Silk Road forums
Discussion => Security => Topic started by: Bline on April 21, 2013, 11:12 pm
-
To all people who are skeptical of using clear net for self destructed notes. (basically Privnote.com), there is a TOR based service that does the same thing but better because its a TOR hidden service like Tormail.
http://sms4tor3vcr2geip.onion/
http://sms4tor3vcr2geip.onion/faq
SMS4TOR.
Use it and don't forget to donate. Privacy isn't a joke.
-
+ 1
thanks for sharing
ce
-
The concept of Privnote itself is retarded..
It doesn't matter if it's a hidden service or not.
Why should I trust private communication with an unknown third party when I can use PGP instead.
For all I know that site is run by LE..
-
I didn't say it was a substitute for PGP. It's a substitute for not leaking your IP to clear net sites while sharing non critical information.
If you exit into a clearnet site you are using a tor exit relay, but if it stays in TOR you are much more secure.
Use your judgement when using these sites but in any case, it's better than Privnote and vendors who accept privnote will most likely switch over.
-
Never knew there even was a clear net private note...Good that you let people know to stay on the TOR..
-
You aren't leaking your IP address to Privnote either if you're visiting them through tor.
I also highly doubt that the vendors who accept Privnote, are using it for non-critical information.
I don't see any valid reason why I'd want to use this to share non-critical information..
They could be storing every message indefinitely and sharing all messages with LE.
-
The guy who created that site started a thread here a few months ago. There was a long debate with him about why it's unsafe, but he might have deleted the thread, because I can't find it. Other people have come up with similar ideas:
http://dkn255hz262ypmii.onion/index.php?topic=131274.msg897203#msg897203
You can read the extensive debate there and how we go into great detail explaining why it's a bad idea.
The issue isn't whether it's a hidden service or a clearnet site. It's the fact that you have to trust a third party with your sensitive info. PGP is the safest option you have. Don't be lazy about your security.
-
The concept of Privnote itself is retarded..
It doesn't matter if it's a hidden service or not.
Why should I trust private communication with an unknown third party when I can use PGP instead.
For all I know that site is run by LE..
I too was pondering the possibility of these servers being run by piglets. I like Privnote but it is definitely not for SR. I don't believe they destroy the messages like the promise. I'm pretty sure 007 would not use Privnote. Why should we?
I'm skeptical more of the Privnote .SYS itself than it being on clearnet. For the record I don't like clearnet either.
................................. wait a minute. Wasn't this that PGP thing that sus username came in here a few months back supporting? It looks exactly the same, except barely re-designed and re-labelled as Privnote. Guys, it's exactly the same thing, it even has the same wording, background and icons for fuck suck. 2 people on the PGP thread blasted his idiocy and he picked up his ball and went home, now 3 months later the exact same thing has returned. For all I know the OP is the same person, who really knows on an anonymous marketplace forum.
I also cannot donate as I do not know where the money is going or even the identity of the webmaster or even if they are LE. For all I know, it could be my dad. :o
Whatever.
Piece, Love, and Fuck Haters.
-
I've finished reading the FAQ at this site and it is the exact same text as the one before, along with the site design. In addition to this the PGP they use is called bCrypt, which I have never heard of and which they claim is a stronger standard of encryption. However, it is only a fraction of the length of standard PGP messages. Anyway I searched 'bCrypt' and it turns out it is not made up. Congratulations. My recommendation is unchanged however. Don't use it. Use Privnote before using this. And we all know you don't use Privnote for SR.
Piece, Love, and Fuck Haters.
-
You aren't leaking your IP address to Privnote either if you're visiting them through tor.
I also highly doubt that the vendors who accept Privnote, are using it for non-critical information.
I don't see any valid reason why I'd want to use this to share non-critical information..
They could be storing every message indefinitely and sharing all messages with LE.
Vendors should not be using Privnote for Silk Road transactions at all.
Piece, Love, and Fuck Haters.
-
The most important message here is, "What would 007 do?" I think if we follow this simple guideline we will prosper.
-
I say pgp in privnote.
Chaos
-
EDIT: Thanks a lot man:) +1 for good information
still going to stick with PGP though.
i use privnote when it comes to simple messaging but when it comes to the road. PGP all the way
-
Peeps...
If you use PGP properly, it doesn't matter if you use tormail, privote, clearnet email, semaphore, carrier pigeons, smoke signals, or fucking postcards to send them.
Just use PGP and Tor. They're there to protect you
-
Peeps...
If you use PGP properly, it doesn't matter if you use tormail, privote, clearnet email, semaphore, carrier pigeons, smoke signals, or fucking postcards to send them.
Just use PGP and Tor. They're there to protect you
This ^^ (+K). Sometimes we make it too complicated.
Also, as from a few days ago, privnote now encrypts your messages but it doesn't make any difference, it's still unsafe. Also, a message sent to me via privnote the other day malfunctioned as privnote warped the decrypt process and my message was lost.
Piece, Love, and Fuck Haters.