Silk Road forums

Discussion => Security => Topic started by: jerseycow on December 19, 2012, 11:09 am

Title: Privnote - cert expired
Post by: jerseycow on December 19, 2012, 11:09 am
Just to note, privnote is giving an SSL error the last couple of days

I would steer clear if anyone uses this for sensitive information
Title: Re: Privnote - cert expired
Post by: Wadozo on December 19, 2012, 11:54 am
Anyone using Privnote to send sensitive info is crazy! Avoid it like the plague and learn to use PGP  :)
Title: Re: Privnote - cert expired
Post by: eetandern on December 19, 2012, 02:26 pm
I agree with you, Wadozo.  If I was a vendor, I would refuse to click every single privnote link I was presented with and give whoever sent it a talking to. I've even had to specifically request that vendors refrain from sending me info through privnote, vendors with 100% ratings - wtf privnote isn't that much easier than gpg is it?

I think someone should start a inquisition to fight against the heretics of gpg - we'll see how popular privnote is when using it will get you burned at the stake! (which it almost could in a worst-case-senerio already)
Title: Re: Privnote - cert expired
Post by: Krime Pays on December 19, 2012, 02:46 pm
Anyone using Privnote to send sensitive info is crazy! Avoid it like the plague and learn to use PGP  :)

I have PGP and I know how to use it well. BUT I have had more than 1 vendor that wanted to use privnote since they didnt have PGP. Things worked out fine and I got my orders. I didnt realize there was any big deal using PrivNot. Is it not secure? What are the risks associated with sending information using PrivNot
Title: Re: Privnote - cert expired
Post by: Wadozo on December 19, 2012, 04:36 pm
Anyone using Privnote to send sensitive info is crazy! Avoid it like the plague and learn to use PGP  :)

I have PGP and I know how to use it well. BUT I have had more than 1 vendor that wanted to use privnote since they didnt have PGP. Things worked out fine and I got my orders. I didnt realize there was any big deal using PrivNot. Is it not secure? What are the risks associated with sending information using PrivNot

To use Privnote, one must enable Javascript. Javascript can be easily exploited . By using Privnote, the information you send is stored on a 3rd party server, opening up possible scenarios involving your sensitive info falling into the wrong hands, which could all be avoided by using PGP.
Title: Re: Privnote - cert expired
Post by: Tessellated on December 19, 2012, 05:31 pm
Using privnote for drug deals is nuts. Come on people PGP is not that hard, why on Earth would you let a third party into your transaction?

You do realize the Farmer's Market was shut down primarily due to a similar service saving messages and giving them up to the cops right?

We have the best encryption in history avialable to us, USE IT!

I have PGP and I know how to use it well. BUT I have had more than 1 vendor that wanted to use privnote since they didnt have PGP. Things worked out fine and I got my orders. I didnt realize there was any big deal using PrivNot. Is it not secure? What are the risks associated with sending information using PrivNot

Vendors that do not use PGP should be blacklisted. Do not do business with any vendor who does not use PGP.

If they don't give a shit about how secure your home address is do you really think they will put effort into stealth packaging? You will get a love letter or a controlled delivery instead of your package.
Title: Re: Privnote - cert expired
Post by: jerseycow on December 19, 2012, 05:42 pm
Relax guys im not using privnote for SR and I don't know anyone that is, I was actually just bringing up the error to see if anyone here had any further knowledge or even theory on it, because it wasn't there a week ago

Title: Re: Privnote - cert expired
Post by: Wadozo on December 19, 2012, 05:52 pm
Using privnote for drug deals is nuts. Come on people PGP is not that hard, why on Earth would you let a third party into your transaction?

You do realize the Farmer's Market was shut down primarily due to a similar service saving messages and giving them up to the cops right?

We have the best encryption in history avialable to us, USE IT!

I have PGP and I know how to use it well. BUT I have had more than 1 vendor that wanted to use privnote since they didnt have PGP. Things worked out fine and I got my orders. I didnt realize there was any big deal using PrivNot. Is it not secure? What are the risks associated with sending information using PrivNot

Vendors that do not use PGP should be blacklisted. Do not do business with any vendor who does not use PGP.

If they don't give a shit about how secure your home address is do you really think they will put effort into stealth packaging? You will get a love letter or a controlled delivery instead of your package.

Nice post Tessellated. +1 to you. I couldn't agree more with everything you've written. :)
Title: Re: Privnote - cert expired
Post by: Nightcrawler on December 19, 2012, 08:23 pm
Anyone using Privnote to send sensitive info is crazy! Avoid it like the plague and learn to use PGP  :)

I have PGP and I know how to use it well. BUT I have had more than 1 vendor that wanted to use privnote since they didnt have PGP. Things worked out fine and I got my orders. I didnt realize there was any big deal using PrivNot. Is it not secure? What are the risks associated with sending information using PrivNot

A vendor who doesn't have PGP should be taken to the  woodshed, beaten, then shot and pissed on. There is absolutely NO excuse for not using PGP. Any vendor who doesn't use it doesn't give a shit about his customers, and is a lazy sob to boot.

The dangers of using Privnote have been discussed elsewhere here on the Forum, ad-nauseam. Furthermore, if the Privnote admin can't be bothered to renew his SSL certificate, which he could do with a phone call, then what does that say about his attention to detail and/or security practices?

NC


Title: Re: Privnote - cert expired
Post by: Wadozo on December 19, 2012, 08:33 pm
Anyone using Privnote to send sensitive info is crazy! Avoid it like the plague and learn to use PGP  :)

I have PGP and I know how to use it well. BUT I have had more than 1 vendor that wanted to use privnote since they didnt have PGP. Things worked out fine and I got my orders. I didnt realize there was any big deal using PrivNot. Is it not secure? What are the risks associated with sending information using PrivNot

A vendor who doesn't have PGP should be taken to the  woodshed, beaten, then shot and pissed on. There is absolutely NO excuse for not using PGP. Any vendor who doesn't use it doesn't give a shit about his customers, and is a lazy sob to boot.

The dangers of using Privnote have been discussed elsewhere here on the Forum, ad-nauseam. Furthermore, if the Privnote admin can't be bothered to renew his SSL certificate, which he could do with a phone call, then what does that say about his attention to detail and/or security practices?

NC

Exactly NC. +1.  :)