Silk Road forums

Discussion => Security => Topic started by: psytrip on September 06, 2012, 07:42 pm

Title: If you have trouble working with PGP's..Not at all Technical...
Post by: psytrip on September 06, 2012, 07:42 pm

If you have trouble with understanding or working PGP, you may use these services:

https://privnote.com

https://www.igolder.com/pgp/encryption/

Thank You !!!EnterTheMatrix!!! :) :) :)
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: kmfkewm on September 06, 2012, 08:38 pm
you are far better off just learning to use GPG, it is trivial
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: pine on September 06, 2012, 11:34 pm
If you've any trouble learning PGP, PM me and we'll conduct the PGP handshake. This is where we prove you can encrypt and decrypt. Then after that it's just practice,
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: fuckoffehbuddy on September 06, 2012, 11:53 pm
try pgpportable from sourceforge.net very simple to use took me like 10 minutes to figure out
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: Knomo on September 07, 2012, 02:10 am
Just learn PGP, it's not that difficult once you start to give it a go.. Might fail the first few times but hey, you didn't learn how to walk without falling down first either ;)
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: pharmer_pete on September 07, 2012, 05:33 am

If you have trouble with understanding or working PGP, you may use these services:
https://privnote.com
https://www.igolder.com/pgp/encryption/


Stay away from igolder.com.  Using a remote site to do your encryption for you is like telling a stranger your secret message and then hoping they won't tell anyone.  That's not rational.
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: psytrip on September 07, 2012, 06:14 am
Hi,

This community is really helpful..Everyone here share knowledge to a great extent...

Thank you everyone...


If you have trouble with understanding or working PGP, you may use these services:
https://privnote.com
https://www.igolder.com/pgp/encryption/


Stay away from igolder.com.  Using a remote site to do your encryption for you is like telling a stranger your secret message and then hoping they won't tell anyone.  That's not rational.

Yes, pharmer_pete, I know do understand your point...and have learned encryption spending almost around 20 hrs and now I know it..... :) :) :)

Just learn PGP, it's not that difficult once you start to give it a go.. Might fail the first few times but hey, you didn't learn how to walk without falling down first either ;)

Thank you Knomo...I leaned it now...have my public key in my signature..Thanks...

try pgpportable from sourceforge.net very simple to use took me like 10 minutes to figure out

NO, NO, NO, A THOUSAND TIMES NO!

PGPPortable is a worthless piece of shit! Do NOT use this software -- it is broken!

I've lost count of how many people on here have used this worthless piece of shit. When you examine their keys, you generally find that they feature 512-bit encryption keys.  512-bit keys were abandoned almost 20 years ago as being unsafe -- if they were unsafe 20 years ago, they are certainly no safer today.

December 31st, 2010, the American National Institute of Standards and Technology (NIST) recommended that the use of 1024-bit keys be halted, due to safety concerns. That was almost 3 years ago now. 512-bit keys are many, many, many orders of magnitude weaker than those keys recommended for abandonment by NIST some 3 years ago now.

Guru


Hey Guru, You are a real guru in every respect...You say no to pgpportable, so its a no...anyways have send to an encrypted message in my other thread...hope you like the way i did it.... ;)

If you've any trouble learning PGP, PM me and we'll conduct the PGP handshake. This is where we prove you can encrypt and decrypt. Then after that it's just practice,

pine, you have been an asset to this community...I have learned some encryption...Anyways will pm you and want to learn more..Thanks...
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: fuckoffehbuddy on September 07, 2012, 05:07 pm


PGPPortable is a worthless piece of shit! Do NOT use this software -- it is broken!


Guru
[/quote]

it's not broken i just used it like 3 days ago anyways opinions are like assholes everyone has one and they usually stink so if not really into cpu's try portable it's easy but ultimately you decide
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: fuckoffehbuddy on September 07, 2012, 05:32 pm
dude i don't even know what the fuck 512-bit Elgamal Encryption sub-key is but give me a sec and i will get my keys pulled up
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: fuckoffehbuddy on September 07, 2012, 06:03 pm
well its hard to take there advice when my gnupg or gpg4win doesn't work on this cpu portable was the only one i found that worked and btw i sent guru my key no reply back so must be good
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: fuckoffehbuddy on September 07, 2012, 06:23 pm
cool thanks for the tip
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: Opiofile on September 07, 2012, 09:55 pm
Can anyone help me with encrypting/decrypting emails? I have my key and email and shit set up, I just can't find a good tutorial on how to actually use it though. I would really appreciate the help. Please PM me.

I'm trying to make some purchases today but I want to email the vendors first...
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: wsg on September 07, 2012, 11:39 pm
there are a couple of stickies in the security section
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: kmfkewm on September 08, 2012, 08:43 am


PGPPortable is a worthless piece of shit! Do NOT use this software -- it is broken!


Guru

it's not broken i just used it like 3 days ago anyways opinions are like assholes everyone has one and they usually stink so if not really into cpu's try portable it's easy but ultimately you decide
[/quote]

512 bit keys have been broken by private individuals :P
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: fuckoffehbuddy on September 08, 2012, 10:59 pm
yeah changed setup now using gpg4win and new key
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: fuckoffehbuddy on September 09, 2012, 12:10 pm
is this new key and gnupg better than last key i posted with pgpportable on page 1?


-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.17 (MingW32)
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=EY16
-----END PGP PUBLIC KEY BLOCK-----
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: fuckoffehbuddy on September 09, 2012, 11:28 pm
cool thanks for the help i had no idea pgpportable sucked so bad
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: mrbooyams on September 09, 2012, 11:55 pm
Hi,

Can someone online now send me a message to my key? Im new to this and im trying to understand the software.And include their key so i can try to decrypt?
I need to send a message back and forth as well as decrypt one from someone .So i know how to use this software correctly .Im using gpg4usb...my key is :

-----BEGIN PGP MESSAGE-----
Version: GnuPG v1.4.11 (MingW32)

hQIOA6DwswzgMFrrEAf+NS67fdZPow/XDS20CCBYdcX/KbGUDELAt+bXMrDcpmgr
RfQYmmYUo4ftOtLzZQ0/AesOMy4aNCCeUc+uhfhgM4DK/m4+avEauRpQOalIOocc
of0K9TIchDwY3RX8X+VUkwa2gzMd9zFfPiPOIbtpUlFiXLhSNkiH6m4ZPiT6wKHO
rlvBuNdUfahlA1zMmeGb8KPIpAjvjn5Zriobvw0xuSMpGSfpfoJie84XH75y2SIz
a7WR9vAjPl4BdFm6R3NjqLNyVzeBAGWe1Coi4HsucfVytYOmj77Jcgj7aFsUQh9r
McLEdj1buyLAhrfIm/689CFT939FlnF5kKS4S4Tb9QgA6vfuL5EPydCec8MDgUFE
JmseW1O5J0Uq/ud23/4fJKwCm0Jq2053ceKh2MfTC4f9PUyLSl4uD1VKekhOO02J
ne/J6JeBjsUogpS7b4b3eci1t780k6EZu59I/57tKyXxsoJs7+jga+sW1vyMxCCK
2ky2zCzI/YKh/WAkgS83i0jBkqha+nAv0comiCzdcTHbpwOcCr7r1UMFfsI8FiZg
zbCFfpdQjOUNwtzk+6q7Pf8gSn6qxZ1iS04rLWpLh9EnhRGNNB7fHtwLgspidgR5
eIkH8FPR/jotmK9a3LBFxhwFc9kS/B+bobpHN2/8MBZAiOKdwSOrSrX5uSVHenF/
CtJLAT0vKFtUZxLe+SRUcU25UxCDg1S80fTpeJnxpsJDu7/SxH/fB1lLwhZv7qm7
GFatnuRkj8ozB+WOlB4yVtp6jkdRLkEO6cmwWrIF
=ul6X
- -----END PGP MESSAGE-----

thanks for any help anyone can give

regards,
mr booyams
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: pine on September 10, 2012, 03:06 am
  To me, the big news in Lucky Green's announcement is not that he
  believes that Bernstein's research is sufficiently worrisome as to
  warrant revoking his 1024-bit keys; it's that, in 2002, he still has
  1024-bit keys to revoke.

  This discussion highlights the huge inertia in key rollover. Many
  people are still using short keys. Lucky Green's e-mail sheds a
  light on this phenomenon. He wrote "In light of the above, I
  reluctantly revoked all my personal 1024-bit PGP keys and the large
  web-of-trust that these keys have acquired over time." The web of
  trust attached to those keys was of great value, and reestablishing
  it with a new set of keys will be difficult and time-consuming.
  To Green, that pain was more important than having a "long enough"
  key.

Quote
  In light of the above, I reluctantly revoked all my personal 1024-bit
  PGP keys and the large web-of-trust that these keys have acquired over
  time. The keys should be considered compromised. The revoked keys and my
  new keys are attached below.

  --Lucky Green



This interests me too, I can't believe I didn't think of this. Of course there would be a key rollover issue.

Seems that is a big problem for the web of trust idea. This is a problem for projects to create Secure Forums,
because if there is this web of trust rollover problem, then it will create a community wide lethargy in upgrading
their encryption, ironically.
Title: Re: If you have trouble working with PGP's..Not at all Technical...
Post by: pine on September 10, 2012, 07:05 am
If you sign your new key with your old key, don't you inherit that web of trust in some way? I thought that was the standard thing to do anyway.

No. Trust is not transitive. Signing a new key with an old one merely demonstrates ownership of both old and new keys.  It does not transfer the trust from the old keys to the new one.

Guru

I can't think of a rational reason this is a good feature of a web of trust system. The longer and more consistent people are trusted the better surely.

Is there any ideas for circumventing this caveat of a PGP web of trust system? Perhaps by a 'refresh' or 'rebuild' procedure on the PGP key servers, where one day in the year everybody receives a message to sign a bunch of certificates. e.g. PGP Day or something. I mean, you have their email in the PGP email field feature, you might as well utilize it.