Silk Road forums

The idea is to chain tor with a proxy for two reasons:

1. (as you mentioned) to hide that I am using tor and thereby not be seen as using a blacklisted IP.

2. to also appear to be in a specific geographic region (determined by the proxy) for online gambling and other restricted activities.

I am just testing this out and if there is a better provider than vip72 that's fine. I do, however, NEED the ability to use proxies in different locations. It does not appear that these bridges give me that ability. I will look into socks escort and see what's what.

Maybe this is 'dumb' or there are free ways to do it but that is what I am after. I know that it is possible to chain socks5 with tor I have just had no luck getting it to work.

if it is a socks proxy simply go to Torrc and add

Socks5Proxy address.it.is.bound.to port-it-listens-on

I think you can replace the 5 with a 4 as well, if it is Socks4.

Fact of the matter is that even if we assume that we don't know they flag packages that are checked with Tor, if they start to do so they will likely be able to intercept a ton of drug packages. So it is best to assume that checking a package with Tor flags it, and vendors and customers alike should avoid doing so. If a customer has something being sent right to their house, the only advantage they get from not checking tracking directly is increased plausible deniability. I am not sure if that is going to save the day, but I am sure checking tracking with Tor could ruin the day. Using Tor to access third party tracking sites, and hoping they don't flag packages / pass on that you checked with Tor, is a superior option but may very well fail in itself. Using open WiFi from random locations is a superior option as well, but even this can be flagged (hmm this address has packages going to it and the person checking tracking seems to use a different IP address every time!). Obviously if you are getting things sent to a fake ID box or a place not tied to your identity, checking tracking without Tor or similar anonymity completely ruins the point of doing so. It is a complicated matter, and one that requires a great deal of attention to be paid to it, because tracking is certainly an attack vector that could lead to a large amount of interceptions if we are careless with how we utilize it. On the other hand, tracking can help us prevent being busted in the event of an interception as well (provided they still leave artifacts of interception on tracking, I know for a fact that they have in the past).

Although a very recent (about five minutes ago)  convert to the MBB philosophy, I would strongly suggest that people do not skip the vacuum sealing step. Google searching shows me that there are MBB that are vacuum seal ready as well , and I would strongly suggest this over just throwing stuff in a MBB and heat sealing it or whatever. Vacuum > no vacuum, regardless of the permeability of the bag.

In regard to the metal foil layer, which was my biggest concern, I was just informed by a very smart friend that the layer of metal on these bags is so thin that it is unlikely to trigger a metal detector.

edit: My friend also points out that the metal foil can be an advantage, as packaging in a room with an ionizer present will reduce trace elements of the drug adhering to the outside of the MBB.

it is probably safer for the customer than getting via mail anyway, as when getting via mail the customer often gives the vendor their home address and identity. In this case, they get GPS coordinates from the vendor, and can pick up the package after waiting some period of time. It is probably even safer than using a fake ID box, because the drop area will likely be well away from any cameras.

Although this is kinda off topic.. but back in college once I was at a buddies place and we were all drinking. Now his older brother (few years older then us) was a cop. A rookie/newbie cop, but he was always chill and had gone to highschool with us. So we were all getting shitfaced, and there was some blow going out discreetly. To my surprise, the friends brother (reminder: was absolutely a cop) actually took a bump infront of me. He was fucking drunk as shit and just did it. I'm not sure if it was a lapse in judgement or if he routinely partied like that, but I thought that was cool. Odd, but cool. Dunno if he stayed a cop or what.. but I had always thought that even though cops will sometimes take peoples drugs and resell to friends/family, I had never heard of a cop casually USING. Especially coke.
I always thought they get piss tested all the time and even 1 strike they're fucked.

Wow that is so cool cops are just like us and they party and take drugs too , so that makes them totally cool and we should totally forgive them and embrace them. Except your friends fuckwad brother probably has arrested hundreds of people for doing the same shit he was doing, and that is the reason why he needs to have his back throw up against a wall and filled up with fucking bullets.

if it is domestic and not bulk USPI, if it is domestic and bulk either USPI or DEA or possibly also FBI although that is less likely. if it is international, ICE, USPI or DEA and possibly FBI as well.   

It isn't a feature or a bug, it is a design choice that overlooks anonymity. So I suppose it is the lack of a feature, but not a bug.

Quote

When the Flash plugin is installed, it allows direct TCP connections back to the originating host. These connections may bypass the proxy server, leaking the real external address of the user's workstation.

The rest applies only to Java.

I think the problem is actually that Adobe Flash Player is not open source. Perhaps Gnash would be a safer option? https://en.wikipedia.org/wiki/Gnash

On Linux, you can set up user-specific rules in iptables to route all traffic through Tor, and run Firefox from the command line like this, completely avoiding the issue above:

Code: [Select]

sudo -u <username> ./start-tor-browser

The problem is exactly what you quoted, not that the plugin is not open source. Flash can be used for proxy by pass attacks. Using firewall rules and other techniques can make flash safer to use with Tor (and java as well), but with a vanilla configuration of Tor it is dangerous and can easily lead to deanonymization.