Silk Road forums
Discussion => Silk Road discussion => Topic started by: quantumerror on July 24, 2011, 02:47 am
-
I have registered on Silk Road, I processed my Bit Coins from my wallet and over in to my Silk Road account and now I would like to make a purchase.
I am having a very difficult time understanding the entire Public Key method or whatever that is...
I just don't want to go through the time to begin a transaction only to have the Seller cancel it because I'm doing it wrong or something, and the Buyers Guide on Silk Road really doesn't have any instructions on keys or anything.
When a seller includes their Public Key, what am I supposed to do with that?
Once I add the item to my cart, how do I make sure that the Seller will get my information in the way that I'm supposed to?
I apologize for being so ignorant on this, I looked all around and did not find anything that I felt answered my question really, and I feel overwhelmed by some of this. GPG makes absolutely no sense to me and I really only want to know if I'm missing something.
-
this is beyond a joke now,theres been hundreds of questions on here regrading your query and they have all been answered.even full tutorials have been made(in colour)...also,watch youtube ,search GNUPG..
get off your lazy backside and do some research,if everyone else can do it without asking,so can you.
-
Your Public PGP key is what you send to others for them to Encrypt a message to send to you. Then only you have the private key to decrypt this message. So when a seller provides a public key you use this to encrypt your address (or other sensitive information) to send to them. This encrypted message can only be decrypted by them using their Private key. As for exact techniques as to programs and step by step process to do this, there are many tutorials as Redrocket has mentioned.
Welcome to SR, and enjoy that first purchase :)
-
PGP looks pretty hard at first, and many of us go through what you are going through. Only way to learn it really, is through doing it. The sellers are doing us a favor, really, by publishing their public keys, as it means then we can encrypt our addresses to them. Since you probably have Windows, just google and download gpg4win. There is a built in tutorial on how to run it. A couple of hours and you''ll get it. Post your public key on here, and I'm sure one of us will send you an encrypted message, and you can send one back. Don't be overwhelmed by it all. Here's the link:
http://www.gpg4win.org/doc/en/gpg4win-compendium.html
And as stated, there are several other tutorials on here. But just scroll down the page on that link, and you'll sort it out.
-
Lol, go easy on the OP. Its obvious that he had no clue what they were talking about with they said key, etc. So, he didn't even know what to look for.
Anyways, at first I was going to require everyone use PGP/GPG but really, it only protects the buyer. So as a seller, yes, I would prefer everything done in PGP but when its all said and done, it really doesn't effect me if the buyer uses it or not. Its not my address thats going unencyrpted. So,yes, I am going to recommend it, but if they dont want to use it, or take the time to use it, then thats up to them. its their choice....
-
this is beyond a joke now,theres been hundreds of questions on here regrading your query and they have all been answered.even full tutorials have been made(in colour)...also,watch youtube ,search GNUPG..
get off your lazy backside and do some research,if everyone else can do it without asking,so can you.
Seriously, that's a pretty damn rude response. Would have been a lot more helpful if you'd just provided the guy with a link to a tutorial. Or just said nothing. Everyone was new at one time and newcomers asking questions don't deserve to be spoken to like this. Ass.
To the OP, If you're using a mac this link will get you started....
http://g7pz322wcy6jnn4r.onion/opensource/II/gpgmacfield.html
It is a bit difficult to figure out at first. But ultimately it really is not that difficult. And once you get the hang of it, it's easy. And well worth it.
-
Yeah it is rather tricky to understand.
I'd offer advice but I've got PGP 9.12, and most have GPG, which probably has different ways of importing/exporting keys, and encrypting/decrypting messages.
If you have PGP 9.x, post here and I'll write you a quick step by step guide.
And if you work it out (regardless of what version you have), perhaps you could try sending me a message, using this public key I just made up specially for you! How kind I am...
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGP Desktop 9.12.0 (Build 1035)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=6fbd
-----END PGP PUBLIC KEY BLOCK-----
Leave your encrypted message here and I will get back to you if I can read it.
-
this is beyond a joke now,theres been hundreds of questions on here regrading your query and they have all been answered.even full tutorials have been made(in colour)...also,watch youtube ,search GNUPG..
get off your lazy backside and do some research,if everyone else can do it without asking,so can you.
Seriously, that's a pretty damn rude response. Would have been a lot more helpful if you'd just provided the guy with a link to a tutorial. Or just said nothing. Everyone was new at one time and newcomers asking questions don't deserve to be spoken to like this. Ass.
To the OP, If you're using a mac this link will get you started....
http://g7pz322wcy6jnn4r.onion/opensource/II/gpgmacfield.html
It is a bit difficult to figure out at first. But ultimately it really is not that difficult. And once you get the hang of it, it's easy. And well worth it.
im so sowwii for hurting OP's feeling and your feelings too....from the bottom of thy heart,dwelleth thy wrong doings,accepteth thy most sincerest apologies?.....
-
im so sowwii for hurting OP's feeling and your feelings too....from the bottom of thy heart,dwelleth thy wrong doings,accepteth thy most sincerest apologies?.....
Ha ha, you cunt!
Thing is though, in a way you're right. Despite my offer for help, there's no substitute for working it out for yourself. Better to have an understanding of what you're doing, that just following someone's step by step instructions blindly.
I had to work it all out for myself, but then I'm quite techy and enjoy it anyway.
-
''it is stored encrypted, and is deleted as soon as your transaction is complete, so there is no record of it. And, because Silk Road is a Tor Hidden Service, the address remains encrypted within the Tor network when it is transfered. ''
This is from the Silk Road ''How does it work'' page, regarding the buyers address.
So from my (very limited) understanding, the PGP key is just an extra layer of protection.
-
''it is stored encrypted, and is deleted as soon as your transaction is complete, so there is no record of it. And, because Silk Road is a Tor Hidden Service, the address remains encrypted within the Tor network when it is transfered. ''
This is from the Silk Road ''How does it work'' page, regarding the buyers address.
So from my (very limited) understanding, the PGP key is just an extra layer of protection.
We all trust SR and his system, or we wouldn't be here. Or rather, we take a calculated risk and behave as if we trust him.
But at the end of the day, we don't *know* that what SR says is true. We just assume it.
If, as buyers, we encrypt our addresses when we purchase, then we *know* that no-one but the vendor can read our address. No assumptions needed.
Well, except that the vendor is trustworthy. There's always that, and no amount of PGP is going to stop your vendor writing your address into his log book entitled 'ALL THE DRUG DEALS I HAVE DONE ON SILK ROAD LOL', which his ditzy grandmother might find and use the reverse as a shopping list, which she'll take with her to the supermarket, only to drop it on the pavement outside the cop shop.
It could happen. But it won't.
Use PGP. It won't save you from Grandma, but it'll help, a bit.
-
Lol, go easy on the OP. Its obvious that he had no clue what they were talking about with they said key, etc. So, he didn't even know what to look for.
Anyways, at first I was going to require everyone use PGP/GPG but really, it only protects the buyer. So as a seller, yes, I would prefer everything done in PGP but when its all said and done, it really doesn't effect me if the buyer uses it or not. Its not my address thats going unencyrpted. So,yes, I am going to recommend it, but if they dont want to use it, or take the time to use it, then thats up to them. its their choice....
What he said ^^^
@quantumerror-if you are only buying personal amounts, have no prior contact with LE, etc. then you don't absolutely have to use PGP for your address. However, if you ever want to contact the seller about quantity or something that would identify where you are, you almost certainly want to use PGP. PGP is like condoms; inconvenient for all involved, but still great protection when used 100% of the time.
@redrocket-yeah, try to be nicer. We were all noobs once. Even SR himself. And your avatar gave me an "A Scanner Darkly" flashback. I was picking at my screen thinking "WTF"? Seriously, that might freak out some of the hallucinogenic heads on here. :D
-
I don't usually expect new sellers to use pgp. And I've gotten too many good deals by jumping quick, rather than waiting for sellers to get it perfect. I just encourage it, and try to take some time answering questions when they ask, as it is a bit confusing at first. It's always cool, tho, when you get that 'aha' moment with pgp, and realize it's really a neat way of doing good, and how the public/private keys work is brilliant. Asymmetrical. I don't use email progams for it tho. But I'm also a linux user with GPA rather than Kleopatra. It's kind of fun, when u first figure it out.
-
Yeah, there seems to a be a few pretentious, "oh-my-god-you-don't-know-the-answer-even-though-you're-new-here-and-doing-what-you-should-be-doing-which-is-asking-on-a-forum" responses.
Quit being a dick and either don't respond, or get off YOUR lazy a$$ and send him a link, like someone probably helped YOU out at some point.
I have to say, for the mostly really nice, helpful fellow geeks on this forum, there sure are a lot of pretentous snobby know-it-alls. Reminds me of that SNL Computer Guy. Mooooooooooooooooooove over.
-
Hey quantumerror
I had a bit of trouble getting my head around the whole pgp setup, but i'll explain what i know as i think understanding the process first makes finding the route easier.
Firstly, a PGP key consists of a few parts but to be honest you don't need to understand them all (If you have the time i recommend reading more on it, but not necessary) as you only really ever deal with one thing, Public Keys. This is what you see posted on the board and on sellers profile's.
Your Public Key -
Using your PGP software, you can create a key, you give out the Public key for users to send you messages that only you can read
A Sellers Public Key -
You Import this key into your PGP software which then allows you encrypt messages specifically for that user.
The General Use of PGP in SR
When you go to make a purchase, you will provide the seller with an address, this is often the place where PGP is recommended to be used as should god forbid SR ever be taken down by Law Enforcement and they manage to recover the messages sent between you and a seller, they will not be able to read the information without knowing your Private PGP Key (A private key is generated by your PGP software when you create your Public key (research more for better explanation) but generally you don't need to know it unless you change PC's, its used to un-encrypt messages encrypted using your Public Key).
A) Import the sellers Public key to your PGP Software
B) Create a text file with the address and message you want to sent to the seller, also put in this text file your Public Key so they can reply in an encrypted message
C) Encrypt your text file using your PGP software, specify the output to be an ASCII/Text format
D) Copy the output and send it to the seller during a purchase
(Will look something like this)
-----BEGIN PGP MESSAGE-----
Version: GnuPG v1.4.10 (GNU/Linux)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-----END PGP MESSAGE-----
That is the basics of it, how to use your PGP software differs on platforms (Linux, Mac, Win) but the process is always the same
I hope this helps.
Ninja
-
Hey I'm a fucking genius and even I had problems using PGP at first. Simple fact, PGP is not completely user friendly.
Best advice is to figure out how to use it with a real life friend who also has a computer, send messages back and forth, etc... and then use it here.
-
The GPA user interface for windows is quite easy to use.
You just need to read the tutorials and ask someone to help you do a trial run with it.
I did that very thing with MissScarlett last night.
Most senior members are happy to help out for safety reasons.I
If you vendors without PGP dont get your act together....UGH. C'mon
-
Hey I'm a fucking genius
No you're not. GPG is stupid easy to use with the many available GUI frontends.
-
Hey I'm a fucking genius
No you're not. GPG is stupid easy to use with the many available GUI frontends.
^^^No, I'M a genius. Wow, you guys sound like grade school boys. Or, again, Computer Guys from SNL. Moooooooooooooooooooooooooooooove Ovvvvvvvvvvvvvveeeeeeeeeeeeeeer
-
thanks to all the people who actually threw this guy (& me ;D) a bone by giving him a link to a tutorial instead of biting his head off. everybody was a newbie at some point, lighten up.
-
Ballsdeep. What a great name. :-*
-
CLICK!! I'm a first time buyer and after reading this I think I get it YAAAAAYYY
-
this is beyond a joke now,theres been hundreds of questions on here regrading your query and they have all been answered.even full tutorials have been made(in colour)...also,watch youtube ,search GNUPG..
get off your lazy backside and do some research,if everyone else can do it without asking,so can you.
It wouldn't hurt if some of these threads were stickied and not buried 10 pages deep in the forums. The one I used is on like page 9.