Wikipedia:Bots/Requests for approval/TorNodeBot: Difference between revisions

Revision as of 18:35, 25 April 2010

Revision as of 19:25, 25 April 2010

Line 45:

:{{ec}}{{BotTrial}} Normally I'd want this request to sit for a while and gather comments from other users, especially considering it is an adminbot, but due to the urgency of the task I'm approving this for a trial. Please run the bot as long as you need, I was thinking somewhere in the range of 25 to 50 blocks. &mdash;&nbsp;[[User:The Earwig|<span style="color:#080;">The&nbsp;</span><span style="color:#040;">Earwig</span>]]&nbsp;[[User talk:The Earwig|<span style="color:black">^(talk)</span>]] 18:32, 25 April 2010 (UTC)

::I have flagged [[User:TorNodeBot|TorNodeBot]] as an administrator for the trial. The account remains not flagged as a bot for the duration of the trial, so that it can be closely watched for mistakes. --[[User:Deskana|Deskana]] [[User talk:Deskana|(talk)]] 18:33, 25 April 2010 (UTC)

'''Note:''' Some may inquire as to why some of the blocked IPs do not actually show up as TOR nodes on our various TOR checking utilities. I have investigated all of these (few) apparent mis-hits. What is being detected are "temporary" TOR exit nodes, that is, users that publish a server but then later turn off their computer/TOR connection. The following is a quote from DNSEL's specification:

{{blockquote|After a Tor server op turns off their server, it stops publishing server descriptors. We should consider that server's IP address to still represent a Tor node until 48 hours after its last descriptor was published.|[http://gitweb.torproject.org/tor.git?a=blob_plain;hb=HEAD;f=doc/contrib/torel-design.txt DNSEL]}}

Since the tool checkers only detect ''current'' TOR nodes, any case where a TOR exit node was detected, but later disabled after being blocked, would show up as not being a TOR node. It is, in fact, these "temporary" TOR nodes that are the most dangerous to Wikipedia, because blacklists are unlikely to have them at the time of abuse.

I have manually checked all of these through the most appropriate mechanism, [[Domain Information Groper|dig]], querying DNSEL manually. In all of these cases, the tracker at torproject.org confirms that this IP was a tor exit node with access to Wikipedia within the last 48 hours.

To confirm yourself, the command is as follows: <code>dig 4.3.2.1.80.2.152.80.208.ip-port.exitlist.torproject.org</code> (for a given host IP 1.2.3.4 &ndash; Note the IP is reversed). An A record response of 127.0.0.2 indicates that the node is/was recently a TOR exit node with access to Wikipedia. --[[User:Shirik|<span style="color:#005">Sh</span><span style="color:#007">i</span><span style="color:#009">r</span><span style="color:#00A">ik</span>]] <small>([[User talk:Shirik|<span style="color:#88C">Questions or Comments?</span>]])</small> 19:25, 25 April 2010 (UTC)