Delivery-Date: Sun, 19 Oct 2014 22:43:20 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIM_ADSP_CUSTOM_MED,
	DKIM_SIGNED,FREEMAIL_FROM,RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID
	autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id 4AD3D1E01A9;
	Sun, 19 Oct 2014 22:43:18 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id BDD9330EF2;
	Mon, 20 Oct 2014 02:43:13 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 2073421D87
 for <tor-talk@lists.torproject.org>; Mon, 20 Oct 2014 02:43:10 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id EVq-rp4dBU4s for <tor-talk@lists.torproject.org>;
 Mon, 20 Oct 2014 02:43:10 +0000 (UTC)
Received: from mail-qc0-x233.google.com (mail-qc0-x233.google.com
 [IPv6:2607:f8b0:400d:c01::233])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id F2A7F21917
 for <tor-talk@lists.torproject.org>; Mon, 20 Oct 2014 02:43:09 +0000 (UTC)
Received: by mail-qc0-f179.google.com with SMTP id x3so3068362qcv.10
 for <tor-talk@lists.torproject.org>; Sun, 19 Oct 2014 19:43:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=message-id:date:from:user-agent:mime-version:to:subject:references
 :in-reply-to:content-type;
 bh=pQ/M0lIWe8DTl23JyhhgsZR408G0+4qCMs6kckGL3Bk=;
 b=BVU4xU8cpVQaAGgVbAEo8/k3rYU5b8uJByol3Y+CPGVk36c+/LDwG2Xocx4x9OA5Gd
 8Tqnktoa/buHSPhRzR2Zi0UdaqLISBiEXmlEvkplkM63KoFr8jr1IBD/ScqQvi/HAnFQ
 hWfL/WgbPlmOwz1+WzmcNf2xb4XJMLoACQDZDGFl2QIOYfG+aWCXVOE3JJFPkLMdq4I3
 cJAPqo//SjDKl7xxij6sY3mzz0qsk5GRdMb2pr4D1gjHwsGp45LsNcqpSwhFIibv63Tg
 ZSQXVd8RvfYBrLLgv355BGTijoYLRNozhfnhJXmGjYo4nB9sOp/tCu8x69Suqz1MuLTz
 y2fQ==
X-Received: by 10.224.87.138 with SMTP id w10mr7116165qal.95.1413772987222;
 Sun, 19 Oct 2014 19:43:07 -0700 (PDT)
Received: from [192.168.1.101] ([98.124.92.106])
 by mx.google.com with ESMTPSA id h32sm6857348qge.16.2014.10.19.19.43.06
 for <tor-talk@lists.torproject.org>
 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
 Sun, 19 Oct 2014 19:43:06 -0700 (PDT)
Message-ID: <544476B8.5020502@gmail.com>
Date: Sun, 19 Oct 2014 22:43:04 -0400
From: Rick <rerushg@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux i686;
 rv:24.0) Gecko/20100101 Icedove/24.8.1
MIME-Version: 1.0
To: tor-talk@lists.torproject.org
References: <CADop2NFLuLcaRGwKim5Pw_wM2i1XjgK0Ga4xgynWxFo8LMawdQ@mail.gmail.com>
 <CAMtFrUEyRbKb1fhXChK6cBeL7Hc_cB-7X2jTrczsxmBZvj3eiA@mail.gmail.com>
 <ce617081666fcace076eaf1c79ad8b62@cryptolab.net>
 <CAJoS0DVh_p93WuNLKjX0aEbA_uN6uhAFSeGuV7Zc-XA9r_QbPA@mail.gmail.com>
In-Reply-To: <CAJoS0DVh_p93WuNLKjX0aEbA_uN6uhAFSeGuV7Zc-XA9r_QbPA@mail.gmail.com>
X-Content-Filtered-By: Mailman/MimeDel 2.1.15
Subject: Re: [tor-talk] What was the academic paper in which
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

On 10/19/2014 09:16 PM, z9wahqvh wrote:
> that McCoy et al document has been helpful to my research as well, so thank
> you.
>
> in the exchange below, there is a reference to an "assertion by DOJ" that
> has been "referenced in a few talks." Does this mean talks by DOJ or by
> someone else? Does anyone have a link to video or transcript of these
> talks? My initial searches aren't turning up anything that seems relevant.
>
> also, when you refer to an unpublished DOJ study, and Andrew responds about
> an unpublished study by grad students in Nevada, is the thought that these
> are the same studies, or two different studies?
>
> On Sun, Oct 19, 2014 at 8:58 PM, Griffin Boyce <griffin@cryptolab.net>
> wrote:
>
>
>> On 2014-05-25 16:35, Andrew Lewman wrote:
>>
>>> On Sun, May 25, 2014 at 05:40:51AM -0400, griffin@cryptolab.net wrote
>>> 0.4K bytes in 0 lines about:
>>> :   Is there a good reference for the assertion by DOJ that 3% of Tor's
>>> : traffic is "bad"/used for piracy/etc?  This has been referenced in a few
>>> : talks, but was just wondering if this is written anywhere that can be
>>> easily
>>> : referenced.
>>>
>>> There was an unpublished study in Nevada by some grad students who setup
>>> a few malware defense appliances on the end of a tor exit relay. They
>>> found 3% of the traffic passing through their exit relay was tagged as
>>> malware, by however the appliance was configured to determine malware
>>> or not.
>>>
>>>
The "DoJ... 3%" reference was in the 20C3 talk (2013) by RD & JA at 
about 11 minutes in. I've got the video and don't recall where I got it 
but it wasn't YouTube. The talk at that point was about the perception 
of Tor and a slide was put up with four bullet points, the first of 
which was "Doj's aborted study finding 3% bad content on the Tor network".
Both RD & JA briefly commented on it but there's little more than what 
Andrew has already conveyed. I'll be happy to transcribe that portion 
here if you can't find the video.
IMO, though the 20C3 production values weren't the best, the talk itself 
was one of the better ones. It's a keeper.

Good luck with your work.
Rick
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

