Silk Road forums
Discussion => Security => Topic started by: GlassHouse on December 22, 2012, 02:32 am
-
When a vendor deletes a message, does it delete the message on the Buyer's end as well?
Doubting that this is reality, but would like to encourage people to delete messages often. We have a lot of Buyers who don't use PGP and want updates. Happy to oblige, but just wonder how we can get the information deleted after that. Are we completely reliant upon the Buyer to delete their messages.
-
Would be nice if all messages between 2 users were automatically deleted 14 (or 30 or whatever) days after the last message between them, on the assumption that the conversation is over. That used to happen with the account transaction history after (I've read) 20 days, but it doesn't appear to be the case anymore, which is strange. I have items in my account history going back almost 2 months. I suppose I could push them off the end of the list by doing a bunch of deposits and withdrawals, but there's no guarantee they are actually deleted.
-
It would be nice. Maybe a feature could be added where transaction history and messages are deleted after 5 days of being read, unless they are flagged to save. Do you think it is possible for SR to do?
-
why would u ever care? if someone gets into ur SR account ur clearly buying drugs..
wtf difference does it make that they now can see what u and the drug dealer talked about?
if LE gets into ur SR account then they either got u to tell on urself and said u got drugs off SR then gave them ur account info
or ur mom or dad got on and saw it was popped up.. either way ur a jackass and u should GTFO of SR..
i would personally be pissed if they deleted my messages without telling me if i want to save a special conversation due to maybe some terms or something that a vender agreed to
or maybe because it had a helpful hint or perhaps special info of any kind and it was deleted i would be outraged..
therefor YOUR ARGUMENT IS INVALID!!
-
I'm a vendor, so I care, because sometimes people ask for shipping udpates and info and I don't want that shit linked back to my vendor account directly if possible.
-
Also note that the suggestion said that you could flag message you wanted saved.
So, in all reality, your argument is invalid.
Happy Holidays :)
-
What the fuck did you just fucking say about me, you little bitch? I'll have you know I graduated top of my class in the Navy Seals, and I've been involved in numerous secret raids on Al-Quaeda, and I have over 300 confirmed kills. I am trained in gorilla warfare and I'm the top sniper in the entire US armed forces. You are nothing to me but just another target. I will wipe you the fuck out with precision the likes of which has never been seen before on this Earth, mark my fucking words. You think you can get away with saying that shit to me over the Internet? Think again, fucker. As we speak I am contacting my secret network of spies across the USA and your IP is being traced right now so you better prepare for the storm, maggot. The storm that wipes out the pathetic little thing you call your life. You're fucking dead, kid. I can be anywhere, anytime, and I can kill you in over seven hundred ways, and that's just with my bare hands. Not only am I extensively trained in unarmed combat, but I have access to the entire arsenal of the United States Marine Corps and I will use it to its full extent to wipe your miserable ass off the face of the continent, you little shit. If only you could have known what unholy retribution your little "clever" comment was about to bring down upon you, maybe you would have held your fucking tongue. But you couldn't, you didn't, and now you're paying the price, you goddamn idiot. I will shit fury all over you and you will drown in it. You're fucking dead, kiddo.
-
What the fuck did you just fucking say about me, you little bitch? I'll have you know I graduated top of my class in the Navy Seals, and I've been involved in numerous secret raids on Al-Quaeda, and I have over 300 confirmed kills. I am trained in gorilla warfare and I'm the top sniper in the entire US armed forces. You are nothing to me but just another target. I will wipe you the fuck out with precision the likes of which has never been seen before on this Earth, mark my fucking words. You think you can get away with saying that shit to me over the Internet? Think again, fucker. As we speak I am contacting my secret network of spies across the USA and your IP is being traced right now so you better prepare for the storm, maggot. The storm that wipes out the pathetic little thing you call your life. You're fucking dead, kid. I can be anywhere, anytime, and I can kill you in over seven hundred ways, and that's just with my bare hands. Not only am I extensively trained in unarmed combat, but I have access to the entire arsenal of the United States Marine Corps and I will use it to its full extent to wipe your miserable ass off the face of the continent, you little shit. If only you could have known what unholy retribution your little "clever" comment was about to bring down upon you, maybe you would have held your fucking tongue. But you couldn't, you didn't, and now you're paying the price, you goddamn idiot. I will shit fury all over you and you will drown in it. You're fucking dead, kiddo.
I've either read this somewhere before or wow dude, drugs.
-
What the fuck did you just fucking say about me, you little bitch? I'll have you know I graduated top of my class in the Navy Seals, and I've been involved in numerous secret raids on Al-Quaeda, and I have over 300 confirmed kills. I am trained in gorilla warfare and I'm the top sniper in the entire US armed forces. You are nothing to me but just another target. I will wipe you the fuck out with precision the likes of which has never been seen before on this Earth, mark my fucking words. You think you can get away with saying that shit to me over the Internet? Think again, fucker. As we speak I am contacting my secret network of spies across the USA and your IP is being traced right now so you better prepare for the storm, maggot. The storm that wipes out the pathetic little thing you call your life. You're fucking dead, kid. I can be anywhere, anytime, and I can kill you in over seven hundred ways, and that's just with my bare hands. Not only am I extensively trained in unarmed combat, but I have access to the entire arsenal of the United States Marine Corps and I will use it to its full extent to wipe your miserable ass off the face of the continent, you little shit. If only you could have known what unholy retribution your little "clever" comment was about to bring down upon you, maybe you would have held your fucking tongue. But you couldn't, you didn't, and now you're paying the price, you goddamn idiot. I will shit fury all over you and you will drown in it. You're fucking dead, kiddo.
Just a bit overkill.
-
Yeah it's classic 4chan copypasta. 0/10
-
Yeah it's classic 4chan copypasta. 0/10
What the fuck did you just fucking say about me, you little bitch? I'll have you know I graduated top of my class in the Navy Seals, and I've been involved in numerous secret raids on Al-Quaeda, and I have over 300 confirmed kills. I am trained in gorilla warfare and I'm the top sniper in the entire US armed forces. You are nothing to me but just another target. I will wipe you the fuck out with precision the likes of which has never been seen before on this Earth, mark my fucking words. You think you can get away with saying that shit to me over the Internet? Think again, fucker. As we speak I am contacting my secret network of spies across the USA and your IP is being traced right now so you better prepare for the storm, maggot. The storm that wipes out the pathetic little thing you call your life. You're fucking dead, kid. I can be anywhere, anytime, and I can kill you in over seven hundred ways, and that's just with my bare hands. Not only am I extensively trained in unarmed combat, but I have access to the entire arsenal of the United States Marine Corps and I will use it to its full extent to wipe your miserable ass off the face of the continent, you little shit. If only you could have known what unholy retribution your little "clever" comment was about to bring down upon you, maybe you would have held your fucking tongue. But you couldn't, you didn't, and now you're paying the price, you goddamn idiot. I will shit fury all over you and you will drown in it. You're fucking dead, kiddo.
What the fuck did you just fucking say about me, you little bitch? I'll have you know I graduated top of my class in the Navy Seals, and I've been involved in numerous secret raids on Al-Quaeda, and I have over 300 confirmed kills. I am trained in gorilla warfare and I'm the top sniper in the entire US armed forces. You are nothing to me but just another target. I will wipe you the fuck out with precision the likes of which has never been seen before on this Earth, mark my fucking words. You think you can get away with saying that shit to me over the Internet? Think again, fucker. As we speak I am contacting my secret network of spies across the USA and your IP is being traced right now so you better prepare for the storm, maggot. The storm that wipes out the pathetic little thing you call your life. You're fucking dead, kid. I can be anywhere, anytime, and I can kill you in over seven hundred ways, and that's just with my bare hands. Not only am I extensively trained in unarmed combat, but I have access to the entire arsenal of the United States Marine Corps and I will use it to its full extent to wipe your miserable ass off the face of the continent, you little shit. If only you could have known what unholy retribution your little "clever" comment was about to bring down upon you, maybe you would have held your fucking tongue. But you couldn't, you didn't, and now you're paying the price, you goddamn idiot. I will shit fury all over you and you will drown in it. You're fucking dead, kiddo.
What the fuck did you just fucking say about me, you little bitch? I'll have you know I graduated top of my class in the Navy Seals, and I've been involved in numerous secret raids on Al-Quaeda, and I have over 300 confirmed kills. I am trained in gorilla warfare and I'm the top sniper in the entire US armed forces. You are nothing to me but just another target. I will wipe you the fuck out with precision the likes of which has never been seen before on this Earth, mark my fucking words. You think you can get away with saying that shit to me over the Internet? Think again, fucker. As we speak I am contacting my secret network of spies across the USA and your IP is being traced right now so you better prepare for the storm, maggot. The storm that wipes out the pathetic little thing you call your life. You're fucking dead, kid. I can be anywhere, anytime, and I can kill you in over seven hundred ways, and that's just with my bare hands. Not only am I extensively trained in unarmed combat, but I have access to the entire arsenal of the United States Marine Corps and I will use it to its full extent to wipe your miserable ass off the face of the continent, you little shit. If only you could have known what unholy retribution your little "clever" comment was about to bring down upon you, maybe you would have held your fucking tongue. But you couldn't, you didn't, and now you're paying the price, you goddamn idiot. I will shit fury all over you and you will drown in it. You're fucking dead, kiddo.
What the fuck did you just fucking say about me, you little bitch? I'll have you know I graduated top of my class in the Navy Seals, and I've been involved in numerous secret raids on Al-Quaeda, and I have over 300 confirmed kills. I am trained in gorilla warfare and I'm the top sniper in the entire US armed forces. You are nothing to me but just another target. I will wipe you the fuck out with precision the likes of which has never been seen before on this Earth, mark my fucking words. You think you can get away with saying that shit to me over the Internet? Think again, fucker. As we speak I am contacting my secret network of spies across the USA and your IP is being traced right now so you better prepare for the storm, maggot. The storm that wipes out the pathetic little thing you call your life. You're fucking dead, kid. I can be anywhere, anytime, and I can kill you in over seven hundred ways, and that's just with my bare hands. Not only am I extensively trained in unarmed combat, but I have access to the entire arsenal of the United States Marine Corps and I will use it to its full extent to wipe your miserable ass off the face of the continent, you little shit. If only you could have known what unholy retribution your little "clever" comment was about to bring down upon you, maybe you would have held your fucking tongue. But you couldn't, you didn't, and now you're paying the price, you goddamn idiot. I will shit fury all over you and you will drown in it. You're fucking dead, kiddo.
What the fuck did you just fucking say about me, you little bitch? I'll have you know I graduated top of my class in the Navy Seals, and I've been involved in numerous secret raids on Al-Quaeda, and I have over 300 confirmed kills. I am trained in gorilla warfare and I'm the top sniper in the entire US armed forces. You are nothing to me but just another target. I will wipe you the fuck out with precision the likes of which has never been seen before on this Earth, mark my fucking words. You think you can get away with saying that shit to me over the Internet? Think again, fucker. As we speak I am contacting my secret network of spies across the USA and your IP is being traced right now so you better prepare for the storm, maggot. The storm that wipes out the pathetic little thing you call your life. You're fucking dead, kid. I can be anywhere, anytime, and I can kill you in over seven hundred ways, and that's just with my bare hands. Not only am I extensively trained in unarmed combat, but I have access to the entire arsenal of the United States Marine Corps and I will use it to its full extent to wipe your miserable ass off the face of the continent, you little shit. If only you could have known what unholy retribution your little "clever" comment was about to bring down upon you, maybe you would have held your fucking tongue. But you couldn't, you didn't, and now you're paying the price, you goddamn idiot. I will shit fury all over you and you will drown in it. You're fucking dead, kiddo.
-
I'm a vendor, so I care, because sometimes people ask for shipping udpates and info and I don't want that shit linked back to my vendor account directly if possible.
Then insist that your customers use PGP, if they want to do business with you. No PGP, no sale.
You may take a financial hit for doing this, but how much is your security and peace of mind worth?
NC
-
I'm a vendor, so I care, because sometimes people ask for shipping udpates and info and I don't want that shit linked back to my vendor account directly if possible.
Then insist that your customers use PGP, if they want to do business with you. No PGP, no sale.
You may take a financial hit for doing this, but how much is your security and peace of mind worth?
NC
Good point, shall ponder...
-
What the fuck did you just fucking say about me, you little bitch? I'll have you know I graduated top of my class in the Navy Seals, and I've been involved in numerous secret raids on Al-Quaeda, and I have over 300 confirmed kills. I am trained in gorilla warfare and I'm the top sniper in the entire US armed forces. You are nothing to me but just another target. I will wipe you the fuck out with precision the likes of which has never been seen before on this Earth, mark my fucking words. You think you can get away with saying that shit to me over the Internet? Think again, fucker. As we speak I am contacting my secret network of spies across the USA and your IP is being traced right now so you better prepare for the storm, maggot. The storm that wipes out the pathetic little thing you call your life. You're fucking dead, kid. I can be anywhere, anytime, and I can kill you in over seven hundred ways, and that's just with my bare hands. Not only am I extensively trained in unarmed combat, but I have access to the entire arsenal of the United States Marine Corps and I will use it to its full extent to wipe your miserable ass off the face of the continent, you little shit. If only you could have known what unholy retribution your little "clever" comment was about to bring down upon you, maybe you would have held your fucking tongue. But you couldn't, you didn't, and now you're paying the price, you goddamn idiot. I will shit fury all over you and you will drown in it. You're fucking dead, kiddo.
I've either read this somewhere before or wow dude, drugs.
Think it is from a movie, but I'll take the drugs!
-
When a vendor deletes a message, does it delete the message on the Buyer's end as well?
Doubting that this is reality, but would like to encourage people to delete messages often. We have a lot of Buyers who don't use PGP and want updates. Happy to oblige, but just wonder how we can get the information deleted after that. Are we completely reliant upon the Buyer to delete their messages.
To get back to the OP, my understanding (based on a previous post by DPR) is that when a PM is deleted on the road, it stays on the server for four months, you just don't see it in the list. This is for technical reasons. This is why you must insist your buyers use pgp. If the servers should ever be compromised, all of those clear text messages will be exposed to the intruder.
I will not answer any questions that involve price, shipping info, shipping times or methods, basically anything that is even remotely sensitive, without encryption. There was a thread going here a few months ago from a fellow who had attended (or knew someone who had attended...? not sure) an LE conference. One of the topics that came up was the fact that LE is fucked by encryption. They can't crack it. Even if you email host/ISP/whoever hands over data, if it is encrypted it is useless to LE. You can absolutely put your money on the idea that if LE ever gets their hands on these servers, the only people who are going to be popped are the ones who don't use encryption. I can't believe how many people have sent me names/addresses/etc unencrypted.
To be clear, the shipping info in an order is deleted right away. However, if the servers are compromised, all of those unfilled orders with clear text addresses are going right into LE files. Those are the people who will be raided.
I value my freedom. Every time I am tempted to take any kind of shortcut in this business, I stop and ask myself, "If I go to prison, will I kick myself for not doing xxx?" The answer is usually YES.
I absolutely insist on pgp. I suggest all vendors do the same, it isn't hard to use and creates a phenomenal layer of security and frustration between you and LE. If a customer doesn't want to take the time to learn how to use pgp, I don't mind passing on their business.
-
When a vendor deletes a message, does it delete the message on the Buyer's end as well?
Doubting that this is reality, but would like to encourage people to delete messages often. We have a lot of Buyers who don't use PGP and want updates. Happy to oblige, but just wonder how we can get the information deleted after that. Are we completely reliant upon the Buyer to delete their messages.
To get back to the OP, my understanding (based on a previous post by DPR) is that when a PM is deleted on the road, it stays on the server for four months, you just don't see it in the list. This is for technical reasons. This is why you must insist your buyers use pgp. If the servers should ever be compromised, all of those clear text messages will be exposed to the intruder.
I will not answer any questions that involve price, shipping info, shipping times or methods, basically anything that is even remotely sensitive, without encryption. There was a thread going here a few months ago from a fellow who had attended (or knew someone who had attended...? not sure) an LE conference. One of the topics that came up was the fact that LE is fucked by encryption. They can't crack it. Even if you email host/ISP/whoever hands over data, if it is encrypted it is useless to LE. You can absolutely put your money on the idea that if LE ever gets their hands on these servers, the only people who are going to be popped are the ones who don't use encryption. I can't believe how many people have sent me names/addresses/etc unencrypted.
To be clear, the shipping info in an order is deleted right away. However, if the servers are compromised, all of those unfilled orders with clear text addresses are going right into LE files. Those are the people who will be raided.
I value my freedom. Every time I am tempted to take any kind of shortcut in this business, I stop and ask myself, "If I go to prison, will I kick myself for not doing xxx?" The answer is usually YES.
I absolutely insist on pgp. I suggest all vendors do the same, it isn't hard to use and creates a phenomenal layer of security and frustration between you and LE. If a customer doesn't want to take the time to learn how to use pgp, I don't mind passing on their business.
Thank you - that's a lot of great information. We do need to focus more on PGP use, that is our security weakness. Going to start asking buyers for their public keys and prompt them to communicate that was as well.
-
Yeah it's classic 4chan copypasta. 0/10
What the fuck did you just fucking say about me, you little bitch? I'll have you know I graduated top of my class in the Navy Seals, and I've been involved in numerous secret raids on Al-Quaeda, and I have over 300 confirmed kills. I am trained in gorilla warfare and I'm the top sniper in the entire US armed forces. You are nothing to me but just another target. I will wipe you the fuck out with precision the likes of which has never been seen before on this Earth, mark my fucking words. You think you can get away with saying that shit to me over the Internet? Think again, fucker. As we speak I am contacting my secret network of spies across the USA and your IP is being traced right now so you better prepare for the storm, maggot. The storm that wipes out the pathetic little thing you call your life. You're fucking dead, kid. I can be anywhere, anytime, and I can kill you in over seven hundred ways, and that's just with my bare hands. Not only am I extensively trained in unarmed combat, but I have access to the entire arsenal of the United States Marine Corps and I will use it to its full extent to wipe your miserable ass off the face of the continent, you little shit. If only you could have known what unholy retribution your little "clever" comment was about to bring down upon you, maybe you would have held your fucking tongue. But you couldn't, you didn't, and now you're paying the price, you goddamn idiot. I will shit fury all over you and you will drown in it. You're fucking dead, kiddo.
What the fuck did you just fucking say about me, you little bitch? I'll have you know I graduated top of my class in the Navy Seals, and I've been involved in numerous secret raids on Al-Quaeda, and I have over 300 confirmed kills. I am trained in gorilla warfare and I'm the top sniper in the entire US armed forces. You are nothing to me but just another target. I will wipe you the fuck out with precision the likes of which has never been seen before on this Earth, mark my fucking words. You think you can get away with saying that shit to me over the Internet? Think again, fucker. As we speak I am contacting my secret network of spies across the USA and your IP is being traced right now so you better prepare for the storm, maggot. The storm that wipes out the pathetic little thing you call your life. You're fucking dead, kid. I can be anywhere, anytime, and I can kill you in over seven hundred ways, and that's just with my bare hands. Not only am I extensively trained in unarmed combat, but I have access to the entire arsenal of the United States Marine Corps and I will use it to its full extent to wipe your miserable ass off the face of the continent, you little shit. If only you could have known what unholy retribution your little "clever" comment was about to bring down upon you, maybe you would have held your fucking tongue. But you couldn't, you didn't, and now you're paying the price, you goddamn idiot. I will shit fury all over you and you will drown in it. You're fucking dead, kiddo.
What the fuck did you just fucking say about me, you little bitch? I'll have you know I graduated top of my class in the Navy Seals, and I've been involved in numerous secret raids on Al-Quaeda, and I have over 300 confirmed kills. I am trained in gorilla warfare and I'm the top sniper in the entire US armed forces. You are nothing to me but just another target. I will wipe you the fuck out with precision the likes of which has never been seen before on this Earth, mark my fucking words. You think you can get away with saying that shit to me over the Internet? Think again, fucker. As we speak I am contacting my secret network of spies across the USA and your IP is being traced right now so you better prepare for the storm, maggot. The storm that wipes out the pathetic little thing you call your life. You're fucking dead, kid. I can be anywhere, anytime, and I can kill you in over seven hundred ways, and that's just with my bare hands. Not only am I extensively trained in unarmed combat, but I have access to the entire arsenal of the United States Marine Corps and I will use it to its full extent to wipe your miserable ass off the face of the continent, you little shit. If only you could have known what unholy retribution your little "clever" comment was about to bring down upon you, maybe you would have held your fucking tongue. But you couldn't, you didn't, and now you're paying the price, you goddamn idiot. I will shit fury all over you and you will drown in it. You're fucking dead, kiddo.
What the fuck did you just fucking say about me, you little bitch? I'll have you know I graduated top of my class in the Navy Seals, and I've been involved in numerous secret raids on Al-Quaeda, and I have over 300 confirmed kills. I am trained in gorilla warfare and I'm the top sniper in the entire US armed forces. You are nothing to me but just another target. I will wipe you the fuck out with precision the likes of which has never been seen before on this Earth, mark my fucking words. You think you can get away with saying that shit to me over the Internet? Think again, fucker. As we speak I am contacting my secret network of spies across the USA and your IP is being traced right now so you better prepare for the storm, maggot. The storm that wipes out the pathetic little thing you call your life. You're fucking dead, kid. I can be anywhere, anytime, and I can kill you in over seven hundred ways, and that's just with my bare hands. Not only am I extensively trained in unarmed combat, but I have access to the entire arsenal of the United States Marine Corps and I will use it to its full extent to wipe your miserable ass off the face of the continent, you little shit. If only you could have known what unholy retribution your little "clever" comment was about to bring down upon you, maybe you would have held your fucking tongue. But you couldn't, you didn't, and now you're paying the price, you goddamn idiot. I will shit fury all over you and you will drown in it. You're fucking dead, kiddo.
What the fuck did you just fucking say about me, you little bitch? I'll have you know I graduated top of my class in the Navy Seals, and I've been involved in numerous secret raids on Al-Quaeda, and I have over 300 confirmed kills. I am trained in gorilla warfare and I'm the top sniper in the entire US armed forces. You are nothing to me but just another target. I will wipe you the fuck out with precision the likes of which has never been seen before on this Earth, mark my fucking words. You think you can get away with saying that shit to me over the Internet? Think again, fucker. As we speak I am contacting my secret network of spies across the USA and your IP is being traced right now so you better prepare for the storm, maggot. The storm that wipes out the pathetic little thing you call your life. You're fucking dead, kid. I can be anywhere, anytime, and I can kill you in over seven hundred ways, and that's just with my bare hands. Not only am I extensively trained in unarmed combat, but I have access to the entire arsenal of the United States Marine Corps and I will use it to its full extent to wipe your miserable ass off the face of the continent, you little shit. If only you could have known what unholy retribution your little "clever" comment was about to bring down upon you, maybe you would have held your fucking tongue. But you couldn't, you didn't, and now you're paying the price, you goddamn idiot. I will shit fury all over you and you will drown in it. You're fucking dead, kiddo.
hahahaha some serious roid rage or perhaps an an only child? hahaha ... people who need to prove themselves IN HERE are obviously deprived one way or another. Even to suggest such bull shit is like going for a swim in a muddy creek in darwin and slapping the water.... you WILL GET EATEN. Lets hope you haven't attracted the curiosity of "real" SF. Bloody Yanks.
-
Yeah it's classic 4chan copypasta. 0/10
What the fuck did you just fucking say about me, you little bitch? I'll have you know I graduated top of my class in the Navy Seals, and I've been involved in numerous secret raids on Al-Quaeda, and I have over 300 confirmed kills. I am trained in gorilla warfare and I'm the top sniper in the entire US armed forces. You are nothing to me but just another target. I will wipe you the fuck out with precision the likes of which has never been seen before on this Earth, mark my fucking words. You think you can get away with saying that shit to me over the Internet? Think again, fucker. As we speak I am contacting my secret network of spies across the USA and your IP is being traced right now so you better prepare for the storm, maggot. The storm that wipes out the pathetic little thing you call your life. You're fucking dead, kid. I can be anywhere, anytime, and I can kill you in over seven hundred ways, and that's just with my bare hands. Not only am I extensively trained in unarmed combat, but I have access to the entire arsenal of the United States Marine Corps and I will use it to its full extent to wipe your miserable ass off the face of the continent, you little shit. If only you could have known what unholy retribution your little "clever" comment was about to bring down upon you, maybe you would have held your fucking tongue. But you couldn't, you didn't, and now you're paying the price, you goddamn idiot. I will shit fury all over you and you will drown in it. You're fucking dead, kiddo.
What in Davy Jones’ locker did ye just bark at me, ye scurvy bilgerat? I’ll have ye know I be the meanest cutthroat on the seven seas, and I’ve led numerous raids on fishing villages, and raped over 300 wenches. I be trained in hit-and-run pillaging and be the deadliest with a pistol of all the captains on the high seas. Ye be nothing to me but another source o’ swag. I’ll have yer guts for garters and keel haul ye like never been done before, hear me true. You think ye can hide behind your newfangled computing device? Think twice on that, scallywag. As we parley I be contacting my secret network o’ pirates across the sea and yer port is being tracked right now so ye better prepare for the typhoon, weevil. The kind o’ monsoon that’ll wipe ye off the map. You’re sharkbait, fool. I can sail anywhere, in any waters, and can kill ye in o’er seven hundred ways, and that be just with me hook and fist. Not only do I be top o’ the line with a cutlass, but I have an entire pirate fleet at my beck and call and I’ll damned sure use it all to wipe yer arse off o’ the world, ye dog. If only ye had had the foresight to know what devilish wrath your jibe was about to incur, ye might have belayed the comment. But ye couldn’t, ye didn’t, and now ye’ll pay the ultimate toll, you buffoon. I’ll shit fury all over ye and ye’ll drown in the depths o’ it. You’re fish food now
-
What in Davy Jones’ locker did ye just bark at me, ye scurvy bilgerat? I’ll have ye know I be the meanest cutthroat on the seven seas, and I’ve led numerous raids on fishing villages, and raped over 300 wenches. I be trained in hit-and-run pillaging and be the deadliest with a pistol of all the captains on the high seas. Ye be nothing to me but another source o’ swag. I’ll have yer guts for garters and keel haul ye like never been done before, hear me true. You think ye can hide behind your newfangled computing device? Think twice on that, scallywag. As we parley I be contacting my secret network o’ pirates across the sea and yer port is being tracked right now so ye better prepare for the typhoon, weevil. The kind o’ monsoon that’ll wipe ye off the map. You’re sharkbait, fool. I can sail anywhere, in any waters, and can kill ye in o’er seven hundred ways, and that be just with me hook and fist. Not only do I be top o’ the line with a cutlass, but I have an entire pirate fleet at my beck and call and I’ll damned sure use it all to wipe yer arse off o’ the world, ye dog. If only ye had had the foresight to know what devilish wrath your jibe was about to incur, ye might have belayed the comment. But ye couldn’t, ye didn’t, and now ye’ll pay the ultimate toll, you buffoon. I’ll shit fury all over ye and ye’ll drown in the depths o’ it. You’re fish food now
now thats some funny shit. A++
-
When a vendor deletes a message, does it delete the message on the Buyer's end as well?
Doubting that this is reality, but would like to encourage people to delete messages often. We have a lot of Buyers who don't use PGP and want updates. Happy to oblige, but just wonder how we can get the information deleted after that. Are we completely reliant upon the Buyer to delete their messages.
To get back to the OP, my understanding (based on a previous post by DPR) is that when a PM is deleted on the road, it stays on the server for four months, you just don't see it in the list. This is for technical reasons. This is why you must insist your buyers use pgp. If the servers should ever be compromised, all of those clear text messages will be exposed to the intruder.
I will not answer any questions that involve price, shipping info, shipping times or methods, basically anything that is even remotely sensitive, without encryption. There was a thread going here a few months ago from a fellow who had attended (or knew someone who had attended...? not sure) an LE conference. One of the topics that came up was the fact that LE is fucked by encryption. They can't crack it. Even if you email host/ISP/whoever hands over data, if it is encrypted it is useless to LE. You can absolutely put your money on the idea that if LE ever gets their hands on these servers, the only people who are going to be popped are the ones who don't use encryption. I can't believe how many people have sent me names/addresses/etc unencrypted.
To be clear, the shipping info in an order is deleted right away. However, if the servers are compromised, all of those unfilled orders with clear text addresses are going right into LE files. Those are the people who will be raided.
I value my freedom. Every time I am tempted to take any kind of shortcut in this business, I stop and ask myself, "If I go to prison, will I kick myself for not doing xxx?" The answer is usually YES.
I absolutely insist on pgp. I suggest all vendors do the same, it isn't hard to use and creates a phenomenal layer of security and frustration between you and LE. If a customer doesn't want to take the time to learn how to use pgp, I don't mind passing on their business.
Thank you - that's a lot of great information. We do need to focus more on PGP use, that is our security weakness. Going to start asking buyers for their public keys and prompt them to communicate that was as well.
Feel free to take a look borrow from my vendor page on the road, I have it in my TOS. Good luck!
-
When a vendor deletes a message, does it delete the message on the Buyer's end as well?
Doubting that this is reality, but would like to encourage people to delete messages often. We have a lot of Buyers who don't use PGP and want updates. Happy to oblige, but just wonder how we can get the information deleted after that. Are we completely reliant upon the Buyer to delete their messages.
To get back to the OP, my understanding (based on a previous post by DPR) is that when a PM is deleted on the road, it stays on the server for four months, you just don't see it in the list. This is for technical reasons. This is why you must insist your buyers use pgp. If the servers should ever be compromised, all of those clear text messages will be exposed to the intruder.
I don't recall ever seeing that post by DPR, but that information is damn near priceless. I do find myself wondering precisely what 'technical reasons' could lead to a message retention policy like that.
I will not answer any questions that involve price, shipping info, shipping times or methods, basically anything that is even remotely sensitive, without encryption. There was a thread going here a few months ago from a fellow who had attended (or knew someone who had attended...? not sure) an LE conference. One of the topics that came up was the fact that LE is fucked by encryption. They can't crack it. Even if you email host/ISP/whoever hands over data, if it is encrypted it is useless to LE. You can absolutely put your money on the idea that if LE ever gets their hands on these servers, the only people who are going to be popped are the ones who don't use encryption. I can't believe how many people have sent me names/addresses/etc unencrypted.
Hear, hear! I'd give you 1000 Karma points for this, if I could.
Where I have a problem with DPR, is their insistence on voluntary adherence to security policy (i.e. use of PGP). While I realize that any such mandatory policies offend their agorist sensibilities, it is nonetheless a truism in the real world that voluntary policies tend not to be followed. The fact that numerous vendors have stated flat-out that 80-90% of the address information they receive is unencrypted underscore this point. Sometimes people _have_ to be forced to do the right thing.
To be clear, the shipping info in an order is deleted right away. However, if the servers are compromised, all of those unfilled orders with clear text addresses are going right into LE files. Those are the people who will be raided.
I value my freedom. Every time I am tempted to take any kind of shortcut in this business, I stop and ask myself, "If I go to prison, will I kick myself for not doing xxx?" The answer is usually YES.
Well said. My thoughts keep drifting back to the operators of The Farmers' Market, and also of those caught up in the DEA's Operation Raw Deal (ORD) before that. All of these relied on Hushmail for their security, and that is one of the primary reasons that many of them are sitting in prison right now. Both vendors and buyers alike have to learn enough background to be able to distinguish the snake oil (Hushmail, PortablePGP, iGolder.com, etc.) from the genuine articles. In particular, the operators of The Farmers' Market were told by people who knew them in real life, that their security was shit -- they just chose not to listen. I find myself wondering if they now regret not having taken the advice they were given.
I absolutely insist on pgp. I suggest all vendors do the same, it isn't hard to use and creates a phenomenal layer of security and frustration between you and LE. If a customer doesn't want to take the time to learn how to use pgp, I don't mind passing on their business.
Agree, 1000%. That said, I would go further -- I would insist, as a pre-condition for obtaining an account (whether buyer or seller), that a prospective buyer or vendor:
1) Post a PGP key for use with the account; and
2) Demonstrate their proficiency with PGP by correctly answering an encrypted challenge.
These would have two effects: first it would compel people to use PGP; and second, it would have the side-effect of virtually eliminating account spoofing/theft. (Provided the server is uncompromised, of course.)
NC
-
A few times iv delted all my inbox and sent msgs and when speaking to the same vendor again later a lot of my msgs from mnths back to him/her are all there, not the vendors replying just all mine sent.. Weird!!
-
When a vendor deletes a message, does it delete the message on the Buyer's end as well?
Doubting that this is reality, but would like to encourage people to delete messages often. We have a lot of Buyers who don't use PGP and want updates. Happy to oblige, but just wonder how we can get the information deleted after that. Are we completely reliant upon the Buyer to delete their messages.
To get back to the OP, my understanding (based on a previous post by DPR) is that when a PM is deleted on the road, it stays on the server for four months, you just don't see it in the list. This is for technical reasons. This is why you must insist your buyers use pgp. If the servers should ever be compromised, all of those clear text messages will be exposed to the intruder.
I will not answer any questions that involve price, shipping info, shipping times or methods, basically anything that is even remotely sensitive, without encryption. There was a thread going here a few months ago from a fellow who had attended (or knew someone who had attended...? not sure) an LE conference. One of the topics that came up was the fact that LE is fucked by encryption. They can't crack it. Even if you email host/ISP/whoever hands over data, if it is encrypted it is useless to LE. You can absolutely put your money on the idea that if LE ever gets their hands on these servers, the only people who are going to be popped are the ones who don't use encryption. I can't believe how many people have sent me names/addresses/etc unencrypted.
To be clear, the shipping info in an order is deleted right away. However, if the servers are compromised, all of those unfilled orders with clear text addresses are going right into LE files. Those are the people who will be raided.
I value my freedom. Every time I am tempted to take any kind of shortcut in this business, I stop and ask myself, "If I go to prison, will I kick myself for not doing xxx?" The answer is usually YES.
I absolutely insist on pgp. I suggest all vendors do the same, it isn't hard to use and creates a phenomenal layer of security and frustration between you and LE. If a customer doesn't want to take the time to learn how to use pgp, I don't mind passing on their business.
Thank you - that's a lot of great information. We do need to focus more on PGP use, that is our security weakness. Going to start asking buyers for their public keys and prompt them to communicate that was as well.
Feel free to take a look borrow from my vendor page on the road, I have it in my TOS. Good luck!
Will check it out - thanks!
-
When a vendor deletes a message, does it delete the message on the Buyer's end as well?
Doubting that this is reality, but would like to encourage people to delete messages often. We have a lot of Buyers who don't use PGP and want updates. Happy to oblige, but just wonder how we can get the information deleted after that. Are we completely reliant upon the Buyer to delete their messages.
To get back to the OP, my understanding (based on a previous post by DPR) is that when a PM is deleted on the road, it stays on the server for four months, you just don't see it in the list. This is for technical reasons. This is why you must insist your buyers use pgp. If the servers should ever be compromised, all of those clear text messages will be exposed to the intruder.
I don't recall ever seeing that post by DPR, but that information is damn near priceless. I do find myself wondering precisely what 'technical reasons' could lead to a message retention policy like that.
It had something to do with continuity, it made sense the way he explained it. If I can dig up the thread I'll post it, I think it was over the summer? Not sure.