[liberationtech] Call for Tenders SMART 2013/N004 “European Capability for Situational Awareness” (ECSA) - European Federation for cyber-censorship and human rights monitoring

[Andrew Lewman]

On Tue, 24 Sep 2013 03:13:30 +0000
<Camino.MANJON at ec.europa.eu> wrote:

> Dear Andrew,
> 
> This news certainly do not help.
> 
> http://www.welivesecurity.com/2013/07/24/the-rise-of-tor-based-botnets/
> 
> Grateful for your views

Thanks for asking, rather than just assuming poorly written press is
accurate.  Our blog post says it all,
https://blog.torproject.org/blog/how-to-handle-millions-new-tor-clients

They aren't using exit relays, they are only using hidden services.
This means that http://ec.europa.eu wouldn't see bot requests coming
through tor. I bet even by blocking tor, http://ec.europa.eu still sees
endless botnet requests and other attacks.

I'd love to see data relating to what http://ec.europa.eu is
seeing specifically from tor versus non-tor IP addresses (both ipv4 and
ipv6). Something like quantity of attacks from tor vs. non-tor,
breakdown of those requested deemed an attack into their specific type
of attack, and other basic metrics.

-- 
Andrew
http://tpo.is/contact
pgp 0x6B4D6475