Silk Road forums

Discussion => Security => Topic started by: nawlinsx on August 02, 2012, 07:36 am

Title: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: nawlinsx on August 02, 2012, 07:36 am
We've been sellers here for about a month.  Our experience with PGP in the past has been annoying, so we weren't terribly enthusiastic about using it here.  We implemented it, however, and fucked something up - then we fixed it (maybe) but two people sent us their message incorrectly.  We yanked it and we put on our user page that we would be implementing it soon...  Sometime in the last week we decided to change our user page to say that we won't be using PGP in the foreseeable future.  Since then we've received a number of messages from buyers saying "Why?" and "I never send my shipping details without PGP..."

Here's our response.  Any and all feedback/advice are welcome!

We don't use PGP for several reasons:

1.  It has proven to be a pain in the ass in the past, both with operator problems on our end and with people sending things incorrectly.

2.  The SR system and/or privnote.com seem fine for the task for us.

3.  The extra protection you think you're getting from "adversaries" because you're using PGP is illusory.  If some law enforcement agency decides to sting SR buyers, they will open a seller's account - with full PGP - and harvest victims.  Furthermore, once you successfully transmit a message to a legitimate seller using PGP, you have no idea how carefully they handle it (or not) upon receipt.  I know of one popular seller on SR who receives addresses via PGP, then emails them with the corresponding order in CLEARTEXT through GMAIL to the people he has doing his fulfillment for him at another location.

If we're missing something fundamental here, please fill us in.  We're not trying to be dicks.

We take address handling quite seriously.  We do not record the addresses anywhere.  They are retrieved from SR at the moment we are ready to print the label.  Once the label is printed, we confirm and close the label printing software without saving any data.

Why do some people not like privnote?  We think it is quite clever!

Here's an idea...

Privnote's utility could be strengthened by a simple convention between Buyers and Sellers on SR.

Buyers could split their shipping information into three separate privnote messages as follows:

1.  First Name, House #, Zip & Town
2.  Last Name, State
3.  Street Name

Example:

privnote 1:  Felipe, 2356, 92328/Death Valley
privnote 2:  Wang, California
privnote 3.  Main Street

An "adversary" would have to intercept all three messages in order to recreate the buyer's correct address.

Now - would receiving, opening and collating three privnotes be a bigger pain in the ass for us than receiving a PGP-encrypted address?

Only "The Shadow" knows.

Thoughts?
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: Raoul Duke on August 02, 2012, 08:24 am
have to agree with Guru there - you aren't going to make many sales without PGP. you will still make some from the more reckless buyers, but a lot of people, definitely people who have sway in the forums, will NOT buy from you
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: raven92 on August 02, 2012, 08:40 am
Who is sending clear text addresses across GMAIL ?  This needs to be stopped!

And what the fuck? Is typing a password in and then hitting a button really that difficult?

SR should be treated as if its run by the DEA, assume it is, do not trust SR to mix or delete any messages.
Just because bad vendors don't cleanup their addresses does not mean you need to become one, what the fuck kind of reverse logic is this?
Without the grease monkey script I posted back awhile ago PrivNote has a rather gaping hole, and even with it PGP is far more secure.
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: randomOVDB#2 on August 02, 2012, 08:48 am
Whenever a seller comes up with some poor rationalizing about why he doesn't use GPG my first thought is that they are lazy fucks.

The forums are FULL of people who help others with GPG. If complete computer newbies learned, you can too. If not, don't sell drugs.

Selling three messages to Privnote means nothing. Privnote.com still has all the messages. How do you know that they don't store them ? Or that they won't cooperate with the LE ?

Same for SR.

Read this.
http://dkn255hz262ypmii.onion/index.php?topic=24799.msg370503#msg370503


And for God's sake please stop using "we". You're not Siamese twins.
http://dkn255hz262ypmii.onion/index.php?topic=25501.msg274396
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: nawlinsx on August 02, 2012, 09:54 am
My first draft of the above included a confession that I am, indeed, lazy.  I replaced it with the confession that we fucked something up!

I am a newbie and since SR is so straightforward, I haven't felt compelled to participate in the forums beyond setting up a review thread.

Having read the responses above and followed the links provided and poked around the forums a bit this morning, it's clear that eschewing PGP is a big mistake.  I will correct it.

Thank you for setting me straight!
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: LouisCyphre on August 02, 2012, 10:17 am
We've been sellers here for about a month.  Our experience with PGP in the past has been annoying, so we weren't terribly enthusiastic about using it here.  We implemented it, however, and fucked something up - then we fixed it (maybe) but two people sent us their message incorrectly.  We yanked it and we put on our user page that we would be implementing it soon... 

A shame your initial experiences weren't good, but we can fix that.  Well, we can't chage the past, but we can help you for the future.

Sometime in the last week we decided to change our user page to say that we won't be using PGP in the foreseeable future.  Since then we've received a number of messages from buyers saying "Why?" and "I never send my shipping details without PGP..."

Good.  That means the message is spreading.

Here's our response.  Any and all feedback/advice are welcome!

We don't use PGP for several reasons:

1.  It has proven to be a pain in the ass in the past, both with operator problems on our end and with people sending things incorrectly.

That can be fixed with education.

2.  The SR system and/or privnote.com seem fine for the task for us.

Privnote is a terrible idea (just search the forum for the other Privnote threads).  Using the SR system on its own is better than using Privnote, but it is still open to compromise and OpenPGP messages will protect against this.

3.  The extra protection you think you're getting from "adversaries" because you're using PGP is illusory.  If some law enforcement agency decides to sting SR buyers, they will open a seller's account - with full PGP - and harvest victims.

As Guru said, that's always a risk.  If a vendor is law enforcement then no amount of cryptography will defend you against them harvesting your address.

Furthermore, once you successfully transmit a message to a legitimate seller using PGP, you have no idea how carefully they handle it (or not) upon receipt.

That's also a known risk.  If a vendor is unable to enact secure communications procedures, it isn't too likely that they will be able to correctly handle and destroy any data they receive.

I know of one popular seller on SR who receives addresses via PGP, then emails them with the corresponding order in CLEARTEXT through GMAIL to the people he has doing his fulfillment for him at another location.

Have you reported this to SR's staff?

If we're missing something fundamental here, please fill us in.  We're not trying to be dicks.

We take address handling quite seriously.  We do not record the addresses anywhere.  They are retrieved from SR at the moment we are ready to print the label.  Once the label is printed, we confirm and close the label printing software without saving any data.

Not bad.

Why do some people not like privnote?  We think it is quite clever!

It isn't.  Seriously, go and search the forum for previous Privnote discussion.

Now - would receiving, opening and collating three privnotes be a bigger pain in the ass for us than receiving a PGP-encrypted address?

Yes, especially with the vulnerabilities it leaves you open to.

If you're willing to learn, there are people here, who can help you get PGP or GPG running.

Which operating system are you using and which version(s) of PGP or GPG have you tried to run?  What are the problems you encountered?
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: nawlinsx on August 02, 2012, 06:48 pm
Thanks everyone for the encouragement.

I'll be back later with more complete answers to your questions.

As for the vendor I mentioned who has been forwarding orders in cleartext via GMail, I showed him this thread and he understands now why that is unacceptable.  I pointed him to some resources and offered assistance with PGP running under Windows..  It is GPG on MacOS that has ME stumped this time around...  The suite of applications it includes appears to support encrypting/decrypting of in/outbound emails...  I don't understand what to do with the messages that come through SR?  Where do I put them?

Again, thanks.
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: skills on August 02, 2012, 07:16 pm
If you don't like PGP, use GPG...

You can store your favorite (best) buyers public keys, reuse them whenever is needed, after the first 4 or 5 tries, you'll get used to it and it's lightening fast to do it...

keep your costumers safe.
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: nawlinsx on August 02, 2012, 07:43 pm
I'll reinstall the GPG bundle on my Mac sometime in the next 24 hours and attempt to articulate clearly where I hit a wall in the process.

You guys "schooled" me today with this - seriously.  I'm glad I posted.
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: LouisCyphre on August 02, 2012, 07:58 pm
Thanks everyone for the encouragement.

I'll be back later with more complete answers to your questions.

As for the vendor I mentioned who has been forwarding orders in cleartext via GMail, I showed him this thread and he understands now why that is unacceptable.  I pointed him to some resources and offered assistance with PGP running under Windows..

Excellent.

It is GPG on MacOS that has ME stumped this time around...  The suite of applications it includes appears to support encrypting/decrypting of in/outbound emails...  I don't understand what to do with the messages that come through SR?  Where do I put them?

Again, thanks.

If you're using Snow Leopard or Lion then you should have GPG Services installed with GPGTools which enables you to use GPG functions with standard Mac applications (e.g. Finder, Safari, TextEdit, etc.).  Some details are available on the GPG Services page:

https://www.gpgtools.org/gpgservices/index.html

If you are on Leopard then unfortunately you don't have this option.  If you are on Leopard then you might want to add another GUI frontend to obtain other functions.  The main list of frontends for all operating systems is here:

http://www.gnupg.org/related_software/frontends.en.html

There may be other options depending on what software you have and which version of OS X you're using.
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: Boris Badenov on August 02, 2012, 08:00 pm
nawlinsx, look into automatic encryption through an email system using nymservers. Any buyer who doesn't even use that once you serve it to him on a platter isn't worth bothering with.

BB
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: nawlinsx on August 03, 2012, 01:56 pm
I'm a lot lazier than I am dumb.   :)

I don't think my head is going to explode - from this stuff, at least!
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: pine on August 03, 2012, 05:08 pm
I'm a lot lazier than I am dumb.   :)

I don't think my head is going to explode - from this stuff, at least!

Sadly, there is no practical difference. But good news! You can join PGP Club for free! *pine gives you ticket*

Here is your ticket! It is 1 x free tutorial on how to encrypt and decrypt with PGP!

See the sig, follow Guru's instructions for Mac, or ask me for a tutorial on windows/linux.
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: NFHC on August 03, 2012, 10:21 pm
I won't be ordering from this vendor anytime soon.
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: nawlinsx on August 06, 2012, 09:26 pm
[nawlins' former public key removed]
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: raven92 on August 06, 2012, 09:57 pm
-----BEGIN PGP MESSAGE-----
Version: GnuPG v2.0.17 (MingW32)
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==
=rOpA
-----END PGP MESSAGE-----
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: pine on August 06, 2012, 10:00 pm
I'm ready to try...

Somebody please send me something here to decrypt.

Thank you.

Welcome to the PGP way, truth and the light! :)

Here is a encrypted message to you.

-----BEGIN PGP MESSAGE-----
Version: GnuPG v2.0.17 (MingW32)
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=96wV
-----END PGP MESSAGE-----

Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: 751a696c24d97009 on August 07, 2012, 12:33 am
Another one for you, just in case you want a little more practice.

-----BEGIN PGP MESSAGE-----
Version: GnuPG v2.0.17 (GNU/Linux)

hQEMA9UB7pfpqQYZAQf+PfhOEXeNAZkJue8fhMZcHfB2ZLWz74U+lLvYYXYAa1wS
8oIHnmrfgybHV7QXDE76tidG8w4eFJhCXwWbFK95iRx85KYPThByNPMNY7ea8LPb
qve3kUWTdrqPFL+jfFib4okMDgjkHBeStekUsGn5OJvj6SUyHSNZqqPX8RLKjv00
bEgAtOYXP3x24IrdWrp+zzKmjYKqXocukV8m1N5YNyglogp1XSVqjQHD2qYHsq8+
LOr8lXylFZyiDCAB3AZ6kBNK43EMmRKFQq2ROdF8IV/iDfirKFonQ7IdV7Xh0zV5
YlulJjliZdFWg2T0jSHnbhoko8FdgYLCLahX50Bz+9KwAWpwcF2MDbM/x6FnGjvQ
EJNMX0+asy3cCl5xyPb3ikuCIFOnPD7rFyUCCmMCWESWeIUVqz1+QwC7t/3xAm7O
LBx1zRXLzjfZoCcv5eD9JAUpto5jFfLyweWrbeR7rma6q9mliZICHHRSJJGvDwds
tCszMGitET2NlqnLiPntdhgk+r/99HcUmsh6Q7V6vXbo2RItGPL/qaR37aCkK4kH
eVgMp95ixcfVa8zoiwHL8ik=
=Tw20
-----END PGP MESSAGE-----
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: NFHC on August 07, 2012, 01:09 am
glad to see your changing your mind nawlins :)

good work with the PGP club pine!
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: LouisCyphre on August 08, 2012, 02:42 pm
I'm ready to try...

Somebody please send me something here to decrypt.

Thank you.

Sure.

-----BEGIN PGP MESSAGE-----
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=uWGx
-----END PGP MESSAGE-----
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: nawlinsx on August 17, 2012, 03:39 am
Thanks, everyone - especially Guru.

The Hushmail address is indeed fake and no, I am not a hushmail user.  (I am aware of them being compelled to respond to subpoenas at some point in the past two years or so).

I had everything working and then arrogantly moved some things around and of course set something off course - the decrypting is no longer working.

I will regroup and keep my act together before I ask for any resends.  (I will also create a new public key with a more diabolical fake email address).

Thanks again.
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: nawlinsx on September 26, 2012, 05:45 pm
Hello Again:

Thanks again, everyone - especially Guru.

Here's my new Public Key:

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=nugH
-----END PGP PUBLIC KEY BLOCK-----

Would anyone care to post something for me to decrypt?

Thank you very much.
Title: Re: Why we don't use PGP. Are we missing something? Privnote tweak?
Post by: pine on September 26, 2012, 07:40 pm
Hello Again

Would anyone care to post something for me to decrypt?

Thank you very much.

-----BEGIN PGP MESSAGE-----
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=PrO+
-----END PGP MESSAGE-----