Silk Road forums

Quote from: Bordermolethesecond on June 22, 2012, 04:26 pm

Quote from: thenar5 on June 22, 2012, 06:37 am

How would they use them "for their own interests" at all?  You're making the case that you're a dealer stronger, and it isn't worth it to launch investigations in to addresses across states/countries for anything but the largest purchases so LE won't let you off easy for your attempt to snitch.

Yes because we are all in America. I forgot, how silly of me.

I didn't imply that anywhere in my post.  Where in the world is having the address of somebody far away who may have purchased drugs a useful piece of information to give the police if you are arrested?

Interpol may be interested in it

honestly they are not going to do a CD for personal use amounts of viagra, a shit load of people order it illegally online and I have never heard of anyone getting more than a love letter. The same is true for personal use amounts of xanax and other benzos as well (not the case for opiates though).

they tend to take the position that people ordering viagra online are the victims of spam pharmacies and haven't even the slightest clue that what they are doing is illegal or that what they are ordering is not officially produced viagra, and this is overwhelmingly the case.

It also seems entirely possible that the NSA would be able to find Bin Laden but not DPR.  Al Qaeda has used stenography and unencrypted media to store sensitive files among other stupidly lax security methods, whereas there is some evidence that governmental agencies don't have good TOR exploits at the moment.

Bin Laden was hiding with the assistance of a state intelligence agency in their own country

Quote from: peach on June 22, 2012, 04:16 am

Quote from: workforit69 on June 21, 2012, 07:34 pm

Quote from: sourman on June 19, 2012, 11:02 pm

^There's nothing wrong with it at all. It's just a redundant step for MOST. Connecting through a VPN/SSH tunnel first would benefit anyone who doesn't want to be flagged as a tor user. If you don't use bridges (and even then...), it is pretty easy to fingerprint you as a tor user. This can be very bad for some, like the last lulzsec guy, who was caught thanks to a tor timing correlation attack.

thanks for the info ie. vpn's. i was also under the impression that if you use a vpn and are downloading to your system it would also protect you because all of that first goes through your VPN before getting back to you. so even if they were able to see what you were dl'ing through an exit node, the destination would still be unknown.

i would also like to point out a flaw in paying for your vpn using an anonymous currency like bitcoin. i recently signed up for a VPN service that accepts btc but realized that since i am connecting to my vpn directly they can easily obtain my source IP. i even brought this up with the provider and they agreed.

This is basic.
1) You must use a VPN service where they have strong privacy ethics and reside where the laws of privacy are strong.
2) You must use hosts from countries where diplomatic relations are broken and extradition laws are incompatible with the country of your target. ie. if you are going to attack the US, use servers from venezuela, iran, china or russia.

That's why it is childish to make blanket statements. People who preach to be away from US servers are n00bs.
Security is always relative to its target. If you are going to attack targets within the US, obviously DON'T BE stupid to use proxies/vpns from the US, or from countries that have very close diplomatic relationships with the US (any country in europe)

But if you are attacking China, the safest host to jump from might from one within the US.
The paperwork itself to get the logs it would make the passive tracing a nightmare.

The key of intraceability when dealing with governmental tracking relies on exploiting the political and economical limitations, not in technical ones.
The key of intraceability when dealing with individuals (hacker teams, mafia, cartels) relies on technical limitations, not in political ones.

If you neither know what game you are playing nor you know how the game is played, you better not to play it at all.

so basically what you mean is if we want to "hide" from government the best bet is to study their political and economical limitations and use that for example for choosing the country where the VPN is established?   

People who get hung up on countries where VPNs are located and finding the VPN provider with the best policy are largely playing a game of fooling themselves. I could get some servers in FucktheUSAistnia, set up an "anonymous vpn!" and monitor all of the traffic going through them, so can the feds. VPNs are vastly over rated. Security by policy fails over and over and over only security by technical design stands up time after time after time. I prefer to host in countries like this, and sure I would get a VPN with a node in Russia over Texas, but it is silly to trust a promise or a law over a technical design or a math formula.

Quote from: vlad1m1r on April 22, 2012, 06:19 pm

For extra anonymity, I would be happy to offer 3G dongles for sale on my SR page which could be used with prepay sims bought for cash to access the net. If there is any interest for this but they would have to be shipped from Europe.

V.

How do these dongles help with anonmyity, exactly?  Are these the same thing as "air cards?"

They help anonymity about as much as using someone elses WiFi, which means not very much at all unless you only use them from random locations for short amounts of time. And much like bridges, you shouldn't use 3G dongles from vendors on SR.

Just remember that if anything ever happens to draw heat upon your PO box, and the feds decide it's actually worth the expenditure to nail the owner of said box...  they will almost CERTAINLY catch you anyway, and at a minimum, you will be guilty of mail fraud and lose all hope of being able to plausibly deny anything else.

They just don't care about people importing five grams of pure crystal LSD? Of course it is intuitive to think that if they have the address and want the person they will get them from doing manned surveillance, but in practice I have seen that this is not always how things work out for them. The tracking says something about it being intercepted or other suspicious things, everyone in the group order is raided and the people with fake ID boxes just don't go to pick up. Also there are of course other benefits, it is no longer a game of recording addresses on the outgoing mail of a single person who is under surveillance, but becomes a game of putting all of these widely distributed points under manned surveillance waiting for people to pick up packages, the difference in cost between these two sorts of operation is enormous when you consider a vendor serving a customer base of a hundred people. It is the difference between a single agency actively pursuing that vendor and dozens of agencies cooperating to actively pursue the entire network. It also has the added benefit of being able to ditch the box after the vendor you work with is busted or starts acting suspiciously, not having a history of a hundred random packages from all over coming to your home address. Not to mention you are no longer worried about being blackmailed with your address if you work with the wrong person. What if you decide to start vending later and one of the vendors you worked with turns out to be a fed, it is the difference between them knowing who you are and them knowing a box that you used once that they never bothered to put under surveillance.

I personally think that people writing off fake ID boxes have unrealistic expectations about the plausible deniability that they have, if you accept a package of drugs and open it and are raided half an hour later you are going to be charged for possession of those drugs and no story you make up about how you had no idea drugs were coming to you is going to do shit to protect you.

The thing is if they can make good money from it why the fuck would they not just do it themselves?

I don't like being brought up in this conversation because I clicked open new tab on eight or so fucked up websites on the hidden wiki. There is no data storage going on here, I wipe the discs on my computer a few times a month. What I saw was the hidden wiki for the first time, and clicked on some things. I also clicked on the dead animal fuckers site, the mercenary for hire site, and others. I admitted to the mistake, and it was disturbing to say the least, hence me being overly aggressive in stating CP offenders are fucked in the head, and those advocating CP should open a pedo site once, and see a sad-faced child with a penis coming toward him/her, with a fucked up comment section full of nasty pedophiles getting their rocks off..

Sick bastards.

Every time you open a tab with images you are storing those images in at least your computers volatile memory, most likely traces of them are left on your hard drive as well. The simple fact of the matter is that what you did is not at all different from what a very substantial number of people arrested with CP did to get busted, they saw some fucked up sounding file names on limewire downloaded a few of them out of curiosity, deleted them and then six months later were raided and forensics people recovered the deleted images. The only real difference between you and them is the fact that you used Tor so you will not be raided or have your computer analyzed. When you call for fucked up things to happen to these people, you are calling for fucked up things to happen to yourself. Why do you think it is okay for you to load pedo sites once and admit to your mistake but if someone else does it you literally want their balls? So fucking hypocritical. Opening a pedo site once on the clearnet to see a sad faced child with a penis coming toward him/her will end up with you being ass fucked by Bubba, and you seem to be very happy about this for some reason. I am left to conclude that your secret fantasy is not pedophilia but rather being raped in the ass in prison.

Further, as I already said, you can not reasonably claim that an action is bad or good based on the emotional state it creates in the person committing it. Law enforcement are allowed to browse and trade in CP to bust other people browsing and trading in CP, but I can't recall a law enforcement operation where they molested children to bust other people molesting children. The idea that someone can have an immoral or illegal emotion is fucking absurd, and I immediately write off anyone who thinks this way as being mentally defective. Solely *actions* can be immoral (ie: murder is immoral as an action, not enjoying murdering someone does not make it moral) and solely *actions* should be illegal, and morality and legality should be *universal*. It is insanity to argue that if an action should be considered illegal or not should rely on the emotional state created in the person committing the action.