Silk Road forums
Support => Technical support => Topic started by: abbaselakbari on September 26, 2012, 01:05 am
-
hi guys,
so basically i wanted to get some coke off delta11 and i just saw he requires everybody to encrypt their shipping info ...
ive tried to figure it out for a whole afternoon, and the coke was gone :-[
so i was hoping someone could point me to a tutorial for mac (ive tried those for pc but the interfaces are not the same at all)
or suggest an easy to use graphic user interface so that i can get my hands on some fine drugz
basically i downloaded gpg tools and installed it just like in the tutorial, however, the thing in system preferences does not install itself (and you are supposed to check some little box(yeah, im that tech savy ...)), and i dont understand what im supposed to do next since it doesn't work out fine like in the tutorial
i also dont understand how the thing ultimately works in regards to silk road. Is the public pgp key like the encrypted email ? and if so, do you just send it through a regular email account ?
any input would be greatly appreciated
-
Someone on here wrote this tutorial that I saved. I forgot who wrote it (sorry Mr. Author!).
Next, create a key for Silk Road and/or Silk Road Forums:
- open GPG Keychain Access from your Applications directory
- click New
- in Full name, enter your Silk Road username and your Forum username so people can find you in their key list. if they are different names and you don't mind people associating your two accounts, put both separated by a space (or for advanced users who have two different names, make two keys, one for each)
- in E-mail address, enter a fake email (or a secure email like your tormail or countermail address if you'd like)
- you can leave everything else as-is
- click Generate key
- in the passphrase prompt, enter something that would be very, very hard to guess. adding numbers, capitol letters, punctuation, and using many characters helps. the program warns you if it thinks your passphrase is too weak. you hopefully know the passphrase drill by now. when it tells you to, move your mouse cursor around to help the computer make the keys more random (as you, a human being, are far more random than a CPU chip )
Now, lets enable OS X-wide access to some of GPGTools' features from within other applications to make it easier to do common GPGTools tasks, such as importing others' public keys and encrypting messages right from within your browser:
- open OS X's System Preferences (from the Apple menu or the Dock, for example)
- open Keyboard preferences
- click the Keyboard Shortcuts tab
- in the left column, click Services
- in the right column, scroll down to Text
- in the Text section (these are the indented entries beneath the line that says "Text") check the boxes next to OpenPGP: Decrypt, OpenPGP: Encrypt, OpenPGP: Import key, and OpenPGP: Insert my key
NOTE: For the below tips, "application menu" refers to the menu for the current program you are using such as "Aurora" or "Firefox" or "TextEdit". It is in the top menu bar next to the Apple menu and is bold. (Extra credit: For Apple applications such as TextEdit, you can also get to some of the same "OpenPGP: <command name>" commands by right-clicking on selected text, but not in Aurora or Firefox, unfortunately... not sure why.)
When you find somebody's public key you'd like to import (such as on a Silk Road seller's profile page):
- select the key text (from the first --- through all the lines of gobbledegook to the last ---)
- in the application menu, in the Services sub-menu, select OpenPGP: Import key
and viola! you have their public key
The other options work similarly, but only in editable text areas where you can type, such as when you are writing a forum post, personal message, or entering your address for an order. This is because these commands are altering the text in-place.
For example, to encrypt your address for an order (after you have the sellers public key imported as per the above instructions):
- in the text area for your address (where it says "Please enter your name and address as it would be written on a letter") type your address (then double-check your address, then triple check)
- select your address
- in the application menu, in the Services sub-menu, select OpenPGP: Encrypt
- in the dialog that pops up you will see a list of keys you've imported - check the box for the seller's key
- uncheck the box near the bottom that says "Add to Recipients" (this refers to yourself, so you are saying to only encrypt it for the above-checked recipient and not also for yourself) (this step is optional, but why not do it and save your computer the extra effort )
- click OK
viola! your address is PGP encrypted and only the seller can decrypt it!
To encrypt a personal message to another user or seller (after you have imported their public key as per the above instructions):
- in the text area for your message, type your message
- if this is your first message to this user and you want to give them your public key so they can send you an encrypted reply:
+ at the end of your message, type something like "Here is my key:" and then enter to the beginning of a new line
+ in the application menu, in the Services sub-menu, select OpenPGP: Insert my key
+ if you have multiple, select the appropriate key for the site you are on (e.g. your SR name if you are writing an SR message) (i would advise against using a key with your real name/email)
+ click "Choose Private-Key" (don't worry, it inserts the associated public key)
- select your entire message (including your own key if you included it)
- in the application menu, in the Services sub-menu, select OpenPGP: Encrypt
- in the dialog that pops up you will see a list of keys you've previously imported - check the box for the intended recipient's key
- underneath where it says "Secret Key", make sure the key (*your* key) you want to use for SR (or forum) communication is selected, and make sure the box next to "Add to Recipients" (which might be better titled "Add myself as a recipient") is checked (this is so that you can decrypt your own message later if you wish)
- click OK
viola! your message is PGP encrypted and only you and your intended recipient can decrypt it!
To decrypt a message someone sent to you which was encrypted using your public key:
- select the encrypted message text (from the first --- through all the lines of gobbledegook to the last ---)
- right-click and copy the text
- open TextEdit from your Applications directory
- paste the text
- re-select the same exact text
- in the application menu, in the Services sub-menu, select OpenPGP: Decrypt (OR right-click the selected text and click OpenPGP: Decrypt, since we are in an Apple program)
- in the prompt, enter your password and press enter (I would advise *against* checking the box to store the passphrase in your keychain - otherwise anyone can decrypt your messages if they gain access to your computer and are logged in)
and viola! you have an unencrypted message.
-
^ that. also, i think it might've been written up by Guru, IIRC. :)
-
Thanks !!!
this is great, ill give it a try right now and let you know
you, dear sir the absurd, are awesome, and props to treeline for the references,
we be all like scholars up in here !
-
thanks guru !
i have reinstalled gpg tools,
when i go into system preferences --> keyboard and mouse --> services, everything is grayed out, and i cant find the keyboard shortcuts you are talking about, the only shortcuts are for real basic things (zooming in and out, brightness, etc),theres a section at the bottom that says keyboard shortcut for aplications --> all aplications but there is nothing below that.
what am i doing wrong ?
and thanks for the help everybody !
-
screenshots of what im talking about
http://www.freeimagehosting.net/fy6uu
http://www.freeimagehosting.net/ap5lm
-
im running 10.5.8
in my system preferences, i have an icon called GnuPG, i installed it after gpg tools, im pretty sure it can contribute somehow
http://www.freeimagehosting.net/wpkz4
http://www.freeimagehosting.net/nau2x
so basically if i understand the whole pgp thing on silkroad correctly, i write whatevr i want to encrypt in a text file, i select all, right click, encrypt with the key of the person that i want to send it to, my message is encrypted, i copy the encrypted message as i would a regular message ?
-
Mac has been so buggy with GPG, but I think I have it working. I do have one question. When I encrypt a message with the recipient's key (a vendor's key in this case) is requires me to select my secret key to finish the encryption. Is that normal?
Also, should I include my key in every message? Guess that's two quick questions.
-
Mac has been so buggy with GPG, but I think I have it working. I do have one question. When I encrypt a message with the recipient's key (a vendor's key in this case) is requires me to select my secret key to finish the encryption. Is that normal?
Also, should I include my key in every message? Guess that's two quick questions.
Yes it's normal, no don't include it in every message.
Now can someone help me make a USB bootable drive with Tails for my mac? I have done everything and stil it no go.
Modzi
-
I'll dig up the instructions and list them in another post.
Guru
Guru, can you help me with my Tails Installation to USB drive?
Thanks
Modzi
-
Unfortunately, not. No machine I have here will boot from USB, so I can't test anything out.
Guru
Thanks anyway!
Modzi
-
I can encrypt messages by importing the keys in my browser but my personal key that I made does not show up when I use insert my key its as if i never created the key and only shows up in GPG keychain access very confused
-
I can encrypt messages by importing the keys in my browser but my personal key that I made does not show up when I use insert my key its as if i never created the key and only shows up in GPG keychain access very confused
Have you read the rest of the thread at all? Have you read _any_ of the other Mac GPG threads on here?
No one can provide you with any help unless you are more specific, and provide us with some more details, like your OS X version, for starters.
When you say you can encrypt messages by importing the keys into your browser, it sounds like you're attempting to use one of those piece of shit web-based services that will PGP encrypt messages for you, like iGolder. NO ONE who knows anything about security will touch those services with a barge pole.