP:port combination, and an official DNSRBL is also available to determine if a given IP address is actually a Tor exit server. Please be considerate when using these options. It would be unfortunate to deny all Tor users access -to your site indefinitely simply because of a few bad apples. +to your site indefinitely simply because of a few bad apples.

- -- cgit v1.2.3 From 741ef2a8cd9521d9de55afae0ebd4199aeda9eb7 Mon Sep 17 00:00:00 2001 From: Andrew Lewman Date: Wed, 26 Jan 2011 11:14:44 -0500 Subject: fix the links in the exit-list notice we give out to users. --- contrib/tor-exit-notice.html | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) (limited to 'contrib') diff --git a/contrib/tor-exit-notice.html b/contrib/tor-exit-notice.html index 8b37edc3f..de3be1744 100644 --- a/contrib/tor-exit-notice.html +++ b/contrib/tor-exit-notice.html @@ -32,7 +32,7 @@ Tor Exit Router

Most likely you are accessing this website because you had some issue with the traffic coming from this IP. This router is part of the Tor Anonymity Network, which is -dedicated to providing +dedicated to providing privacy to people who need it most: average computer users. This router IP should be generating no other traffic, unless it has been compromised.

@@ -42,19 +42,19 @@ compromised.

and serve it locally -->

- +

-Tor sees use by many +Tor sees use by many important segments of the population, including whistle blowers, journalists, Chinese dissidents skirting the Great Firewall and oppressive censorship, abuse victims, stalker targets, the US military, and law enforcement, just to name a few. While Tor is not designed for malicious computer users, it is true that they can use the network for malicious ends. In reality however, the actual amount of abuse is quite low. This +href="https://www.torproject.org/docs/faq-abuse">abuse is quite low. This is largely because criminals and hackers have significantly better access to privacy and anonymity than do the regular users whom they prey upon. Criminals can and do DMCA "safe harbor" provisions. In other words, you will have just as much luck sending a takedown notice to the Internet backbone providers. Please consult -EFF's prepared +EFF's prepared response for more information on this matter.

For more information, please consult the following documentation:

@@ -134,7 +134,7 @@ the Tor network if you so desire. The Tor project provides a web service to fetch a list of all IP addresses of Tor exit nodes that allow exiting to a specified IP:port combination, and an official DNSRBL is also available to +href="https://www.torproject.org/tordnsel/dist/">DNSRBL is also available to determine if a given IP address is actually a Tor exit server. Please be considerate when using these options. It would be unfortunate to deny all Tor users access -- cgit v1.2.3