I was curious about this, so I started googling for how to do this. Sure enough, it's a bitch and the only way to really do it easily is to use a GUI like Tork. Not to mention I can't seem to figure out how you find his nodes in order to BadExit them, and I very seriously doubt his nodes will get listed in anything official.
Anyone got good instructions on how to actually BadExit his nodes? I want to post them so people actually can.
Check one of the online directory servers (e.g. http://torstatus.blutmagie.de/) and use the Advanced Query Options to find all the nodes where "Contact" - "Contains" - "appelbaum.net" to find which nodes he administers. Then add the fingerprint of every node you want to avoid to the ExcludeNodes entry.
You should obviously confirm the list above with other sources, because one or all of the following might be true:
1. I may be in cahoots with Jacob, plotting to hack your codez.
2. The directory server I linked to may be a co-conspirator. Fortunately, there are other directory servers you can query.
3. There is no three. Anybody can put up a node and declare anything. If Jacob, or I, are using Tor nodes nefariously, do you really think we'll put our names on them?
P.S. Don't forget to restart Tor after you change the torrc.
Why would you even want to BadExit his nodes? Using Tor you're vulnerable anyway. Any exit node can snoop on your traffic or even change it.
Enumerating some bad nodes does not substantially improve this. The above can only be prevented by using something like SSL plus a trusted certificate on top of Tor.
Anyone got good instructions on how to actually BadExit his nodes? I want to post them so people actually can.