Delivery-Date: Wed, 21 Jan 2015 14:20:39 -0500
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,T_DKIM_INVALID,URIBL_BLOCKED autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id E4B4C1E0C58
	for <archiver@seul.org>; Wed, 21 Jan 2015 14:20:37 -0500 (EST)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id A208F3381C;
	Wed, 21 Jan 2015 19:20:34 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 4797E337FF
 for <tor-talk@lists.torproject.org>; Wed, 21 Jan 2015 19:20:31 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id HyANZgvVve2O for <tor-talk@lists.torproject.org>;
 Wed, 21 Jan 2015 19:20:31 +0000 (UTC)
Received: from vincent.hireahit.com (vincent.hireahit.com [23.19.120.58])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by eugeni.torproject.org (Postfix) with ESMTPS id 3464A337E8
 for <tor-talk@lists.torproject.org>; Wed, 21 Jan 2015 19:20:31 +0000 (UTC)
Received: from VINCENT.hireahit.com by hireahit.com (vincent.hireahit.com)
 (SecurityGateway 3.0.2) with ESMTP id SG001613408.MSG 
 for <tor-talk@lists.torproject.org>; Wed, 21 Jan 2015 11:20:29 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=hireahit.com;
 s=MD-20140321; t=1421868027; x=1422472827; q=dns/txt; h=Message-ID:
 Date:From:User-Agent:MIME-Version:To:Subject:References:
 In-Reply-To:Content-Type:Content-Transfer-Encoding; bh=2mySz1I32
 QFs3QkfnlsJQGeCrDDodFppKBh6JVgLlfY=; b=ZuzIEZPqRtfLKdPKs0g937Qp6
 nQZD4VnFzw2BeOAxgotoQCbPt1Tw5sYbFWecOeluwrrW0NwyleCoC+BML4cwX0e4
 WV1xpu/0juzt9IXMgogRyn6bduptx0DBEYBPqiZ+j9QazJSDr7sCFls+faTIWHCE
 aFSQ4sIqXxZe7TURUw=
Received: from [x.x.x.x] ([184.68.44.226])
 by VINCENT.hireahit.com (VINCENT.hireahit.com [23.19.120.58])
 (Cipher TLSv1:AES-SHA:256) (MDaemon PRO v14.5.3d) 
 with ESMTPSA id 16-md50000015582.msg for <tor-talk@lists.torproject.org>;
 Wed, 21 Jan 2015 11:20:26 -0800
X-MDRemoteIP: 184.68.44.226
X-MDArrival-Date: Wed, 21 Jan 2015 11:20:26 -0800
X-Authenticated-Sender: davew@hireahit.com
X-Return-Path: davew@hireahit.com
X-Envelope-From: davew@hireahit.com
X-MDaemon-Deliver-To: tor-talk@lists.torproject.org
Message-ID: <54BFFBF8.8080000@hireahit.com>
Date: Wed, 21 Jan 2015 11:20:24 -0800
From: Dave Warren <davew@hireahit.com>
User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64;
 rv:24.0) Gecko/20140623 FossaMail/24.6.0
MIME-Version: 1.0
To: tor-talk@lists.torproject.org
References: <54BEB7AB.7090401@umail.iu.edu>
 <20150120202427.GB30692@moria.seul.org> <54BFA3F2.9030706@gmail.com>
In-Reply-To: <54BFA3F2.9030706@gmail.com>
Subject: Re: [tor-talk] Yelp blocking Tor users from viewing entire site
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

On 2015-01-21 05:04, Aymeric Vitte wrote:
> It would be interesting to know if sites like Yelp/Craiglists are more 
> afraid of anonymity and possible spam/trolls than crawlers.
>
> If they cannot detect a crawler using Tor, then they cannot detect any 
> other crawler, like a crawler switching IPs as mentionned in another 
> post, using vpns or proxies, etc
>
> So in that case it's useless to block Tor, because Tor network's size 
> is not really significant compared to other means that crawlers have, 
> probably they just choosed the easy way as well as crawlers might have 
> chosen the easy way too (use Tor), blocking Tor so they have solved 
> one problem.
>
> But in fact they have solved nothing if they are not protected against 
> crawlers, and if they are protected the protection would be something 
> like blocking the IP or sending a captcha.
>
> Maybe the exit nodes could implement an anti-crawler feature, even if 
> the crawler is switching among 1000 exit nodes I think it's feasible 
> to fingerprint it in the Tor network finite space, I don't know if 
> there are studies about this, an efficient crawler can never behave 
> like a human being or a normal browser.
>
> This might sound like a kind of censorship but that's probably not the 
> goal of the Tor network to crawl and spam the web, the exit nodes that 
> would have removed the feature would just get blocked.

I think that Craigslist is a bit different, the ultimate goal is for 
local people to meet in real life, but they have a very high rate of 
spammers and abuse, most of which is non-local. Dealing with spam has 
been a massive problem for Craigslist, and one of the things that has 
helped is to geolocate users when posting and use that to help prevent 
abuse.

More importantly though, when Craigslist identifies you're doing 
something abusive, they don't always tell you. Your posts will appear to 
post, will be visible to you and by number, but not to users who search. 
Given that real posts don't show up instantly either, this works well 
because spammers don't get feedback and therefore can't work around the 
system as easily, but it creates an extremely negative user experience 
for legitimate users who share an IP with a spammer as you will think 
everything is working, but your ad never makes it and you feel like 
you're being ignored.

I'm not sure that blocking Tor is the best approach, but it probably 
makes sense from a user experience perspective since Tor nodes would 
quickly get flagged for abuse if they weren't blocked outright.

I am a bit mixed about whether reducing anonymity is a good thing or not 
for a site that is ultimately centered around people interacting in 
real-life.

-- 
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren


-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

