Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.advocacy > #291171 > unrolled thread

OT: IT Pros or anyone with a clue about TOR (not you Snit)

Started bySteve Carroll <fretwizzer@gmail.com>
First post2015-04-23 11:40 -0700
Last post2015-04-26 12:40 -0700
Articles 20 on this page of 77 — 7 participants

Back to article view | Back to comp.os.linux.advocacy


Contents

  OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-23 11:40 -0700
    Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-23 11:46 -0700
    Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Tomas <tgif9fri@numo.net> - 2015-04-23 15:12 -0400
      Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Snit <usenet@gallopinginsanity.com> - 2015-04-23 12:23 -0700
      Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-23 12:59 -0700
        Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) vallor <vallor@cultnix.org> - 2015-04-23 15:49 -0700
          Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Tomas <tgif9fri@numo.net> - 2015-04-23 20:41 -0400
          Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-23 21:44 -0700
            Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) cc <scatnubbs@hotmail.com> - 2015-04-24 04:31 -0700
              Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-24 10:30 -0700
                Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-24 20:08 +0000
                  Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-25 10:49 -0700
                    Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-25 18:40 +0000
                      Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Snit <usenet@gallopinginsanity.com> - 2015-04-25 11:53 -0700
                        Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-25 19:18 +0000
                          Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Snit <usenet@gallopinginsanity.com> - 2015-04-25 12:25 -0700
                          Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 09:54 -0700
                            Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-26 17:30 +0000
                              Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Snit <usenet@gallopinginsanity.com> - 2015-04-26 10:43 -0700
                              Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 11:29 -0700
                                Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-26 18:49 +0000
                                  Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 12:23 -0700
                                    Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 12:48 -0700
                                    Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-26 19:55 +0000
                                      Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 13:25 -0700
                                        Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 13:33 -0700
                                          Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 14:00 -0700
                                            Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-26 21:22 +0000
                                              Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 14:32 -0700
                                                Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-26 21:50 +0000
                                                  Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 15:01 -0700
                                                    Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 15:05 -0700
                                                      Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-26 22:35 +0000
                                              Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 14:35 -0700
                                              Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Snit <usenet@gallopinginsanity.com> - 2015-04-26 14:40 -0700
                                                Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-26 22:09 +0000
                                                  Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Snit <usenet@gallopinginsanity.com> - 2015-04-26 15:21 -0700
                                                  Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 15:21 -0700
                                                    Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-26 22:40 +0000
                                                      Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 15:47 -0700
                                                        Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-26 22:51 +0000
                                                      Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 15:49 -0700
                                                        Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-26 22:56 +0000
                                                          Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 16:00 -0700
                                                            Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-26 23:32 +0000
                                                              Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 16:46 -0700
                                                                Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-27 00:00 +0000
                                                              Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 17:02 -0700
                                                                Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 17:08 -0700
                                                                Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-27 00:47 +0000
                                                                  Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 18:14 -0700
                                                                    Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-27 01:41 +0000
                                                                      Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 19:04 -0700
                                                                        Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-27 02:32 +0000
                                                                          Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 19:38 -0700
                                                                            Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-27 02:46 +0000
                                                                              Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 19:59 -0700
                                                                                Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-27 03:21 +0000
                                                                                  Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 20:38 -0700
                                                                                    Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 20:45 -0700
                                                                                      Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-27 03:58 +0000
                                                                                        Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 21:04 -0700
                                                                                          Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 21:06 -0700
                                                                                            Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) tmelmosfire <tmelmosfire@gmail.com> - 2015-04-26 21:12 -0700
                                                                                            Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-27 04:20 +0000
                                                                                    Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-27 03:55 +0000
                                                                                      Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 20:57 -0700
                                                                                        Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-27 04:02 +0000
                                                                                      Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Steve Carroll <fretwizzer@gmail.com> - 2015-04-26 20:59 -0700
                                                                                        Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-27 04:04 +0000
                                                                  Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Snit <usenet@gallopinginsanity.com> - 2015-04-26 19:01 -0700
                                                                Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) tmelmosfire <tmelmosfire@gmail.com> - 2015-04-26 19:11 -0700
                                                                  Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Snit <usenet@gallopinginsanity.com> - 2015-04-26 19:47 -0700
                                                      Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Snit <usenet@gallopinginsanity.com> - 2015-04-26 17:11 -0700
                                                        Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) tmelmosfire <tmelmosfire@gmail.com> - 2015-04-26 20:06 -0700
                                        Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) owl <owl@rooftop.invalid> - 2015-04-26 20:47 +0000
                                  Re: OT: IT Pros or anyone with a clue about TOR (not you Snit) Snit <usenet@gallopinginsanity.com> - 2015-04-26 12:40 -0700

Page 1 of 4  [1] 2 3 4  Next page →


#291171 — OT: IT Pros or anyone with a clue about TOR (not you Snit)

FromSteve Carroll <fretwizzer@gmail.com>
Date2015-04-23 11:40 -0700
SubjectOT: IT Pros or anyone with a clue about TOR (not you Snit)
Message-ID<6e680994-3422-4f83-9f84-ed210e73b5c1@googlegroups.com>
Can this post have come through TOR?

https://groups.google.com/forum/#!original/comp.os.linux.advocacy/TpIhDmzpHNY/FS1VeFIaXdAJ


Header info...

--
X-Received: by 10.42.38.208 with SMTP id d16mr1931169ice.5.1429242717764;
        Thu, 16 Apr 2015 20:51:57 -0700 (PDT)
X-BeenThere: comp.os.linux.advocacy@googlegroups.com
Received: by 10.107.153.209 with SMTP id b200ls1157922ioe.70.gmail; Thu, 16
 Apr 2015 20:51:55 -0700 (PDT)
X-Received: by 10.66.66.1 with SMTP id b1mr1407825pat.8.1429242715639;
        Thu, 16 Apr 2015 20:51:55 -0700 (PDT)
X-Received: by 10.182.96.102 with SMTP id dr6mr6679obb.33.1429242715417; Thu,
 16 Apr 2015 20:51:55 -0700 (PDT)
Path: a41ni592qgf.1!nntp.google.com!z60no2139572qgd.0!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail
Newsgroups: comp.os.linux.advocacy
Date: Thu, 16 Apr 2015 20:51:55 -0700 (PDT)
In-Reply-To: <D153C7BC.4A369%usenet@gallopinginsanity.com>
Complaints-To: groups-abuse@google.com
Injection-Info: glegroupsg2000goo.googlegroups.com; posting-host=209.126.110.113;
 posting-account=JEXf8QoAAABo3UPk_KXdmH0JZp_Y4seO
NNTP-Posting-Host: 209.126.110.113
References: <Jeff-Relf.Me@Apr.14{11.38P.Seattle.2015}> <UtuXw.301571$uF6.213764@fx17.iad>
 <mgltbn$pfm$3@dont-email.me> <D153C7BC.4A369%usenet@gallopinginsanity.com>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <d5a5c269-0af2-4742-a9fa-fe17ef60f5e0@googlegroups.com>
Subject: Re: Linus Torvalds has trouble using his mouse.
From: Steve Carroll <fretwizzen@gmail.com>
Injection-Date: Fri, 17 Apr 2015 03:51:55 +0000
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
--

When I punch the IP address into here...
 
http://www.iplocation.net/

I get the following info...

--
Geolocation data from IP2Location (Product: DB4 updated on 3/31/2015)
IP Address	Country	Region	City	ISP
209.126.110.113	United States 	Missouri	Saint Louis	Hosting Solutions International Inc.
Google Map for Saint Louis, Missouri, United States (New window)


Geolocation data from IPligence (Product: Max updated on 4/22/2015)
IP Address	Country	Region	City	ISP
209.126.110.113	United States 	Missouri	Saint Louis	River City Internet Group Primary Networks
 	Continent	Latitude	Longitude	Time Zone
 	North America	38.7422	-90.3457	CST
Google Map for SAINT LOUIS, MISSOURI, UNITED STATES (New window)


Geolocation data from IP Address Labs (Product: Pro On-demand API)
IP Address	Country	Region	City	ISP
209.126.110.113	United States 	Missouri	Saint Louis	Hosting Solutions International
 	Continent	Latitude	Longitude	Organization
 	North America	38.6312	-90.1922	Hosting Solutions International
Google Map for Saint Louis, Missouri, United States (New window)


Geolocation data from DB-IP (Product: Full updated on 4/1/2015)
IP Address	Country	Region	City	ISP
209.126.110.113	US 	Missouri	St. Louis	Hosting Solutions International
 	Time Zone	Latitude	Longitude	Organization
 	America/chicago	38.6305	-90.1928	Hosting Solutions International, Inc.
Google Map for St. Louis, Missouri, US (New window)


Geolocation data from ipinfo.io (On-demand API)
IP Address	Country	Region	City	Postal Code
209.126.110.113	US 	Missouri	Saint Louis	63101
Hostname	Carrier
ncc-1701-d.tor-exit.network	None


Geolocation data from MaxMind (Product: GeoLiteCity updated on 3/3/2015)
IP Address	Country	Region	City	Postal Code	Area Code
209.126.110.113	United States 	MO	Saint Louis	63101	314
Google Map for Saint Louis, MO, USA (New window)
--

When I go to Linked-In for that hosting service...

https://www.linkedin.com/company/hosting-solutions-international-inc.

I get...

--
Specialties
Dedicated Server Hosting
Website
http://www.intergenia.de/en/
Industry
Information Technology and Services
Type
Privately Held
Headquarters
710 North Tucker Blvd. Suite 400A Saint Louis, MO 63101 United States
Company Size
1-10 employees
--

What are the chances that a small U.S. company like this is a TOR relay? Seems odd to me.

[toc] | [next] | [standalone]


#291174

FromSteve Carroll <fretwizzer@gmail.com>
Date2015-04-23 11:46 -0700
Message-ID<4b9bd515-8322-460f-bd73-c644eee672c1@googlegroups.com>
In reply to#291171
On Thursday, April 23, 2015 at 12:40:03 PM UTC-6, Steve Carroll wrote:
> Can this post have come through TOR?
> 
> https://groups.google.com/forum/#!original/comp.os.linux.advocacy/TpIhDmzpHNY/FS1VeFIaXdAJ
> 
> 
> Header info...
> 
> --
> X-Received: by 10.42.38.208 with SMTP id d16mr1931169ice.5.1429242717764;
>         Thu, 16 Apr 2015 20:51:57 -0700 (PDT)
> X-BeenThere: comp.os.linux.advocacy@googlegroups.com
> Received: by 10.107.153.209 with SMTP id b200ls1157922ioe.70.gmail; Thu, 16
>  Apr 2015 20:51:55 -0700 (PDT)
> X-Received: by 10.66.66.1 with SMTP id b1mr1407825pat.8.1429242715639;
>         Thu, 16 Apr 2015 20:51:55 -0700 (PDT)
> X-Received: by 10.182.96.102 with SMTP id dr6mr6679obb.33.1429242715417; Thu,
>  16 Apr 2015 20:51:55 -0700 (PDT)
> Path: a41ni592qgf.1!nntp.google.com!z60no2139572qgd.0!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail
> Newsgroups: comp.os.linux.advocacy
> Date: Thu, 16 Apr 2015 20:51:55 -0700 (PDT)
> In-Reply-To: <D153C7BC.4A369%usenet@gallopinginsanity.com>
> Complaints-To: groups-abuse@google.com
> Injection-Info: glegroupsg2000goo.googlegroups.com; posting-host=209.126.110.113;
>  posting-account=JEXf8QoAAABo3UPk_KXdmH0JZp_Y4seO
> NNTP-Posting-Host: 209.126.110.113
> References: <Jeff-Relf.Me@Apr.14{11.38P.Seattle.2015}> <UtuXw.301571$uF6.213764@fx17.iad>
>  <mgltbn$pfm$3@dont-email.me> <D153C7BC.4A369%usenet@gallopinginsanity.com>
> User-Agent: G2/1.0
> MIME-Version: 1.0
> Message-ID: <d5a5c269-0af2-4742-a9fa-fe17ef60f5e0@googlegroups.com>
> Subject: Re: Linus Torvalds has trouble using his mouse.
> From: Steve Carroll <fretwizzen@gmail.com>
> Injection-Date: Fri, 17 Apr 2015 03:51:55 +0000
> Content-Type: text/plain; charset=UTF-8
> Content-Transfer-Encoding: quoted-printable
> --
> 
> When I punch the IP address into here...
>  
> http://www.iplocation.net/
> 
> I get the following info...
> 
> --
> Geolocation data from IP2Location (Product: DB4 updated on 3/31/2015)
> IP Address	Country	Region	City	ISP
> 209.126.110.113	United States 	Missouri	Saint Louis	Hosting Solutions International Inc.
> Google Map for Saint Louis, Missouri, United States (New window)
> 
> 
> Geolocation data from IPligence (Product: Max updated on 4/22/2015)
> IP Address	Country	Region	City	ISP
> 209.126.110.113	United States 	Missouri	Saint Louis	River City Internet Group Primary Networks
>  	Continent	Latitude	Longitude	Time Zone
>  	North America	38.7422	-90.3457	CST
> Google Map for SAINT LOUIS, MISSOURI, UNITED STATES (New window)
> 
> 
> Geolocation data from IP Address Labs (Product: Pro On-demand API)
> IP Address	Country	Region	City	ISP
> 209.126.110.113	United States 	Missouri	Saint Louis	Hosting Solutions International
>  	Continent	Latitude	Longitude	Organization
>  	North America	38.6312	-90.1922	Hosting Solutions International
> Google Map for Saint Louis, Missouri, United States (New window)
> 
> 
> Geolocation data from DB-IP (Product: Full updated on 4/1/2015)
> IP Address	Country	Region	City	ISP
> 209.126.110.113	US 	Missouri	St. Louis	Hosting Solutions International
>  	Time Zone	Latitude	Longitude	Organization
>  	America/chicago	38.6305	-90.1928	Hosting Solutions International, Inc.
> Google Map for St. Louis, Missouri, US (New window)
> 
> 
> Geolocation data from ipinfo.io (On-demand API)
> IP Address	Country	Region	City	Postal Code
> 209.126.110.113	US 	Missouri	Saint Louis	63101
> Hostname	Carrier
> ncc-1701-d.tor-exit.network	None
> 
> 
> Geolocation data from MaxMind (Product: GeoLiteCity updated on 3/3/2015)
> IP Address	Country	Region	City	Postal Code	Area Code
> 209.126.110.113	United States 	MO	Saint Louis	63101	314
> Google Map for Saint Louis, MO, USA (New window)
> --
> 
> When I go to Linked-In for that hosting service...
> 
> https://www.linkedin.com/company/hosting-solutions-international-inc.
> 
> I get...
> 
> --
> Specialties
> Dedicated Server Hosting
> Website
> http://www.intergenia.de/en/
> Industry
> Information Technology and Services
> Type
> Privately Held
> Headquarters
> 710 North Tucker Blvd. Suite 400A Saint Louis, MO 63101 United States
> Company Size
> 1-10 employees
> --
> 
> What are the chances that a small U.S. company like this is a TOR relay? Seems odd to me.


--


The IP takes you straight to TOR's site!

https://www.torproject.org/

209.126.110.113

[toc] | [prev] | [next] | [standalone]


#291176

FromTomas <tgif9fri@numo.net>
Date2015-04-23 15:12 -0400
Message-ID<1egm0fs8swy1k.1bqvn44z24nsy.dlg@40tude.net>
In reply to#291171
On Thu, 23 Apr 2015 11:40:01 -0700 (PDT), Steve Carroll wrote:

> Can this post have come through TOR?
> 
> https://groups.google.com/forum/#!original/comp.os.linux.advocacy/TpIhDmzpHNY/FS1VeFIaXdAJ
> 
> 
> Header info...
> 
> --
> X-Received: by 10.42.38.208 with SMTP id d16mr1931169ice.5.1429242717764;
>         Thu, 16 Apr 2015 20:51:57 -0700 (PDT)
> X-BeenThere: comp.os.linux.advocacy@googlegroups.com
> Received: by 10.107.153.209 with SMTP id b200ls1157922ioe.70.gmail; Thu, 16
>  Apr 2015 20:51:55 -0700 (PDT)
> X-Received: by 10.66.66.1 with SMTP id b1mr1407825pat.8.1429242715639;
>         Thu, 16 Apr 2015 20:51:55 -0700 (PDT)
> X-Received: by 10.182.96.102 with SMTP id dr6mr6679obb.33.1429242715417; Thu,
>  16 Apr 2015 20:51:55 -0700 (PDT)
> Path: a41ni592qgf.1!nntp.google.com!z60no2139572qgd.0!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail
> Newsgroups: comp.os.linux.advocacy
> Date: Thu, 16 Apr 2015 20:51:55 -0700 (PDT)
> In-Reply-To: <D153C7BC.4A369%usenet@gallopinginsanity.com>
> Complaints-To: groups-abuse@google.com
> Injection-Info: glegroupsg2000goo.googlegroups.com; posting-host=209.126.110.113;
>  posting-account=JEXf8QoAAABo3UPk_KXdmH0JZp_Y4seO
> NNTP-Posting-Host: 209.126.110.113
> References: <Jeff-Relf.Me@Apr.14{11.38P.Seattle.2015}> <UtuXw.301571$uF6.213764@fx17.iad>
>  <mgltbn$pfm$3@dont-email.me> <D153C7BC.4A369%usenet@gallopinginsanity.com>
> User-Agent: G2/1.0
> MIME-Version: 1.0
> Message-ID: <d5a5c269-0af2-4742-a9fa-fe17ef60f5e0@googlegroups.com>
> Subject: Re: Linus Torvalds has trouble using his mouse.
> From: Steve Carroll <fretwizzen@gmail.com>
> Injection-Date: Fri, 17 Apr 2015 03:51:55 +0000
> Content-Type: text/plain; charset=UTF-8
> Content-Transfer-Encoding: quoted-printable
> --
> 
> When I punch the IP address into here...
>  
> http://www.iplocation.net/
> 
> I get the following info...
> 
> --
> Geolocation data from IP2Location (Product: DB4 updated on 3/31/2015)
> IP Address	Country	Region	City	ISP
> 209.126.110.113	United States 	Missouri	Saint Louis	Hosting Solutions International Inc.
> Google Map for Saint Louis, Missouri, United States (New window)
> 
> 
> Geolocation data from IPligence (Product: Max updated on 4/22/2015)
> IP Address	Country	Region	City	ISP
> 209.126.110.113	United States 	Missouri	Saint Louis	River City Internet Group Primary Networks
>  	Continent	Latitude	Longitude	Time Zone
>  	North America	38.7422	-90.3457	CST
> Google Map for SAINT LOUIS, MISSOURI, UNITED STATES (New window)
> 
> 
> Geolocation data from IP Address Labs (Product: Pro On-demand API)
> IP Address	Country	Region	City	ISP
> 209.126.110.113	United States 	Missouri	Saint Louis	Hosting Solutions International
>  	Continent	Latitude	Longitude	Organization
>  	North America	38.6312	-90.1922	Hosting Solutions International
> Google Map for Saint Louis, Missouri, United States (New window)
> 
> 
> Geolocation data from DB-IP (Product: Full updated on 4/1/2015)
> IP Address	Country	Region	City	ISP
> 209.126.110.113	US 	Missouri	St. Louis	Hosting Solutions International
>  	Time Zone	Latitude	Longitude	Organization
>  	America/chicago	38.6305	-90.1928	Hosting Solutions International, Inc.
> Google Map for St. Louis, Missouri, US (New window)
> 
> 
> Geolocation data from ipinfo.io (On-demand API)
> IP Address	Country	Region	City	Postal Code
> 209.126.110.113	US 	Missouri	Saint Louis	63101
> Hostname	Carrier
> ncc-1701-d.tor-exit.network	None
> 
> 
> Geolocation data from MaxMind (Product: GeoLiteCity updated on 3/3/2015)
> IP Address	Country	Region	City	Postal Code	Area Code
> 209.126.110.113	United States 	MO	Saint Louis	63101	314
> Google Map for Saint Louis, MO, USA (New window)
> --
> 
> When I go to Linked-In for that hosting service...
> 
> https://www.linkedin.com/company/hosting-solutions-international-inc.
> 
> I get...
> 
> --
> Specialties
> Dedicated Server Hosting
> Website
> http://www.intergenia.de/en/
> Industry
> Information Technology and Services
> Type
> Privately Held
> Headquarters
> 710 North Tucker Blvd. Suite 400A Saint Louis, MO 63101 United States
> Company Size
> 1-10 employees

Here is what What's my IP Address shows.
Confirmed proxy.
http://whatismyipaddress.com/ip/209.126.110.113


General IP Information

IP:	209.126.110.113
Decimal:	3514723953
Hostname:	ncc-1701-d.tor-exit.network
ISP:	Hosting Solutions International
Organization:	Hosting Solutions International
Services:	Confirmed proxy server
Recently reported forum spam source. (124)
Type:	Corporate
Assignment:	Static IP
Blacklist:	
Geolocation Information

Country:	Anonymous Proxy

[toc] | [prev] | [next] | [standalone]


#291178

FromSnit <usenet@gallopinginsanity.com>
Date2015-04-23 12:23 -0700
Message-ID<D15E94B5.4AA7E%usenet@gallopinginsanity.com>
In reply to#291176
On 4/23/15, 12:12 PM, in article 1egm0fs8swy1k.1bqvn44z24nsy.dlg@40tude.net,
"Tomas" <tgif9fri@numo.net> wrote:

> On Thu, 23 Apr 2015 11:40:01 -0700 (PDT), Steve Carroll wrote:
> 
>> Can this post have come through TOR?
>> 
>> https://groups.google.com/forum/#!original/comp.os.linux.advocacy/TpIhDmzpHNY
>> /FS1VeFIaXdAJ
>> 
>> 
>> Header info...
>> 
>> --
>> X-Received: by 10.42.38.208 with SMTP id d16mr1931169ice.5.1429242717764;
>>         Thu, 16 Apr 2015 20:51:57 -0700 (PDT)
>> X-BeenThere: comp.os.linux.advocacy@googlegroups.com
>> Received: by 10.107.153.209 with SMTP id b200ls1157922ioe.70.gmail; Thu, 16
>>  Apr 2015 20:51:55 -0700 (PDT)
>> X-Received: by 10.66.66.1 with SMTP id b1mr1407825pat.8.1429242715639;
>>         Thu, 16 Apr 2015 20:51:55 -0700 (PDT)
>> X-Received: by 10.182.96.102 with SMTP id dr6mr6679obb.33.1429242715417; Thu,
>>  16 Apr 2015 20:51:55 -0700 (PDT)
>> Path: 
>> a41ni592qgf.1!nntp.google.com!z60no2139572qgd.0!postnews.google.com!glegroups
>> g2000goo.googlegroups.com!not-for-mail
>> Newsgroups: comp.os.linux.advocacy
>> Date: Thu, 16 Apr 2015 20:51:55 -0700 (PDT)
>> In-Reply-To: <D153C7BC.4A369%usenet@gallopinginsanity.com>
>> Complaints-To: groups-abuse@google.com
>> Injection-Info: glegroupsg2000goo.googlegroups.com;
>> posting-host=209.126.110.113;
>>  posting-account=JEXf8QoAAABo3UPk_KXdmH0JZp_Y4seO
>> NNTP-Posting-Host: 209.126.110.113
>> References: <Jeff-Relf.Me@Apr.14{11.38P.Seattle.2015}>
>> <UtuXw.301571$uF6.213764@fx17.iad>
>>  <mgltbn$pfm$3@dont-email.me> <D153C7BC.4A369%usenet@gallopinginsanity.com>
>> User-Agent: G2/1.0
>> MIME-Version: 1.0
>> Message-ID: <d5a5c269-0af2-4742-a9fa-fe17ef60f5e0@googlegroups.com>
>> Subject: Re: Linus Torvalds has trouble using his mouse.
>> From: Steve Carroll <fretwizzen@gmail.com>
>> Injection-Date: Fri, 17 Apr 2015 03:51:55 +0000
>> Content-Type: text/plain; charset=UTF-8
>> Content-Transfer-Encoding: quoted-printable
>> --
>> 
>> When I punch the IP address into here...
>>  
>> http://www.iplocation.net/
>> 
>> I get the following info...
>> 
>> --
>> Geolocation data from IP2Location (Product: DB4 updated on 3/31/2015)
>> IP Address Country Region City ISP
>> 209.126.110.113 United States  Missouri Saint Louis Hosting Solutions
>> International Inc.
>> Google Map for Saint Louis, Missouri, United States (New window)
>> 
>> 
>> Geolocation data from IPligence (Product: Max updated on 4/22/2015)
>> IP Address Country Region City ISP
>> 209.126.110.113 United States  Missouri Saint Louis River City Internet Group
>> Primary Networks
>> Continent Latitude Longitude Time Zone
>> North America 38.7422 -90.3457 CST
>> Google Map for SAINT LOUIS, MISSOURI, UNITED STATES (New window)
>> 
>> 
>> Geolocation data from IP Address Labs (Product: Pro On-demand API)
>> IP Address Country Region City ISP
>> 209.126.110.113 United States  Missouri Saint Louis Hosting Solutions
>> International
>> Continent Latitude Longitude Organization
>> North America 38.6312 -90.1922 Hosting Solutions International
>> Google Map for Saint Louis, Missouri, United States (New window)
>> 
>> 
>> Geolocation data from DB-IP (Product: Full updated on 4/1/2015)
>> IP Address Country Region City ISP
>> 209.126.110.113 US  Missouri St. Louis Hosting Solutions International
>> Time Zone Latitude Longitude Organization
>> America/chicago 38.6305 -90.1928 Hosting Solutions International, Inc.
>> Google Map for St. Louis, Missouri, US (New window)
>> 
>> 
>> Geolocation data from ipinfo.io (On-demand API)
>> IP Address Country Region City Postal Code
>> 209.126.110.113 US  Missouri Saint Louis 63101
>> Hostname Carrier
>> ncc-1701-d.tor-exit.network None
>> 
>> 
>> Geolocation data from MaxMind (Product: GeoLiteCity updated on 3/3/2015)
>> IP Address Country Region City Postal Code Area Code
>> 209.126.110.113 United States  MO Saint Louis 63101 314
>> Google Map for Saint Louis, MO, USA (New window)
>> --
>> 
>> When I go to Linked-In for that hosting service...
>> 
>> https://www.linkedin.com/company/hosting-solutions-international-inc.
>> 
>> I get...
>> 
>> --
>> Specialties
>> Dedicated Server Hosting
>> Website
>> http://www.intergenia.de/en/
>> Industry
>> Information Technology and Services
>> Type
>> Privately Held
>> Headquarters
>> 710 North Tucker Blvd. Suite 400A Saint Louis, MO 63101 United States
>> Company Size
>> 1-10 employees
> 
> Here is what What's my IP Address shows.
> Confirmed proxy.
> http://whatismyipaddress.com/ip/209.126.110.113
> 
> 
> General IP Information
> 
> IP: 209.126.110.113
> Decimal: 3514723953
> Hostname: ncc-1701-d.tor-exit.network
> ISP: Hosting Solutions International
> Organization: Hosting Solutions International
> Services: Confirmed proxy server
> Recently reported forum spam source. (124)
> Type: Corporate
> Assignment: Static IP
> Blacklist: 
> Geolocation Information
> 
> Country: Anonymous Proxy

LOL! Carroll is trying to figure out how to hide his usage of Tor.

But that is OK... cc will still deny he is doing so. LOL!

Truly funny.

You can also do this: put "209.126.110.113" into the address bar of your web
browser and see where it takes you. Yeah, the same site Carroll already
pointed to that shows the Tor Browser... which Carroll then later said he
did not even know about and once he did said he did not even know how to
install... given how drag and drop is so hard.

Yes, Carroll, your IP address is clearly tied to Tor. And you knew that.

But you screwed up in trying to hide it.

Love it!


-- 
* Mint MATE Trash, Panel, Menu:     <http://youtu.be/C0y74FIf7uE>
* Mint KDE bugs or Easter eggs?     <http://youtu.be/CU-whJQvtfA>
* Mint KDE working with folders:    <http://youtu.be/7C9nvniOoE0>
* Mint KDE creating files:          <http://youtu.be/N7-fZJaJUv8>
* Mint KDE help:                    <http://youtu.be/3ikizUd3sa8>
* Mint KDE general navigation:      <http://youtu.be/t9y14yZtQuI>
* Mavericks / Pages 5.1:            <http://youtu.be/D3BPWANQoIk>
* OS / Word Processor Comparison:   <http://youtu.be/w6Qcl-w7s5c>

[toc] | [prev] | [next] | [standalone]


#291184

FromSteve Carroll <fretwizzer@gmail.com>
Date2015-04-23 12:59 -0700
Message-ID<81daff98-d402-4ceb-ab92-aef9942cbda0@googlegroups.com>
In reply to#291176
On Thursday, April 23, 2015 at 1:12:53 PM UTC-6, Tomas wrote:
> On Thu, 23 Apr 2015 11:40:01 -0700 (PDT), Steve Carroll wrote:
> 
> > Can this post have come through TOR?
> > 
> > https://groups.google.com/forum/#!original/comp.os.linux.advocacy/TpIhDmzpHNY/FS1VeFIaXdAJ
> > 
> > 
> > Header info...
> > 
> > --
> > X-Received: by 10.42.38.208 with SMTP id d16mr1931169ice.5.1429242717764;
> >         Thu, 16 Apr 2015 20:51:57 -0700 (PDT)
> > X-BeenThere: comp.os.linux.advocacy@googlegroups.com
> > Received: by 10.107.153.209 with SMTP id b200ls1157922ioe.70.gmail; Thu, 16
> >  Apr 2015 20:51:55 -0700 (PDT)
> > X-Received: by 10.66.66.1 with SMTP id b1mr1407825pat.8.1429242715639;
> >         Thu, 16 Apr 2015 20:51:55 -0700 (PDT)
> > X-Received: by 10.182.96.102 with SMTP id dr6mr6679obb.33.1429242715417; Thu,
> >  16 Apr 2015 20:51:55 -0700 (PDT)
> > Path: a41ni592qgf.1!nntp.google.com!z60no2139572qgd.0!postnews.google.com!glegroupsg2000goo.googlegroups.com!not-for-mail
> > Newsgroups: comp.os.linux.advocacy
> > Date: Thu, 16 Apr 2015 20:51:55 -0700 (PDT)
> > In-Reply-To: <D153C7BC.4A369%usenet@gallopinginsanity.com>
> > Complaints-To: groups-abuse@google.com
> > Injection-Info: glegroupsg2000goo.googlegroups.com; posting-host=209.126.110.113;
> >  posting-account=JEXf8QoAAABo3UPk_KXdmH0JZp_Y4seO
> > NNTP-Posting-Host: 209.126.110.113
> > References: <Jeff-Relf.Me@Apr.14{11.38P.Seattle.2015}> <UtuXw.301571$uF6.213764@fx17.iad>
> >  <mgltbn$pfm$3@dont-email.me> <D153C7BC.4A369%usenet@gallopinginsanity.com>
> > User-Agent: G2/1.0
> > MIME-Version: 1.0
> > Message-ID: <d5a5c269-0af2-4742-a9fa-fe17ef60f5e0@googlegroups.com>
> > Subject: Re: Linus Torvalds has trouble using his mouse.
> > From: Steve Carroll <fretwizzen@gmail.com>
> > Injection-Date: Fri, 17 Apr 2015 03:51:55 +0000
> > Content-Type: text/plain; charset=UTF-8
> > Content-Transfer-Encoding: quoted-printable
> > --
> > 
> > When I punch the IP address into here...
> >  
> > http://www.iplocation.net/
> > 
> > I get the following info...
> > 
> > --
> > Geolocation data from IP2Location (Product: DB4 updated on 3/31/2015)
> > IP Address	Country	Region	City	ISP
> > 209.126.110.113	United States 	Missouri	Saint Louis	Hosting Solutions International Inc.
> > Google Map for Saint Louis, Missouri, United States (New window)
> > 
> > 
> > Geolocation data from IPligence (Product: Max updated on 4/22/2015)
> > IP Address	Country	Region	City	ISP
> > 209.126.110.113	United States 	Missouri	Saint Louis	River City Internet Group Primary Networks
> >  	Continent	Latitude	Longitude	Time Zone
> >  	North America	38.7422	-90.3457	CST
> > Google Map for SAINT LOUIS, MISSOURI, UNITED STATES (New window)
> > 
> > 
> > Geolocation data from IP Address Labs (Product: Pro On-demand API)
> > IP Address	Country	Region	City	ISP
> > 209.126.110.113	United States 	Missouri	Saint Louis	Hosting Solutions International
> >  	Continent	Latitude	Longitude	Organization
> >  	North America	38.6312	-90.1922	Hosting Solutions International
> > Google Map for Saint Louis, Missouri, United States (New window)
> > 
> > 
> > Geolocation data from DB-IP (Product: Full updated on 4/1/2015)
> > IP Address	Country	Region	City	ISP
> > 209.126.110.113	US 	Missouri	St. Louis	Hosting Solutions International
> >  	Time Zone	Latitude	Longitude	Organization
> >  	America/chicago	38.6305	-90.1928	Hosting Solutions International, Inc.
> > Google Map for St. Louis, Missouri, US (New window)
> > 
> > 
> > Geolocation data from ipinfo.io (On-demand API)
> > IP Address	Country	Region	City	Postal Code
> > 209.126.110.113	US 	Missouri	Saint Louis	63101
> > Hostname	Carrier
> > ncc-1701-d.tor-exit.network	None
> > 
> > 
> > Geolocation data from MaxMind (Product: GeoLiteCity updated on 3/3/2015)
> > IP Address	Country	Region	City	Postal Code	Area Code
> > 209.126.110.113	United States 	MO	Saint Louis	63101	314
> > Google Map for Saint Louis, MO, USA (New window)
> > --
> > 
> > When I go to Linked-In for that hosting service...
> > 
> > https://www.linkedin.com/company/hosting-solutions-international-inc.
> > 
> > I get...
> > 
> > --
> > Specialties
> > Dedicated Server Hosting
> > Website
> > http://www.intergenia.de/en/
> > Industry
> > Information Technology and Services
> > Type
> > Privately Held
> > Headquarters
> > 710 North Tucker Blvd. Suite 400A Saint Louis, MO 63101 United States
> > Company Size
> > 1-10 employees
> 
> Here is what What's my IP Address shows.
> Confirmed proxy.
> http://whatismyipaddress.com/ip/209.126.110.113
> 
> 
> General IP Information
> 
> IP:	209.126.110.113
> Decimal:	3514723953
> Hostname:	ncc-1701-d.tor-exit.network
> ISP:	Hosting Solutions International
> Organization:	Hosting Solutions International
> Services:	Confirmed proxy server
> Recently reported forum spam source. (124)
> Type:	Corporate
> Assignment:	Static IP
> Blacklist:	
> Geolocation Information
> 
> Country:	Anonymous Proxy

What does this mean, that it's a proxy server and that it didn't necessarily come from that location in St. Louis? Elsewhere, you said it may not even be using TOR. Why does it point to the TOR site? 

[toc] | [prev] | [next] | [standalone]


#291207

Fromvallor <vallor@cultnix.org>
Date2015-04-23 15:49 -0700
Message-ID<55397705$0$41760$c3e8da3$5d8fb80f@news.astraweb.com>
In reply to#291184
On 04/23/2015 12:59 PM, Steve Carroll wrote:
> On Thursday, April 23, 2015 at 1:12:53 PM UTC-6, Tomas wrote:

>>
>> Here is what What's my IP Address shows.
>> Confirmed proxy.
>> http://whatismyipaddress.com/ip/209.126.110.113
>>
>>
>> General IP Information
>>
>> IP:	209.126.110.113
>> Decimal:	3514723953
>> Hostname:	ncc-1701-d.tor-exit.network
>> ISP:	Hosting Solutions International
>> Organization:	Hosting Solutions International
>> Services:	Confirmed proxy server
>> Recently reported forum spam source. (124)
>> Type:	Corporate
>> Assignment:	Static IP
>> Blacklist:	
>> Geolocation Information
>>
>> Country:	Anonymous Proxy
> 
> What does this mean, that it's a proxy server and that it didn't necessarily come from that location in St. Louis? Elsewhere, you said it may not even be using TOR. Why does it point to the TOR site? 
> 

Because it appears to be a TOR exit.

$ nslookup 209.126.110.113
Server:		xx
Address:	xx

Non-authoritative answer:
113.110.126.209.in-addr.arpa	name = ncc-1701-d.tor-exit.network.

Authoritative answers can be found from:
110.126.209.in-addr.arpa	nameserver = ns2.nameserverservice.com.
110.126.209.in-addr.arpa	nameserver = ns1.nameserverservice.com.
ns2.nameserverservice.com	internet address = 69.64.44.21
ns1.nameserverservice.com	internet address = 69.64.45.121

That's where traffic emerges after "tunneling" through TOR.  It almost
certainly has nothing to do with whomever is at the other end.

-- 
 -v

FLASH!
Intelligence of mankind decreasing.
Details at ... uh, when the little hand is on the ....

[toc] | [prev] | [next] | [standalone]


#291220

FromTomas <tgif9fri@numo.net>
Date2015-04-23 20:41 -0400
Message-ID<1pi18bs6oth5r$.z4fcbc4qpbj5$.dlg@40tude.net>
In reply to#291207
On Thu, 23 Apr 2015 15:49:41 -0700, vallor wrote:

> On 04/23/2015 12:59 PM, Steve Carroll wrote:
>> On Thursday, April 23, 2015 at 1:12:53 PM UTC-6, Tomas wrote:
> 
>>>
>>> Here is what What's my IP Address shows.
>>> Confirmed proxy.
>>> http://whatismyipaddress.com/ip/209.126.110.113
>>>
>>>
>>> General IP Information
>>>
>>> IP:	209.126.110.113
>>> Decimal:	3514723953
>>> Hostname:	ncc-1701-d.tor-exit.network
>>> ISP:	Hosting Solutions International
>>> Organization:	Hosting Solutions International
>>> Services:	Confirmed proxy server
>>> Recently reported forum spam source. (124)
>>> Type:	Corporate
>>> Assignment:	Static IP
>>> Blacklist:	
>>> Geolocation Information
>>>
>>> Country:	Anonymous Proxy
>> 
>> What does this mean, that it's a proxy server and that it didn't necessarily come from that location in St. Louis? Elsewhere, you said it may not even be using TOR. Why does it point to the TOR site? 
>> 
> 
> Because it appears to be a TOR exit.
> 
> $ nslookup 209.126.110.113
> Server:		xx
> Address:	xx
> 
> Non-authoritative answer:
> 113.110.126.209.in-addr.arpa	name = ncc-1701-d.tor-exit.network.
> 
> Authoritative answers can be found from:
> 110.126.209.in-addr.arpa	nameserver = ns2.nameserverservice.com.
> 110.126.209.in-addr.arpa	nameserver = ns1.nameserverservice.com.
> ns2.nameserverservice.com	internet address = 69.64.44.21
> ns1.nameserverservice.com	internet address = 69.64.45.121
> 
> That's where traffic emerges after "tunneling" through TOR.  It almost
> certainly has nothing to do with whomever is at the other end.

Exactly.

[toc] | [prev] | [next] | [standalone]


#291288

FromSteve Carroll <fretwizzer@gmail.com>
Date2015-04-23 21:44 -0700
Message-ID<7cd0518f-0036-4f44-a37e-ed96f27f6cc8@googlegroups.com>
In reply to#291207
On Thursday, April 23, 2015 at 4:49:43 PM UTC-6, vallor wrote:
> On 04/23/2015 12:59 PM, Steve Carroll wrote:
> > On Thursday, April 23, 2015 at 1:12:53 PM UTC-6, Tomas wrote:
> 
> >>
> >> Here is what What's my IP Address shows.
> >> Confirmed proxy.
> >> http://whatismyipaddress.com/ip/209.126.110.113
> >>
> >>
> >> General IP Information
> >>
> >> IP:	209.126.110.113
> >> Decimal:	3514723953
> >> Hostname:	ncc-1701-d.tor-exit.network
> >> ISP:	Hosting Solutions International
> >> Organization:	Hosting Solutions International
> >> Services:	Confirmed proxy server
> >> Recently reported forum spam source. (124)
> >> Type:	Corporate
> >> Assignment:	Static IP
> >> Blacklist:	
> >> Geolocation Information
> >>
> >> Country:	Anonymous Proxy
> > 
> > What does this mean, that it's a proxy server and that it didn't necessarily come from that location in St. Louis? Elsewhere, you said it may not even be using TOR. Why does it point to the TOR site? 
> > 
> 
> Because it appears to be a TOR exit.
> 
> $ nslookup 209.126.110.113
> Server:		xx
> Address:	xx
> 
> Non-authoritative answer:
> 113.110.126.209.in-addr.arpa	name = ncc-1701-d.tor-exit.network.
> 
> Authoritative answers can be found from:
> 110.126.209.in-addr.arpa	nameserver = ns2.nameserverservice.com.
> 110.126.209.in-addr.arpa	nameserver = ns1.nameserverservice.com.
> ns2.nameserverservice.com	internet address = 69.64.44.21
> ns1.nameserverservice.com	internet address = 69.64.45.121
> 
> That's where traffic emerges after "tunneling" through TOR.  It almost
> certainly has nothing to do with whomever is at the other end.

Are you saying it just looks like it's coming from Hosting Solutions International but it really isn't?  This is what TOR does, it let's you  'forge'  an IP address? 

[toc] | [prev] | [next] | [standalone]


#291333

Fromcc <scatnubbs@hotmail.com>
Date2015-04-24 04:31 -0700
Message-ID<11c76b70-4702-4244-b509-87150f3cb842@googlegroups.com>
In reply to#291288
On Friday, April 24, 2015 at 12:44:26 AM UTC-4, Steve Carroll wrote:
> On Thursday, April 23, 2015 at 4:49:43 PM UTC-6, vallor wrote:
> > On 04/23/2015 12:59 PM, Steve Carroll wrote:
> > > On Thursday, April 23, 2015 at 1:12:53 PM UTC-6, Tomas wrote:
> > 
> > >>
> > >> Here is what What's my IP Address shows.
> > >> Confirmed proxy.
> > >> http://whatismyipaddress.com/ip/209.126.110.113
> > >>
> > >>
> > >> General IP Information
> > >>
> > >> IP:	209.126.110.113
> > >> Decimal:	3514723953
> > >> Hostname:	ncc-1701-d.tor-exit.network
> > >> ISP:	Hosting Solutions International
> > >> Organization:	Hosting Solutions International
> > >> Services:	Confirmed proxy server
> > >> Recently reported forum spam source. (124)
> > >> Type:	Corporate
> > >> Assignment:	Static IP
> > >> Blacklist:	
> > >> Geolocation Information
> > >>
> > >> Country:	Anonymous Proxy
> > > 
> > > What does this mean, that it's a proxy server and that it didn't necessarily come from that location in St. Louis? Elsewhere, you said it may not even be using TOR. Why does it point to the TOR site? 
> > > 
> > 
> > Because it appears to be a TOR exit.
> > 
> > $ nslookup 209.126.110.113
> > Server:		xx
> > Address:	xx
> > 
> > Non-authoritative answer:
> > 113.110.126.209.in-addr.arpa	name = ncc-1701-d.tor-exit.network.
> > 
> > Authoritative answers can be found from:
> > 110.126.209.in-addr.arpa	nameserver = ns2.nameserverservice.com.
> > 110.126.209.in-addr.arpa	nameserver = ns1.nameserverservice.com.
> > ns2.nameserverservice.com	internet address = 69.64.44.21
> > ns1.nameserverservice.com	internet address = 69.64.45.121
> > 
> > That's where traffic emerges after "tunneling" through TOR.  It almost
> > certainly has nothing to do with whomever is at the other end.
> 
> Are you saying it just looks like it's coming from Hosting 
> Solutions International but it really isn't?  This is what 
> TOR does, it let's you  'forge'  an IP address?

Nope. It means Hosting Solutions International is hosting a tor 
server, whether they realize it or not. To use the proxy, the 
IP address has to be legit, or you wouldn't get traffic routed 
back to you properly. You can use a spoofed IP packet when using 
connectionless protocols like UDP. Since there's no connection to 
establish, you can blast out UDP packets with whatever source 
IP you want, causing problems. 

That's what attackers do for some DoS and for DNS amplification 
attacks. Ping and DNS and require no handshake. They spoof 
the source IP and send the packet. Then the destination responds, but 
to the source IP, not to where it was actually sent. That way 
attackers can redirect traffic. Using enough machines, coupled with 
a response that is much larger than the request (DNS), you can 
really hammer someone.

TOR doesn't spoof or forge an IP. It just hides the IP of 
whoever is using it. With the proxy you want all of your 
traffic sent back to you, so you can browse web pages, etc. So 
each TOR hop along the way is a legit IP address, it's just 
that the final destination is unaware where the traffic 
originally came from. 

TOR Proxy:
You -> Proxy1 -> ProxyN -> Website -> ProxyN -> Proxy1 -> You

Spoofed IP:
You -> DNS/Website/Whatever -> Spoofed IP

[toc] | [prev] | [next] | [standalone]


#291441

FromSteve Carroll <fretwizzer@gmail.com>
Date2015-04-24 10:30 -0700
Message-ID<3ac41851-0689-4c0d-a8e8-56f953f68615@googlegroups.com>
In reply to#291333
On Friday, April 24, 2015 at 5:32:02 AM UTC-6, cc wrote:
> On Friday, April 24, 2015 at 12:44:26 AM UTC-4, Steve Carroll wrote:
> > On Thursday, April 23, 2015 at 4:49:43 PM UTC-6, vallor wrote:
> > > On 04/23/2015 12:59 PM, Steve Carroll wrote:
> > > > On Thursday, April 23, 2015 at 1:12:53 PM UTC-6, Tomas wrote:
> > > 
> > > >>
> > > >> Here is what What's my IP Address shows.
> > > >> Confirmed proxy.
> > > >> http://whatismyipaddress.com/ip/209.126.110.113
> > > >>
> > > >>
> > > >> General IP Information
> > > >>
> > > >> IP:	209.126.110.113
> > > >> Decimal:	3514723953
> > > >> Hostname:	ncc-1701-d.tor-exit.network
> > > >> ISP:	Hosting Solutions International
> > > >> Organization:	Hosting Solutions International
> > > >> Services:	Confirmed proxy server
> > > >> Recently reported forum spam source. (124)
> > > >> Type:	Corporate
> > > >> Assignment:	Static IP
> > > >> Blacklist:	
> > > >> Geolocation Information
> > > >>
> > > >> Country:	Anonymous Proxy
> > > > 
> > > > What does this mean, that it's a proxy server and that it didn't necessarily come from that location in St. Louis? Elsewhere, you said it may not even be using TOR. Why does it point to the TOR site? 
> > > > 
> > > 
> > > Because it appears to be a TOR exit.
> > > 
> > > $ nslookup 209.126.110.113
> > > Server:		xx
> > > Address:	xx
> > > 
> > > Non-authoritative answer:
> > > 113.110.126.209.in-addr.arpa	name = ncc-1701-d.tor-exit.network.
> > > 
> > > Authoritative answers can be found from:
> > > 110.126.209.in-addr.arpa	nameserver = ns2.nameserverservice.com.
> > > 110.126.209.in-addr.arpa	nameserver = ns1.nameserverservice.com.
> > > ns2.nameserverservice.com	internet address = 69.64.44.21
> > > ns1.nameserverservice.com	internet address = 69.64.45.121
> > > 
> > > That's where traffic emerges after "tunneling" through TOR.  It almost
> > > certainly has nothing to do with whomever is at the other end.
> > 
> > Are you saying it just looks like it's coming from Hosting 
> > Solutions International but it really isn't?  This is what 
> > TOR does, it let's you  'forge'  an IP address?
> 
> Nope. It means Hosting Solutions International is hosting a tor 
> server, whether they realize it or not. To use the proxy, the 
> IP address has to be legit, or you wouldn't get traffic routed 
> back to you properly. You can use a spoofed IP packet when using 
> connectionless protocols like UDP. Since there's no connection to 
> establish, you can blast out UDP packets with whatever source 
> IP you want, causing problems. 

Would a business purposefully run a TOR server? Conversely, how could they not know their server was comprised? Wouldn't it be noticeably slower if it were being used for this purpose?


> That's what attackers do for some DoS and for DNS amplification 
> attacks. Ping and DNS and require no handshake. They spoof 
> the source IP and send the packet. Then the destination responds, but 
> to the source IP, not to where it was actually sent. That way 
> attackers can redirect traffic. Using enough machines, coupled with 
> a response that is much larger than the request (DNS), you can 
> really hammer someone.

Why do idiots waste time with this kind of crap? Snit once ran a script on Sandman's site to the tune of 300,000 times. It sounds like, if Snit actually knew what he was doing, he could have done it in a way where it didn't point right back to him. Of course, that was years ago, the 'IT Master' may have figured all this stuff out by now. But my point is that I fail to see what gets accomplished in the long run. So you take down a server for a bit? It goes back up. What's the allure? 

> TOR doesn't spoof or forge an IP. It just hides the IP of 
> whoever is using it. With the proxy you want all of your 
> traffic sent back to you, so you can browse web pages, etc. So 
> each TOR hop along the way is a legit IP address, it's just 
> that the final destination is unaware where the traffic 
> originally came from. 
> 
> TOR Proxy:
> You -> Proxy1 -> ProxyN -> Website -> ProxyN -> Proxy1 -> You
> 
> Spoofed IP:
> You -> DNS/Website/Whatever -> Spoofed IP

I don't understand fully everything you've said (i.e.  - "no connection to establish" ?) but it's apparent that it didn't originate at Hosting Solutions International. Thanks (to all) for the info.

[toc] | [prev] | [next] | [standalone]


#291466

Fromowl <owl@rooftop.invalid>
Date2015-04-24 20:08 +0000
Message-ID<nnvhdu3.3r@rooftop.invalid>
In reply to#291441
Steve Carroll <fretwizzer@gmail.com> wrote:
> On Friday, April 24, 2015 at 5:32:02 AM UTC-6, cc wrote:
>> On Friday, April 24, 2015 at 12:44:26 AM UTC-4, Steve Carroll wrote:
>> > On Thursday, April 23, 2015 at 4:49:43 PM UTC-6, vallor wrote:
>> > > On 04/23/2015 12:59 PM, Steve Carroll wrote:
>> > > > On Thursday, April 23, 2015 at 1:12:53 PM UTC-6, Tomas wrote:
>> > > 
>> > > >>
>> > > >> Here is what What's my IP Address shows.
>> > > >> Confirmed proxy.
>> > > >> http://whatismyipaddress.com/ip/209.126.110.113
>> > > >>
>> > > >>
>> > > >> General IP Information
>> > > >>
>> > > >> IP:	209.126.110.113
>> > > >> Decimal:	3514723953
>> > > >> Hostname:	ncc-1701-d.tor-exit.network
>> > > >> ISP:	Hosting Solutions International
>> > > >> Organization:	Hosting Solutions International
>> > > >> Services:	Confirmed proxy server
>> > > >> Recently reported forum spam source. (124)
>> > > >> Type:	Corporate
>> > > >> Assignment:	Static IP
>> > > >> Blacklist:	
>> > > >> Geolocation Information
>> > > >>
>> > > >> Country:	Anonymous Proxy
>> > > > 
>> > > > What does this mean, that it's a proxy server and that it didn't necessarily come from that location in St. Louis? Elsewhere, you said it may not even be using TOR. Why does it point to the TOR site? 
>> > > > 
>> > > 
>> > > Because it appears to be a TOR exit.
>> > > 
>> > > $ nslookup 209.126.110.113
>> > > Server:		xx
>> > > Address:	xx
>> > > 
>> > > Non-authoritative answer:
>> > > 113.110.126.209.in-addr.arpa	name = ncc-1701-d.tor-exit.network.
>> > > 
>> > > Authoritative answers can be found from:
>> > > 110.126.209.in-addr.arpa	nameserver = ns2.nameserverservice.com.
>> > > 110.126.209.in-addr.arpa	nameserver = ns1.nameserverservice.com.
>> > > ns2.nameserverservice.com	internet address = 69.64.44.21
>> > > ns1.nameserverservice.com	internet address = 69.64.45.121
>> > > 
>> > > That's where traffic emerges after "tunneling" through TOR.  It almost
>> > > certainly has nothing to do with whomever is at the other end.
>> > 
>> > Are you saying it just looks like it's coming from Hosting 
>> > Solutions International but it really isn't?  This is what 
>> > TOR does, it let's you  'forge'  an IP address?
>> 
>> Nope. It means Hosting Solutions International is hosting a tor 
>> server, whether they realize it or not. To use the proxy, the 
>> IP address has to be legit, or you wouldn't get traffic routed 
>> back to you properly. You can use a spoofed IP packet when using 
>> connectionless protocols like UDP. Since there's no connection to 
>> establish, you can blast out UDP packets with whatever source 
>> IP you want, causing problems. 

> Would a business purposefully run a TOR server? Conversely, how could they not know their server was comprised? Wouldn't it be noticeably slower if it were being used for this purpose?


They're a hosting service.  Hosting *is* their business. 


>> That's what attackers do for some DoS and for DNS amplification 
>> attacks. Ping and DNS and require no handshake. They spoof 
>> the source IP and send the packet. Then the destination responds, but 
>> to the source IP, not to where it was actually sent. That way 
>> attackers can redirect traffic. Using enough machines, coupled with 
>> a response that is much larger than the request (DNS), you can 
>> really hammer someone.

> Why do idiots waste time with this kind of crap? Snit once ran a script on Sandman's site to the tune of 300,000 times. It sounds like, if Snit actually knew what he was doing, he could have done it in a way where it didn't point right back to him. Of course, that was years ago, the 'IT Master' may have figured all this stuff out by now. But my point is that I fail to see what gets accomplished in the long run. So you take down a server for a bit? It goes back up. What's the allure? 

>> TOR doesn't spoof or forge an IP. It just hides the IP of 
>> whoever is using it. With the proxy you want all of your 
>> traffic sent back to you, so you can browse web pages, etc. So 
>> each TOR hop along the way is a legit IP address, it's just 
>> that the final destination is unaware where the traffic 
>> originally came from. 
>> 
>> TOR Proxy:
>> You -> Proxy1 -> ProxyN -> Website -> ProxyN -> Proxy1 -> You
>> 
>> Spoofed IP:
>> You -> DNS/Website/Whatever -> Spoofed IP

> I don't understand fully everything you've said (i.e.  - "no connection to establish" ?) but it's apparent that it didn't originate at Hosting Solutions International. Thanks (to all) for the info.

;; QUESTION SECTION:
;tor-exit.network.              IN      A

;; ANSWER SECTION:
tor-exit.network.       21599   IN      A       5.79.68.161
tor-exit.network.       21599   IN      A       188.138.1.229
tor-exit.network.       21599   IN      A       188.138.17.15
tor-exit.network.       21599   IN      A       209.126.110.112
tor-exit.network.       21599   IN      A       209.126.110.113

-----

;; QUESTION SECTION:
;tor-exit.network.              IN      NS

;; ANSWER SECTION:
tor-exit.network.       21599   IN      NS      ns2.transip.eu.
tor-exit.network.       21599   IN      NS      ns0.transip.net.
tor-exit.network.       21599   IN      NS      ns1.transip.nl.

-----

A guy named TR van der Woerdt owns the "tor-exit.network" domain.
He apparently uses several hosting services for his tor nodes and for
forward/reverse DNS.

All of the IPs in the A records go to hosting services.  Two are
from  "Hosting Systems International."  Two are from "Pluserver AG."
One is from "LEASEWEB."  DNS is handled by transip.eu/net/nl, another
hosting service.

-----
Domain Name: tor-exit.network
...
Registrant Name: TR van der Woerdt
...
Registrant Email: info@tvdw.eu
-----

https://tvdw.eu/blog/2015/01/24/implementing-a-tor-relay-from-scratch/
<quote>
Tom "TvdW" van der Woerdt
</quote>

https://twitter.com/tvdw
<quote>
Perl software engineer & Tor contributor & Bitcoin user & Pirate
Party member & NSA target & brony & I fight for privacy and internet
freedom. XMPP:
</quote>

He is credited with a couple of patches here:
https://gitweb.torproject.org/tor.git/tree/ChangeLog

[toc] | [prev] | [next] | [standalone]


#291558

FromSteve Carroll <fretwizzer@gmail.com>
Date2015-04-25 10:49 -0700
Message-ID<69c5e156-3148-4bf1-9dc0-b667752c3e08@googlegroups.com>
In reply to#291466
On Friday, April 24, 2015 at 2:08:39 PM UTC-6, owl wrote:
> Steve Carroll <fretwizzer@gmail.com> wrote:
> > On Friday, April 24, 2015 at 5:32:02 AM UTC-6, cc wrote:
> >> On Friday, April 24, 2015 at 12:44:26 AM UTC-4, Steve Carroll wrote:
> >> > On Thursday, April 23, 2015 at 4:49:43 PM UTC-6, vallor wrote:
> >> > > On 04/23/2015 12:59 PM, Steve Carroll wrote:
> >> > > > On Thursday, April 23, 2015 at 1:12:53 PM UTC-6, Tomas wrote:
> >> > > 
> >> > > >>
> >> > > >> Here is what What's my IP Address shows.
> >> > > >> Confirmed proxy.
> >> > > >> http://whatismyipaddress.com/ip/209.126.110.113
> >> > > >>
> >> > > >>
> >> > > >> General IP Information
> >> > > >>
> >> > > >> IP:	209.126.110.113
> >> > > >> Decimal:	3514723953
> >> > > >> Hostname:	ncc-1701-d.tor-exit.network
> >> > > >> ISP:	Hosting Solutions International
> >> > > >> Organization:	Hosting Solutions International
> >> > > >> Services:	Confirmed proxy server
> >> > > >> Recently reported forum spam source. (124)
> >> > > >> Type:	Corporate
> >> > > >> Assignment:	Static IP
> >> > > >> Blacklist:	
> >> > > >> Geolocation Information
> >> > > >>
> >> > > >> Country:	Anonymous Proxy
> >> > > > 
> >> > > > What does this mean, that it's a proxy server and that it didn't necessarily come from that location in St. Louis? Elsewhere, you said it may not even be using TOR. Why does it point to the TOR site? 
> >> > > > 
> >> > > 
> >> > > Because it appears to be a TOR exit.
> >> > > 
> >> > > $ nslookup 209.126.110.113
> >> > > Server:		xx
> >> > > Address:	xx
> >> > > 
> >> > > Non-authoritative answer:
> >> > > 113.110.126.209.in-addr.arpa	name = ncc-1701-d.tor-exit.network.
> >> > > 
> >> > > Authoritative answers can be found from:
> >> > > 110.126.209.in-addr.arpa	nameserver = ns2.nameserverservice.com.
> >> > > 110.126.209.in-addr.arpa	nameserver = ns1.nameserverservice.com.
> >> > > ns2.nameserverservice.com	internet address = 69.64.44.21
> >> > > ns1.nameserverservice.com	internet address = 69.64.45.121
> >> > > 
> >> > > That's where traffic emerges after "tunneling" through TOR.  It almost
> >> > > certainly has nothing to do with whomever is at the other end.
> >> > 
> >> > Are you saying it just looks like it's coming from Hosting 
> >> > Solutions International but it really isn't?  This is what 
> >> > TOR does, it let's you  'forge'  an IP address?
> >> 
> >> Nope. It means Hosting Solutions International is hosting a tor 
> >> server, whether they realize it or not. To use the proxy, the 
> >> IP address has to be legit, or you wouldn't get traffic routed 
> >> back to you properly. You can use a spoofed IP packet when using 
> >> connectionless protocols like UDP. Since there's no connection to 
> >> establish, you can blast out UDP packets with whatever source 
> >> IP you want, causing problems. 
> 
> > Would a business purposefully run a TOR server? Conversely, how could they not know their server was comprised? Wouldn't it be noticeably slower if it were being used for this purpose?
> 
> 
> They're a hosting service.  Hosting *is* their business. 

Why would that include hosting a TOR server? 
 
> >> That's what attackers do for some DoS and for DNS amplification 
> >> attacks. Ping and DNS and require no handshake. They spoof 
> >> the source IP and send the packet. Then the destination responds, but 
> >> to the source IP, not to where it was actually sent. That way 
> >> attackers can redirect traffic. Using enough machines, coupled with 
> >> a response that is much larger than the request (DNS), you can 
> >> really hammer someone.
> 
> > Why do idiots waste time with this kind of crap? Snit once ran a script on Sandman's site to the tune of 300,000 times. It sounds like, if Snit actually knew what he was doing, he could have done it in a way where it didn't point right back to him. Of course, that was years ago, the 'IT Master' may have figured all this stuff out by now. But my point is that I fail to see what gets accomplished in the long run. So you take down a server for a bit? It goes back up. What's the allure? 
> 
> >> TOR doesn't spoof or forge an IP. It just hides the IP of 
> >> whoever is using it. With the proxy you want all of your 
> >> traffic sent back to you, so you can browse web pages, etc. So 
> >> each TOR hop along the way is a legit IP address, it's just 
> >> that the final destination is unaware where the traffic 
> >> originally came from. 
> >> 
> >> TOR Proxy:
> >> You -> Proxy1 -> ProxyN -> Website -> ProxyN -> Proxy1 -> You
> >> 
> >> Spoofed IP:
> >> You -> DNS/Website/Whatever -> Spoofed IP
> 
> > I don't understand fully everything you've said (i.e.  - "no connection to establish" ?) but it's apparent that it didn't originate at Hosting Solutions International. Thanks (to all) for the info.
> 
> ;; QUESTION SECTION:
> ;tor-exit.network.              IN      A
> 
> ;; ANSWER SECTION:
> tor-exit.network.       21599   IN      A       5.79.68.161
> tor-exit.network.       21599   IN      A       188.138.1.229
> tor-exit.network.       21599   IN      A       188.138.17.15
> tor-exit.network.       21599   IN      A       209.126.110.112
> tor-exit.network.       21599   IN      A       209.126.110.113
> 
> -----
> 
> ;; QUESTION SECTION:
> ;tor-exit.network.              IN      NS
> 
> ;; ANSWER SECTION:
> tor-exit.network.       21599   IN      NS      ns2.transip.eu.
> tor-exit.network.       21599   IN      NS      ns0.transip.net.
> tor-exit.network.       21599   IN      NS      ns1.transip.nl.
> 
> -----
> 
> A guy named TR van der Woerdt owns the "tor-exit.network" domain.
> He apparently uses several hosting services for his tor nodes and for
> forward/reverse DNS.
> 
> All of the IPs in the A records go to hosting services.  Two are
> from  "Hosting Systems International."  Two are from "Pluserver AG."
> One is from "LEASEWEB."  DNS is handled by transip.eu/net/nl, another
> hosting service.

So the 2 from Hosting Systems International are intentional, they're aware of it?

> -----
> Domain Name: tor-exit.network
> ...
> Registrant Name: TR van der Woerdt
> ...
> Registrant Email: info@tvdw.eu
> -----
> 
> https://tvdw.eu/blog/2015/01/24/implementing-a-tor-relay-from-scratch/
> <quote>
> Tom "TvdW" van der Woerdt
> </quote>
> 
> https://twitter.com/tvdw
> <quote>
> Perl software engineer & Tor contributor & Bitcoin user & Pirate
> Party member & NSA target & brony & I fight for privacy and internet
> freedom. XMPP:
> </quote>
> 
> He is credited with a couple of patches here:
> https://gitweb.torproject.org/tor.git/tree/ChangeLog

He claims he fights for freedom but what about freedom from being forged by the cowardly Snit's of the world? He probably doesn't care any more than Google, who is far more at fault IMO.

[toc] | [prev] | [next] | [standalone]


#291563

Fromowl <owl@rooftop.invalid>
Date2015-04-25 18:40 +0000
Message-ID<bvnhfu903.khjid2@rooftop.invalid>
In reply to#291558
Steve Carroll <fretwizzer@gmail.com> wrote:
> On Friday, April 24, 2015 at 2:08:39 PM UTC-6, owl wrote:
>> Steve Carroll <fretwizzer@gmail.com> wrote:

...

>> > Would a business purposefully run a TOR server? Conversely, how could they not know their server was comprised? Wouldn't it be noticeably slower if it were being used for this purpose?
>> 
>> 
>> They're a hosting service.  Hosting *is* their business. 

> Why would that include hosting a TOR server? 
>  

Why wouldn't it?  You act like it's something illegal.  The customer more
than likely has full control of the server and runs whatever service he
wants on it.

...

>> 
>> All of the IPs in the A records go to hosting services.  Two are
>> from  "Hosting Systems International."  Two are from "Pluserver AG."
>> One is from "LEASEWEB."  DNS is handled by transip.eu/net/nl, another
>> hosting service.

> So the 2 from Hosting Systems International are intentional, they're aware of it?

Aware of what?  Is something illegal happening?

...

>> 
>> He is credited with a couple of patches here:
>> https://gitweb.torproject.org/tor.git/tree/ChangeLog

> He claims he fights for freedom but what about freedom from being forged by the cowardly Snit's of the world? He probably doesn't care any more than Google, who is far more at fault IMO.

Forged?  Somebody forged your usenet nym?  Oh noz!

[toc] | [prev] | [next] | [standalone]


#291564

FromSnit <usenet@gallopinginsanity.com>
Date2015-04-25 11:53 -0700
Message-ID<D16130C8.4AC67%usenet@gallopinginsanity.com>
In reply to#291563
On 4/25/15, 11:40 AM, in article bvnhfu903.khjid2@rooftop.invalid, "owl"
<owl@rooftop.invalid> wrote:

... 
>>> They're a hosting service.  Hosting *is* their business.
> 
>> Why would that include hosting a TOR server?
>>  
> 
> Why wouldn't it?  You act like it's something illegal.  The customer more
> than likely has full control of the server and runs whatever service he
> wants on it.

Carroll is just pissed he cannot find a way to obfuscate the fact he is
using TOR or some other proxy system.

...
>>> He is credited with a couple of patches here:
>>> https://gitweb.torproject.org/tor.git/tree/ChangeLog
> 
>> He claims he fights for freedom but what about freedom from being forged by
>> the cowardly Snit's of the world? He probably doesn't care any more than
>> Google, who is far more at fault IMO.
> 
> Forged?  Somebody forged your usenet nym?  Oh noz!

Carroll loves to pretend to be a victim as he posts with his multiple
accounts, what he has called his "aliases" in the past.

Does not mean nobody else has ever posted with his name... but the two main
accounts which do so are obviously him... even when Carroll insists his
posts from those two accounts have been "forged" and "hacked" - even older
posts where altering them on all servers would be impossible.



-- 
* Mint MATE Trash, Panel, Menu:     <http://youtu.be/C0y74FIf7uE>
* Mint KDE bugs or Easter eggs?     <http://youtu.be/CU-whJQvtfA>
* Mint KDE working with folders:    <http://youtu.be/7C9nvniOoE0>
* Mint KDE creating files:          <http://youtu.be/N7-fZJaJUv8>
* Mint KDE help:                    <http://youtu.be/3ikizUd3sa8>
* Mint KDE general navigation:      <http://youtu.be/t9y14yZtQuI>
* Mavericks / Pages 5.1:            <http://youtu.be/D3BPWANQoIk>
* OS / Word Processor Comparison:   <http://youtu.be/w6Qcl-w7s5c>

[toc] | [prev] | [next] | [standalone]


#291566

Fromowl <owl@rooftop.invalid>
Date2015-04-25 19:18 +0000
Message-ID<nvbhdue0.ur3@rooftop.invalid>
In reply to#291564
Snit <usenet@gallopinginsanity.com> wrote:
> On 4/25/15, 11:40 AM, in article bvnhfu903.khjid2@rooftop.invalid, "owl"
> <owl@rooftop.invalid> wrote:

> ... 
>>>> They're a hosting service.  Hosting *is* their business.
>> 
>>> Why would that include hosting a TOR server?
>>>  
>> 
>> Why wouldn't it?  You act like it's something illegal.  The customer more
>> than likely has full control of the server and runs whatever service he
>> wants on it.

> Carroll is just pissed he cannot find a way to obfuscate the fact he is
> using TOR or some other proxy system.

> ...
>>>> He is credited with a couple of patches here:
>>>> https://gitweb.torproject.org/tor.git/tree/ChangeLog
>> 
>>> He claims he fights for freedom but what about freedom from being forged by
>>> the cowardly Snit's of the world? He probably doesn't care any more than
>>> Google, who is far more at fault IMO.
>> 
>> Forged?  Somebody forged your usenet nym?  Oh noz!

> Carroll loves to pretend to be a victim as he posts with his multiple
> accounts, what he has called his "aliases" in the past.

> Does not mean nobody else has ever posted with his name... but the two main
> accounts which do so are obviously him... even when Carroll insists his
> posts from those two accounts have been "forged" and "hacked" - even older
> posts where altering them on all servers would be impossible.

He could just sign messages with his private key and put an end to this
nonsense.

[toc] | [prev] | [next] | [standalone]


#291567

FromSnit <usenet@gallopinginsanity.com>
Date2015-04-25 12:25 -0700
Message-ID<D1613852.4AC6C%usenet@gallopinginsanity.com>
In reply to#291566
On 4/25/15, 12:18 PM, in article nvbhdue0.ur3@rooftop.invalid, "owl"
<owl@rooftop.invalid> wrote:

> Snit <usenet@gallopinginsanity.com> wrote:
>> On 4/25/15, 11:40 AM, in article bvnhfu903.khjid2@rooftop.invalid, "owl"
>> <owl@rooftop.invalid> wrote:
> 
>> ... 
>>>>> They're a hosting service.  Hosting *is* their business.
>>> 
>>>> Why would that include hosting a TOR server?
>>>>  
>>> 
>>> Why wouldn't it?  You act like it's something illegal.  The customer more
>>> than likely has full control of the server and runs whatever service he
>>> wants on it.
> 
>> Carroll is just pissed he cannot find a way to obfuscate the fact he is
>> using TOR or some other proxy system.
> 
>> ...
>>>>> He is credited with a couple of patches here:
>>>>> https://gitweb.torproject.org/tor.git/tree/ChangeLog
>>> 
>>>> He claims he fights for freedom but what about freedom from being forged by
>>>> the cowardly Snit's of the world? He probably doesn't care any more than
>>>> Google, who is far more at fault IMO.
>>> 
>>> Forged?  Somebody forged your usenet nym?  Oh noz!
> 
>> Carroll loves to pretend to be a victim as he posts with his multiple
>> accounts, what he has called his "aliases" in the past.
> 
>> Does not mean nobody else has ever posted with his name... but the two main
>> accounts which do so are obviously him... even when Carroll insists his
>> posts from those two accounts have been "forged" and "hacked" - even older
>> posts where altering them on all servers would be impossible.
> 
> He could just sign messages with his private key and put an end to this
> nonsense.
> 
Well, then he would do it with some messages and not others... and then
insist the ones he did not were not his or were "hacked" or "forged".

But, sure, if he were to do so and make it public that ONLY such comments
were to be trusted it would be a good step forward.

But he *wants* to be seen as a victim. He is hacked and forged all the time.
He loses accounts and has his girlfriend and wife leave him and he is just a
poor, innocent victim.

And always of me... no matter how uninvolved I am.

Just insanity.



-- 
* Mint MATE Trash, Panel, Menu:     <http://youtu.be/C0y74FIf7uE>
* Mint KDE bugs or Easter eggs?     <http://youtu.be/CU-whJQvtfA>
* Mint KDE working with folders:    <http://youtu.be/7C9nvniOoE0>
* Mint KDE creating files:          <http://youtu.be/N7-fZJaJUv8>
* Mint KDE help:                    <http://youtu.be/3ikizUd3sa8>
* Mint KDE general navigation:      <http://youtu.be/t9y14yZtQuI>
* Mavericks / Pages 5.1:            <http://youtu.be/D3BPWANQoIk>
* OS / Word Processor Comparison:   <http://youtu.be/w6Qcl-w7s5c>

[toc] | [prev] | [next] | [standalone]


#291629

FromSteve Carroll <fretwizzer@gmail.com>
Date2015-04-26 09:54 -0700
Message-ID<535d4a2d-63f4-4490-bd22-ddbf19a50902@googlegroups.com>
In reply to#291566
On Saturday, April 25, 2015 at 1:18:20 PM UTC-6, owl wrote:
> Snit <usenet@gallopinginsanity.com> wrote:
> > On 4/25/15, 11:40 AM, in article bvnhfu903.khjid2@rooftop.invalid, "owl"
> > <owl@rooftop.invalid> wrote:
> 
> > ... 
> >>>> They're a hosting service.  Hosting *is* their business.
> >> 
> >>> Why would that include hosting a TOR server?
> >>>  
> >> 
> >> Why wouldn't it?  You act like it's something illegal.  The customer more
> >> than likely has full control of the server and runs whatever service he
> >> wants on it.
> 
> > Carroll is just pissed he cannot find a way to obfuscate the fact he is
> > using TOR or some other proxy system.
> 
> > ...
> >>>> He is credited with a couple of patches here:
> >>>> https://gitweb.torproject.org/tor.git/tree/ChangeLog
> >> 
> >>> He claims he fights for freedom but what about freedom from being forged by
> >>> the cowardly Snit's of the world? He probably doesn't care any more than
> >>> Google, who is far more at fault IMO.
> >> 
> >> Forged?  Somebody forged your usenet nym?  Oh noz!
> 
> > Carroll loves to pretend to be a victim as he posts with his multiple
> > accounts, what he has called his "aliases" in the past.
> 
> > Does not mean nobody else has ever posted with his name... but the two main
> > accounts which do so are obviously him... even when Carroll insists his
> > posts from those two accounts have been "forged" and "hacked" - even older
> > posts where altering them on all servers would be impossible.
> 
> He could just sign messages with his private key and put an end to this
> nonsense.

When Desk Rabbit suggested this awhile back I went and got the Mac version of PGP key but I see no way to 'sign' posts made via Google Groups. If a reader doesn't have the public key...

https://groups.google.com/forum/#!original/comp.os.linux.advocacy/vDNdq6Aj6EQ/nQ3pffj7qu4J

... that's what you get and it's useless. For those same readers, the gmail handle...

i.e. 'fretwizzer' 

or a  "posting-account" number...

i.e. 'posting-account=qzPusQoAAADVdKNEKE-jqIVbecHp7oZ7' 

... in a header is the only way. Notable is Gluehead's ever present denial of reality stating: "if he were to do so and make it public that ONLY such comments were to be trusted it would be a good step forward." This is essentially what I've done when I alerted COLA about being hacked, what I've been doing all along by differentiating myself from the forgeries, I've made it "public that ONLY such comments were to be trusted" as coming from the one "posting-account". The reader can quickly see the 'fretwizzer'  handle and/or the 'Z7' at the end of the account number. If you can explain how to use the key on a post from Google Groups 'I'm all eyes' from a learning viewpoint... but being that most people probably aren't going to bother with the public key anyway, seems there isn't much point to it as it wouldn't really "put an end to this nonsense." 

[toc] | [prev] | [next] | [standalone]


#291632

Fromowl <owl@rooftop.invalid>
Date2015-04-26 17:30 +0000
Message-ID<bnvhdue03.jgkdu83@rooftop.invalid>
In reply to#291629
Steve Carroll <fretwizzer@gmail.com> wrote:
> On Saturday, April 25, 2015 at 1:18:20 PM UTC-6, owl wrote:
>> Snit <usenet@gallopinginsanity.com> wrote:
>> > On 4/25/15, 11:40 AM, in article bvnhfu903.khjid2@rooftop.invalid, "owl"
>> > <owl@rooftop.invalid> wrote:
>> 
>> > ... 
>> >>>> They're a hosting service.  Hosting *is* their business.
>> >> 
>> >>> Why would that include hosting a TOR server?
>> >>>  
>> >> 
>> >> Why wouldn't it?  You act like it's something illegal.  The customer more
>> >> than likely has full control of the server and runs whatever service he
>> >> wants on it.
>> 
>> > Carroll is just pissed he cannot find a way to obfuscate the fact he is
>> > using TOR or some other proxy system.
>> 
>> > ...
>> >>>> He is credited with a couple of patches here:
>> >>>> https://gitweb.torproject.org/tor.git/tree/ChangeLog
>> >> 
>> >>> He claims he fights for freedom but what about freedom from being forged by
>> >>> the cowardly Snit's of the world? He probably doesn't care any more than
>> >>> Google, who is far more at fault IMO.
>> >> 
>> >> Forged?  Somebody forged your usenet nym?  Oh noz!
>> 
>> > Carroll loves to pretend to be a victim as he posts with his multiple
>> > accounts, what he has called his "aliases" in the past.
>> 
>> > Does not mean nobody else has ever posted with his name... but the two main
>> > accounts which do so are obviously him... even when Carroll insists his
>> > posts from those two accounts have been "forged" and "hacked" - even older
>> > posts where altering them on all servers would be impossible.
>> 
>> He could just sign messages with his private key and put an end to this
>> nonsense.

> When Desk Rabbit suggested this awhile back I went and got the Mac version of PGP key but I see no way to 'sign' posts made via Google Groups. If a reader doesn't have the public key...

Why wouldn't the reader have the public key?  That's what it's for.  Make
it public.  Put it on the web and link to it in the message itself if
necessary.

> https://groups.google.com/forum/#!original/comp.os.linux.advocacy/vDNdq6Aj6EQ/nQ3pffj7qu4J

> ... that's what you get and it's useless. For those same readers, the gmail handle...

How is that useless?  Does it fail verification?

> i.e. 'fretwizzer' 

> or a  "posting-account" number...

> i.e. 'posting-account=qzPusQoAAADVdKNEKE-jqIVbecHp7oZ7' 

> ... in a header is the only way. Notable is Gluehead's ever present denial of reality stating: "if he were to do so and make it public that ONLY such comments were to be trusted it would be a good step forward." This is essentially what I've done when I alerted COLA about being hacked, what I've been doing all along by differentiating myself from the forgeries, I've made it "public that ONLY such comments were to be trusted" as coming from the one "posting-account". The reader can quickly see the 'fretwi
zzer'  handle and/or the 'Z7' at the end of the account number. If you can explain how to use the key on a post from Google Groups 'I'm all eyes' from a learning viewpoint... but being that most people probably aren't going to bother with the public key anyway, seems there isn't much point to it as it wouldn't really "put an end to this nonsense." 

Again, is google mangling messages so that they fail a signature check?
Anybody who cared whether it was you or somebody else would need only
to verify that the message was signed by you.  People who would not care
enough to be bothered with that don't care now either.

[toc] | [prev] | [next] | [standalone]


#291635

FromSnit <usenet@gallopinginsanity.com>
Date2015-04-26 10:43 -0700
Message-ID<D16271E3.4ACD0%usenet@gallopinginsanity.com>
In reply to#291632
On 4/26/15, 10:30 AM, in article bnvhdue03.jgkdu83@rooftop.invalid, "owl"
<owl@rooftop.invalid> wrote:

...
>>>> Carroll loves to pretend to be a victim as he posts with his multiple
>>>> accounts, what he has called his "aliases" in the past.
>>> 
>>>> Does not mean nobody else has ever posted with his name... but the two main
>>>> accounts which do so are obviously him... even when Carroll insists his
>>>> posts from those two accounts have been "forged" and "hacked" - even older
>>>> posts where altering them on all servers would be impossible.
>>> 
>>> He could just sign messages with his private key and put an end to this
>>> nonsense.
> 
>> When Desk Rabbit suggested this awhile back I went and got the Mac version of
>> PGP key but I see no way to 'sign' posts made via Google Groups. If a reader
>> doesn't have the public key...
> 
> Why wouldn't the reader have the public key?  That's what it's for.  Make
> it public.  Put it on the web and link to it in the message itself if
> necessary.

And why not move away from Google Groups if that is a sticking point? Heck,
just paying $10 a year or even using a free Usenet host would allow him to
use a PGP key and then say any post from Google was not his.

Would not stop him from actually still using his accounts he calls his
"alias" accounts, but would at least give some sign of which posts he wanted
to deny were his.

No more of this whining about being "hacked" and "forged". He is just
playing victim. 

...
> Again, is google mangling messages so that they fail a signature check?
> Anybody who cared whether it was you or somebody else would need only
> to verify that the message was signed by you.  People who would not care
> enough to be bothered with that don't care now either.

It would not eliminate his claims of being hacked and forged, but it would
make it harder for him to pretend to be a victim.

Carroll has always had a huge victim mentality... to the point he goes out
of his way to make himself seem a victim.

And always of me. Even after he says he doubts it is me... then claims it is
me. Then claims it is me and his ex-girlfriend. Then denies he even dated
his ex-girlfriend. Then insists his ex-girlfriend is the one likely
"hacking" him and not me. Then...


Good grief... would be a full time job to try to keep up with his ever
changing stories of how he is a victim and of whom (though on the last, 9
times out of 10 it is me... unless someone points that out then he changes
it).


-- 
* Mint MATE Trash, Panel, Menu:     <http://youtu.be/C0y74FIf7uE>
* Mint KDE bugs or Easter eggs?     <http://youtu.be/CU-whJQvtfA>
* Mint KDE working with folders:    <http://youtu.be/7C9nvniOoE0>
* Mint KDE creating files:          <http://youtu.be/N7-fZJaJUv8>
* Mint KDE help:                    <http://youtu.be/3ikizUd3sa8>
* Mint KDE general navigation:      <http://youtu.be/t9y14yZtQuI>
* Mavericks / Pages 5.1:            <http://youtu.be/D3BPWANQoIk>
* OS / Word Processor Comparison:   <http://youtu.be/w6Qcl-w7s5c>

[toc] | [prev] | [next] | [standalone]


#291636

FromSteve Carroll <fretwizzer@gmail.com>
Date2015-04-26 11:29 -0700
Message-ID<c447e2cc-b509-4648-afc2-9a9d70e378d2@googlegroups.com>
In reply to#291632
On Sunday, April 26, 2015 at 11:30:29 AM UTC-6, owl wrote:
> Steve Carroll <fretwizzer@gmail.com> wrote:
> > On Saturday, April 25, 2015 at 1:18:20 PM UTC-6, owl wrote:
> >> Snit <usenet@gallopinginsanity.com> wrote:
> >> > On 4/25/15, 11:40 AM, in article bvnhfu903.khjid2@rooftop.invalid, "owl"
> >> > <owl@rooftop.invalid> wrote:
> >> 
> >> > ... 
> >> >>>> They're a hosting service.  Hosting *is* their business.
> >> >> 
> >> >>> Why would that include hosting a TOR server?
> >> >>>  
> >> >> 
> >> >> Why wouldn't it?  You act like it's something illegal.  The customer more
> >> >> than likely has full control of the server and runs whatever service he
> >> >> wants on it.
> >> 
> >> > Carroll is just pissed he cannot find a way to obfuscate the fact he is
> >> > using TOR or some other proxy system.
> >> 
> >> > ...
> >> >>>> He is credited with a couple of patches here:
> >> >>>> https://gitweb.torproject.org/tor.git/tree/ChangeLog
> >> >> 
> >> >>> He claims he fights for freedom but what about freedom from being forged by
> >> >>> the cowardly Snit's of the world? He probably doesn't care any more than
> >> >>> Google, who is far more at fault IMO.
> >> >> 
> >> >> Forged?  Somebody forged your usenet nym?  Oh noz!
> >> 
> >> > Carroll loves to pretend to be a victim as he posts with his multiple
> >> > accounts, what he has called his "aliases" in the past.
> >> 
> >> > Does not mean nobody else has ever posted with his name... but the two main
> >> > accounts which do so are obviously him... even when Carroll insists his
> >> > posts from those two accounts have been "forged" and "hacked" - even older
> >> > posts where altering them on all servers would be impossible.
> >> 
> >> He could just sign messages with his private key and put an end to this
> >> nonsense.
> 
> > When Desk Rabbit suggested this awhile back I went and got the Mac version of PGP key but I see no way to 'sign' posts made via Google Groups. If a reader doesn't have the public key...
> 
> Why wouldn't the reader have the public key?

Who would bother? I've never done it for usenet. 

> That's what it's for.  Make
> it public.  Put it on the web and link to it in the message itself if
> necessary.
> 
> > https://groups.google.com/forum/#!original/comp.os.linux.advocacy/vDNdq6Aj6EQ/nQ3pffj7qu4J

That's not from GoogleGroups and it's probably using a newsreader app. Inferior as it may be to a dedicated app, I've gotten used to it now and, being browser based, it also works well on mobile.

> > ... that's what you get and it's useless. For those same readers, the gmail handle...
> 
> How is that useless?  Does it fail verification?

I have no idea.

> > i.e. 'fretwizzer' 
> 
> > or a  "posting-account" number...
> 
> > i.e. 'posting-account=qzPusQoAAADVdKNEKE-jqIVbecHp7oZ7' 
> 
> > ... in a header is the only way. Notable is Gluehead's ever present denial of reality stating: "if he were to do so and make it public that ONLY such comments were to be trusted it would be a good step forward." This is essentially what I've done when I alerted COLA about being hacked, what I've been doing all along by differentiating myself from the forgeries, I've made it "public that ONLY such comments were to be trusted" as coming from the one "posting-account". The reader can quickly see the 'fretwi
> zzer'  handle and/or the 'Z7' at the end of the account number. If you can explain how to use the key on a post from Google Groups 'I'm all eyes' from a learning viewpoint... but being that most people probably aren't going to bother with the public key anyway, seems there isn't much point to it as it wouldn't really "put an end to this nonsense." 
> 
> Again, is google mangling messages so that they fail a signature check?

Dunno... I see no facility for signing it... if I could figure out how to do it I would.

> Anybody who cared whether it was you or somebody else would need only
> to verify that the message was signed by you.  People who would not care
> enough to be bothered with that don't care now either.

Agreed. Besides myself, take a look at the people who care... it's one person... and he's doing his usual and ridiculous hard sell attempt for those he believes are as stupid as he needs them to be.

It's possible there's a chrome extension that does it but I haven't seen any talk of it when searching; they do have one for email, though.

[toc] | [prev] | [next] | [standalone]


Page 1 of 4  [1] 2 3 4  Next page →

Back to top | Article view | comp.os.linux.advocacy


csiph-web