[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [tor-talk] SIGAINT email service targeted by 70 bad exit nodes



>The question to me is: Do they all have something in common? What was the vector of compromise?

>Curiously enough, they all run Debian stable (according to the SSH version string "SSH-2.0->OpenSSH_6.0p1 Debian-4+deb7u2” *ALL* of them spit out on port 22 — no exception!).

FWIW a lot of Rasberry PI devices use that version string.

Cheap embedded devices as chaff?

-Mike.
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk