Silk Road forums
Discussion => Security => Topic started by: Calistoner on September 05, 2011, 11:52 pm
-
i nearly shit 3 bricks when this happened. i had been logged out for over 3 hours, so i start up tor, head over to silk road and the first think that i saw was my profile. no white screen with the login and captcha or anything. my first instinct was to refresh to make sure that i wasnt actually still logged in. which I wasnt. when i refreshed it took me to the login page.
but that doesnt really matter.
this should never happen. at all. ever. to anybody, especially sellers.
i am unsure if it is an issue with tor, mozilla firefox or silkroad. but whatever the reason, it has left me paranoid as ever.
WORST CASE SCENARIO
LEO raids house, finds computer, sees tor, logs on, goes to silk road and BLAMMO my profile just sitting there.
^^^^
what im afraid of.
-
There was thread on why forum posts sometimes don't show up immediately:
http://dkn255hz262ypmii.onion/index.php?topic=2086.0
It's probably the same thing. Tor's configuration for Firefox has the browser's caching turned off. This may be an issue caused by Tor's caching.
-
virtual maschines could be solution to your paranoja probs.
use a unique vm for specific stuff,
have em on a encrypted partition,
use encryption on the vm's os,
set screensaver to autolock pc after 5 mins or so.
Besides having a keylogger/tojan on the host/vm system
only removing the memory from you pc and reading it immidiatly
could provide any evidence.
While the atack on direct reading ram is possible it is highly unlikely tho
unless u sell nukes or something.
Usually normal LEA who deal with whatever is going on on SR are not blessed
with that level of equickment.
-
I had virtually the same thing happen a while back. I was running Windows, started Tor, & vaguely remember there was a pop-up for a Firefox update. I ignored it. But apparently Firefox was updated automatically and the update broke the Tor config (that's my best guess). Next time I restarted Tor I looked under Preferences/Privacy, and I could see my SR cookies still there. Gaah! That is not supposed to happen.
So now when I use Tor on Windows I manually clear the cookies after I log off & before I shut down Tor.
This experience greatly motivated me to start using Tails more often.
-
...i had been logged out for over 3 hours, so i start up tor, head over to silk road and the first think that i saw was my profile. no white screen with the login and captcha or anything. my first instinct was to refresh to make sure that i wasnt actually still logged in. which I wasnt. when i refreshed it took me to the login page....
It sounds like your browser elected not to fetch a fresh copy of SR in favor of the copy sitting in memory or on your hard drive. (Alarming thought, no?) Once you forced a refresh, SR saw that your session had expired and asked for authentication.
The best (partial) answer, to me, is to *always* manually clear your browser cache *and* close the browser when you're done with business on any "sensitive" website. There may still be information in both physical and virtual memory, but at least you're making it non-trivial for some one to figure out what you've been up to.
-
I've got something much scarier,
the other night I opened TOR, clicked the onion link from the bookmarks, and FF opened the clearnet silkroad.com site, some management joint. How on fucking earth can that happen?
Talk about scared shitless...
-
I once had a girlfriend named Tor and she was one of those types of females that are constantly ready to go!!!
:D
nomad bloodbath
-
I've got something much scarier,
the other night I opened TOR, clicked the onion link from the bookmarks, and FF opened the clearnet silkroad.com site, some management joint. How on fucking earth can that happen?
Talk about scared shitless...
This is happening too often to just be a coincidence. Are you using Windows?
-
yes i do use windows.
-
yes i do use windows.
I've used Tor on Windows, Tor on Linux, and Tor from a TAILS USB drive. Windows is the only OS that has given me any problems (like restarting Tor, going to SR, and automatically being logged in to SR). The following is from the Tor Wiki on running a relay, but it applies here:
https://trac.torproject.org/projects/tor/wiki/doc/TorFAQ#WhydoesntmyWindowsorotherOSTorrelayrunwell
I think the following quote from that part of the Tor Wiki says a lot about Windows problems: "Most developers who contribute to Tor work with Unix-like operating systems. It would be great if more people with Windows experience help out, so we can improve Tor's usability and stability in Windows."
I'm not sayin you have to dump Windows, but I feel a lot safer running Tor from either TAILS or Linux.
-
same here, windoof.....
-
IF for whatever reason you are running Tor in Windows at least be absolutely sure to use the newest versions. Though really you should be running a Tails Drive or a Virtual Machine.
Peace,
DigitalAlch
-
yah no kidding, was an eyeopener. I'm now "dedicating" my Asus netbook running Ubuntu to this. truecrypt that thing an spoof the mac address, g2g :)