Silk Road forums
Discussion => Silk Road discussion => Topic started by: Dread Pirate Roberts on August 16, 2011, 10:26 pm
-
UPDATE:
I've been blown away by the caliber of the applicants so far. We're going to move on to the last phase in the application process, so any last-minute applications need to be in by midnight UTC, Aug 31st.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
We are looking for a unix administrator to add to our team. The person in this position will be responsible for the security, reliability and performance of our servers. They should have at least several years of experience and be able to formulate and clearly communicate new ideas for improving our systems. This is a temporary position that could turn into a more permanent arrangement depending on your performance and character. To apply, please send your answers to the following questions via the "contact us" link on the main site. Use the subject line "unix admin application".
Why do you want to join the Silk Road team?
Describe your experience as a unix admin and your skill set. Do you have other skills that might be applicable to our operation?
If you were starting from scratch, how would you set up the Silk Road servers to maximize security, performance, and reliability?
Are you able to work full-time (40+ hrs/week), part-time (at least 20 hrs/week), or both?
How much would you need to be paid?
Were you referred by someone? Who?
How did you hear about Silk Road?
What is your drug of choice, if any?
Anything else we should consider?
We are offering a $1000 to anyone who refers the person we hire :)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
iQEcBAEBAgAGBQJOSu2jAAoJEAIiQjtnt/olyAAIANxz9UOYAeWkfuX9m/0RUnX3
prdX7HnVwWBBjjMqk/LQU3W2AN3ieSRN2bciLlSydnfsSxB79xr5vikwo3iS8QIC
7oFu30U0VO6WdHeE+LN1wl3/Dq6eyFRAoxfiXJrIm6p2gdGK9Ldl3oIqsLY3QHPw
9fJdIn/hRTLc21baft8b2u1puHevJEv/2o1iSTYKBNGIDcqjJ6N/2fcoF5mW8MPu
kud5MdaTkI+Xh8OZIYBf6hIPpEs8SN5qaxHjynfBIk00C0Lq+j+gWSJ5AVDY59ZG
0x8s0MeK6/JU/BNPWcRLE1DI1XWjV2SOdcI7UslV38SM+Aotpao0U9YBVkEgU9s=
=2pBN
-----END PGP SIGNATURE-----
-
This kind of makes me a wee bit nervous. Wouldn't it make sense for you to hire someone that you know and trust? The paranoid me jumped out of his shorts when he saw this ad. What if someone says hire this guy! and that guy is LE...
I think that you should find someone that's in your inner circle. LE would love a way in, and I think you just gave them one....
Maybe i'm wrong, but if I were LE and I had some cred here, I would be running to my bosses. "look, they need a IT guy, we have a way in now..." I hope my thinking is crazy... but this makes me nervous....
-
I'm also going to have to agree hiring some one is a risk by itself but hiring some one from outside the circle is even bigger risk
Try bugging tyco :) he seems to know his shit
-
your concern is appropriate. However, the person we hire will not be put in a position to be able to compromise the site. There are also substantial advantages over using someone I know. In an operation like this, people are the biggest liability. Someone I know and trust can tell someone I don't know and trust what's going on. If this person needs to be let go for any reason, there are no loose ends.
-
I am not letting anyone around my growing computer network without a background check. "BeenVerified.com"
Lmao!
Have the candidates favorite drug of choice ready. Also hot hookers, hidden. Ask the candidate to partake in a relaxed setting. If they refuse drugs, bring out the ladies. Or whoever ya know to each there own, right? Still refuses, then they must be LE. Kick 'um to the curb. Or incredibly lame. Either way, I wouldn't want them working for me. I want a real team player.
That's my .02 worth. Thanks
-
your concern is appropriate. However, the person we hire will not be put in a position to be able to compromise the site. There are also substantial advantages over using someone I know. In an operation like this, people are the biggest liability. Someone I know and trust can tell someone I don't know and trust what's going on. If this person needs to be let go for any reason, there are no loose ends.
Your right on both ways. Its a risk either way you look at it. It all depends on the work that they are doing, etc. The real only way to protect you is make them a partner instead of an employee, that way they have just as much to lose as you do if the wrong info gets into the wrong hands. Making someone a partner that you can trust is probably the safest way to do it.
You have a big dilemma, thats for sure. You need help, but dont know who you can trust. I hope whoever you find is trustworthy.
-
will the administrator be paid??
-
will the administrator be paid??
Re-read op post carefully. ;)
-
oops..twas blinded by that 1000dolla reward money.lol
-
your concern is appropriate. However, the person we hire will not be put in a position to be able to compromise the site. There are also substantial advantages over using someone I know. In an operation like this, people are the biggest liability. Someone I know and trust can tell someone I don't know and trust what's going on. If this person needs to be let go for any reason, there are no loose ends.
+1 pm sent in regards to topic.
-
Really? I don't think this is a good idea. How could he not be in a position to compromise the site?
You have to at least give him some sort of SSH access, and local root exploits are a dime a dozen.
Just do your homework and run OpenBSD with full ASLR and isolate each process in a VM. Then your site is virtually impenetrable.
-
I think it's an ingenious idea. Why have a chain of command (so to speak) that can be traced back to you? As long as SR's got the keys to the server's, it's a great idea to have a resident geak help out with day-to-day running of the site. I mean we tend to think of SR is this untouchable jedi master ninja guru, but in reality they've a life that for the most part probably doesn't involve SR. You think they have lunch w their loved ones and say..."ah you guys wouldn't believe what happened at the office today...someone tried to sell fake heroin so I had to ban them..." No, it's more than likely very secretive w hardly anyone who really KNOWS...and that's the way it should be imo.
I respect and have a lot of faith in SR. It's not blind, it has been earned.
-
I suggest contacting the member named nsapwnsall
I don't know if he's interested but it sounds like he knows his shit:
http://dkn255hz262ypmii.onion/index.php?action=profile;area=showposts;u=1821
I can't vouch in any other way except what I've read here.
-
Really? I don't think this is a good idea. How could he not be in a position to compromise the site?
You have to at least give him some sort of SSH access, and local root exploits are a dime a dozen.
Just do your homework and run OpenBSD with full ASLR and isolate each process in a VM. Then your site is virtually impenetrable.
Access is not necessary. At least at first, this person will be more of a dedicated expert adviser. There are many layers to this site and more we want to add, and unfortunately my expertise and time are maxed out. Several members have been very generous in volunteering their time to help improve the site, but by their nature, volunteers can only do so much and have other obligations. Right now we need someone with plenty expertise who can dedicate their time to this project and help take it to the next level. If all goes well, we'll be opening up other positions too.
-
I am not letting anyone around my growing computer network without a background check. "BeenVerified.com"
Lmao!
Have the candidates favorite drug of choice ready. Also hot hookers, hidden. Ask the candidate to partake in a relaxed setting. If they refuse drugs, bring out the ladies. Or whoever ya know to each there own, right? Still refuses, then they must be LE. Kick 'um to the curb. Or incredibly lame. Either way, I wouldn't want them working for me. I want a real team player.
That's my .02 worth. Thanks
LE (in the US) have the authority to break any and every law in the book if it looks like their cover will be blown. Their account is still valid even if they did a thumbprint and were trippin the fuck out when whatever they are talking about happened.
Maybe that's not the case where you are from.
Still, this is LE 101 information. Different Laws for different places. Never assume LE is bound by any laws, since there might be a place in the world where they are not bound by a particular law. This is global community.
Never assume.
Tricks like this WILL NOT WORK. LE can lie, steal, cheat, do drugs, sleep with hookers, anything you can imagine.
I know you're tone is light, but just to make sure everyone is aware.
-
A random advisor could still be in the position to trick you into installing something dangerous. For instance they could work with some sort of software developer, install a backdoor and host it on the actual real hosting site, and tell you to install it. Instantly rooted. I think it should be someone you semi-trust, not some random. Not someone CLOSE to you per say, but someone that you have known for a while, has a history in the scene, and you are pretty confident they are not LE. Hope this helps.
-
Really? I don't think this is a good idea. How could he not be in a position to compromise the site?
You have to at least give him some sort of SSH access, and local root exploits are a dime a dozen.
Just do your homework and run OpenBSD with full ASLR and isolate each process in a VM. Then your site is virtually impenetrable.
I'd like to nominate (or refer) envious. I would like my $1000 in unmarked non-consecutive $10 bills please ;)
-
NSA can own anything dude. By virtually impenetrable I meant anyone but them, thus why I said virtually. OpenBSD is still by far the best solution.
-
You know where I stand on this.
:D
nomad bloodbath
-
You know where I stand on this.
:D
nomad bloodbath
On your head?
-
You know where I stand on this.
:D
nomad bloodbath
On your head?
No silly on an apple,on the tip,, of the edge of the head, of a chair, that is balanced on the tip, of it's foot's edge.
:D
nomad bloodbath
-
Normally I'd throw my hat into the ring for a part time gig like this as managing large e-commerce sites is my bread and butter and has been for longer than a lot of members have had pubes. Advancing the security of the site, distributing the workload and key aspects of the site to ensure total anonymity would be something I'd love to be paid to do but unfortunately a new job means I don't have the spare time I used to.
Whoever does take on the role, have a chat sometime about securing TOR services and anonymous communication.
-
I see a lot of issues from both sides of the coin, most of which people have already brought up as far as SR's liability. However as a potential candidate for this position, one would have to ask oneself some tough questions: are you willing to get directly involved in administering a site that's under a lot of heat right now and for its foreseeable future (senators, DEA, etc)? If SR does get compromised by LE, you're looking at potentially MANY more serious issues than just being a buyer or even seller on the site (seems like you could be considered a 'trafficker' by actively running the site). Just the headache and paranoia of being so closely involved wouldn't be worth it for me, although I'm sure some people wouldn't mind the added stress.
I take drugs to relieve stress and paranoia, I guess the question is: will the additional drugs one gets from working for SR offset the stress of working for SR? :P ;D
-
this makes me really nervous. giving anyone access to part of the site would make it VERY vulnerable to backdoors, etc. also on a related note I think way to much info is stored, every transaction address, order, usernames, etc are all saved for every sale. I know some of this is needed but I think only like 2-3 weeks worth should be saved.
also the above poster was right, in the US a cop can do ANYTHING while undercover (drugs, lie, sex with hookers, etc.). Be realllllly fuckkkking careful!!!
-
Let me throw in this reminder. The admins here created the SR and this site. We are all just visitors here and there with that stupid name tag on our shirt pockets.
I would venture to say that they have vetted this idea completely prior to the ad being posted. Why all this armchair quarterbacking, I don't see any of us operating a similar site.
I'm sure whoever is considered will be fully vetted prior to any disclosure. So relax. My .05 bits. Bikerbum :o
-
LE can only do drugs and hookers if their lives are in danger or they are under duress. In a relaxed setting with no dangers or pressures, it is illegal for LE to participate. They can't expose themselves. Touch your or someone else's junk, lol. None of that.
Now if you and or a henchman, ie; Guido DaSpeedo decide to use intimidation... "I suggest you do this blow then go F* this hooker. I'd hate to see anything happen to you if you refuse. Angry. You wouldn't like it when I'm angry." Intimidation. GAME OVER!! LE now because of the "eminent danger" has a PASS. Now LE is coked up bangin hookers, haning out, loving it. That's my every Friday and Saturday. NOT what we want for them!
So be cool offer the candidate whatever and see where it goes. But I am tell ya, if they don't play... Don't hire them. Bottomline
-
Let me throw in this reminder. The admins here created the SR and this site. We are all just visitors here and there with that stupid name tag on our shirt pockets.
I would venture to say that they have vetted this idea completely prior to the ad being posted. Why all this armchair quarterbacking, I don't see any of us operating a similar site.
I'm sure whoever is considered will be fully vetted prior to any disclosure. So relax. My .05 bits. Bikerbum :o
Maybe you should quit armchair quarterbacking all us armchair quarterbacks ;)
It appears that everyone here really cares about SR. People are giving their opinion on a forum. That is what a forum is for. Call it armchair quarterbacking if you like, but all these comments are aimed at protecting SR and themselves.
this makes me really nervous. giving anyone access to part of the site would make it VERY vulnerable to backdoors, etc. also on a related note I think way to much info is stored, every transaction address, order, usernames, etc are all saved for every sale. I know some of this is needed but I think only like 2-3 weeks worth should be saved.
also the above poster was right, in the US a cop can do ANYTHING while undercover (drugs, lie, sex with hookers, etc.). Be realllllly fuckkkking careful!!!
I agree with this. I would like to see all messages and transaction history removed after a week or two just as a precaution especially considering there are some pretty incriminating messages between a lot of people. Especially before some unknown entity takes charge of security.
-
Let me throw in this reminder. The admins here created the SR and this site. We are all just visitors here and there with that stupid name tag on our shirt pockets.
I would venture to say that they have vetted this idea completely prior to the ad being posted. Why all this armchair quarterbacking, I don't see any of us operating a similar site.
I'm sure whoever is considered will be fully vetted prior to any disclosure. So relax. My .05 bits. Bikerbum :o
Maybe you should quit armchair quarterbacking all us armchair quarterbacks ;)
It appears that everyone here really cares about SR. People are giving their opinion on a forum. That is what a forum is for. Call it armchair quarterbacking if you like, but all these comments are aimed at protecting SR and themselves.
this makes me really nervous. giving anyone access to part of the site would make it VERY vulnerable to backdoors, etc. also on a related note I think way to much info is stored, every transaction address, order, usernames, etc are all saved for every sale. I know some of this is needed but I think only like 2-3 weeks worth should be saved.
also the above poster was right, in the US a cop can do ANYTHING while undercover (drugs, lie, sex with hookers, etc.). Be realllllly fuckkkking careful!!!
I agree with this. I would like to see all messages and transaction history removed after a week or two just as a precaution especially considering there are some pretty incriminating messages between a lot of people. Especially before some unknown entity takes charge of security.
Or at least the vendor she have the ability to delete the transactions when he/she sees fit. Most of us are doing things the right way. Using trucrypt or other ways to encrypt thumbdrives or cd's very well. AS a vendor myself, I would love to be able after a week or so (after the transaction is completed) have the option to either back up the transactions to something stealthy or just delete the transaction altogether.
-
Let me throw in this reminder. The admins here created the SR and this site. We are all just visitors here and there with that stupid name tag on our shirt pockets.
I would venture to say that they have vetted this idea completely prior to the ad being posted. Why all this armchair quarterbacking, I don't see any of us operating a similar site.
I'm sure whoever is considered will be fully vetted prior to any disclosure. So relax. My .05 bits. Bikerbum :o
Maybe you should quit armchair quarterbacking all us armchair quarterbacks ;)
It appears that everyone here really cares about SR. People are giving their opinion on a forum. That is what a forum is for. Call it armchair quarterbacking if you like, but all these comments are aimed at protecting SR and themselves.
this makes me really nervous. giving anyone access to part of the site would make it VERY vulnerable to backdoors, etc. also on a related note I think way to much info is stored, every transaction address, order, usernames, etc are all saved for every sale. I know some of this is needed but I think only like 2-3 weeks worth should be saved.
also the above poster was right, in the US a cop can do ANYTHING while undercover (drugs, lie, sex with hookers, etc.). Be realllllly fuckkkking careful!!!
I agree with this. I would like to see all messages and transaction history removed after a week or two just as a precaution especially considering there are some pretty incriminating messages between a lot of people. Especially before some unknown entity takes charge of security.
Don't get your nuts in a knot. You wouldn't be here if SR didn't originally secure their site. You think they need us to tell them to be careful. Like they are going to do anything to compromise themselves. We are all fortunate to be in their company. You have a valuable opinion, as naive as it is. Why not reread the subject line of this post and earn yourself a sweet 100 bitcoins by finding somebody to do the job. Opinions are fine if you start a discussion thread on this topic instead of highjacking this want ad thread with your .................opinion. These guys are looking for help, REFER somebody or start your opinion discussion thread.I don't have to tell you about Basic Forum Etiquette. Thanks for your opinion.
-
I am not letting anyone around my growing computer network without a background check. "BeenVerified.com"
Lmao!
Have the candidates favorite drug of choice ready. Also hot hookers, hidden. Ask the candidate to partake in a relaxed setting. If they refuse drugs, bring out the ladies. Or whoever ya know to each there own, right? Still refuses, then they must be LE. Kick 'um to the curb. Or incredibly lame. Either way, I wouldn't want them working for me. I want a real team player.
That's my .02 worth. Thanks
LE (in the US) have the authority to break any and every law in the book if it looks like their cover will be blown. Their account is still valid even if they did a thumbprint and were trippin the fuck out when whatever they are talking about happened.
Maybe that's not the case where you are from.
Still, this is LE 101 information. Different Laws for different places. Never assume LE is bound by any laws, since there might be a place in the world where they are not bound by a particular law. This is global community.
Never assume.
Tricks like this WILL NOT WORK. LE can lie, steal, cheat, do drugs, sleep with hookers, anything you can imagine.
I know you're tone is light, but just to make sure everyone is aware.
There IS one thing that I was certain of that LE can't do, and that's asking the guy you're going to hire to sell YOU some drugs. That puts LE in a situation where if it went to court in the US they would have to explain to the public why it is that they sold and then let a whole shitload of drugs disappear, presumably even into the hands of kids or something.
But then again the US administration sold weapons to the Mexico cartels which in turn were used to assassinate US border agents. All for the purpose of finding out where the weapons would end up. So it's hard to say, when you're dealing with people who don't even give a fuck about their own.
-
Got to agree with loginathome, in the uk a copper recently was found out infiltrating a group of eco-protesters and screwing all the female members. If its not a recommendation from someone known to you you have to assume its LE.
-
More Details Emerge Regarding OpenBSD FBI Backdoors
http://www.osnews.com/story/24142/More_Details_Emerge_Regarding_OpenBSD_FBI_Backdoors
The OpenBSD backdoor thing was an obvious sham. The FBI doesn't make people sign NDA's, they just call it CONFIDENTIAL and throw you in jail when you start blabbing about it on the internet.
-
LE can only do drugs and hookers if their lives are in danger or they are under duress. In a relaxed setting with no dangers or pressures, it is illegal for LE to participate. They can't expose themselves. Touch your or someone else's junk, lol. None of that.
Now if you and or a henchman, ie; Guido DaSpeedo decide to use intimidation... "I suggest you do this blow then go F* this hooker. I'd hate to see anything happen to you if you refuse. Angry. You wouldn't like it when I'm angry." Intimidation. GAME OVER!! LE now because of the "eminent danger" has a PASS. Now LE is coked up bangin hookers, haning out, loving it. That's my every Friday and Saturday. NOT what we want for them!
So be cool offer the candidate whatever and see where it goes. But I am tell ya, if they don't play... Don't hire them. Bottomline
No, not true. A cop can do drugs and screw hoars to maintain cover and harm does not have to be explicitly expressed. The possibility of blowing of cover is enough, because blowing cover puts the agent at risk and they may partake in such actions.
-
If you were starting from scratch, how would you set up the Silk Road servers to maximize security, performance, and reliability?
I think responses were neglecting the really important issues, maybe they out of the league of the average armchair quarterback ;)
If I were to start from scratch I wouldn't use a server... Maybe I would hire the guys from Osiris Serverless Portal System to implement whatever additions are needed to host SR as p2p hosted encrypted site. They may need to implement some Bitcoin payment system that might not exist yet. I don't know if they ever implemented onion routing... of course I would try to avoid to store any personal member information anywhere except if needed with very strong encryption...
That's the type of answer I think the poster would have tried to harvest...
-
Let me throw in this reminder. The admins here created the SR and this site. We are all just visitors here and there with that stupid name tag on our shirt pockets.
I would venture to say that they have vetted this idea completely prior to the ad being posted. Why all this armchair quarterbacking, I don't see any of us operating a similar site.
I'm sure whoever is considered will be fully vetted prior to any disclosure. So relax. My .05 bits. Bikerbum :o
Maybe you should quit armchair quarterbacking all us armchair quarterbacks ;)
It appears that everyone here really cares about SR. People are giving their opinion on a forum. That is what a forum is for. Call it armchair quarterbacking if you like, but all these comments are aimed at protecting SR and themselves.
this makes me really nervous. giving anyone access to part of the site would make it VERY vulnerable to backdoors, etc. also on a related note I think way to much info is stored, every transaction address, order, usernames, etc are all saved for every sale. I know some of this is needed but I think only like 2-3 weeks worth should be saved.
also the above poster was right, in the US a cop can do ANYTHING while undercover (drugs, lie, sex with hookers, etc.). Be realllllly fuckkkking careful!!!
I agree with this. I would like to see all messages and transaction history removed after a week or two just as a precaution especially considering there are some pretty incriminating messages between a lot of people. Especially before some unknown entity takes charge of security.
Don't get your nuts in a knot. You wouldn't be here if SR didn't originally secure their site. You think they need us to tell them to be careful. Like they are going to do anything to compromise themselves. We are all fortunate to be in their company. You have a valuable opinion, as naive as it is. Why not reread the subject line of this post and earn yourself a sweet 100 bitcoins by finding somebody to do the job. Opinions are fine if you start a discussion thread on this topic instead of highjacking this want ad thread with your .................opinion. These guys are looking for help, REFER somebody or start your opinion discussion thread.I don't have to tell you about Basic Forum Etiquette. Thanks for your opinion.
You keep putting SR on some pedestal like he is a god because he created this site. No, he is just some guy some where that got an idea out of a book and put it into action. I mean no disresepect but you have no idea what you are talking about, and the entire fact that SR is asking for help proves that they are in over their head. Again, I don't mean disrespect to SR as he is a smart dude that did a great thing, but obviously he needs help and I'm sure he will take everyones opinions into consideration. There is hackers out there way smarter than SR, and he knows this. This is not something to be taken lightly or just be 'trusted' because his name is SR.
-
I do cisco\vmware\ms stuff if needed. Not looking for another job but willing to help out if needed.
-
Don't get your nuts in a knot. You wouldn't be here if SR didn't originally secure their site. You think they need us to tell them to be careful. Like they are going to do anything to compromise themselves. We are all fortunate to be in their company. You have a valuable opinion, as naive as it is. Why not reread the subject line of this post and earn yourself a sweet 100 bitcoins by finding somebody to do the job. Opinions are fine if you start a discussion thread on this topic instead of highjacking this want ad thread with your .................opinion. These guys are looking for help, REFER somebody or start your opinion discussion thread.I don't have to tell you about Basic Forum Etiquette. Thanks for your opinion.
Chill dude, you don't need to worry about my nuts. I am not trying to highjack (or hijack) this thread, my comments about removing previous transaction history (as naive as they may be) are valid. Especially if a new person is going to be in charge of security as I don't want them being able to see what I have ordered or where it was sent to. I think many of us are here to throw ideas out there in order to try and make SR as safe as possible. What would give you the impression that I am naive? Also, you attack me for hijacking a thread when your entire post has no relevance whatsoever.
I have been asking my programmer friends if they are interested in interviewing for this position but they are hesitant due to the risky nature of the job. Will the compensation be above and beyond a regular 40 hour/week administrator job? I understand completely if you don't want to make that information public.
-
Especially if a new person is going to be in charge of security as I don't want them being able to see what I have ordered or where it was sent to.
If you send your address to sellers cleartext then you've already screwed up. I've never bought anything from SR, but if there is somewhere to enter your address that gets saved persistently by the site after you have finalised the order then something is seriously wrong. Your personal safety and security should not be dependent on the safe administration of the site.
-
Let me throw in this reminder. The admins here created the SR and this site. We are all just visitors here and there with that stupid name tag on our shirt pockets.
I would venture to say that they have vetted this idea completely prior to the ad being posted. Why all this armchair quarterbacking, I don't see any of us operating a similar site.
I'm sure whoever is considered will be fully vetted prior to any disclosure. So relax. My .05 bits. Bikerbum :o
Maybe you should quit armchair quarterbacking all us armchair quarterbacks ;)
It appears that everyone here really cares about SR. People are giving their opinion on a forum. That is what a forum is for. Call it armchair quarterbacking if you like, but all these comments are aimed at protecting SR and themselves.
this makes me really nervous. giving anyone access to part of the site would make it VERY vulnerable to backdoors, etc. also on a related note I think way to much info is stored, every transaction address, order, usernames, etc are all saved for every sale. I know some of this is needed but I think only like 2-3 weeks worth should be saved.
also the above poster was right, in the US a cop can do ANYTHING while undercover (drugs, lie, sex with hookers, etc.). Be realllllly fuckkkking careful!!!
I agree with this. I would like to see all messages and transaction history removed after a week or two just as a precaution especially considering there are some pretty incriminating messages between a lot of people. Especially before some unknown entity takes charge of security.
Don't get your nuts in a knot. You wouldn't be here if SR didn't originally secure their site. You think they need us to tell them to be careful. Like they are going to do anything to compromise themselves. We are all fortunate to be in their company. You have a valuable opinion, as naive as it is. Why not reread the subject line of this post and earn yourself a sweet 100 bitcoins by finding somebody to do the job. Opinions are fine if you start a discussion thread on this topic instead of highjacking this want ad thread with your .................opinion. These guys are looking for help, REFER somebody or start your opinion discussion thread.I don't have to tell you about Basic Forum Etiquette. Thanks for your opinion.
You keep putting SR on some pedestal like he is a god because he created this site. No, he is just some guy some where that got an idea out of a book and put it into action. I mean no disresepect but you have no idea what you are talking about, and the entire fact that SR is asking for help proves that they are in over their head. Again, I don't mean disrespect to SR as he is a smart dude that did a great thing, but obviously he needs help and I'm sure he will take everyones opinions into consideration. There is hackers out there way smarter than SR, and he knows this. This is not something to be taken lightly or just be 'trusted' because his name is SR.
Another Expert, You and Flintsone can lament all you want with your speculations. Sounds like your more worried about your security than SR's. Instead of defending your positions on what or what not SR shouda, couda, wouda, refer someone for the position or start your own site which obviously you can't or you and the rest of us wouldn't be here. I wait with anticipation on your regurgetated position on this. With that said:
I have a colleague who recently left Cisco for another position that may be of assistance SR. I'll have him register and state his qualifications for your review SR. I purchase his recreational items for him from the SRoad due to his sensitive employment position and his highly suspicious and paranoid nature. I'll suggest to him to avoid the clutter on this forum and to pm cryptically. Bikerbum
-
Let me throw in this reminder. The admins here created the SR and this site. We are all just visitors here and there with that stupid name tag on our shirt pockets.
I would venture to say that they have vetted this idea completely prior to the ad being posted. Why all this armchair quarterbacking, I don't see any of us operating a similar site.
I'm sure whoever is considered will be fully vetted prior to any disclosure. So relax. My .05 bits. Bikerbum :o
Maybe you should quit armchair quarterbacking all us armchair quarterbacks ;)
It appears that everyone here really cares about SR. People are giving their opinion on a forum. That is what a forum is for. Call it armchair quarterbacking if you like, but all these comments are aimed at protecting SR and themselves.
this makes me really nervous. giving anyone access to part of the site would make it VERY vulnerable to backdoors, etc. also on a related note I think way to much info is stored, every transaction address, order, usernames, etc are all saved for every sale. I know some of this is needed but I think only like 2-3 weeks worth should be saved.
also the above poster was right, in the US a cop can do ANYTHING while undercover (drugs, lie, sex with hookers, etc.). Be realllllly fuckkkking careful!!!
I agree with this. I would like to see all messages and transaction history removed after a week or two just as a precaution especially considering there are some pretty incriminating messages between a lot of people. Especially before some unknown entity takes charge of security.
Don't get your nuts in a knot. You wouldn't be here if SR didn't originally secure their site. You think they need us to tell them to be careful. Like they are going to do anything to compromise themselves. We are all fortunate to be in their company. You have a valuable opinion, as naive as it is. Why not reread the subject line of this post and earn yourself a sweet 100 bitcoins by finding somebody to do the job. Opinions are fine if you start a discussion thread on this topic instead of highjacking this want ad thread with your .................opinion. These guys are looking for help, REFER somebody or start your opinion discussion thread.I don't have to tell you about Basic Forum Etiquette. Thanks for your opinion.
You keep putting SR on some pedestal like he is a god because he created this site. No, he is just some guy some where that got an idea out of a book and put it into action. I mean no disresepect but you have no idea what you are talking about, and the entire fact that SR is asking for help proves that they are in over their head. Again, I don't mean disrespect to SR as he is a smart dude that did a great thing, but obviously he needs help and I'm sure he will take everyones opinions into consideration. There is hackers out there way smarter than SR, and he knows this. This is not something to be taken lightly or just be 'trusted' because his name is SR.
Another Expert, You and Flintsone can lament all you want with your speculations. Sounds like your more worried about your security than SR's. Instead of defending your positions on what or what not SR shouda, couda, wouda, refer someone for the position or start your own site which obviously you can't or you and the rest of us wouldn't be here. I wait with anticipation on your regurgetated position on this. With that said:
I have a colleague who recently left Cisco for another position that may be of assistance SR. I'll have him register and state his qualifications for your review SR. I purchase his recreational items for him from the SRoad due to his sensitive employment position and his highly suspicious and paranoid nature. I'll suggest to him to avoid the clutter on this forum and to pm cryptically. Bikerbum
Are you just trolling? You are implying that we are 'expert know-it-alls.' Re-read your own posts...
-
Especially if a new person is going to be in charge of security as I don't want them being able to see what I have ordered or where it was sent to.
If you send your address to sellers cleartext then you've already screwed up. I've never bought anything from SR, but if there is somewhere to enter your address that gets saved persistently by the site after you have finalised the order then something is seriously wrong. Your personal safety and security should not be dependent on the safe administration of the site.
Yes, I did screw up when I fist joined SR. I made an order with someone who didn't use PGP and sent an unencrypted address. I now realize that is was a huge mistake and haven't done it since.
Every post I have seen from Bikerbum is flaming someone for giving their opinion. Yes, I am looking out for my safety and I am also looking out for the safety of SR. Creating the poll about removing guns had nothing to do with my safety. It was aimed entirely an protecting SR from potential LE intervention (but I won't get into that here.) Here is some more speculation: if your friend is too highly suspicious and paranoid to order from SR what makes you think he will want to work as their security administrator?
SilkRoad, I suggest emailing the crew over at Bluelight or Opiophile and ask for suggestions from them as to how you should go about hiring someone for this position. They are likely qualified and knowledgeable about how to hire someone with regards to safety and anonymity.
-
I find it utterly amazing that supposedly intelligent people of adult age would equate needing to hire additional staff due to massive growth with not having the prerequisite skills to properly build and maintain the SR marketplace site.
I think that, if anything, SR would need *more* outside perspectives and insight as the place goes forward, not less or a stagnant number. Security is *always* a top concern, for SR and us users alike, but having a myopic viewpoint can be just as dangerous as having no security, IMHO.
I hope that people here who have the contacts to good, stable, knowledgeable, Unix admins who are possible staff hires will continue to contact SR with names and contact info and will not simply give up because a couple of dolts have decided to take a straightforward request for help and turn it into a debate of...hell, I don't know what is being debated but it's very off topic. :) Let's get SR a good admin asst. and move forward. 8)
-
Since there is reasonable assumption that SR’s servers are in Europe somewhere, Sweden or possibly Norway. Have you folks considered contacting the enlightened staff over the Pirate Bay? Such a position is much to tempting for the legal community, every limp dicked cop and three letter agency (CIA, FBI, ...) will try for the job. Good luck SR.
-
I find it utterly amazing that supposedly intelligent people of adult age would equate needing to hire additional staff due to massive growth with not having the prerequisite skills to properly build and maintain the SR marketplace site.
I think that, if anything, SR would need *more* outside perspectives and insight as the place goes forward, not less or a stagnant number. Security is *always* a top concern, for SR and us users alike, but having a myopic viewpoint can be just as dangerous as having no security, IMHO.
I hope that people here who have the contacts to good, stable, knowledgeable, Unix admins who are possible staff hires will continue to contact SR with names and contact info and will not simply give up because a couple of dolts have decided to take a straightforward request for help and turn it into a debate of...hell, I don't know what is being debated but it's very off topic. :) Let's get SR a good admin asst. and move forward. 8)
Finally a voice of reason. What I've been trying to say at the risk of being accused of the......." flame". SR simply posted a want ad for employment and all he's getting are diatribes on what he should and shouldn't do instead of referrals for this position. The topic of this thread is "Silk Road is hiring a unix administrator" not " Comment on why or why not to hire a unix administrator" I concur with this quote:" Let's get SR a good admin asst. and move forward". Leave this thread for referrals and open another thread for your all important opinions. And I'm sure someone will find fault with this. That's all I have to say on this since I can see that it's non productive.
SR my guy is mulling it over and will contact you cryptically for further details. Thanks, Bikerbum
-
I find it utterly amazing that supposedly intelligent people of adult age would equate needing to hire additional staff due to massive growth with not having the prerequisite skills to properly build and maintain the SR marketplace site.
I think that, if anything, SR would need *more* outside perspectives and insight as the place goes forward, not less or a stagnant number. Security is *always* a top concern, for SR and us users alike, but having a myopic viewpoint can be just as dangerous as having no security, IMHO.
I hope that people here who have the contacts to good, stable, knowledgeable, Unix admins who are possible staff hires will continue to contact SR with names and contact info and will not simply give up because a couple of dolts have decided to take a straightforward request for help and turn it into a debate of...hell, I don't know what is being debated but it's very off topic. :) Let's get SR a good admin asst. and move forward. 8)
Finally a voice of reason. What I've been trying to say at the risk of being accused of the......." flame". SR simply posted a want ad for employment and all he's getting are diatribes on what he should and shouldn't do instead of referrals for this position. The topic of this thread is "Silk Road is hiring a unix administrator" not " Comment on why or why not to hire a unix administrator" I concur with this quote:" Let's get SR a good admin asst. and move forward". Leave this thread for referrals and open another thread for your all important opinions. And I'm sure someone will find fault with this. That's all I have to say on this since I can see that it's non productive.
SR my guy is mulling it over and will contact you cryptically for further details. Thanks, Bikerbum
Smartest. Person. Ever.
-
if there is somewhere to enter your address that gets saved persistently by the site after you have finalised the order then something is seriously wrong.
This is not the case though, right?
-
dolt.........................................LMFAO
-
Wow.. I just read this thread.. are any of the people commenting linux/unix admins?? Depending on the level of security of course you can lock people out of certain functions or features.. anyone who admins know linux has very granular security measures.. you could add someone to a group that has permissions to certain areas but not others, lock everything to sudo, etc.. wtf.. this thread is paranoid and nuts.. lol
-
Free BSD for life. :D
Smartest. Person. Ever.
[/quote]