Delivery-Date: Mon, 22 Dec 2014 00:55:16 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.3 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,TVD_PH_BODY_ACCOUNTS_PRE,T_DKIM_INVALID,
	URIBL_BLOCKED autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id C20931E04F2;
	Mon, 22 Dec 2014 00:55:14 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 4A58232487;
	Mon, 22 Dec 2014 05:55:10 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 09E9A32466
 for <tor-talk@lists.torproject.org>; Mon, 22 Dec 2014 05:55:06 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id kKjW1xBEckZ2 for <tor-talk@lists.torproject.org>;
 Mon, 22 Dec 2014 05:55:05 +0000 (UTC)
Received: from mail-ig0-x22e.google.com (mail-ig0-x22e.google.com
 [IPv6:2607:f8b0:4001:c05::22e])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id E380E32365
 for <tor-talk@lists.torproject.org>; Mon, 22 Dec 2014 05:55:02 +0000 (UTC)
Received: by mail-ig0-f174.google.com with SMTP id hn15so3484140igb.13
 for <tor-talk@lists.torproject.org>; Sun, 21 Dec 2014 21:55:00 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=cyblings.on.ca; s=google;
 h=message-id:date:from:user-agent:mime-version:to:subject:references
 :in-reply-to:content-type;
 bh=Ymkh3lz6WOcTuIvWixMvJKjT9NTk1xHXrlbMlJ/8WQk=;
 b=ZGUOCmRQgNXypZwQJdhaYmAL1zodeYl+cNp4Iydfgg3OiByAYaF2Ueb2u4MeS3CP/y
 yA/DlC+eaE1RDhumIwoLCL7EVnH6g0mtarJJaTd3MDxWgwTyFIzEjAngmW3rId6F0lcZ
 izQLqamYva1606WLhkvBVz4H5qoz4F/n9Vtic=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to
 :subject:references:in-reply-to:content-type;
 bh=Ymkh3lz6WOcTuIvWixMvJKjT9NTk1xHXrlbMlJ/8WQk=;
 b=YZ6OHjgdYC1JzO2bBZgF3yggV0Wxe/y7LEZhtjRUEe0KUA76F8iq4Y0uPK3ipxqThZ
 NonatP8y4d2peAtA+zq9ZscegV4I0n72sDyjsAtE12Do03XfIawjASEDyfJXM9P87teE
 hky9uTA5ykDCB51dRXlMFouaHUSov8GBSbhMbuSmeFWiEplasUISIXPxEc8D4FQpELw4
 9XxtCjU9vo4AHFQ3u3hwsBJ2DbVjzOhXPCJtIZfrqTc75WM27+hb2i6U6Y4q+O0pjlkL
 5YhIwWp3AG8jN4OMafN7TLeUgKj/qQY5TpmnZO/N0loSgMk0VaiQ3paFxeLgHKTyAuiu
 73mw==
X-Gm-Message-State: ALoCoQlumh5km3dBpeFtKChFPBFxxMG/fPkBC8WBX8nlmnBe3JBvWvIYbDrhNIWBXwxAxyFmLZBT
X-Received: by 10.43.130.71 with SMTP id hl7mr15902752icc.57.1419227699973;
 Sun, 21 Dec 2014 21:54:59 -0800 (PST)
Received: from [192.168.1.2] (69-196-152-198.dsl.teksavvy.com.
 [69.196.152.198])
 by mx.google.com with ESMTPSA id l3sm4482821igj.9.2014.12.21.21.54.57
 for <tor-talk@lists.torproject.org>
 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
 Sun, 21 Dec 2014 21:54:58 -0800 (PST)
Message-ID: <5497B22F.1050803@cyblings.on.ca>
Date: Mon, 22 Dec 2014 00:54:55 -0500
From: krishna e bera <keb@cyblings.on.ca>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
 rv:31.0) Gecko/20100101 Thunderbird/31.3.0
MIME-Version: 1.0
To: tor-talk@lists.torproject.org
References: <54972AD3.8070005@riseup.net>
 <CAJdkzEMF-bP0gZupNSuUXgaHVAh1hQyO5u8c8kcy+_3gNMUS_A@mail.gmail.com>
 <54973111.7000002@riseup.net>
 <CAMtFrUF1CfGq207Qv3tx6Qx47fbF85PgcfHwikBuH9ZPKjm0og@mail.gmail.com>
 <549733A7.6070905@riseup.net>
 <CAFggDF1fe7UuKxYNbua_y+yKdGkH7cEueSC+ibWKkp3x6vXMNA@mail.gmail.com>
 <54973F5C.6050609@riseup.net> <54975DB8.20706@riseup.net>
In-Reply-To: <54975DB8.20706@riseup.net>
Subject: Re: [tor-talk] Warning: Do NOT use my mirrors/services until I have
 reviewed the situation
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============1065850104819469613=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============1065850104819469613==
Content-Type: multipart/signed; micalg=pgp-sha1;
 protocol="application/pgp-signature";
 boundary="RAb6ML7gx2dEVqpKpM2K6r7KphPL8CHD5"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--RAb6ML7gx2dEVqpKpM2K6r7KphPL8CHD5
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

On 14-12-21 06:54 PM, Thomas White wrote:
> Ok now the dust has settled a little, a few updates on the situation:
>=20
> 1. The likelihood of this being the work of law enforcement seems to
> be lower than originally anticipated. This is good in many ways but
> asks more questions than it solves right now. I am not going to
> completely exclude the possibility of law enforcement involvement
> though as there simply isn't enough information.
>=20
> 2. A large portion of our logs seem to be non-existent right now, I am
> not sure how or why they have been cleared as this has not happened
> before. When a bit of time has passed and I can be sure of no imminent
> raid on my property I will look into the logs in more detail and share
> them with people more qualified than myself to judge on the matter. If
> appropriate we will then also look to make them public assuming there
> are no consequences for doing so. Furthermore as the time & date of
> some of the servers seem to have been skewed, what remaining info
> there is may be unreliable.

I once noticed sections of logs missing for several hours on a server in
a regular corporate situation and there was a reboot logged just after
entries started again.  At first i thought it was a break-in due to
firewall reports of remote login attempts.  We did not have chassis
intrusion sensors.
Eventually i traced the problem to someone inserting a backup device
into a flaky/faulty USB port, which shorted and made the system freeze
and then reboot.
So, i'm suggesting the possibility one of the operators in the data
centre heard noise or other hardware issues and looked inside.  That
doesnt explain why your account might have been suspended however...




--RAb6ML7gx2dEVqpKpM2K6r7KphPL8CHD5
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEVAwUBVJeyL/p3cia4tegJAQKpHAf+KCcl0KXE5IRVkdMZ6uvEwcDI4dTWXfye
a4X8qiab6C2THcpGSqc3EcivpjVz+zXAKhT1KE3kHf2LCmKhcbWPHX9IHGFS/Tyk
xCOQ3f2Uo78RIC66HJU4anDQCaGzvDYeklg7f970hPgF3AUF/Qmrpfx4QP5S26zG
xTMdVsQscPtRO86DT5V4Y6kULU+uxNWSkPxV8gCaD/O2H1qPNtrTcGMqdAsIII44
Br8VKV+qY9QxTy6zIU2vrf3kwa1wJn4CSReGt6ktGMncUJcxBCsyAgrw63nPI1ak
x6EXMtDLKIDznQ5TEgiFDpzPIACwGUMbRKtc3pI1MnflnorTdJD/Iw==
=mXE3
-----END PGP SIGNATURE-----

--RAb6ML7gx2dEVqpKpM2K6r7KphPL8CHD5--

--===============1065850104819469613==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============1065850104819469613==--

