Delivery-Date: Sun, 19 Oct 2014 20:59:03 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-3.9 required=5.0 tests=BAYES_00,DKIM_ADSP_ALL,
	DKIM_SIGNED,RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID autolearn=ham
	version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 6E9FF1E055B;
	Sun, 19 Oct 2014 20:59:01 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 8A52C30940;
	Mon, 20 Oct 2014 00:58:57 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 5DE52307AD
 for <tor-talk@lists.torproject.org>; Mon, 20 Oct 2014 00:58:54 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id bGTfzy_YGvtL for <tor-talk@lists.torproject.org>;
 Mon, 20 Oct 2014 00:58:54 +0000 (UTC)
Received: from latitanza.investici.org (latitanza.investici.org
 [IPv6:2001:888:2000:56::19])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "smtp.autistici.org",
 Issuer "Autistici/Inventati Certification Authority" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 324F3302E4
 for <tor-talk@lists.torproject.org>; Mon, 20 Oct 2014 00:58:54 +0000 (UTC)
Received: from [82.94.249.234] (latitanza [82.94.249.234]) (Authenticated
 sender: griffin@cryptolab.net) by localhost (Postfix) with ESMTPSA id
 ED2E7120BC1
 for <tor-talk@lists.torproject.org>; Mon, 20 Oct 2014 00:58:48 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cryptolab.net;
 s=stigmate; t=1413766729;
 bh=EIhAz/QqQ1VSDvHmvcWY0Luysfo/UnFlN6ioz+on10I=;
 h=Date:From:To:Subject:In-Reply-To:References;
 b=unHRG3f0OUImx3KDg4+Qxi51baWCmdSfcHgqO7gH11jTCV3TXcnhMtYs+TXIQMH15
 Af4qa7/3YG+CS7UxLkaaPcSUBUbST2vqP/Bf5mQBflzunoQ86pBi4X1ZTo+p9K8dqR
 Fd0ajcHkzj/I+qPEzUSjYQRoyHaPCwbPxTebSVpc=
MIME-Version: 1.0
Date: Sun, 19 Oct 2014 20:58:48 -0400
From: Griffin Boyce <griffin@cryptolab.net>
To: tor-talk@lists.torproject.org
In-Reply-To: <CAMtFrUEyRbKb1fhXChK6cBeL7Hc_cB-7X2jTrczsxmBZvj3eiA@mail.gmail.com>
References: <CADop2NFLuLcaRGwKim5Pw_wM2i1XjgK0Ga4xgynWxFo8LMawdQ@mail.gmail.com>
 <CAMtFrUEyRbKb1fhXChK6cBeL7Hc_cB-7X2jTrczsxmBZvj3eiA@mail.gmail.com>
Message-ID: <ce617081666fcace076eaf1c79ad8b62@cryptolab.net>
X-Sender: griffin@cryptolab.net
User-Agent: Roundcube Webmail
Subject: Re: [tor-talk] What was the academic paper in which
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

On 2014-10-19 19:04, Runa A. Sandvik wrote:
> On Sun, Oct 19, 2014 at 11:02 PM, Virgil Griffith <i@virgil.gr> wrote:
>> researchers setup an exit node and then recorded what sites people
>> were going to?
> 
> I believe you are referring to
> http://homes.cs.washington.edu/~yoshi/papers/Tor/PETS2008_37.pdf

   He might also be thinking of the unpublished DOJ study from a couple 
of years ago.  I asked about this back in May, and here was Andrew's 
response:

On 2014-05-25 16:35, Andrew Lewman wrote:
> On Sun, May 25, 2014 at 05:40:51AM -0400, griffin@cryptolab.net wrote
> 0.4K bytes in 0 lines about:
> :   Is there a good reference for the assertion by DOJ that 3% of Tor's
> : traffic is "bad"/used for piracy/etc?  This has been referenced in a 
> few
> : talks, but was just wondering if this is written anywhere that can be 
> easily
> : referenced.
> 
> There was an unpublished study in Nevada by some grad students who 
> setup
> a few malware defense appliances on the end of a tor exit relay. They
> found 3% of the traffic passing through their exit relay was tagged as
> malware, by however the appliance was configured to determine malware
> or not.
> 
> They never published their research because they either couldn't get
> ethics board clearance at their university and/or because of the Univ. 
> of
> Colorado exit relay issue at PETS.
> 
> I read a draft of the paper, which was subsequently pulled from
> publication. I've talked to a few organization who allow Tor exits, but
> track good/bad traffic (by their definition) who say 3% sounds high 
> from
> what they have seen. None of these orgs will go on the record, but they
> are some of the largest social network and ecommerce sites in the 
> world.

Source: 
https://lists.torproject.org/pipermail/tor-talk/2014-May/033061.html

-- 
"I believe that usability is a security concern; systems that do
not pay close attention to the human interaction factors involved
risk failing to provide security by failing to attract users."
~Len Sassaman
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

