Bad Tor exit servers

Bad Tor exit servers are servers run by evil persons who want to make money using Tor and/or collect passwords.

Redirecting traffic..

Exit servers can redirect you traffic to advertisement landing pages. These Tor servers are known to play this evil trick:

ExcludeNodes whistlersmother

How to spot evil exit nodes

• Tor will log circuits used at loglevel info or higher (loglevel debug).
• You can also view currently open circuits by telneting to Tor's controlport (default 9051) and enter 'getinfo circuit-status'
• The best way to see what circuits are used is to run Vidalia or Tork.

The only known evil redirecting exit as of now (to my knowledge) is "whistlersmother" - who redirects domains to one of those typical expired-and-bought domain-landing pages with only advertisements. This server will apend /frame(longstringhere) to all domains you try to visit using that exit.

This problem may, sadly, grow in time, so you may want to find out how to spot misbehaving Tor-exits and help keep lists like this up-to-date.

How to try

You can choose exit node used on a site by adding exitnodename.exit to the URL, as in:

http://whitehouse.gov.whistlersmother.exit/

exits from whistlersmother,

http://whitehouse.gov.veronika.exit/

exits from this server.

Tor

What is Tor? HOWTO use the Internet anonymously using Tor and Privoxy HOWTO setup a Tor-server HOWTO publish anonymously on the Internet using Tor Hidden Tor services Bad Tor exit servers

Discontinued (outdated) Tor GUIs: Vidalia Tork