@silverpill 4.5 TB! $150/mo+ in hosting costs!

even if it was possible to host the entire stack, no one is going to pay $2k a year just to host their own microblog, wtf

Wild ass day in the Tor node operator world. Got an email from my VPS, forwarding a complaint from WatchDog CyberSecurity saying that my box was scanning SSH ports!

> Oh no, oh no, I knew I should have set up fail2ban, oh god why was I so lackadaisical!

So I remote in to the machine: no unusual network activity, no unusual processes, users, logins, command history, no sign that anything is doing anything I didn't tell it to do.

So what's up? Turns out there's been a widespread campaign where some actor is spoofing IPs to make it look like systems running Tor are scanning port 22: https://forum.torproject.org/t/tor-relays-tor-relays-source-ips-spoofed-to-mass-scan-port-22/15498/14

Operators from all over are saying they're getting nastygrams from their VPS providers because WatchDog is fingering their source IPs (which are being spoofed and NOT part of a global portscanning botnet).

@delroth did an amazing writeup of the whole thing here: https://delroth.net/posts/spoofed-mass-scan-abuse/

#tor #infosec #cybersecurity #threatintel #privacy

"X shouldn't be politicized! Y should be above politics!"

Don't be a clown. Do you live under a nation-state? Are there armed men with a mandate to enforce laws with violence within driving distance on maintained roads? Do you eat food that complies with inspection requirements? Water provided a municipal supply system? Internet that runs through routers operated by a corporation? Married? Hold investments? All that shit is governed by politics!

Everything is political. Nothing transcends politics except matters of the fucking cosmos. If you mean "I disagree with this decision or position" then just say that and don't behave like you have a child's working knowledge of the world.