Opened 3 years ago

Closed 15 months ago

Last modified 15 months ago

#20015 closed enhancement (fixed)

Vidalia relay bundles being run accidentally by Tor users

Reported by: donncha Owned by:
Priority: Medium Milestone:
Component: Internal Services/Service - dist Version:
Severity: Normal Keywords:
Cc: micah, boklm Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

A lot of Windows Tor relays have been coming online in the past months, sometime 10 or more per day. After some investigating it appears the many of these relays have been set up inadvertently.

Users who try to find the old Vidalia Tor bundles by searching for "tor vidalia" instead get directed to the Vidalia relay bundles at https://dist.torproject.org/vidalia-bundles/. There are currently 160 online relays which may have been accidentally installed from those bundles.

I think it would be good to remove these out-of-data packages from dist.tpo to avoid more people making this mistake.

Child Tickets

Change History (11)

comment:1 Changed 3 years ago by donncha

Summary: Internal Services/Tor Sysadmin TeamVidalia relay bundles being run accidentally by Tor users

comment:2 Changed 3 years ago by micah

Cc: micah added

comment:3 Changed 3 years ago by arma

Good idea! We should make sure they made it to the packages directory on archive.torproject.org, and then blow them away from dist.

comment:4 Changed 3 years ago by nickm

They do seem to be making it to archive.torproject.org. If somebody writes a good "README.vidalia" file for the vidalia directories, I can remove the old packages from dist.

comment:5 Changed 3 years ago by boklm

Cc: boklm added

comment:6 Changed 3 years ago by donncha

Here's a basic README.vidalia:

Vidalia Tor Bundles have been discontinued
------------------------------------------

The Vidalia Tor client and relay bundles are no longer supported. They client bundles have been replaced with the Tor Browser Bundle. 
https://blog.torproject.org/blog/plain-vidalia-bundles-be-discontinued-dont-panic

If you would like to run a Tor relay please download the a recent copy of Tor from the main Tor Project download page. 
https://www.torproject.org/download/download.html.en

The following directories in dist.tpo have old Tor software. These should be moved to archive.tpo and removed from dist.tpo.

https://dist.torproject.org/vidalia-bundles/
https://dist.torproject.org/vidalia/
https://dist.torproject.org/win32/
https://dist.torproject.org/torbutton

comment:7 Changed 3 years ago by boklm

I removed the files from https://dist.torproject.org/vidalia-bundles/ and put an html version of the README file.

For the vidalia, win32, and torbutton directories, should we have a different README file?

comment:8 Changed 3 years ago by cypherpunks

There is a typo in the previous text.

If you would like to run a Tor relay please download the a recent copy of Tor from the main Tor Project download page.

comment:9 Changed 3 years ago by boklm

The typo is now fixed on https://dist.torproject.org/vidalia-bundles/. Thanks.

comment:10 Changed 3 years ago by nickm

I've done the work on "vidalia". We need similar instructions for "win32" and "torbutton"; someone else should do the work there.

comment:11 Changed 15 months ago by traumschule

Resolution: fixed
Status: newclosed

torbutton: #21263
win32: comment:42:ticket:13461

Last edited 15 months ago by traumschule (previous) (diff)
Note: See TracTickets for help on using tickets.