Silk Road forums

Discussion => Silk Road discussion => Topic started by: Bungalow on June 18, 2011, 08:22 am

Title: Verifying account-owners?
Post by: Bungalow on June 18, 2011, 08:22 am
Hello Silk Road Admins and Welcome Back!

I do have a small question, however. What prevents a scammer/LE to just make a new user with some already-established SR name over here and start posting. I think there should be some form of verification that account X on silk road is the same person as account X on SR Forums.

Just my two cents.
Title: Re: Verifying account-owners?
Post by: k1ngk0ng on June 18, 2011, 08:26 am
totally agreed!

I'd think of a quick solution like:
make this board invite only. generate invitation codes with the SR userbase and send messages on the site with the invitation codes. otherwise it's going to be a chaos soon ...

your work and engagement is greatly appreciated guys!
Title: Re: Verifying account-owners?
Post by: asdf90 on June 18, 2011, 09:12 am
100% agree.. i love you guys for what your doing and would just be another way of grinding out the scammers. when silk road was down black market was loaded with scams using SR user names. would hate for the same thing to happen here. you guys are the original and the best
Best Regards and thanks for everything you do :)
Title: Re: Verifying account-owners?
Post by: Botulism on June 18, 2011, 09:29 am
Yeah I know what you guys mean, when I found out it was separate I booked on over to register my name not that it matters much since I don't sell....but still. NO ONE ELSE IS ME DAMMIT.  :P
Title: Re: Verifying account-owners?
Post by: Dread on June 18, 2011, 09:34 am
100% agree.. i love you guys for what your doing and would just be another way of grinding out the scammers. when silk road was down black market was loaded with scams using SR user names. would hate for the same thing to happen here. you guys are the original and the best
Best Regards and thanks for everything you do :)
Or they could use their PGP signatures they used on the main site.
Title: Re: Verifying account-owners?
Post by: zen862 on June 18, 2011, 09:38 am
If you're not sure of the identity of someone here, you can always PM them on the main site to double check.
Title: Re: Verifying account-owners?
Post by: asdf90 on June 18, 2011, 09:47 am
Yea your right.. not everyone uses PGP but i guess the main vendors that you'd want to verify all use PGP :)
Title: Re: Verifying account-owners?
Post by: Egoa on June 18, 2011, 11:00 am
I believe that is the point of PGP keys =) There is really no reason why people should not use them, every bit of security helps.

Some sort of code generated from SR to verify a forum account sounds like a good Idea though.
Title: Re: Verifying account-owners?
Post by: listentothemusic on June 18, 2011, 01:23 pm
Someone stole my name on BlackMarket to scam people.
So while SR is down I had my account on OVDB i was trying to sell on.
Well, People started saying that maybe i wasnt the real "listentothemusic" on OVDB,
and that maybe i got upset about my name getting stolen and made a big deal so i could scam a few more people on OVDB....

Needless to say, verifying owners accounts is hard. Unless you go through a screening process like on OVDB. I just put in my SR profile which is where I have my feedback a list of all my current legitimate accounts. It also helps my buyers be in contact if SR is down.
Title: Re: Verifying account-owners?
Post by: nomad bloodbath on June 18, 2011, 02:01 pm
Yeah I know what you guys mean, when I found out it was separate I booked on over to register my name not that it matters much since I don't sell....but still. NO ONE ELSE IS ME DAMMIT.  :P

You so cute Botulism! :P

See now Botulism knows it's the real me. :D
Title: Re: Verifying account-owners?
Post by: DigitalAlch on June 18, 2011, 02:34 pm
Well, I think this thread could solve this problem since the goals of PGP are confidentiality, integrity, non-repudiation, and authenticity.  If any one seems sketchy on here and out of character we can write it here and have another known legit vendor can verify them via encrypted msg over the PM, then post results here. May be slightly tedious but it will help ::)
Title: Re: Verifying account-owners?
Post by: phubaiblues on June 18, 2011, 04:29 pm
100% agree.. i love you guys for what your doing and would just be another way of grinding out the scammers. when silk road was down black market was loaded with scams using SR user names. would hate for the same thing to happen here. you guys are the original and the best
Best Regards and thanks for everything you do :)

Yep, I was over at BM, and actually tried a couple of buys, and got burnt...made me really appreciate SR, and also, have a bit of sympathy for the owner of BM, since he's realizing just how hard it is to get this kind of site to the point where there is some trust established.   

This place went down right when I was uploading around 20 btc to the escrow account, and while it was uploading, all went quiet for a couple days, and I figured for sure my btc had disappeared, so it was quite a happy nite to see that not only had SR come back, but my money was sitting there nicely.

I think we need to give a little slack to the alternative sites, as they might take some of the lite off of here, but also, total gratitude to SR, as now I see how grim the alternatives sites are, where they are more ripoff artists and desperate buyers than there are trustworthy sellers...by a long shot...
Title: Re: Verifying account-owners?
Post by: g4bb3r on June 18, 2011, 07:10 pm
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This message verifies that I am the true g4bb3r. You can check this signature with my public key that's in my signature and has been on my SR profile since I made the account.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iQEcBAEBAgAGBQJN/PgmAAoJEGoxmSBuwJGNAHYIAKg2IG1lg4LIi1uT/FW8z+9N
R2nmo+atw6RSEs0tBGeMbPvZ4cZqFDVPtFncL52FWr6WosIY5a67W++imyhD8ela
zWaB1FupHJ90FK33ONgS7bC/HEitDBCUeQi2/0Q+cwOFT1bdZaYWOXaYkUc6q5je
t4XE1D8mwjqF9mxF2I+XbnDSagk48WM9KCA/foi/H5Dm+rgjUxNVuHJhY4w0OFjJ
ZBE0S1HBNItXGxQzAC/4mdfwJ67QnhqT3bCXgu2Mgkwr5nvwx2EummFaU/wVG3GL
KtoB7GGvFF/s1xFTzpmYrF04n/sL3HCgF7qvh/DHhkolYIo4Px1WJgpCUno/dWU=
=Jl6r
-----END PGP SIGNATURE-----
Title: Re: Verifying account-owners?
Post by: rake on June 18, 2011, 10:32 pm
A suggestion would be to non-selling members to enable selling on their SR profile so they can have a description area on their profile where they upload their PGP key.
Title: Re: Verifying account-owners?
Post by: DigitalAsh on June 19, 2011, 01:49 am
so Listentothemusic is your real Torpm? And that is you on OVDB?

I almost ordered from BM when I saw you there, good thing I held off...


I'm the magnets guy if that means anything to you :P
Title: Re: Verifying account-owners?
Post by: Dread Pirate Roberts on June 19, 2011, 03:13 am
if someone is impersonating you on the forums, just let us know on the main site and we'll do a password reset over here.
Title: Re: Verifying account-owners?
Post by: Alternity on June 19, 2011, 03:35 am
Beat me to it. I was gonna reiterate, just ask the member on the other site if they're the same on the forums. PGP isn't necessary per say. (Nobody really signs keys these days it seems)
Title: Re: Verifying account-owners?
Post by: listentothemusic on June 19, 2011, 03:43 am
Yes its me, and that offer still stands  ;D
Im sure you will be super happy with your order.
Im on OVDB, SR, this forum, and Farmers Market.
People have offered to invite me to other forums, but not yet.
Maybe sooooon.
Title: Re: Verifying account-owners?
Post by: ogre86 on June 19, 2011, 04:02 am
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

19-Jun-2011 07:45 UTC

ogre86 on dkn255hz262ypmii.onion is the same as ogre86 on ianxz6zefk72ulzz.onion.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iQEcBAEBAgAGBQJN/alAAAoJECNLLLsBoeeVR9UH/3rLl9/dlZktGzY+7ugUaKQu
C/bIRrKJWe4UR4M7EaqbbSN31QtqSIwzG2hflljtmyZ946vuyYzVgaDYP14YeEFh
ZlSvo+GzzfatLHZNwJtiZLwGs7nCjCyOmBVOg8W00aSXtrAprGo1enXfbKAxu+7D
/JlKLOB5ldWnK688Bfe+ieijpPYknLxv7osniKbzeJpNEtnzZnlGPnO0zwf4Y3nw
fwz15xFlMTPp7VApSBURBQIsMffAbKvqeKK8ow96yQqca+fMnCivPG8utO5EeOva
TN2dWAQsNgZ+hdc6WTQXOzwq/UbPu2xUtjCcOarwpdtWDCEA4WdaP6F3npimtAk=
=mWTl
-----END PGP SIGNATURE-----
Title: Re: Verifying account-owners?
Post by: DigitalAlch on June 19, 2011, 06:00 am
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Just to verify it's me

Peace,
DigitalAlch
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iQEcBAEBAgAGBQJN/ZBwAAoJEOs5nLuOI///WJcIANsRiIYly5V6eNfqzvr2dmjB
Zq3m/gebH8/YOicgJG2LOOeodQDX9Q6mui2MLIFpopkffJcg8F7n9zDBCZhLQ5BP
htnrMiAx/hY6Q/Jj7PZFf9kG/AktOgq7skCt+HtPS8RJKoiF17JkkA4HK7x5FPnU
rrRdGvZjN896ds6WM2T6UP1nte8zh3uFLsOXs6I0G+5lSL/C49zT1KnNt0yczed8
pH7cz/za79FxGo7hNSQDfgNYVPnx2E5nacen/DNDc6aSjNdb/wCD/tk5JyR7Eb0j
AuVgtKIUichw8UEA12MIlQPt+jqr/ni6/KPsKpOYI8faFai52Gopq0lPN5YmD1c=
=ZmcU
-----END PGP SIGNATURE-----
Title: Re: Verifying account-owners?
Post by: paine on June 19, 2011, 07:19 am
Everyone, be careful with what you sign. Some could just copy and paste your signed statements to another forum, and they would look legit. PGP signatures include a timestamp, but sometimes people don't check it, so in a case like this it's better to leave a plain-text timestamp in the message, and _always_ some context. For example:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The account with username "paine" at the Silk Road forums (profile: http://dkn255hz262ypmii.onion/index.php?action=profile;u=275 ) is controlled by the person who controls the account with username "paine" at the Silk Road market (profile and public key: http://ianxz6zefk72ulzz.onion/index.php/silkroad/user/8514 ).
Date: 2011-06-19 07:16:01+00:00
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (GNU/Linux)
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=zMzU
-----END PGP SIGNATURE-----

It's more work, but it helps protect your reputation.

(or maybe I'm just paranoid ::))
Title: Re: Verifying account-owners?
Post by: ogre86 on June 19, 2011, 07:48 am
Everyone, be careful with what you sign. Some could just copy and paste your signed statements to another forum, and they would look legit.
Good point. Edited.
Title: Re: Verifying account-owners?
Post by: DigitalAsh on June 19, 2011, 07:17 pm
Yes its me, and that offer still stands  ;D
Im sure you will be super happy with your order.
Im on OVDB, SR, this forum, and Farmers Market.
People have offered to invite me to other forums, but not yet.
Maybe sooooon.

whoo that's a relief :P

hopefully it'll be here monday or tuesday and I can leave some good feedback
Title: Re: Verifying account-owners?
Post by: GreenCo on June 20, 2011, 08:16 pm
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

GreenCo here authenticating our account. Our user page, FAQ, and PGP code are all available here:
http://ianxz6zefk72ulzz.onion/index.php/silkroad/user/1647
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iQEcBAEBAgAGBQJN/6qdAAoJEIR9YjwlmF2pTQIIAKGdpwcGjJbmwK7V9FLVIHqC
y2DOdLU5JqJZbcRGhVobUvDMaAHr1aqCSWN85UUUuxDMAB6IId+dEaS1sWNxzeaf
p+4TbkYy9lKJFg+RcrK5pC9l8zEvx1fc6XWk9gApgJnzjbONLME+/VBjorOlHnwc
vgghl5gByT7r5lUk9khRFRa+Nw4suXqo/mIYJNLH7jpNFiynv3346KoyXoDUw2Yl
wUCFZdi6/Qa/18U6MUwJk2XAqwCin6Y+jsb2f/EHalzhB/Vq2HEweNRWOUDqt6Wj
0TMgN+DtDKHr6W8erduNTQmAyNltW7vufVDRDMJhGEjl9QSbDO3NuVtGJptb9mY=
=rH1X
-----END PGP SIGNATURE-----
Title: Re: Verifying account-owners?
Post by: Kind Bud on June 20, 2011, 10:56 pm
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Kind Bud here. Same username.
http://ianxz6zefk72ulzz.onion/index.php/silkroad/user/239
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iQEcBAEBAgAGBQJN/8+5AAoJECxY9O8DnElt6tQH/2bn7I3xq7dHzQGfaNzJLOoI
lgKSxUl/SmOfB8ChTcg6icicnFzfEAWThQ5CkAR2eLk7WwstN5nIh7n0B872kCoi
fpT0F1gRkP683JQhcrdiqff+yRhFZvTZHhFlTXLFPzAiXQPxGEaaQ68YpavqF0ah
oBfgnWKzdxmJbu/4/5mlIQFR1Unl9EPGEHrS5WRPfkyVWISiXKPC0Fm+g2xG5wtq
zJ/9pszXhS2fA4m3GDXPvpanynD5Yt2h5lRE/GbZF3QvdzLw0BKSfa85oiI/si+d
lCabl7eteJReZjr3MZkilcOpkvvhhIap59bUgpbusTmEbDGwAR1XqtjpqaSs6S4=
=hlph
-----END PGP SIGNATURE-----
Title: Re: Verifying account-owners?
Post by: DigitalAsh on June 21, 2011, 05:10 am
Can't leave feedback on SR since the transaction didn't go through there, but thought I'd say something here. Package arrived from listentothemusic this morning, superrr quick. I wish I had a camera that would do it justice, because it really is beautiful :P The cbd test readout makes it look real professional too lol. So you will definitely be hearing from me again