Opened 7 years ago

Closed 3 years ago

#5564 closed enhancement (wontfix)

Weather should allow subscription by IP+Port

Reported by: mikeperry Owned by: kaner
Priority: Medium Milestone:
Component: Metrics/Tor Weather Version:
Severity: Keywords:
Cc: aagbsn, hellais Actual Points:
Parent ID: #5563 Points:
Reviewer: Sponsor:

Description

In order to allow easy uptime monitoring of relays who deploy ephemeral identity keys (see #5563), Weather should allow users to sign up for monitoring using IP+OrPort and/or node Nickname.

Child Tickets

Change History (9)

comment:1 Changed 7 years ago by rransom

Nicknames cannot be trusted. TCP addresses should be safe enough.

comment:2 Changed 7 years ago by rransom

Cc: aagbsn hellais karsten added

comment:3 in reply to:  2 Changed 7 years ago by karsten

Weather contains a link to metrics' relay search which allows to search by nickname, fingerprint, or IP address. Is that not sufficient? If not, what's required? A search by IP address and port?

Or is this ticket about extending the Weather code? Not sure if that's going to happen anytime soon or at all.

comment:4 Changed 7 years ago by rransom

This ticket is about allowing users to subscribe to Weather messages about a relay identified by its TCP address, instead of by its identity-key fingerprint.

comment:5 Changed 7 years ago by karsten

Cc: karsten removed

Okay. I don't know anything about the Weather code at all. Removing myself from the Cc.

comment:6 Changed 7 years ago by mikeperry

Thanks Robert, it actually had not occurred to me that weather would "fail open" by way of seeing a rogue nickname introduced into the network to conceal the downtime of your node.

Not sure how serious of an attack this actually is, but I would be quite happy with IP+Port instead, since it is now obviously better.

Also, it's 2late4u karsten. Trac will now spam u 4 eva bcuz u ,mtd!111 mauahahaaaaaaa..... err... sorry for wasting more of your time ;)

comment:7 Changed 7 years ago by Sebastian

subscription by nickname might still be worthwhile? It's all public data, and I would be intrigued if someone registered a node under one of the nicknames I "claim". Am I overlooking something?

comment:8 in reply to:  7 Changed 7 years ago by mikeperry

Summary: Weather should allow subscription by IP/NicknameWeather should allow subscription by IP+Port

Replying to Sebastian:

subscription by nickname might still be worthwhile? It's all public data, and I would be intrigued if someone registered a node under one of the nicknames I "claim". Am I overlooking something?

It depends on how weather works. If you assume it *doesn't* email you as long as nodes with your nicks are running, the adversary can take them down and "hide" this fact from you.

Not very well hidden, but personally, I don't really care if I have to paste an IP+Port into a box as opposed to my nick to ensure notification. And obviously I wouldn't realize the consequences if given the choice, so why give me the choice? :)

comment:9 Changed 3 years ago by karsten

Resolution: wontfix
Status: newclosed

Tor Weather has been discontinued as of May 24, 2016: https://lists.torproject.org/pipermail/tor-relays/2016-June/009424.html. Batch-closing all remaining tickets as announced in #19382. A list of these tickets and any other Weather tickets modified after June 26, 2016 will be available here: https://trac.torproject.org/projects/tor/query?changetime=Jun+27%2C+2016..&component=^Metrics%2FTor+Weather

Note: See TracTickets for help on using tickets.