Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - kmfkewm

Pages: 1 ... 48 49 [50] 51 52 ... 249
736
Security / Re: Big MDMA presser busted on silk road
« on: July 24, 2013, 11:44 am »
I have a friend who knows the person busted, he said they were busted via unrelated investigation and then police linked them to SR because they seized and analyzed computers then found unencrypted documents with SR info on them.

737
Security / Big MDMA presser busted on silk road
« on: July 24, 2013, 11:07 am »
http://www.mickvanwely.nl/de-xtc-bende-van-sinterklaas/

738
could intercept government communications maybe. Several years ago a hacker monitoring Tor exit nodes intercepted hundreds of different government communications as well as gained access to dozens of government E-mail accounts and similar.

739
1. The government and corporate powers have it strongly in their interests to keep drugs illegal. The police forces are largely funded by drugs, either via taxation to support the war on drugs or via direct asset seizure related to the war on drugs. If drugs are legalized, police budgets are going to free fall and a lot of police are going to lose their jobs. Agencies like the DEA will essentially be obsolete. The police also gain a lot of power because of the war on drugs, if they smell weed in your car or house they can search you, they can arrest people for drug charges and offer them plea deals to snitch on targets the police are interested in, they get all kinds of paramilitary toys to try to fight the war on drugs, etc. The politicians love the war on drugs because it directly funds a lot of their friends, in the case of republicans it funds their friends in the private prison industry, in the case of the democrats it funds a huge portion of people who go to college for sociology and social services degrees. In fact, a lot of sociologists and people in social services have absolutely no skills and make the bulk of their money by teaching classes that people who are arrested with drugs are court ordered to attend, or by being "drug abuse specialists" and working at facilities that people who are arrested with drugs are sentenced to be held at. Many millions of jobs will be lost if drugs are legalized, and billions of dollars going to private industry will no longer be going there, and these are the same private industries that pump tons of money into the campaigns of politicians. So essentially we have a conspiracy to keep drugs illegal between the police, politicians, and major corporations ranging from the private prison industry to the pharmaceutical industry.

2. We are bombarded with propaganda through every possible channel, this propaganda is funded by the government with our tax dollars. If you support drug legalization the fact is that you are still forced to help fund propaganda that tries to convince people that drugs should not be legalized. If you donate $100 a year to a pro legalization effort, it doesn't matter because you are forced to give even more money to the government so they can spread an opposite message. Also, the government has total control over the public school system, and they censor our ability to spread drug legalization messages through the school system or to teach honest truth. It is against the law in debate classes at public schools in the USA to advocate for drug legalization, but it is not against the law to advocate against drug use. There are many government funded and mandated programs such as D.A.R.E. teaching inaccurate information to the majority of every generation of children, which is obviously a very effective method used to brainwash people. Children will believe whatever they are told by authority figures when they are young, this is evidenced by the fact that children are regularly convinced that a magic man who lives in the sky came down to earth and was nailed to a cross for their sins. Children have plastic and easily molded brains, and the government maintains a monopoly on the primary source used to mold these brains, and these children grow up into voting adults with soldified brains that have little chance of changing regardless of the evidence shown to them in favor of legalization. Additionally, the government uses its forfeited assets and control of the media in order to spread propaganda through other media as well.

3. The media has it in its best interests to cast drugs in a negative light. Not only is the media closely associated with the government, but they are also in the business of entertainment. They need to scare people and emotionally manipulate people in order to get higher ratings. They will do this with drugs by cherry picking the most horrible drug stories and making them seem like they are the norm rather than extremely exceptional, they will use drugs for fear mongering etc all in the name of ratings and of course supporting the government. This is not limited to the news reporters but even to people making television shows and such, most of them have absolutely no motivation for casting drugs or drug users in a good light, with few exceptions such as Weeds. For every show like Weeds there are a hundred shows that propagate misinformation about drugs and cast them in a negative light, this is a form of propaganda but most people don't even recognize this.

4. The religious leaders are absolutely against drugs because they compete with traditional religion. If people can get spiritual and religious experiences from LSD and such it could compete with the people who turn to religion for spirituality. None of the major religions endorse drug use and almost all of them are very against drug use of any kind, many are against even alcohol, nicotine and caffeine let alone LSD or marijuana.

5. The Supreme Court can interpret the law however the hell they want, and everybody thinks that whatever they determine must be the truth. We are promised religious equality but some religious organizations are given exceptions from the controlled substance act, whereas people using LSD for spiritual experiences are still routinely imprisoned. The federal government has grown more and more powerful all with the help of the traitors in the Supreme Court interpreting the law however they see fit. How can the federal government possibly have the right to prevent people from growing marijuana in their own homes?! The Supreme Court says that you growing marijuana in your own home has an indirect effect on interstate commerce and therefor can be regulated by the federal government. The Supreme Court says that certain members of Native American religions can use Peyote, and members of certain South American religions can use DMT, but people cannot use marijuana even if it is part of their religion, and I sure as hell cannot use LSD even though it is the only drug that routinely gives me religious experiences. It is clearly unconstitutional, but the traitors in the Supreme Court do not care their only interest is in pleasing the Drug Conspirators.

6. Nobody really gives a fuck about drug users except other drugs users. It is actually to the advantage of non-drug users if drug users are marginalized. If a job will not hire people who fail drug tests, that means there are more jobs available for people who do not use drugs. It is always better to be an Aryan in Nazi Germany, and very few of the Aryans are going to defend the Jews.

7. Drug felons are banned from voting in much of the USA, drug legalization activists are frequently put under surveillance and arrested for drug related crimes, drug felons are prevented from obtaining state sponsored funding for colleges and are highly discriminated against in the work force and housing market which very often leads to their perpetual imprisonment and inability to influence the political system in any way.

8. Drug criminals are cheap labor. Prisons often force drug prisoners to do work for cents an hour, not to mention manual laborer jobs are some of the only ones available to many drug offenders. Not to mention the prison system makes money simply by housing drug slaves.

These are only a few of the reasons why I think we will never win the war on drugs. No matter how much money we voluntarily spend on drug education, we will never match the amount of money the federal government violently forces us to pay on drug propaganda. No matter how truthful our message is, we will always be prevented from sharing it through the school systems, we will always be prevented from sharing it through the television networks etc. No matter what the constitution or law says to our favor, the Supreme Court will always interpret it away. There is absolutely nothing in our favor and every unfair advantage is in the hands of the government and anti drug crowd. The only advantage we have is the truth, but the truth doesn't mean shit to most people and most of them are not even capable of recognizing the truth. The more I think about how unfairly fucked we are and discriminated against we are and persecuted and *enslaved* as we are the more angry I get. I wish that somebody would blow up some anti drug crusaders already, sometimes I think the only way we will stand a chance of ever being free from this slavery is if those who oppress us start to feel the pain of oppression themselves. As it stands they have absolutely nothing to lose from the war on drugs and everything to gain, they have all of the power and we have all of the weaknesses, nothing is going to change until the prohibitionists start to suffer just as much as we do. We cannot use the political system because a huge percentage of us are banned from voting, we can not teach our beliefs through the public school systems because it is illegal to, for every dollar we spend on pro drug legalization programs the federal government forces us to spend ten dollars on anti drug propaganda, the richest most powerful people in the world make much of their money and derive much of their power from drugs being illegal, the media lies to the people and the justice system has turned a blind eye to us at best and at worst they interpret our rights away. What else can we do but violently confront them or remain as slaves forever? It seems like they have left us no choice but violence.

740
Security / Re: can we trust truecypt
« on: July 24, 2013, 05:05 am »
Finding any significantly sized encrypted file isn't hard to do unless it is hidden with steganography, it looks like a big block of randomness in a sea of non-randomness.

741
Security / Re: massive fake ID sting by secret service
« on: July 24, 2013, 04:57 am »
I think we should spend the rest of this thread discussing how we can minimize the risks of using fake identification for box registration, or even if we should phase out fake ID boxes in favor of using random mailboxes on the street and intercepting incoming mail prior to a legitimate resident.

They do this already in some countries. You can buy master keys on SR. I think the mail is more tightly legally protected in the US though, which makes it harder to find master keys, but I suspect those mass produced mailboxes aren't hard to pick with a little practice.

In the US it seems that the vast majority of residential mail boxes are not locked in the first place.

742
Security / Re: can we trust truecypt
« on: July 22, 2013, 11:22 pm »
Truecrypt domain registed with a false address
Truecrypt developers identity hidden
Truecrypt developers working for free

All of these points also apply to I2P, most of them also apply to Freenet, and for the most part it all applies to Bitcoin as well. As far as I know nobody knows who actually made I2P other than some pseudonyms, Freenet it is known who made it but he works for donations, Bitcoin nobody knows who made it but a pseudonym and he works for free but probably actually made himself a lot of money in doing so. I don't know who is maintaining GPG or follow it that closely, but I imagine they are doing it entirely for free. Most of the open source security software is entirely free, hell just look at OpenSSL it is a truly massive cryptographic library that is entirely free. The point is that any one of these points isn't unique to hardly any security project that is not funded by a corporation, and in the cypherpunk scene projects falling under all three of these criteria are not really out of place at all. You have three distinct groups, the corporate people doing shit for money, the academic people doing shit for knowledge and then the cypherpunks doing shit for ideology and knowledge as well, and the cypherpunk people are generally pretty pseudonymous themselves.

Compiling Truecrypt source code increasingly difficult

No idea, I am sure because of compiler options it is a bit difficult to get source code to compile exactly to the released binaries, but the thing is if you can do it once then you can validate the source code and the binary. It isn't like they are releasing a closed source product.

Truecrypt license contains distribution restrictions

Lots of people have always bitched about Truecrypts license, I think it is fine, I am not a license zealot ready to strap a suicide vest on for GPL like some people are.

Truecrypt removed from The Amnesic Incognito Live system

Doesn't mean anything really

Truecrypt open source code has never been reviewed

This is the biggest concern of all, I certainly have not analyzed Truecrypt and I don't know if anybody else has but I imagine so considering it is open source and popular.

Censorship at Truecrypt forums

Is kind of sketchy, Truecrypt forums have a bit of a reputation for being totalitarian shit hole, definitely sketchy

Can the FBI crack Truecrypt?

Not likely at all from what I have seen

Can the NSA crack Truecrypt?

Maybe, who knows. I don't.

Conclusion about Truecrypt reliability

read the source code let me know how it looks k thnz bye

743
Sources indicate that at least, as of right now, all drugs have lost conciousness! Now they can stop terrorizing our communities 0_0 w000t war on drugs is over all of the drugs are brain dead, great job DEA, parties over, /me blows tooter and hands out party favors

MISSION ACCOMPLISHED !!!

744
Oh, have you heard the tale of the kittens from a litter?
They all played in kitten games, but their stories would differ
the first one was an acrobat, as nimble as the breeze
he danced around the way until he got stuck up a tree
the second was a fighter and demanded respect
until he died a bloody death when a dog bit his neck
the third one was a hedonist, of the gluttonous ilk
he sucked the mamas titty 'til he choked on the milk
the fourth one was an idealist, lived his life without bound,
never used the litter box, got euthenized at a pound

745
I would rather that my evidence splashed hard drive is never located than for my pristine hard drive to be located because I made myself 70 times more vulnerable to traffic analysis.

Simply visiting Silk Road is unlikely to get you raided, but CDs are a real possibility for a lot of people.

The problem is, you're too focused on threats on Tor when there are so many other things that are far more likely to get you screwed, like CDs and associates that snitch and stuff like that. It's better not to have evidence laying around.

I can totally see that perhaps I am too focused on Tor, and the scenarios you mention are in fact probably more likely concerns for the average people on this forum. I think the lesson to take from this is that everybodies security model is different, and that people should thoroughly understand what they are trying to accomplish and what they are accomplishing, which pretty much goes without saying. I personally would never feel comfortable with making myself so much more vulnerable to being deanonymized through traffic analysis, but for many people that is less of a concern than having a CD etc. I think part of the issue is that I am used to a private forum mentality, these days people being a member or visiting a site like SR is not seen as a big deal, but I learned about security when there were only private forums largely consisting of big importers and distributors, where being tied to the forum server in itself is bad fucking news. Being tied to SR server might not be as bad simply because of the fact that it is public. I suppose I should keep in mind that threat models change and that the online drug scene is pretty much in uncharted territory as far as shit like this goes, but I think others are equally suited to keep in mind that using Tails like a regular OS without using it like it is meant to be used (between different wifi access points, frequently switching access points) can be counterproductive. If people are really worried about evidence on their drives, as they should be, there is no need to compromise the anonymity of Tor to obtain this, even Ubuntu can be FDE'ed during installation, I just cannot imagine it ever being a good idea to use Tails without persistent entry guards unless it is being used in the very specific "Tails Threat Model" , then again maybe people these days are less likely to have a dedicated machine for criminal activity, back in the day on private forums we took our security very seriously but for a casual user on a forum like SR perhaps there is an acceptable compromise between utmost security and what is conveniant.

746
Security / Re: massive fake ID sting by secret service
« on: July 22, 2013, 06:56 pm »
I don't think any big importers would feel comfortable getting shit sent right to their houses. I can tell you 100% with certainty that if fake ID is what led to the down fall of enelysion, that without fake ID his down fall would of been years prior to that. It is still speculation if working with celtic is what got his box flagged in the first place, but I do know for sure that he got at least some of his fake ID's from celtic. It really leaves a sick feeling in my stomach knowing that celtic was secret service though, simply because he was one of the big fake ID vendors to do business with the drug scene. Who knows how many interceptions have been tied to that now, I can think of at least two big interceptions that could have been to boxes registered with celtic ID's.

747
I would rather that my evidence splashed hard drive is never located than for my pristine hard drive to be located because I made myself 70 times more vulnerable to traffic analysis.

748
Except the chances that the hidden service will be located are already much higher than the chances that a regular client will be located. So that leaves you with a very plausible Tor without guards scenario, where the hidden service is already monitored and the clients are going through entry guards like they are going out of style.

If they find the hidden service, you have much bigger problems to worry about, but LE isn't going to care about tracking down buyers, and vendors should already be using bridges because of the message correlation attack we've described.

Quote
Using persistent bridges is a solution though you are right. But I still think for most people tails is only hurting their anonymity, at the very least it is definitely introducing serious hazards that are not being illuminated to their userbase. I would never count on the hidden service or destination site being good in any case though, for all you know the destination is and has always been run by the feds. That leaves you to your own devices for anonymity, and having entry guards changing every day or multiple times a day brings attacks from statistically insignificant to probable. I see tails as largely being a loaded gun without the safety on, definitely the tool for the job in some places but also very dangerous in the hands of people who don't understand exactly what they are doing with it.

Yes, I agree. Entry guards and/or bridges should be made persistent. I believe they will be adding "persistence presets" in the future.

When it comes to Tor "If they find the hidden service, you have much bigger problems to worry about" means that you have much bigger problems to worry about, because tracing hidden services is trivial. Nobody should operate thinking that the anonymity of a hidden service is doing anything for them. Hidden services are meant to hide the location of a server, not to help the clients connecting to the hidden service, and attacks for tracing hidden services to guard nodes have been known for years now, making hidden services at best equal to using three different frequently changing single hop reverse proxies. Lack of ability to locate hidden services by the feds could only be deemed sheer incompetence honestly. The good news is that clients are much harder to trace. But they become much less much harder to trace when they are switching entry guards three times a day.

749
The risk is not relatively low, it is massively increased, by the time it is demonstrated in the wild it will probably be associated with people being sent to prison.

It's lower than visiting clearnet sites. Presumably the hidden service is using entry guards, so think of the connection as being backwards, where your entry nodes are the exit nodes, except you keep them for the whole session, whereas normal exit nodes rotate every ten minutes. So the chances of randomly picking bad nodes at the edges is lower. Now if the attacker lucks out as an entry point or brute forces his way to be an hsdir, then the chances are higher.

In any case, you can use persistent bridges.

Except the chances that the hidden service will be located are already much higher than the chances that a regular client will be located. So that leaves you with a very plausible Tor without guards scenario, where the hidden service is already monitored and the clients are going through entry guards like they are going out of style. Using persistent bridges is a solution though you are right. But I still think for most people tails is only hurting their anonymity, at the very least it is definitely introducing serious hazards that are not being illuminated to their userbase. I would never count on the hidden service or destination site being good in any case though, for all you know the destination is and has always been run by the feds. That leaves you to your own devices for anonymity, and having entry guards changing every day or multiple times a day brings attacks from statistically insignificant to probable. I see tails as largely being a loaded gun without the safety on, definitely the tool for the job in some places but also very dangerous in the hands of people who don't understand exactly what they are doing with it.

750
For a lot of people, it's a practical issue. The risk of getting pwned by an entry node if you are an end user only visiting hidden services (ie, most people here) is relatively low, since it's never been demonstrated in the wild. The risk of LE finding incriminating evidence on your hard drive or of Windows malware infecting your computer and stealing your logins or other sensitive data are much higher, because we've seen both happen many times. Some people can't do full disk encryption for various reasons, so Tails is a good option.

Plus, you can manually add bridges each time you boot, if you're really worried about it, and that's even better than monthly rotating entry guards.

The risk is not relatively low, it is massively increased, by the time it is demonstrated in the wild it will probably be associated with people being sent to prison.

Pages: 1 ... 48 49 [50] 51 52 ... 249