Silk Road forums
Discussion => Security => Topic started by: samesamebutdifferent on September 20, 2013, 02:41 pm
-
So when Tormail got taken down by the feds I wasn't in much of a rush to set up another email account but with the recent botnet causing connectivity issues I looked into my options again and created a safe mail account.
Was working just fine until just now, when I try to log in I am directed to another log in page asking for my credentials again that looks a bit like safe mail but not enough to make me confident I am still on the safe mail site.
Anyone else experience this?
I've not entered my credentials again to see what happens, would rather just abandon the service if its looking a bit dodgy.
-
Safe-Mail is hosted in Israel, which has a liberal intelligence sharing agreement with the US, which is part of the Five Eyes along with Australia. So they all share a lot of intel with each other. I'd stay away from Safe-Mail, because even if you PGP encrypt every message, your metadata is not safe. Find a clearnet provider in Russia, South America or Asia. The less friendly the country is with the Five Eyes countries, the better.
The web site doesn't have to be in English. Pop the text into a translation service to figure out what you're doing long enough to get a desktop email client set up. Configure Thunderbird + Enigmail + Torbirdy to work with the email provider's POP/SMTP settings. And obviously PGP encrypt all messages. Enignmail integrates PGP into Thunderbird, Torbirdy configures it to route traffic over Tor and adds other anonymity features like changing your time zone to GMT and scrubbing email headers.
This is the best way to use clearnet email, imo. It avoids the need to visit a web site and turn on Javascript.
-
Yeah I had been considering the whole Israel and US thing, fuck it I'm ditching it.
I wasn't using java by the way, chose the fast interface with no scripts.
-
what exactly are you trying to protect against? if for drug stuff, then who cares what is written, nobody is going to write personal info to their drug dealer. let the feds read your shit, doesnt do them any good. also pgp only works if the other party uses it, fyi most people dont and wont.
-
Thanks for posting. Haven't used the account nor posted my pub key.
I'll have to consider an anony key still.
F...
-
i had two factor auth with my blockchain account.. so which mail service should i be using (for when i request for an account reset)?
-
i had two factor auth with my blockchain account.. so which mail service should i be using (for when i request for an account reset)?
I think the current position on this is look
-
i had two factor auth with my blockchain account.. so which mail service should i be using (for when i request for an account reset)?
I think the current position on this is look for a clearnet provider in a country unlikely to share intel with any of the five eyes countries. some South America countries or Russia basically then just use pgp.
-
They do this because most likely, your Tor IP is changing every time you move on to the next stage or refresh page.
Meerkovo
-
i had two factor auth with my blockchain account.. so which mail service should i be using (for when i request for an account reset)?
I think the current position on this is look for a clearnet provider in a country unlikely to share intel with any of the five eyes countries. some South America countries or Russia basically then just use pgp.
i don't even plan on using two factor authentication. that's kind of a pain having to find an e-mail provider in a non-NSA friendly country. i'm going to have to figure out the best way to store my coins locally.
if i request a reset, does i absolutely need to provide them a new e-mail?
-
They do this because most likely, your Tor IP is changing every time you move on to the next stage or refresh page.
Meerkovo
Nah this is different, I changed the settings to reduce the requirement for IP changes to require log in again, this is happening right at point of log in, taken immediately to another lo in page.
Anyway fuck it, ditched it now anyway, looking for an alternative option.
-
what exactly are you trying to protect against? if for drug stuff, then who cares what is written, nobody is going to write personal info to their drug dealer.
You might send your shipping address to the vendor. Unless you have a PO box with a fake name, that's pretty personal, but even in the case of a PO box, you wouldn't want the feds to know where to intercept your package.
Also, a sentence like this,
"I sent the payment. Please ship the 100 grams of DMT to..."
counts as a written confession. Read the Farmers Market indictment. Most of the evidence against them was taken from their Hushmail emails. If it had been PGP encrypted properly (on their computers, rather than with a key stored on Hushmail's servers), the feds would not have had 1/10th of the evidence that they used in the indictment.
-
I had bad luck with safemail be advised emails where sent to me safe mail address some never got to it. That was enough for me.
-
go under settings preferences tab and click on reduce IP checks
also there is a option to use faster no-script html version.enable it
it will work fine on tor sometimes it will ask to sign in again as tor IP changes
safe-mail is hosted in israel and is relatively safer than gmail, yahoo,et al
i know someone involved in sensitive imports using it for 5 years and he finds it safer than gmail..never caused him problem
though safe-mail is hosted in Israel....it depends on service provider to honour LE thugs request
best option is to use a email service provider based in russia/ cis/ china/ venezuela/ cuba...lol basically your axis of evil thing....but still if you a bigshot big bros can watch you...use these email providers and use Tor and PGP...also do not discuss your own personal info in any email
zimmerman said it right when he stopped Silent Circle email service..that its almost impossible to secure email data....
its irony that that so called axis of evil countries are better at protecting info than US
-
I dont happen to know any russian/cuban/south american hosted email service sadly. Don't really wanna search it on google either for security purposes. Can anyone throw me a bone?
-
http://day.az
-
mail.ru ?
-
Not related to safe-mail but this happens alot to me whe using gmail. I'll put in my credentials and a new blank window opens asking me to input my credentials again so I have to close the new window and login with the orginal one. I've always found this odd..should I be concerned.
-
mail.ru ?
http://day.az
Acessed through clearnet or TOR?
-
just tried that mail.ru it asks for mobile number to verify account.
if anyone can help me please,after tormail i refuse to keep sensitive info on there even if encrypted i just need it to sort out a vpn.
cheers
-
Never try mail.ru was fast yahoo search. use burner # for verify if need or search other provide.
Only over tor.
-
I am using countermail and pretty happy with it so far. Based in Sweden..still part of the EU but better than US or Israel based.
The encryption services on there are top notch.
mm