5 ms·
The # of tor exit nodes relative to IP addresses available to people doing the DDoS is miniscule. I'm so tired of company blocking tor users and always claiming
by soheil 5y ago
The # of tor exit nodes relative to IP addresses available to people doing the DDoS is miniscule. I'm so tired of company blocking tor users and always claiming this as the reason. Any IOT device, routers with admin/pass as login, smart cameras, grandma's old PC and a million other types of devices are fully susceptible to being hijacked as a proxy giving the attacker an unimaginable number of IP addresses.
- kayodelycaon 5y agoYet, geo-ip and service provider (AWS) blocks are extremely effective at blocking these kinds of attacks. The issue is there is no list of IPs that can be identified and blocked with any reliability. It is impossible to separate valid connections from invalid. When the vast majority of traffic (99+%) is malicious, slamming the door is the most viable solution. If there was a good way, Cloudflare would have solved it. Cloudflare hasn’t been enough for my company. We had to add temporary Geo-IP blocks just to get the site up.
- soheil 5y agoSeems to me tor needs to implement a way to blend in better with the rest of internet traffic instead of it being detectable as an exit node so easily.
- zozbot234 5y agoTor incoming traffic is easy to detect and block on purpose. It's not trying to hide or 'blend in' via technical means, it's seeking social legitimacy for privacy-enhanced traffic.
- soheil 5y agoWhy not "social legitimacy for privacy-enhanced traffic" that is also nobody else's business to know, including the hosting providers? ie. I don't want Cloudflare CEO popping up here gloating about how they're fighting for the cause of tor users! F' that if they don't know it's there they can't take credit for it either. That's the tor I want.