Silk Road forums

Discussion => Security => Topic started by: PerPETualMOtion on May 04, 2013, 07:55 pm

Title: SR Vendor(s) with onion.to links on their SR Vendor Site
Post by: PerPETualMOtion on May 04, 2013, 07:55 pm
I noticed this the other day. Sorry, I didn't save the link. I saw it, clicked it. Realized wtf I just did, and turned off my PC and wiped every drive in the house. Reformatted; reloaded OS; reformatted; Trucrypt (7 pass); reformatted; reloaded OS.

WTF....

WHY IS THERE AN ONION.TO LINK ON VENDOR PAGES?

It was a coke vendor... This isn't to "out" the vendor (can't remember who), but to warn SR Users.
Title: Re: SR Vendor(s) with onion.to links on their SR Vendor Site
Post by: CityLights on May 04, 2013, 08:07 pm
The .to extension means that a proxy was used to allow regular browsers to see the onion site's content, but if you followed the link with your tor browser, your connection was still routed through tor before it went through the .to proxy. I wouldn't worry about it if I were you, to the best of my knowledge, you're safe.
Title: Re: SR Vendor(s) with onion.to links on their SR Vendor Site
Post by: Naloxone on May 04, 2013, 08:39 pm
Not a huge problem like it said above but you should probably change your passwords incase onion.to saved them. You could maybe get a new bitcoin address associated with your account too.

If you didn't actually login you don't need to do any of that.
Title: Re: SR Vendor(s) with onion.to links on their SR Vendor Site
Post by: PerPETualMOtion on May 06, 2013, 04:58 am
Not a huge problem like it said above but you should probably change your passwords incase onion.to saved them. You could maybe get a new bitcoin address associated with your account too.

If you didn't actually login you don't need to do any of that.

Thanks for the info. Will smoke a blunt and chill.
Title: Re: SR Vendor(s) with onion.to links on their SR Vendor Site
Post by: Naloxone on May 07, 2013, 06:26 am
Not a huge problem like it said above but you should probably change your passwords incase onion.to saved them. You could maybe get a new bitcoin address associated with your account too.

If you didn't actually login you don't need to do any of that.

Thanks for the info. Will smoke a blunt and chill.
No problem. It's always best to be a bit paranoid with this site and your login and private information.

Enjoy!
Title: Re: SR Vendor(s) with onion.to links on their SR Vendor Site
Post by: thisworld on May 07, 2013, 06:26 pm
Question,why would it be ok to access the SR marketplace through a private proxy?  I know you CAN, but then doesn't your unencrypted info get sent through someone else's server?  Especially if they're putting that link on the forum where most(hopefully all) won't simply be viewing the page through a normal browser anyways?

I'd change my password.
Title: Re: SR Vendor(s) with onion.to links on their SR Vendor Site
Post by: Libertas on May 07, 2013, 08:05 pm
I would avoid any vendor with onion.to links on their page like the plague! I mean if they can't take THE most basic security precaution of actually using the Tor Browser Bundle, imagine how insecure your personal information would be!?

I have visions of vendors like that writing down the address on a scrap of paper to transfer onto a post-it that they use as a shipping label. With "DRUGS INSIDE - PLEASE DON'T OPEN" scrawled on the outside in crayon. Definitely not good.  :-\

Libertas