Tracking One Year of Malicious Tor Exit Relay Activities (Part II)

I&#x27;m a long time exit node operator, I operate X currently and all are in Asia where they&#x27;re most needed imho.<p>I would not be opposed to having some sort of operator validation of exit nodes. Where you can actually validate who runs an operator node, get a person behind them. And perhaps rate those higher than others.

Trying to figure out what makes MITM&#x27;d exit nodes valuable.<p>Sure, as an attacker it&#x27;s interesting, but cost vs. how interesting isn&#x27;t clear. The law enforcement case for specific investigations makes some sense, general counter intelligence value of keeping track of which web sites are attracting people who take precautions, maybe there is a general list of suspected dissident minds states maintain?

These days I mainly use tor for hidden services. It&#x27;s hard to use it for normal surfing anyways

The almost willful lack of tradecraft, scale of deployments, small time-frames, and &quot;loudness&quot; of action the highlighted entity displays, combined with the technical knowledge required to take part in this narrow space, suggests that someone is tolerance-checking the system rather than actually seeking to inhabit it.<p>Or they really are just shitty and impatient Russians, I could go either way.

Why does tor even allow plain http by default. The internet has changed, most sites support https now, seems like a better default is in order.

Out of curiosity, is there much of a (legal, sensible) community on i2p nowadays? I think its crypto is stronger than tor&#x27;s, but unfortunately when I looked (many, many years ago) it was an absolute cesspool of humanity, of the &quot;oh god, I am uninstalling this now&quot; variety.

As a believer in the Tor mission—-how do I run a non-evil exit node?

It&#x27;s that dude who can&#x27;t figure out how to use ssl?

Quick question: if you use Tor to send and receive crypto are you at risk of MITM?

To be honest I just take it for granted that all exit relays are either run by Feds or at least compromised by Feds. If you use Tor for anything you wouldn&#x27;t want Five Eyes to know about, you&#x27;re an idiot.