There are currently three directory authorities
Hmm? By my count there’s 8 that vote in the consensus; moria1, tor26, dizum, gabelmoo, dannenberg, maatuska, Faravhar and longclaw. (Bifroest doesn’t vote).
I wonder if neural networks will ever become points of attack. I can imagine something like biometrics being defeated by this.
The model that I want to have is one in which companies are expected to pay you to fix bugs if they don’t want to fix it themselves. I think that licenses like these are incredibly shortsighted in the sense that they assume that producing software is the difficult part. If anything, it is maintaining complex software that is costly and dangerous.
I honestly wonder if Sqreen just suddenly learned about Tor. Tor doesn’t really enable attackers, it just limits them. It’s a matter of convenience. If you block all Tor users, an attacker will just pay $10-15 an hour on the darknet for boxes that can perform the same Slowloris attack and potentially a higher-bandwidth attack.
This is akin to bringing a knife with you into the bad part of town for fear of robbery. Yes, you’ll discourage the 0.001% who would be discouraged. The rest of the people will shoot you.
This is just content marketing for them. They are selling a SaaS security product that’s geared towards blocking “suspicious” web requests, after all. To their credit, they are not proposing blocking Tor users as a first choice solution.