The Return of BlueGiraffe

[BlueGiraffe]

Brethren,

Hello again to all my clients and friends

Although I have been interacting with many of you over the previous couple of weeks, it feels right to make a formal communication at this point.

As probably most know, in the eyes of the Silk Road community, we fell from our illustrious position (highly respected top 6% vendor, 100% feedback for a year) by being responsible for a (potentially) very bad security breach - detailed history here:

http://dkn255hz262ypmii.onion/index.php?topic=196608.0
http://dkn255hz262ypmii.onion/index.php?topic=198845.0

Ultimately it appears that, despite our fears, either the encryption held and/or the document was never found, and none of our clients were compromised. That said, we lost face, and the BlueGiraffe account was demoted. Graciously DPR invited us to re-open another account and encouraged us to continue our service (by way of excellent GHB and supportive information) on Silk Road.

We took the time to deeply consider, re-evaluate and re-build our systems, and were literally just about to relaunch when Silk Road fell.

Given our readiness to start, we immediately started servicing those of our clients who know and trust us, directly by email with no escrow (from temporary-giraffe@safe-mail.net). We have also now set up on BMR under the same account name (which we reserved some months ago), and will also be live on Sheep (despite their shoddy security) probably within the week. (And depending on how long it takes for the Silk Road Market associated with these forums to go live, I may even list on the Black Flag "Silk Road" site as an experiment.)

Ultimately our home and our community (and my heart) is here,  and this is where we intend to establish. And it feels right in doing so that we announce this with some formality and directness. The security "incident" was a deep wound for me, and there is a humility in my return. But I know what I learned (and it has been useful) and I know what I have to offer going forward   And for the record, no client address will be ever stored for any reason, no matter what. It needs to be said.

So (hopefully) with your blessing, we are back, and it is business as usual!

BG


*** Important note re our PGP key ***

Just after SR was compromised, when StExo requested future contact information on the old forums, we provided our email (temporary-giraffe@safe-mail.net) and our then current PGP key. A couple of days later, in the midst of the scramble, after reloading a machine it was found that the PGP keyring files were not recoverable from the backup. Not good timing given the moment.

I immediately generated a new key and posted it here http://dkn255hz262ypmii.onion/index.php?topic=218771.msg1592989#msg1592989 and in StExo's information gathering thread (since deleted), as well as sending it to him personally. Unfortunately his V.3 database had just been sent out, and no subsequent version was made available (which would have had our new key in it).

However, I do still have control of my old SR forum account as well as the temporary-giraffe@safe-mail.net email account obviously. In addition, my identity has been verified by the new DPR on these forums based on my provided key information.

Given that this is a time when scammers might try pose as old SR vendors, it is imperative that I communicate this clearly so that anyone who is concerned about the key change, can be put at ease. I'm also available to discuss further by PM if anyone requires.

New BlueGiraffe key:

-----BEGIN PGP PUBLIC KEY BLOCK-----

mQINBFJRa80BEADYo+moaMzmbUUYXFX33KEgWpWUzWWtx4A1BkZdjuF16Ooxnnve
9XYLDW7zGj+EmQhiJu/Snv39AheKu4MplHeFkC2dA433LqLDxniL6WwZlPffGJts
DV5RQ7c1M1NkcQNDFGwXpzaUiTS3W7rEs0JbMq7cfBF6++9lExq/52ukgIozGfFV
hZKZ4YEz6+3FqC9TsF19XD72YG9Vk+Ua9fQ2/pvgJ46Nolsrsts6m050Sqcr/ZoQ
DfqLSELwDF5xABkiVpxlQBL1S1JjQS0iWYQiOyB36D61SmF4LLBHj7TCpM6kSZOP
tFSiVi/+XcKc7BCUSytVaAnoz8WrUiykt4oXz9/UjcChsjthsHnmKymcwy1jjC9B
1lPjjuCB3RRyLNmIJdxw7YHRTJrCXMf/ioU+NJvk5yplLzEpX2CYYvDBUZhX7Kui
NhVquqpIiPwERFGKwxjoT/yNmvchmmkM+G8Y7w2crCT+V235mWTV5I8pYWYXx9ut
WaVhpXvopr7EBXNUvydaDAdBmHMybwuAxmWBepOOk7/CpSqSQtsA0kPTaH+Me7dr
5EUn5PrB4kH2B15yaty+wVZ7RAwmLIlg4w+Tm5OLCrzOVfQWE548TzsM86/qLOb3
y7TJCY/4uEDFRj4XtPOuMp4aJfUHDlKGRrcflz/fohu8d7iaXDDW6k0fbQARAQAB
tDVCbHVlR2lyYWZmZSBOZXcgS2V5IDx0ZW1wb3JhcnktZ2lyYWZmZUBzYWZlLW1h
aWwubmV0PokCNwQTAQoAIQUCUlFrzQIbAwULCQgHAwUVCgkICwUWAgMBAAIeAQIX
gAAKCRCF+KUMDXA5U9roD/9Mb3UCmrWXE5LpJJTp6UBHwPgPHQTTVWrWkdrAQuHZ
McEgYKiIvjIE4I3ugTB4cjooGFBgaWv8XV6PYJE93waKSmCWPA6Q5GauIUka7HSf
6KQVJllrri9NIopNO7D8JvTSkIWOJAhqfQs1X9Ot+whOxgzryEIClZSS6tE96ToL
Mczm7Z5pfSqE8u4IeVCrJsyZnmW038izTqWPSPnVEQm47fsG7MbnA6FPE7tdsVmF
8gBJzbHsnffNLw+ZXgBZLoksEcdrVBRnGLhnkTyAdBqT0YFty5OTe81xcfuCL/t7
xzQK49FABOszp2nm/K3KRPjCHBfezByGga9h8WYTBJxusZC5lqfG+UMreg9YHMah
PPpM9Mcmv4RKI8d2IrKXlSKV92u+SHNUBPfSKmcTMFjUQFnMoVATAoHIR41ZyIyk
QkZ6MVUsuqtk+5JyMnGQ+tCH3DcRJFdLSEPX64F1+J2aN8Q2sf89gC3LYLytYSQG
xnlDKnEvmv4iw6wosRjS6lnRjx+3U668tZ7r/QDOSzhZg8JYZnmkCwwJijSaJDqZ
FTJnG4oPkN5nbOyAsQ1BteRPbCi4Lp9cheEIWIwfYawTSJc+DoWsVhWP289kpoC4
tAbVRn/e/ewcjzvK5x0J2xFoq6eB6QSGcxbUE/j8lL2C34L3yqpHzeO9YnHzQgvU
p7kCDQRSUWvNARAAzf6OuhghGz+CQaljWRhtaupumK4FtoRaomBwWRQ9OP06EvLN
88Lb6CQPI+IsBSP+sWZ0hwdO+TiaL8RJUyl6CmRmGM/zzSaPwIkSOjMCTu8ohNfN
qqCmcGBKnD3WxKKOfciOoTI6EFi3epIPTJ9qoMPhT6pTlpfmLQlOlZ3tY8EzY7Yf
DcLJa7pfqpqPZ1YyPlQjgRy2Y8zgqtlhjnmoIZ6eIQWhV3PJbvh2pZD/nheYkSrG
8xSX4WWhZ91YfIN8f8JjrdVnKC2G2P6E7QAiby7QTnIJLfUMBcpWAhMSqWHh9HyV
iC28mxwmRUuE3X6jUXzqrF3NbvWrR+I4Qm9sH8JrtJmTm828vR6r69VSeBy45WEa
Ql1uoqvSCngjXKUhMHKfNdlrP/VHZ9h6Uy+bQpbDBAFAwJVBkEZr61ayLlh1XMW+
PJTUIlcoNRMTvfrRkbXrxaFwkSwwrGovGnohrCwoIBAsW2FibdSS94BJweDhvV0b
2fFnL8KBouItHGDwHZkTcUcPbXsKxibRbeSaJmeBCVlAEznnJ206uVeH3VhRK/eL
QGLJzveR+m/oKHu1mxoCUJ7FJ22w+nxPTEViIYvA15uFSwyKS9JhaYEfjotkct+L
Z7nLqpawTkiHCYaaora/m+DoyZNIxkTY0zlp9Wu3iAY4FYhsSYrnZjG65P0AEQEA
AYkCHwQYAQoACQUCUlFrzQIbDAAKCRCF+KUMDXA5U2OUEADI6Z+yWQ2yJcASLnki
MyzKXNRHSkbqWP7pHzRZcna1zPTUf4LoCN6qWVT+SQA2liPK3LGSVTU6QbJ7OySd
kwR6MoSPfDzNgDNdhnxSKInz4Pdsap01EHC3KP7ixG2nzgS5wUHwLyP1LlIisTsP
hZ1MMcvfzmPeNBhaDRcOt9yo5XGLfh1a7RVEJ7nHmzzDzHLhmJv5kJ8Pp4Mm57TH
o0XeDr8JmaNRew8Kq9iazPLk3rsIZY6zFwqP5jWMDs6Ic1jj0bfSWVIvGDsLFduq
7XNwGh4iu6iOatZoKXfQbHuTO7kJabV4LR36x7a6XwFqzSYd7f+6WniirrhE0Bbl
4HMUuirebcr7Md24jobpRcPQdUa536N68B7EWqgJK1rz658+cLRJyFCbT1/eUtix
FY52z+XQls9lkaJct1nJhwqOipQFpbGxIwK5633e2SPvfRFEP3zOxNvGwq+XoLob
QAhAGS9qvNraLlRh/nZyeLv3PzhVq+IGuUsWF8t5DUUDr7SwbwLmuDW4rxGp1H7i
5aaEYqo3tI480bJXnZsLo7K9tMoWLP2HFcCccPJICTvrkq/A3sm1lZ8uwNSuIifk
OG/tDvJQIylNB4Rz/SAPqLK9fxDzCMdagxr7vcgYOMxG2fYGnVu+gfmrDOwjZkpP
9sLQfLpQ0x+m/VHZ0osLl5FhfA==
=WT2E
-----END PGP PUBLIC KEY BLOCK-----

[BlueGiraffe]

Welcome back, friend!

I, for one, appreciate your candor and have absolute confidence that no buyer information will be stored.

Here's hoping your business will be just as prosperous as before.

Cheers.

Thank you.

[BlueGiraffe]

What are the products you plan to offer in your new life?

Any chance of your Mescaline seeing light of the day?

GHB for now.

Our Mescaline project was put on hold given the recent circumstances, but yes, in time it will most definitely see the shining iridescent light of glorious day...

BG

[BlueGiraffe]

Who are you to call someone's security shoddy? Your a bad vendor you broke the cardinal rule I'm glad I, nowhere near,have or had anything to do with you. Apologizing doesn't make it right. DPR forgave you, look what his security has cost him and community, IMO you are a disgrace, then you pit an email adress in the post(contact me here) its temporary though. Go away you will get us all pinched you idiot

I think we've kinda been through this...

Yes, I fucked up, and there were consequences and they've been dealt with. What more is there to do at this point?

I think anyone can say that Sheep's security is shoddy, because it's true - posts abound, just look for yourself.

And what is wrong with using PGP communications through Safe-Mail over Tor with NoScript on?

BG

[aussieoutlaw]

Blue I'm taking my last post down mate. I think you are genuine I'm sorry

[jayblunted]

GEE BEE's. Cant wait.

[lithonius]

I'm happy to see BG back here. I followed the ups and downs in the last forum and thought BG handled themselves very well throughout. Although never doing business with this vendor (I'm a weed kinda buyer...) I can say I am happy to see an OG ready to setup shop when SR relaunches. Always nice to see a familiar face.

[BlueGiraffe]

Blue I'm taking my last post down mate. I think you are genuine I'm sorry

It's all good brother, no need to apologize - times are edgy and everyone's feeling it. Thank you for what you said.

BG

[InspectorNorse]

Good to see you back. I respect your courage on owning up to it, a lot of venders wouldn't have done that! Excited for your Mesc... and GHB obviously

[XyreM]

Agreed most would never cop out, instead they choose to pathetically take the moral high ground, when we all know "a Large number" of Vendors kept there customer records. Sure they denied it, but look at all the people receiving contact information in  the mail from vendors after SR went down, look at the people who were busted by the Unethical FEDs where they discover records of all there customers. etc...

Actions always speak louder to me than words. Most Vendors care only for the Money and themselves, and I fully accept that. It's the nature of the drug trade. Ethical drug dealers are a rarity. in BG's case not only does he bring the highest level of professionalization to the manufacturing of GHB here on the Road and now BMR, but he Lived and Died by his word. He fucked up, and rather than say nothing(which most vendors again would have done) he chose informing his customers of a potential security breach which compromised they safety more important than his personal financial gain.

BG's action's in how he dealt with his mistake has actually instilled more confidence and faith in me as a buyer. Besides where would we get highly quality powder GHB if he was not around?

[XyreM]

Oh I forgot, Blue!! I can't begin to tell you how happy I am so see you back. I was in the mist of having to resort to getting my friends in the UK to ship powder GHB that I was going to purchase from another UK based vendor (who refuses to sell internationally, I am sure you are aware of him since he is the only other UK vendor)when all of a sudden your listing's popped up on BMR. Naturally I had to first make sure it was really you and not an imposter. None the less I have made my first order with you at BMR and look forward to doing further business with you if all goes well(which I am sure it will). 

I have actually sampled your product from another friend of mine( he had already mixed it in liquid 3g:6ml) and was very pleased with what I had.  Matter of fact I discovered silk road because of your product. That friend of mine introduced me to Tor and SR when I asked him for his contact. Sadly of the 5 months I was on SR I was to busy buying DMT and other items before you had to shut down and evidently SR.

I can say one thing, I noticed that your GHB was stronger at 3g than the other GHB vendors I purchased from. I just hope your presence here will again set the benchmark that others will have to strive to come close to. Nothing pisses me off more than paying for GHB that is weaker dosage wise that what is advertised. Simply put I refuse to buy liquid GHB with the inconsistency I have experience from other suppliers. One day I may try GHB once for recreational purposes rather than for sleep.

[aussieoutlaw]

Agreed most would never cop out, instead they choose to pathetically take the moral high ground, when we all know "a Large number" of Vendors kept there customer records. Sure they denied it, but look at all the people receiving contact information in  the mail from vendors after SR went down, look at the people who were busted by the Unethical FEDs where they discover records of all there customers. etc...

Actions always speak louder to me than words. Most Vendors care only for the Money and themselves, and I fully accept that. It's the nature of the drug trade. Ethical drug dealers are a rarity. in BG's case not only does he bring the highest level of professionalization to the manufacturing of GHB here on the Road and now BMR, but he Lived and Died by his word. He fucked up, and rather than say nothing(which most vendors again would have done) he chose informing his customers of a potential security breach which compromised they safety more important than his personal financial gain.

BG's action's in how he dealt with his mistake has actually instilled more confidence and faith in me as a buyer. Besides where would we get highly quality powder GHB if he was not around?

I agree I've been thinking about it I removed my post but BG has left quote there. Yes a hell of a lot keep them,I asked in discussion page why mimm kept peoples address's as he was threatening buyer there.I got a 100 day ban from posting for that. Which showed me money frommsales overrode buyers security, I'll never forget that and I got a msg from a mod encrypted telling me who it was and when I see him here I'll release the msg about him ,big chance he snitched. was when mimm got banned I think for a week I got 14weeks??
Like you say BG put hand up others would deny deny deny

[Quixote]

My opinion, which I happen to value infinitely more than yours, is that he is to be given a chance to prove himself.

If you disagree, which you clearly do, then simply take your business elsewhere.

Shouting at everyone else like a wounded ex-girlfriend is not doing your cause any good.

Cheers. 

[XyreM]

My opinion, which I happen to value infinitely more than yours, is that he is to be given a chance to prove himself.

If you disagree, which you clearly do, then simply take your business elsewhere.

Shouting at everyone else like a wounded ex-girlfriend is not doing your cause any good.

Cheers. 

Lies and leakage of personal information is frowned upon here.
If you sympathizing with this kind of activity you don't belong here in my opinion.

This is my last message to you. I will keep writing here for others to warn them to do business which might compromise them.

Lies? What you on about. If he was a liar, then he would never had said anything and kept his mouth shut and maintained his prefect Rep.  You claim that his open admission is merely just a ploy or tactic into tricking us to think he is a morally, trustworthy person. This claim of yours is simply untrue and does not add up. BG's mishap was only known by Himself and his assistant, therefore through his own free will he made a consciousness choice to openly admit to not only the community but also his loyal customers of his negligence. If he only cared about himself and the money then why would he even bother to compromise his reputation and status? BG's actions are in direct opposition to what you are accusing him of being.   

FYI you are living in a fantasy world if you think vendors aren't storing addresses.

[zipstyle]

Wonderful to see you back, BG! 
I look forward to ordering from you once again.

much love.

[Dread Pirate Roberts]

I have received 3 mails about this topic and I am going to lay down the official stance on this matter which will be the end of it so we may move on.

BlueGiraffe made a serious error and this was discussed at length on the old forums so I will not reiterate it, but he had the chance to disappear and become unaccountable for the leak in data, yet he chose to come forth about it immediately, accept the punishment and carry out some damage control overall which for vendors who hold a brand of product is a very courageous thing to do. As a result, the previous Dread Pirate Roberts allowed BlueGiraffe to continue to operate but his main account would remain suspended as a punishment for the problems caused.

In the new Silk Road the market will operate under my rules which I have adopted also from the old Silk Road market. Under regular rules yes BlueGiraffe should be banned permanently for not taking the proper precautions in protecting his customers privacy, but this was overturned to encourage other vendors who may ever unfortunately face similar issues to come forth about it.

[...]
The rules are very clear that leaks and saving of personal information is not allowed. And rules must apply to everyone.
An example must be made out of him or other vendors will keep storing information as well risking everyone without risking their privilege to be a vendor.
[...]

And: I understand the concern and the point raised that the most serious rule was violated and yes rules do apply to everyone, but as head of the market I have set these rules for the greater good of the community. Taking into account all of the events and aftermath around the problem however, I am satisfied BlueGiraffe's actions post-leak were in the interest of his customers and that sufficient lessons have been learned from this experience. Therefore I believe he/she is still a fit and proper person to bare the responsibility of being a vendor and permit him to begin trading again here as a part of my market.

[jesse james]

I have received 3 mails about this topic and I am going to lay down the official stance on this matter which will be the end of it so we may move on.

BlueGiraffe made a serious error and this was discussed at length on the old forums so I will not reiterate it, but he had the chance to disappear and become unaccountable for the leak in data, yet he chose to come forth about it immediately, accept the punishment and carry out some damage control overall which for vendors who hold a brand of product is a very courageous thing to do. As a result, the previous Dread Pirate Roberts allowed BlueGiraffe to continue to operate but his main account would remain suspended as a punishment for the problems caused.

In the new Silk Road the market will operate under my rules which I have adopted also from the old Silk Road market. Under regular rules yes BlueGiraffe should be banned permanently for not taking the proper precautions in protecting his customers privacy, but this was overturned to encourage other vendors who may ever unfortunately face similar issues to come forth about it.

[...]
The rules are very clear that leaks and saving of personal information is not allowed. And rules must apply to everyone.
An example must be made out of him or other vendors will keep storing information as well risking everyone without risking their privilege to be a vendor.
[...]

And: I understand the concern and the point raised that the most serious rule was violated and yes rules do apply to everyone, but as head of the market I have set these rules for the greater good of the community. Taking into account all of the events and aftermath around the problem however, I am satisfied BlueGiraffe's actions post-leak were in the interest of his customers and that sufficient lessons have been learned from this experience. Therefore I believe he/she is still a fit and proper person to bare the responsibility of being a vendor and permit him to begin trading again here as a part of my market.

it's your market dread so you can do what you like. but i think it's a bad decision and doesn't reflect well on you at all

[stabpen]

I think this is one of those loose loose situations. Ban him he comes back as a vendor under different I.D , maybe even bitter, no one knows and maybe next time he fucks up no one knows until its too late. On the other hand let him stay , he's served his punishment and a lot of people are going to be pissed off/edgy etc .

Personally I can't see a good way to deal with it, but I think the official decision might be the best of  the options. I don't think it can be understated what a huge fuck up it was but as other have said I think it takes a certain kind of person to admit fault, stand up and accept responsibility so kudos to him for that. I think I'd rather deal with a vendor that has learnt from his mistake then one who doesn't think theyu make any.

[jesse james]

I think this is one of those loose loose situations. Ban him he comes back as a vendor under different I.D , maybe even bitter, no one knows and maybe next time he fucks up no one knows until its too late. On the other hand let him stay , he's served his punishment and a lot of people are going to be pissed off/edgy etc .

Personally I can't see a good way to deal with it, but I think the official decision might be the best of  the options. I don't think it can be understated what a huge fuck up it was but as other have said I think it takes a certain kind of person to admit fault, stand up and accept responsibility so kudos to him for that. I think I'd rather deal with a vendor that has learnt from his mistake then one who doesn't think theyu make any.

the only "right" way, best or not, is to adhere to the legislation. the only alternative is to prove you're willing to make exceptions, straight away establishing discrimination, which is not a precedence you want to be setting. and both vendors-including the offender-and buyers will respect that more than a man who can't stand his ground. to adhere to the legislation would really only result in the offender losing, to waiver means everybody loses. part of making mistakes is accepting the ramifications of making them. if all we were ever required to do was admit to and apologize for our mistakes, we would all be fucked. NAGL for DPR, but it's a free world (here at least) and it is his site so he has the right to do what he wants, but these are the actions of a dictator, and most of us are here to escape totalitarianism

[Cherry Bites]

[...] most of us are here to escape totalitarianism

funny, I thought most people were here to buy drugs.

Part of the way we evaluate a vendor is on their posts and their behaviour.  BG may have fucked up but it's acknowledged and changes have been made.  I'd rather that, than all those vendors who we don't know about but who are keeping the addresses and will happily turn them over for a reduced sentence if busted.

[stabpen]

I think this is one of those loose loose situations. Ban him he comes back as a vendor under different I.D , maybe even bitter, no one knows and maybe next time he fucks up no one knows until its too late. On the other hand let him stay , he's served his punishment and a lot of people are going to be pissed off/edgy etc .

Personally I can't see a good way to deal with it, but I think the official decision might be the best of  the options. I don't think it can be understated what a huge fuck up it was but as other have said I think it takes a certain kind of person to admit fault, stand up and accept responsibility so kudos to him for that. I think I'd rather deal with a vendor that has learnt from his mistake then one who doesn't think theyu make any.

 to adhere to the legislation would really only result in the offender losing, to waiver means everybody loses.

Well I don't think it's as black and white as that. Who looses if he is banned, becomes a vendor under another i.d? Maybe he takes security issues a little more serious or maybe he decides fuck it, I was hard done by I'll keep all the addresses I want - No one would know it was him so they couldn't avoid dealing with him. Who looses then?

I would rather know vendors that have fucked up so I could choose to avoid them if I wanted to rather than them simply disappearing into the ether only to appear again with a new id.

What would banning him achieve? maybe it would make you feel warm and fuzzy and safe but that's about it - there would be no real benefits and there would be very real negatives of such action such as not knowing where he will pop up again thus removing the buyers ability to choose not to buy from him.

[Energo]

***WARNING***
***WARNING***
***WARNING***

This it NOT a highly respectable seller.
This is NOT a 100% top seller.
This is a deceitful insecure liar who -*-SAVED EVERY CUSTOMERS PERSONAL INFORMATION-*- Addresses and everything.
He sent everything to thrid partys and leaked everything later.
He broke the core security and privacy rules. It's a shame he even dare to show his dirty name here.
He is never to be trusted again.

He was banned on silkroad and should be banned here too.

Never do business with this person, he is a liar and a huge security risk.
He will get you caught.
He lied all the time right in customers face. He only tries to save his business to earn more money. He does not care about your privacy.
Don't trust what he says, don't even read what he says.

***WARNING***
***WARNING***
***WARNING***

Shut up.


As he explained on the old forum, he did it for good reason. It was always encrypted. I can tell you now the police aren't going to come calling at your door for some small time GHB buys.


He fucked up and the addresses were in plain text. HOWEVER, he came and told the forum right away. An honest vendor if I say so myself so he will no doubt have my future business when the new road is up and running.


Thanks for everything BG

[loves2spooge]

I have received 3 mails about this topic and I am going to lay down the official stance on this matter which will be the end of it so we may move on.

BlueGiraffe made a serious error and this was discussed at length on the old forums so I will not reiterate it, but he had the chance to disappear and become unaccountable for the leak in data, yet he chose to come forth about it immediately, accept the punishment and carry out some damage control overall which for vendors who hold a brand of product is a very courageous thing to do. As a result, the previous Dread Pirate Roberts allowed BlueGiraffe to continue to operate but his main account would remain suspended as a punishment for the problems caused.

In the new Silk Road the market will operate under my rules which I have adopted also from the old Silk Road market. Under regular rules yes BlueGiraffe should be banned permanently for not taking the proper precautions in protecting his customers privacy, but this was overturned to encourage other vendors who may ever unfortunately face similar issues to come forth about it.

[...]
The rules are very clear that leaks and saving of personal information is not allowed. And rules must apply to everyone.
An example must be made out of him or other vendors will keep storing information as well risking everyone without risking their privilege to be a vendor.
[...]

And: I understand the concern and the point raised that the most serious rule was violated and yes rules do apply to everyone, but as head of the market I have set these rules for the greater good of the community. Taking into account all of the events and aftermath around the problem however, I am satisfied BlueGiraffe's actions post-leak were in the interest of his customers and that sufficient lessons have been learned from this experience. Therefore I believe he/she is still a fit and proper person to bare the responsibility of being a vendor and permit him to begin trading again here as a part of my market.

Thanks for speaking up DPR. I support your decision 100%.

 I did business with BG just before the incident on old SR (under a different name) and I found his actions to be highly commendable considering what happened. I did worry about my security for a while and changed some things on my end but nothing happened to me anyway.

As others have mentioned there is no doubt that other vendors store addresses too and don't speak up about security compromises. BG made a mistake but did everything to make it right. There were no consequences other than the massive harm to BG's reputation which he accepted in order to give his customers the best chance to protect themselves. He could even start up business under a new identity but he has accepted the consequences of his actions in an honorable way that sets the bar high for other vendors.

I will do business with BG again without hesitation. It is good to see you back!

[BlueGiraffe]

I have received 3 mails about this topic and I am going to lay down the official stance on this matter which will be the end of it so we may move on.

BlueGiraffe made a serious error and this was discussed at length on the old forums so I will not reiterate it, but he had the chance to disappear and become unaccountable for the leak in data, yet he chose to come forth about it immediately, accept the punishment and carry out some damage control overall which for vendors who hold a brand of product is a very courageous thing to do. As a result, the previous Dread Pirate Roberts allowed BlueGiraffe to continue to operate but his main account would remain suspended as a punishment for the problems caused.

In the new Silk Road the market will operate under my rules which I have adopted also from the old Silk Road market. Under regular rules yes BlueGiraffe should be banned permanently for not taking the proper precautions in protecting his customers privacy, but this was overturned to encourage other vendors who may ever unfortunately face similar issues to come forth about it.

[...]
The rules are very clear that leaks and saving of personal information is not allowed. And rules must apply to everyone.
An example must be made out of him or other vendors will keep storing information as well risking everyone without risking their privilege to be a vendor.
[...]

And: I understand the concern and the point raised that the most serious rule was violated and yes rules do apply to everyone, but as head of the market I have set these rules for the greater good of the community. Taking into account all of the events and aftermath around the problem however, I am satisfied BlueGiraffe's actions post-leak were in the interest of his customers and that sufficient lessons have been learned from this experience. Therefore I believe he/she is still a fit and proper person to bare the responsibility of being a vendor and permit him to begin trading again here as a part of my market.

(bow)

[BlueGiraffe]

Oh I forgot, Blue!! I can't begin to tell you how happy I am so see you back. I was in the mist of having to resort to getting my friends in the UK to ship powder GHB that I was going to purchase from another UK based vendor (who refuses to sell internationally, I am sure you are aware of him since he is the only other UK vendor)when all of a sudden your listing's popped up on BMR. Naturally I had to first make sure it was really you and not an imposter. None the less I have made my first order with you at BMR and look forward to doing further business with you if all goes well(which I am sure it will). 

I have actually sampled your product from another friend of mine( he had already mixed it in liquid 3g:6ml) and was very pleased with what I had.  Matter of fact I discovered silk road because of your product. That friend of mine introduced me to Tor and SR when I asked him for his contact. Sadly of the 5 months I was on SR I was to busy buying DMT and other items before you had to shut down and evidently SR.

I can say one thing, I noticed that your GHB was stronger at 3g than the other GHB vendors I purchased from. I just hope your presence here will again set the benchmark that others will have to strive to come close to. Nothing pisses me off more than paying for GHB that is weaker dosage wise that what is advertised. Simply put I refuse to buy liquid GHB with the inconsistency I have experience from other suppliers. One day I may try GHB once for recreational purposes rather than for sleep.

Thank you for your words of support, and I'm glad you like our product - we do try our best with it

I did get your order on BMR, thank you - shipping shortly...

BG

[Eskimoplea7]

You fucked up huge! But took responsibility and the consequence that came with that. That is how men deal with their problems.
I respect you for that and would now buy from you any day

[BlueGiraffe]

***WARNING***
***WARNING***
***WARNING***

This it NOT a highly respectable seller.
This is NOT a 100% top seller.
This is a deceitful insecure liar who -*-SAVED EVERY CUSTOMERS PERSONAL INFORMATION-*- Addresses and everything.
He sent everything to thrid partys and leaked everything later.
He broke the core security and privacy rules. It's a shame he even dare to show his dirty name here.
He is never to be trusted again.

He was banned on silkroad and should be banned here too.

Never do business with this person, he is a liar and a huge security risk.
He will get you caught.
He lied all the time right in customers face. He only tries to save his business to earn more money. He does not care about your privacy.
Don't trust what he says, don't even read what he says.

***WARNING***
***WARNING***
***WARNING***

Dear and,

I've read all your posts, and I actually welcome your words. That you feel free to speak them is good and I have no doubt you are coming from a well-intentioned place.

Of course it stings a little to be reminded of what I went through a couple of months ago, but then I did cause major concern and stress for many people, and I'm very in touch with that - perhaps more than you realize. And because of that I am at ease with receiving criticism of the kind you have just given. My karma to deal with

I do wish to correct some things you said though, just to keep the conversation real...

Yes, I did keep addresses. Not from any malicious intention but because I neglected to purge my master shipping file.
That file was always stored under AES-256 encryption on a hidden volume.
It was (erroneously) sent via Tormail, encrypted but using a weaker system than PGP - so potentially crackable. It was never sent cleartext.
And it was never sent to any third party. It was sent from my assistant to me.

None of this is to deny what happened, but I'd like to keep this conversation true to the facts at least.

And as so many have aptly pointed out, it is inherently not possible to "ban" someone on an anonymous market. That said, if I was told by the Captain to walk the plank, I would.

For now anyway I am here, so we might as well get along, don't you think?

Love,

BG

[BlueGiraffe]

Agreed most would never cop out, instead they choose to pathetically take the moral high ground, when we all know "a Large number" of Vendors kept there customer records. Sure they denied it, but look at all the people receiving contact information in  the mail from vendors after SR went down, look at the people who were busted by the Unethical FEDs where they discover records of all there customers. etc...

Actions always speak louder to me than words. Most Vendors care only for the Money and themselves, and I fully accept that. It's the nature of the drug trade. Ethical drug dealers are a rarity. in BG's case not only does he bring the highest level of professionalization to the manufacturing of GHB here on the Road and now BMR, but he Lived and Died by his word. He fucked up, and rather than say nothing(which most vendors again would have done) he chose informing his customers of a potential security breach which compromised they safety more important than his personal financial gain.

BG's action's in how he dealt with his mistake has actually instilled more confidence and faith in me as a buyer. Besides where would we get highly quality powder GHB if he was not around?

I agree I've been thinking about it I removed my post but BG has left quote there. Yes a hell of a lot keep them,I asked in discussion page why mimm kept peoples address's as he was threatening buyer there.I got a 100 day ban from posting for that. Which showed me money frommsales overrode buyers security, I'll never forget that and I got a msg from a mod encrypted telling me who it was and when I see him here I'll release the msg about him ,big chance he snitched. was when mimm got banned I think for a week I got 14weeks??
Like you say BG put hand up others would deny deny deny

aussieoutlaw,

I left the quote up because I actually valued the interaction - and it feels inherently good, and purging, for all aspects of this dialog to be spoken and seen.

It's how we all grow...

BG

[BlueGiraffe]

Wonderful to see you back, BG! 
I look forward to ordering from you once again.

much love.

Hey bro!!

Love to you too

BG

[BlueGiraffe]

[...] most of us are here to escape totalitarianism

funny, I thought most people were here to buy drugs.

[BlueGiraffe]

You fucked up huge! But took responsibility and the consequence that came with that. That is how men deal with their problems.
I respect you for that and would now buy from you any day

Thank you Eskimoplea7,

You have my respect in equal measure for saying what you just did.

BG

[loves2spooge]

***WARNING***
***WARNING***
***WARNING***

This it NOT a highly respectable seller.
This is NOT a 100% top seller.
This is a deceitful insecure liar who -*-SAVED EVERY CUSTOMERS PERSONAL INFORMATION-*- Addresses and everything.
He sent everything to thrid partys and leaked everything later.
He broke the core security and privacy rules. It's a shame he even dare to show his dirty name here.
He is never to be trusted again.

He was banned on silkroad and should be banned here too.

Never do business with this person, he is a liar and a huge security risk.
He will get you caught.
He lied all the time right in customers face. He only tries to save his business to earn more money. He does not care about your privacy.
Don't trust what he says, don't even read what he says.

***WARNING***
***WARNING***
***WARNING***

Dear and,

I've read all your posts, and I actually welcome your words. That you feel free to speak them is good and I have no doubt you are coming from a well-intentioned place.

Of course it stings a little to be reminded of what I went through a couple of months ago, but then I did cause major concern and stress for many people, and I'm very in touch with that - perhaps more than you realize. And because of that I am at ease with receiving criticism of the kind you have just given. My karma to deal with

I do wish to correct some things you said though, just to keep the conversation real...

Yes, I did keep addresses. Not from any malicious intention but because I neglected to purge my master shipping file.
That file was always stored under AES-256 encryption on a hidden volume.
It was (erroneously) sent via Tormail, encrypted but using a weaker system than PGP - so potentially crackable. It was never sent cleartext.
And it was never sent to any third party. It was sent from my assistant to me.

None of this is to deny what happened, but I'd like to keep this conversation true to the facts at least.

And as so many have aptly pointed out, it is inherently not possible to "ban" someone on an anonymous market. That said, if I was told by the Captain to walk the plank, I would.

For now anyway I am here, so we might as well get along, don't you think?

Love,

BG

Woah, for some reason I thought the addresses were sent via cleartext. I guess it wasn't even as bad as I thought. "encrypted but using a weaker system than PGP" What do you mean like privnote? Or are you referring to tormail's system? Sorry if this is a dumb question.

[BlueGiraffe]

***WARNING***
***WARNING***
***WARNING***

This it NOT a highly respectable seller.
This is NOT a 100% top seller.
This is a deceitful insecure liar who -*-SAVED EVERY CUSTOMERS PERSONAL INFORMATION-*- Addresses and everything.
He sent everything to thrid partys and leaked everything later.
He broke the core security and privacy rules. It's a shame he even dare to show his dirty name here.
He is never to be trusted again.

He was banned on silkroad and should be banned here too.

Never do business with this person, he is a liar and a huge security risk.
He will get you caught.
He lied all the time right in customers face. He only tries to save his business to earn more money. He does not care about your privacy.
Don't trust what he says, don't even read what he says.

***WARNING***
***WARNING***
***WARNING***

Dear and,

I've read all your posts, and I actually welcome your words. That you feel free to speak them is good and I have no doubt you are coming from a well-intentioned place.

Of course it stings a little to be reminded of what I went through a couple of months ago, but then I did cause major concern and stress for many people, and I'm very in touch with that - perhaps more than you realize. And because of that I am at ease with receiving criticism of the kind you have just given. My karma to deal with

I do wish to correct some things you said though, just to keep the conversation real...

Yes, I did keep addresses. Not from any malicious intention but because I neglected to purge my master shipping file.
That file was always stored under AES-256 encryption on a hidden volume.
It was (erroneously) sent via Tormail, encrypted but using a weaker system than PGP - so potentially crackable. It was never sent cleartext.
And it was never sent to any third party. It was sent from my assistant to me.

None of this is to deny what happened, but I'd like to keep this conversation true to the facts at least.

And as so many have aptly pointed out, it is inherently not possible to "ban" someone on an anonymous market. That said, if I was told by the Captain to walk the plank, I would.

For now anyway I am here, so we might as well get along, don't you think?

Love,

BG

Woah, for some reason I thought the addresses were sent via cleartext. I guess it wasn't even as bad as I thought. "encrypted but using a weaker system than PGP" What do you mean like privnote? Or are you referring to tormail's system? Sorry if this is a dumb question.

It was sent using the built-in encryption of a particular text-editing program (which I shall not mention). This was analysed by kmfkewm on the old SR forums here: http://dkn255hz262ypmii.onion/index.php?topic=196608.msg1426619#msg1426619 - also pasted below:

------------------------------------------------------------
"So I read about the program used, it is far from ideal, uses an old symmetric algorithm that has some known weaknesses but none of them seem to break it in common usage yet. It looks like it is a dying symmetric algorithm that will probably be broken in more practical situations some time in the fairly near future. It is already broken in specific edge case scenarios but I don't think from my quick glance over it that this situation will be one of those. So pretty much not a symmetric cipher that you want to use, had problems yesterday, has a lot more today and will probably have a lot lot more tomorrow, but it is not ROT-13 or something and can still probably provide some level of security if it is properly implemented.

The second issue is that the security it can provide is very implementation dependent. It seems like it needs to be extremely carefully implemented to avoid it being easily crackable, and there are many systems using this algorithm that have implemented it incorrectly such that they are quickly crackable. As far as this particular text editing program goes, I have no idea if they implemented it properly, I can find very little information about this editor as it is quite obscure. I would lean toward thinking that they probably fucked it up just to be on the safe side, but it is possible they implemented it correctly.

The third issue is that they limit the password size to such a low number of characters and such a small selection of characters that without a PBKDF (which I cannot find if they use) the very most entropy the password is going to have will be just under 100 bits, but that assumes that the password is actually randomly generated and not some words or something human created.

All of these things together paint a pretty bleak picture, but not as bad as no encryption at all being used. It is possible still that the heavens will smile on your customers, and the symmetric algorithm has just enough life left in it to be strong enough in this scenario, it was implemented properly by the people who made the text editing program and the password was pseudorandomly generated or very close to random and human created, and hopefully there is a PBKDF as well to give it a bit more strength. But honestly I wouldn't get my hopes up very high.
------------------------------------------------------------

My assistant was having problems getting PGP to work on the day, and chose to use this other method as a work-around. She also made the (horrible) mistake of sending the whole database instead of the day's orders.

None of my clients have reported any LE follow-up to date (and I am in contact with many of them), so it appears that the document was either not found, or was not decrypted. Given that there are also questions about what access the Feds actually managed to get to the Tormail server, and whether there was server-side encryption or not, my sense is that nothing was compromised in the end.

Still, it shouldn't have happened - and I am treating it as a gift of an incredible gut-wrenching lesson.

BG

[jesusofrave]

You have our respect for the way you conducted yourself over that time BG...

You stimulated us to review our policies (which we post below, in-case they are useful for anyone else). If the events can cause even a few vendors to become more operationally mindful of the potential fall out of retaining info, then it is a good thing that it all happened in the way it did.

So, thanks for taking a cyber black eye.

jor

   <PRIVACY AND SECURITY>
    As general policy we strictly adhere to the following operational procedures:

    +++when customer shipping info leaves the SR system it is only worked on on computers operating with full disk encryption and multiple layers of encryption.

    +++once processed orders are packed within 24 hours and sent within an additional 12 hours.

    +++all customer shipping info is securely destroyed once package has been packed.

    +++once sent, we never keep a copy of any shipping info outside of the SR order system and order history log.

    +++we daily delete all received/sent messages within the SR messaging system, and SR forum.

    +++we encourage you to GPG _any_ information you consider sensitive. Our response may not be encrypted but it will not reveal any info from within your message.

    +++if you have edited your gpg.conf file, please be aware that we maintain a number of SR related gpg keys. Adding 'throw-keyids' will lead to a tedious exchange of messages as we clarify which key you were sending to.

    If you are not sure what we are talking about, check out this useful thread:
    http://dkn255hz262ypmii.onion/index.php?topic=137510.0

[BlueGiraffe]

You have our respect for the way you conducted yourself over that time BG...

You stimulated us to review our policies (which we post below, in-case they are useful for anyone else). If the events can cause even a few vendors to become more operationally mindful of the potential fall out of retaining info, then it is a good thing that it all happened in the way it did.

So, thanks for taking a cyber black eye.

jor

   <PRIVACY AND SECURITY>
    As general policy we strictly adhere to the following operational procedures:

    +++when customer shipping info leaves the SR system it is only worked on on computers operating with full disk encryption and multiple layers of encryption.

    +++once processed orders are packed within 24 hours and sent within an additional 12 hours.

    +++all customer shipping info is securely destroyed once package has been packed.

    +++once sent, we never keep a copy of any shipping info outside of the SR order system and order history log.

    +++we daily delete all received/sent messages within the SR messaging system, and SR forum.

    +++we encourage you to GPG _any_ information you consider sensitive. Our response may not be encrypted but it will not reveal any info from within your message.

    +++if you have edited your gpg.conf file, please be aware that we maintain a number of SR related gpg keys. Adding 'throw-keyids' will lead to a tedious exchange of messages as we clarify which key you were sending to.

    If you are not sure what we are talking about, check out this useful thread:
    http://dkn255hz262ypmii.onion/index.php?topic=137510.0

Thank you jor,

Appreciate your words. Have always respected you for how you've operated. Although we've not done business I've certainly noticed your presence, and know you're a professional. So what you said carries extra weight.

I was aware that what happened in my case would likely stimulate some positive action in the community - grateful for that, though probably would rather have not taken the black eye at the end of the day! Still - glad it was usefiul...

I think your list above is an excellent guideline for vendors to adhere to. Our present operational procedures are very similar:

Data is also only worked on in a fully encrypted and secure environment - with a few extra creative twists which I shall not mention here

All shipping information is secure wiped as soon as orders are processed.

Any address sent in plaintext (some people persist no matter the encouragement) is deleted from the receiving system as soon as it enters our secure environment.

We do not currenly delete messages in the system that have no personally identifiable or otherwise incriminating information, but that is certainly something for vendors to consider implementing depending on their situatiuon. It's probably a good practice to the degree that it does not impinge on the ability to provide good customer service.

Having all lived through our security breach as well as the exposure of the whole SR server in the recent takedown, I think everyone realizes just how serious we have to be with our security to prevail in this game. As long as we are prepared to keep evolving, we'll be good.

BG

[Buttercup]

   <PRIVACY AND SECURITY>
    As general policy we strictly adhere to the following operational procedures:

    +++when customer shipping info leaves the SR system it is only worked on on computers operating with full disk encryption and multiple layers of encryption.

    +++once processed orders are packed within 24 hours and sent within an additional 12 hours.

    +++all customer shipping info is securely destroyed once package has been packed.

    +++once sent, we never keep a copy of any shipping info outside of the SR order system and order history log.

    +++we daily delete all received/sent messages within the SR messaging system, and SR forum.

    +++we encourage you to GPG _any_ information you consider sensitive. Our response may not be encrypted but it will not reveal any info from within your message.

    +++if you have edited your gpg.conf file, please be aware that we maintain a number of SR related gpg keys. Adding 'throw-keyids' will lead to a tedious exchange of messages as we clarify which key you were sending to.

All vendors should post this kind of information. I like the cut of your jib Jesus. I may just use your services in the future. I am a big fan of MDMA and you guys got some stellar feedback on the old site, and it's fab to see you stating these policies for us to read.

Of course I will still act like I don't trust you in any way at all, but then that's exactly how you'd want me to act isn't it?

B.

[jesusofrave]

Not wanting to hijack BG's thread too much, in essence yes, we don't believe you should extend trust any further than is absolutely unavoidable (ie, you have to trust that the vendor you order from fulfills their part of the bargain)...

As a parting note, we agree with Libertas' post on the old forums:


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ladies and gentlemen,

I would like to announce our new home:

http://silkroad5v7dywlc.onion

As I have always stated, even with Silk Road itself, you should act at all times as though any site or marketplace you visit has been compromised from the very beginning. That is the only way to ensure that you do not become lax with your security.

Do not fall into a false sense of security at any time on any site. Do not get comfortable. When you get comfortable you get confident, when you get confident you get cocky, and when you get cocky you get caught.

With the necessary security warnings out of the way, I look forward to seeing you all over on the new site. Let LE waste their time and resources whilst we make a statement to the world that we will not allow jackbooted government thugs trample our freedom.

We are born free, yet moments later we are shackled by the rule of law. It is time, once again, to break free of those shackles.

Libertas
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iQEcBAEBAgAGBQJSVTzqAAoJENepFuAAMIBjvQwIAMCMWZkVEGmDx9j6RacmCC3K
N2AvBvgy3S9/LLbNg60w4B/xV2+nGUqxpOmpWpbiv3k1rEqALshUAajQf6pjuiYV
2REu3T5jQvGfllMImpQ9gGkmb4XPvrQhFB/sp5154kR7GL1pLCaBniM6CMNCaz4q
/LLQHke8lUUqWRzlCUHKKk5mfUbPbw+Hm40jUO9N5VF6r1L9qTmJH2MPLSJQ5XcZ
PKfy6mSChYdgsyA/67WQOvalp09imTApT5YAFoSW0dS3eI2WBV0I66hKNyne06Ly
Wc7Dc8okmFVABOxlJ+Vk3yVjqRsB6MydHM0AOHxdLoMkfPcWTQC32yBqwWL33Bw=
=uB+q
-----END PGP SIGNATURE-----

[BlueGiraffe]

jor, you may hijack my threads anytime

BG

[jesusofrave]

jor, you may hijack my threads anytime

BG

BG... if we didn't know any better....

[BlueGiraffe]

Dear fellow travelers,

It's been quite a ride hasn't it?

In order to soothe everyone's nerves and make a happy splash with our return to active vending...

We are having one of our famous "Extra 50%" specials!

For every order placed (on any market or via email) between now and midnight UTC on Friday, November 1st, we will add an extra 50% GHB to your order, absolutely free.

This applies to all orders from 50g to 500g, so...

Order 50g receive 75g
Order 100g receive 150g
Order 200g receive 300g

etc..

To receive this deal you must include the secret password "giraffes have longer necks than thorn trees" with your order.

Our usual delivery guarantee applies of course.

It's a great pleasure to be of service to you all again

Enjoy!

BlueGiraffe

[Rocknessie]

Well, I'm personally bloody glad you're back.

Always wanted some of your GHB. And that pesky mesky you were working on.

BTCs for me are a luxury my maxed-out overdraft cannot afford, but if you and BMR/SM stick around you'll see me order one day.

[BlueGiraffe]

Well, I'm personally bloody glad you're back.

Always wanted some of your GHB. And that pesky mesky you were working on.

BTCs for me are a luxury my maxed-out overdraft cannot afford, but if you and BMR/SM stick around you'll see me order one day.

Thank you. And I look forward to it...

BG

[Rocknessie]

What's the status on the cacti substances you were working on (IIRC)?

[BlueGiraffe]

What's the status on the cacti substances you were working on (IIRC)?

Project on ice for now - but soon it will be resurrected for sure

BG

[zipstyle]

It is with great pleasure and happiness that I see BG's GHB listings up once again!
Sending much love your way.

[BlueGiraffe]

It is with great pleasure and happiness that I see BG's GHB listings up once again!
Sending much love your way.

Gracias!

Great to be communing again zipstyle

[zipstyle]

It is with great pleasure and happiness that I see BG's GHB listings up once again!
Sending much love your way.

Gracias!

Great to be communing again zipstyle

Likewise! It's incredible how expensive coins are these days...
As soon as I can get some into my account, I shall be getting some more of that LOVELY, LOVELY G baby!

[InspectorNorse]

BG, just wondering if you could advise me at all... Planning a mescaline trip soon and was wondering what it's like combined with GHB? If it's any good what timings would be best?
Say 1g of GHB +4hrs into the trip?
Or taken at the same time to help with comeup?
Thanks

[BlueGiraffe]

BG, just wondering if you could advise me at all... Planning a mescaline trip soon and was wondering what it's like combined with GHB? If it's any good what timings would be best?
Say 1g of GHB +4hrs into the trip?
Or taken at the same time to help with comeup?
Thanks

They go very well together (which I was not expecting - but there it is...)

I would come up on the M clean and only take G later in the trip. And definitely at the end!

BG