Delivery-Date: Tue, 29 Jul 2014 10:57:05 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED,
	RP_MATCHES_RCVD autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 3E4441E0A95
	for <archiver@seul.org>; Tue, 29 Jul 2014 10:57:03 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id E515330759;
	Tue, 29 Jul 2014 14:57:01 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 741B030751
 for <tor-talk@lists.torproject.org>; Tue, 29 Jul 2014 14:54:13 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 4XK3Vbryh8pO for <tor-talk@lists.torproject.org>;
 Tue, 29 Jul 2014 14:54:13 +0000 (UTC)
Received: from smtp.rlogin.net (pipe.rlogin.net [213.138.100.26])
 by eugeni.torproject.org (Postfix) with ESMTP id 47F4D2FF9A
 for <tor-talk@lists.torproject.org>; Tue, 29 Jul 2014 14:54:13 +0000 (UTC)
Received: from gate.rlogin.net (aaisp.rlogin.net [178.238.155.43])
 by smtp.rlogin.net (Postfix) with ESMTPSA id F3C784211A
 for <tor-talk@lists.torproject.org>; Tue, 29 Jul 2014 15:54:10 +0100 (BST)
Date: Tue, 29 Jul 2014 15:54:10 +0100
From: mick <mbm@rlogin.net>
To: tor-talk@lists.torproject.org
Message-ID: <20140729155410.3f106aa0@gate.rlogin.net>
In-Reply-To: <53D7288E.1090802@riseup.net>
References: <53D47B68.3000905@riseup.net>
 <20140728000202.GN18042@necrid.teamhugs.is>
 <53D7288E.1090802@riseup.net>
MIME-Version: 1.0
Subject: Re: [tor-talk] how many verify their tbb ?
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============8610182091292621480=="
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

--===============8610182091292621480==
Content-Type: multipart/signed; micalg=pgp-sha256;
 boundary="Sig_/LEiIK.rXdy7=W2FwegH8n0z"; protocol="application/pgp-signature"

--Sig_/LEiIK.rXdy7=W2FwegH8n0z
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

On Tue, 29 Jul 2014 14:52:30 +1000
"shmick@riseup.net" <shmick@riseup.net> allegedly wrote:
>=20
> Andrew Lewman wrote:
> >=20
> > So roughly, 9122:1624 or 18% if I did my top-of-the-head math
> > right. And technically, this is just requests for the .asc file, no
> > idea if the person/bot actually ran gpg --verify on it.
> >=20
>=20
> nginx maybe ?
> that's interestingly high - i would have put money on < 5%
> of course, we can't measure/know the human verification (or can we)

Is it safe to assume that a high proportion of those actually
bothering to download the .asc will then go on to verify? If not, why
would they bother to download?

I have just checked on my tails mirror and I get the slightly
depressing results below:

cat tails.log.1 | grep tails-i386-1.1.iso | grep -v .sig | sort -t. +0
-3 -u | wc -l

1774

cat tails.log.1 | grep tails-i386-1.1.iso.sig | sort -t. +0 -3 -u | wc
-l

12

which I make 0.68%

Note that I have used a different approach to Andrew because I think
his approach will overestimate the number of file retrievals. Certainly
in my logs I see multiple parallel connections from the same IP
address (with resulting HTTP status code 206 for partial content). My
sort above should strip those out. If I use Andrew's approach and do
not strip the multiple connections from the same address I get the
even more depressing results below:

cat tails.log.1 | grep tails-i386-1.1.iso | grep -v .sig | wc -l

8194

which would give only 0.15% bothering to check the signature.

(Of course, since many connections to my mirror may come over Tor my
sort will remove any which happen to pop out of the same exit - so the
approach is far from perfect. That said, my awstats runs show answers
consistent with the approach I have used.)=20

Mick

---------------------------------------------------------------------

 Mick Morgan
 gpg fingerprint: FC23 3338 F664 5E66 876B  72C0 0A1F E60B 5BAD D312
 http://baldric.net

---------------------------------------------------------------------


--Sig_/LEiIK.rXdy7=W2FwegH8n0z
Content-Type: application/pgp-signature; name=signature.asc
Content-Disposition: attachment; filename=signature.asc

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=43Bm
-----END PGP SIGNATURE-----

--Sig_/LEiIK.rXdy7=W2FwegH8n0z--

--===============8610182091292621480==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

--===============8610182091292621480==--

