News for hackers. Stuff that matters.

A comment on Spinning Up an Onion Mirror Is Stupid Easy. Parent comment

Re:Spinning Up an Onion Mirror Is Stupid Easy by wartywhoa23 on Thursday October 30, 2025 @07:50AM (#45759005)
Well if you use Tor somewhat regularly and check your exit node IP, it is about 50% possible that yours is in that subnet each time you renew the route. Which begs questions.

Maybe I'm wrong, but it would look more benign to have exit nodes distributed without this much bias towards that particular subnet.

[ Parent | on HN ]
Re:Spinning Up an Onion Mirror Is Stupid Easy by bauruine on Thursday October 30, 2025 @08:10AM (#45759142)
It's only 185.220.100 [0] and 185.220.101 [1] that contain all those relays. Some of the bigger German families work together as "Stiftung Erneuerbare Freiheit" that's why you see a big cluster there. But Tor never uses relays in the same /16 for a circuit so it's not really an issue.

[0] https://metrics.torproject.org/rs.html#search/185.220.100 [1] https://metrics.torproject.org/rs.html#search/185.220.101

[ Parent | on HN ]
Re:Spinning Up an Onion Mirror Is Stupid Easy by mo on Thursday October 30, 2025 @10:36AM (#45760485)
Correct. "Stiftung Erneuerbare Freiheit" acts as LIR in charge of the address space, handing out chunks of that space to exit relay operating non-profits for free, but does not operate any Tor infrastructure themselves and has no visibility into the traffic. The cost for us are the RIPE membership fees (approx 2000€/yr).

Source: I'm its director and founder of torservers.net. Usually using a different nick here.

[ Parent | on HN ]