Silk Road forums

Discussion => Security => Topic started by: Lysergix on July 02, 2013, 06:00 pm

Title: Updating Security Measures.
Post by: Lysergix on July 02, 2013, 06:00 pm
So i have always followed basic rules(Use PGP etc) but recently i am starting to stress out a little more over my security.

So i would like too:

1) Clean my computer
2) Start using Tails/VPN/Some other added security
3) Find out a little more about being verified at an exchange.



1) Apparently, to actually clean your computer you need to erase, fill and then erase again correct?
1b)After i clean it, would buying a 200 laptop and using that at a local wifi a better option for browsing TOR/SR

2)Tails? VPN?

3)I am currently verified at an exchange that allows up to 10k deposit per month in cash. I have the cash right beside me, can i just go deposit it without worry seeing as i am "allowed" to do so?
My income would probably not be a reasonable jusitification for that amount into the bank, but would 1 time flag anything?

Am in the process of getting about 5 other verified accounts under different names with different incomes. Could i put 2-3k/month under each name even if there incomes are only ~1200/mo? Should i keep it to about 1k per month? Forget it and find another way?
Title: Re: Updating Security Measures.
Post by: TinyDot on July 02, 2013, 06:07 pm
Not sure if this helps but make sure to keep your transactions below 10 grand...preferably just do a couple of transactions a week for several thousand.  Anytime you go past that 10grand mark that usually incurs the eye of the authorities (or at the very least requires you to fill out more paperwork explaining just how that money came to you and how you earned it).  Also try not to make habits (for example w/draw a grand a week every week...rather do a grand one week..700 the next..800 the next..500 the next..etc) as those can be flagged as well. 
Hope this helps somewhat

TinyDot
Title: Re: Updating Security Measures.
Post by: dirtybiscuitzz718 on July 02, 2013, 06:07 pm
Hey dude, Idk anything about VPNs really, nothing useful anyway but to clean your HD you will need to uninstall and reinstall your OS.

You will need a windows disk (for PC anyway). If you do not have one, you can buy the ISO DL on SR for like 2 bucks. Burn that as an ISO imagine to a dvd. Install.

Then i would suggest TAILS OS for total security. Same idea, DL the ISO, burn to disk, install. Then in the accessories tab there is an option to load the OS to a USB stick. You will need 2gigs minimum for this.

Best of luck, hope i was helpful.
Title: Re: Updating Security Measures.
Post by: Miah on July 02, 2013, 06:53 pm


Then i would suggest TAILS OS for total security. Same idea, DL the ISO, burn to disk, install. Then in the accessories tab there is an option to load the OS to a USB stick. You will need 2gigs minimum for this.



Terrible idea. Never buy any software from SR. I don't think I need to state the obvious reasons why.
Title: Re: Updating Security Measures.
Post by: Lysergix on July 02, 2013, 07:06 pm
Thanks for the responses.

As for reinstalling windows i have done it before without any issues but from what i understand the data on your HD can be restored unless you overwrite it, and then erase it again?

And as for tails, do i still run windows on my main PC and then just put the Tails OS on a USB? I already have a 4G USB i have TOR/other SR related things on, is this fine?

While depositing funds, is there any way to tell when you have been "noticed" or "flagged"?

Title: Re: Updating Security Measures.
Post by: kingpinirl on July 02, 2013, 07:13 pm
Dban.  Google it.  It's free.
Title: Re: Updating Security Measures.
Post by: joolz on July 02, 2013, 07:19 pm

While depositing funds, is there any way to tell when you have been "noticed" or "flagged"?
no I dont think so
Title: Re: Updating Security Measures.
Post by: comsec on July 02, 2013, 07:20 pm
So i would like too:

1) Clean my computer

Download debian wheezy .iso. Burn to disc or USB, reboot and when installing select 'Guided install with LUKS/LVM and encryption'. It will erase all data overwriting with random values and encrypt the drive for you, basically killing all forensics. It also takes like 2hours or so depending on how big your HDD is.

Quote
2) Start using Tails/VPN/Some other added security

Me personally I use dee.su Liberty Linux because it's small and less complex. Tails has ballooned to it's own mega operating system filled with DVD players and other nonsense you'll never use. You also have to re-download tails all the time because of how shitty linux security is and their massive DVD is getting to a be a burden to keep doing this.

I don't think tails allows transparently routing all traffic through a VPN either, at least they didn't months ago last time I used it.

Quote
3) Find out a little more about being verified at an exchange.

Forget exchanges and use #bitcoin-otc, localbitcoins and bitcointalk.org currency exchange forum offers. You can get escrow to protect yourself on #bitcoin-otc and there's guy's there to cash out any amount no ID needed as it's all p2p trade. You can anonymize yourself with Tor or Jondonym, pretty sure freenet has a .onion server.


Quote
1b)After i clean it, would buying a 200 laptop and using that at a local wifi a better option for browsing TOR/SR

Depends, maybe for buying shipping online. They caught Jeremy Hammond using tor over wifi easily but he had already talked his way into them finding who he was.


Quote
3)I am currently verified at an exchange that allows up to 10k deposit per month in cash. I have the cash right beside me, can i just go deposit it without worry seeing as i am "allowed" to do so?
My income would probably not be a reasonable jusitification for that amount into the bank, but would 1 time flag anything?

Yes if they have to hand over records to feds, which they will do eventually. Let me guess, cavirtex? They probably have to keep all records for 7 years. There's guy's who will cash out out or sell you $10k worth of bitcoins on localbitcoins. You would be better to register a small business, get a business bank account, and then verify that business with the exchange for unlimited transfers. Now end of year do taxes and whittle them down to hardly anything because corporations get ridiculous tax breaks. Say your business is selling DDOS protection they will have no idea the $10k worth of coins you cashed out or bought didn't go to those services instead of you secretly keeping them for laundering or something else.
Title: Re: Updating Security Measures.
Post by: PrincessButtercup on July 02, 2013, 07:41 pm
Quote from: comsec
Me personally I use dee.su Liberty Linux because it's small and less complex. Tails has ballooned to it's own mega operating system filled with DVD players and other nonsense you'll never use. You also have to re-download tails all the time because of how shitty linux security is and their massive DVD is getting to a be a burden to keep doing this.

I don't think tails allows transparently routing all traffic through a VPN either, at least they didn't months ago last time I used it.

I also like Liberte' Linux, but worry the project has been abandoned  :-\


Title: Re: Updating Security Measures.
Post by: Lorimer on July 02, 2013, 07:44 pm

Then i would suggest TAILS OS for total security. Same idea, DL the ISO, burn to disk, install. Then in the accessories tab there is an option to load the OS to a USB stick. You will need 2gigs minimum for this.

Terrible idea. Never buy any software from SR. I don't think I need to state the obvious reasons why.

db didn't say anything about buying software on SR. Tails can be downloaded for free and the instructions above just describe how to create a bootable USB so that your computer itself stays clean.

And for the OP:

The ideal online security system depends a little on your own skill & background & personal preferences. Some like Tails, some prefer an encrypted VM routed through Whonix, others like Liberte, etc.  Some just use their main machine but just boot from a different OS, others have an entirely separate laptop. The system best for you depends on your needs & abilities: if you don't know what you're doing its too easy to think you're safer than you are. :) 

One thing to consider is starting with basic clearnet/PC security. Do your research & set yourself up with a VPN. You'll learn a lot & won't risk much if you make a few mistakes while doing so. Once you have that taken care of you can move to SR browsing & buying.
Title: Re: Updating Security Measures.
Post by: punchdrunk on July 02, 2013, 07:47 pm


Then i would suggest TAILS OS for total security. Same idea, DL the ISO, burn to disk, install. Then in the accessories tab there is an option to load the OS to a USB stick. You will need 2gigs minimum for this.



Terrible idea. Never buy any software from SR. I don't think I need to state the obvious reasons why.

No one said anything about buying software from SR.  Tails is easy to install - there is a great writeup on the forums for doing so:

http://dkn255hz262ypmii.onion/index.php?topic=114141.0
Title: Re: Updating Security Measures.
Post by: FBI on July 02, 2013, 07:55 pm
Virtual machines are a handy things as well. Products like VirtualBox and VMware are easy to use.
Title: Re: Updating Security Measures.
Post by: astor on July 02, 2013, 09:01 pm
Me personally I use dee.su Liberty Linux because it's small and less complex. Tails has ballooned to it's own mega operating system filled with DVD players and other nonsense you'll never use. You also have to re-download tails all the time because of how shitty linux security is and their massive DVD is getting to a be a burden to keep doing this.

I consider that a feature that they continually update the image with bug fixes and new anonymity-enhancing features like obfsproxy bridge support and stream isolation, along with updates to TorBrowser, which itself is heavily fortified against privacy leaks. Liberte hasn't been updated in almost a year. Do you think it was released bug free? Do you think the Gnome browser it uses protects your anonymity as well as TorBrowser? Anonymity is more than just pointing an app at a tunnel, especially when it is something as complex as a browser.
Title: Re: Updating Security Measures.
Post by: comsec on July 03, 2013, 06:17 pm
Me personally I use dee.su Liberty Linux because it's small and less complex. Tails has ballooned to it's own mega operating system filled with DVD players and other nonsense you'll never use. You also have to re-download tails all the time because of how shitty linux security is and their massive DVD is getting to a be a burden to keep doing this.

I consider that a feature that they continually update the image with bug fixes and new anonymity-enhancing features like obfsproxy bridge support and stream isolation, along with updates to TorBrowser, which itself is heavily fortified against privacy leaks. Liberte hasn't been updated in almost a year. Do you think it was released bug free? Do you think the Gnome browser it uses protects your anonymity as well as TorBrowser? Anonymity is more than just pointing an app at a tunnel, especially when it is something as complex as a browser.

I should correct, I *used* liberte, then switched to custom hardened Gentoo disc, and now use a custom OpenBSD -current live usb with any packages removed that can be remotely accessed, set to secure level 2 so even I can't change anything as root. It uses a virtualized routing table with Tor daemon in it's own chroot to only show internal ip if breached, and a pf filter to prevent anything trying to phone home outside the Tor network. I don't even use Xorg anymore after reading about Loic Duflot's exploits with it. It also uses softraid encryption which is now as of 5.3 supported by boot, so no unencrypted /boot to attack.

Best thing is the minimalist install hardly ever requires any updates, because BSD usually doesn't have any security fixes between releases. If there's a security issue I patch the source, rebuild and flash but I've only had to do that twice and both times were to update Tor. Patch is a few kilobytes as compared to a 2G download every couple of weeks whenever Tails immense complex 3rd party addons require security fixes. Eventually I'll run a site like Liberte Linux and hand it out for anybody who wants to use it, but it's total neckbeard without any X friendly apps. If you want to do this yourself buy or pirate Absolute OpenBSD version 2, and the book of pf version 2.
Title: Re: Updating Security Measures.
Post by: astor on July 03, 2013, 06:51 pm
That's great for an advanced user, but Tails is the best out-the-box anonymity and security solution for newbies.

People here need advice that's actually doable and useful for them. They are not going to be installing OpenBSD.