Nmap Development mailing list archives

Re: Scanning trough proxy, including Tor: Ethical consideration


From: Gioacchino Mazzurco <gmazzurco89 () gmail com>
Date: Tue, 14 Jul 2015 14:20:46 +0200

So for you it is more ethical that someone having money to pay a programmer to 
patch Nmap, have good port scanning performance trough TOR while someone not 
having that power cannot ?

I don't see how your proposal would help TOR exit node maintainers, it seems 
to me it is just a tentative to trow responsibility on the developers instead 
of letting the user be responsible.

On Tuesday, July 14, 2015 01:44:44 PM Fabio Pietrosanti  - lists wrote:
Regarding the high-performance scanning trough proxy, including and
especially Tor, did you considered the ethical aspects of such
implementation?

Up to now there are no point'n'click high-performance ports canning tool
to work well behind Tor, this means that the Tor network abuse for ports
canning exists, but it's not yet a major problem for Tor Exit Node
operators.

Whenever nmap will support scanning trough Tor with high-performance and
high-accuracy, we will see a strong increase in amount of abuses of the
Tor network.

This will lead to problems to Tor Exit Node operators that on a
volunteer basis support the Tor anonymity network.

I'd suggest to keep the patch for scanning trough Tor, off nmap official
software releases.

I know it's a controversial topic, but consider the possible impact it
will have on a public, free, volunteer run Tor network.

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/


Current thread: