Silk Road forums

Discussion => Silk Road discussion => Topic started by: Blksheep on April 25, 2013, 03:11 pm

Title: Everyone should pass a PGP test before allowed to order from vender!
Post by: Blksheep on April 25, 2013, 03:11 pm
I believe there should be some sort of test that is required to pass before someone is allowed to order from a vender. I had to learn, from lots of help of SR'ers, and I just feel that a vender shouldn't have to go through all the mistakes newbies make. It cost them time, and time is money. I am not a vender, but I feel for you all that goes through it! I'm still learning about things on SR, and some of you sternly correct me of my mistakes, as you should. But a vender shouldn't have to be bogged down with incompetence. Just my feelings on this subject.
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: psychedelicmind on April 25, 2013, 03:23 pm
Personally, I always use encryption when sending sensitive information to vendors. That is a choice I make myself as it makes me feel safer. If people don't want to use it, or feel the risk isn't increased by not using it, that is their choice. SR is built on Libertarian principles (if I am not mistaken; correct me if I am), so in essence, people are free to choose whether or not they utilize encryption software or not.

Each to their own though... :)
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: Blksheep on April 25, 2013, 03:34 pm
You know what...your absolutely correct psychedelicmind in your feelings on this. I correct my "USA Government" view on this! lol I just felt that venders may get a little pissed off with having to deal with someone who doesn't know what they're doing and screwing up orders. Also, I feel that encrypting sensitive info, like personal addresses, should be required to protect themselves from prying eyes. But as you said, this is solely the choice of the individual. Let freedom ring. lol
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: canuckboy on April 25, 2013, 06:47 pm
Don't forget:

if a vendor looses your address, and he asks for it again in a PM within silk road, dont forget to encrypt it all again.  Not just on the order page.

I made this mistake recently...   It seems so casual too,  you hand over the ship address instantly when a vendor asks for it again , not thinking about it much.

I had no idea if the vendor account was phished, or if it was LE.  Dumb.  None of this wouldn't matter if I had just used PGP like I was suppose to - every time you correspond incriminating or personal info.

Think before you click submit.
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: boysen on April 25, 2013, 06:55 pm
Isn't the order note encrypted though? As in, only the vendor can view your address while the order is processing and once the vendor marks it 'in transit' no one can see it.

Cause if that's the case, it seems to me that sending your address by PGP in the order form only makes for a higher chance of user error, your address getting stored on the vendor's computer for example. Cause instead of just viewing it on SR and then marking it in transit, the vendor now has to decrypt it all, then view your address, now stored on his computer. To me that doesn't actually sound safer, but I may be wrong here. :p

Definitely use PGP if you for any reason have to send incriminating information through messages though, and absolutely use PGP if contacting a vendor through tormail if SR is down.
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: goblin on April 25, 2013, 09:37 pm
I don't know, a pass or flunk test? No druggie left behind?

Sounds elitist.
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: pine on April 26, 2013, 12:30 am
SR is built on Libertarian principles (if I am not mistaken; correct me if I am)

Quote
Use PGP or Die!

If SR was a state, it would be New Hampshire. Or possibly Texas. Yee Haw! I usually wear my cowboy hat on SRF.

Just FYI :)


I don't know, a pass or flunk test? No druggie left behind?

Sounds elitist.

It is elitist. Meritocracy!

--

If there were two changes I would make to SR, these are them:

1. Vendors becoming PGP fluent should be mandatory. There could be a basic course on opSec and infoSec which they have to pass before they join. No restrictions on newbies, because they are cute newbies. Everybody is a fluffy newbie sometime. But vendors have to be held to higher standards. Alternatively you could not make it mandatory, but reduce the start-up fees for vendors who pass their opSec/infoSec exams. I'm in favor of a relatively laissez faire system, allowing new vendors flexibility to learn the ropes with their first hundred orders, but at some point they need their 'driving license' or they'll screw up at some point.

The key problem with this is that it would also bias a vendor to keep one account instead of several smaller accounts, which I consider unfortunate, but am open to suggestions.

2. Get rid of FE completely. I think it's advantages are outweighed by the disadvantages.

That's it! Everything else is just a detail. Other infrastructure can be built around SR independently e.g. option derivatives to decrease volatility and so on. Better to keep such things independent.




Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: caman420 on April 26, 2013, 12:35 am
be sure to have link on your page for a tutorial about pgp.

http://gpg4usb.cpunk.de/docu.html

it got nasty last night when Yo mama sent her key

oh sh1t
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: eddiethegun on April 26, 2013, 12:40 am
Greater than 80% of customers don't PGP encrypt their address.

I'm all in favor of having a mandatory PGP tutorial/test to get SR privileges.

Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: HitTheRoad on April 26, 2013, 12:45 am
I used to work in IT and still found it tough enough to learn to use but once you get it obviously it's great and easy!

I even screwed up by sending a seller who required all messages to be encrypted and that message needed to include your public key for a reply and I stupidly sent my private key!

The seller replied advising me to change that.

Can't work out how to double quote two posts in the one go if any of you can let me know how that simple task is done?
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: goblin on April 26, 2013, 02:15 am
Greater than 80% of customers don't PGP encrypt their address.
You can say that again. Some guy placed two orders with me tonight, and his address was unencrypted. Even though I specifically warn in my listings not to do that, not to use privnote either, AND I even make it easy on them by providing nymserver email addresses (these automatically encrypt their information); and still they do this.

I just don't know.
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: pine on April 26, 2013, 02:56 am
I used to work in IT and still found it tough enough to learn to use but once you get it obviously it's great and easy!

I even screwed up by sending a seller who required all messages to be encrypted and that message needed to include your public key for a reply and I stupidly sent my private key!

The seller replied advising me to change that.

Can't work out how to double quote two posts in the one go if any of you can let me know how that simple task is done?

Quote tags. Like HTML, but using square brackets instead of angle brackets.

Code: [Select]
[quote author=HitTheRoad link=topic=152005.msg1054539#msg1054539 date=1366937150] <-----------------------
Something HitTheRoad said.
[/quote] <------------------------------------------------------------------------------------------------------------------

[quote author=HitTheRoad link=topic=152005.msg1054539#msg1054539 date=1366937150] <-----------------------
Something HitTheRoad said yet again.
[/quote] <------------------------------------------------------------------------------------------------------------------

which is:


Something HitTheRoad said.


Something HitTheRoad said yet again.
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: pine on April 26, 2013, 03:31 am
Greater than 80% of customers don't PGP encrypt their address.
You can say that again. Some guy placed two orders with me tonight, and his address was unencrypted. Even though I specifically warn in my listings not to do that, not to use privnote either, AND I even make it easy on them by providing nymserver email addresses (these automatically encrypt their information); and still they do this.

I just don't know.

Learning PGP is essentially an IQ test. Seriously.

That's why vendors should be especially committed to it. If you are captured and the Feds open your SR account somehow, and they have nothing but encrypted messages, many of their strategies fall flat on their face. e.g. distinguishing between domestic and international as a means to pressure you.

But even if only 10% of customers use PGP, that means something. If SR is taken offline, it is a whole lot easier to regroup when you have PGP aware customers. Not only are communication links intact if the customers used receivable email addresses, but you have the option to prove to them you're the same person by using signed PGP messaging, thus keeping your reputation intact. Finally, the PGP using customers are also likely to be your best customers, not just by weight, but by simply not being idiots and being consistent repeat business.



Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: Mr. Fluffles Schrodinger on April 26, 2013, 04:00 am
You also have idiots like me who have encrypted all sensitive information since day one and then decide one day to place an order without encryption....not so much decide as just go braindead for a minute. :/ It was with a major vendor who is a serious proponent of PGP, as well.  Still waiting for my order and hoping to DPR that they don't decide to teach me a lesson. Trusting they won't though. Luckily, they don't seem to be that type.

I think SR should have a giant 4 fingered cartoon hand that comes out and smacks you upside your head or punches you in the face before you do something that stupid.  Probably would have helped my splitting headache. 

That would mimic government brutality as well, but hey, that's the price we pay for greatness.
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: Blksheep on April 26, 2013, 04:44 am
Pine...your one smart chick! lol Hot too, it sounds.  :) (going by the picture of a woman by your name, I'm assuming your a chick) I am amazed by the intelligent people who roam the road.
I learn so much from you all and love everything about it. Thanks for you input on this post.  ;)
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: 1455992 on April 26, 2013, 05:04 am
I believe everyone is entitled to their own decision regarding PGP. I for one am not one of those SUPER paranoid people that think the feds will come for me over my 10$ stamp bag of heroin. If ANYTHING i'll get a customs letter at most, or a request to come sign for my package at the PO, which i will ignore obviously. There are bigger fish to fry. Don't get me wrong, if you're ordering SUPPLIER amounts of drugs, by all means, be paranoid. I just don't believe that I'm going to get absolutely shit on for very low quantity orders, especially when you can basically say you weren't expecting a package. For all they know, someone who had a personal problem with me could have done it to set me up, so to speak.  Also, not all the things for sale on SR are illegal. The purpose of SR is to be a free market, it is not specifically a drug market, although that is what it's known for. I believe your opinion is worthy of discussion though, so don't think I'm bashing what you said. Just keep in mind, even if you don't PGP your address on an order, it's CORRECT vendor behavior to not keep addresses, and SR deletes it after the purchase is complete.  To each their own, i suppose.
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: RxKing on April 26, 2013, 05:44 am
@ PINE

There is NO NEED at all to make FE go away. It is a choice. NO ONE forces you to do FE. In fact the buyers control that. The buyers CHOOSE to use a vendor that requires their customers to FE. And each person has the option...yes option.... to do it or not. As a vendor I do not require it and never would. But there have been times on an order of say 10k that I wanted those coins right away...as I was going to trade them for cash and I wanted the rate right then and there...and even waiting 24 hours would have cost me 5k. So in that case the FE was needed. And my customer had no issue with it at all. The fact is the buyer needs to make that decision.

As to the pgp...that is another thing that only affects the buyer...and it only affects the buyer if you believe at one point SR will be compromised and you also believe when compromised that the SR servers will in fact have all the information from messages and from the orders available Even though DPR has stated that information is not saved and even if the servers were compromised that information would not be available.

The truth is, the bigger issue is if a vendor keeps the information or not. That is something that would come back to hurt a buyer a lot more then SR being compromised.

Also any second year law student can tell you that messages alone are worthless in a criminal case, especially ones from the past, and that even if SR was compromised and they could get messages with addresses and what you ordered from say 1 year ago...or even 1 month ago...that information alone would not get you in trouble.

PGP is another layer of security...BUT it is not something that is this big lifesaver. And FE is not something that is a problem. The problem is getting people to understand how things work and what not to d to and what to do.

In over 1 year here I can tell you I have witnessed things that buyers do that would blow everyone's minds. If I didn't have these things happen to me...I would never believe people are that dumb. THEY ARE.

And you would have to be a total idiot if you believed that PGP alone will in any way protect you. There are 10 other things that are more important then PGP. And as to the FE...that is something that will never go away and actually it really can't. And the beauty of how it now..is YOU HAVE A CHOICE. And I for one like when I have the freedom to choose. And as a buyer if you choose correctly and you have an IQ over 90 you should be able to order and receive your goods on SR with no problem 100% of the time. And in fact I think most buyers do just that.
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: SOUTHPAW on April 26, 2013, 08:46 am
be sure to have link on your page for a tutorial about pgp.

http://gpg4usb.cpunk.de/docu.html

it got nasty last night when Yo mama sent her key

oh sh1t

Nice hit caman420...Got give ya some +
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: eddiethegun on April 26, 2013, 01:48 pm
Not true that PGP only affects the buyer. More importantly it protects the vendor.

If SR gets compromised and no one used PGP, LE could intercept EVERY package Mr. Vendor sends out.

Dust for fingerprints, swab for touch DNA, photograph and profile the shit out of those packages.

That's a whole lot of evidence of a whole bunch of felonies.
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: RxKing on April 26, 2013, 02:35 pm
Not true that PGP only affects the buyer. More importantly it protects the vendor.

If SR gets compromised and no one used PGP, LE could intercept EVERY package Mr. Vendor sends out.

Dust for fingerprints, swab for touch DNA, photograph and profile the shit out of those packages.

That's a whole lot of evidence of a whole bunch of felonies.

OK 007...let me help you out a little bit...

IF SR was to be compromised  the site would still have to have the information on the servers...Well DPR has stated  that is no longer there and would not be there if the site was compromised.. He has a program to erase ll information that has already gone through the system. So you would have to believe that all of that is not true  and if you believe that all of that is possible...then yes the messages that were pgp protected could not be found...But also at that point...SR is down...meaning  they would not be able to intercept the packages at all.

As SR would be down at this stage... And so they wont have anything to finger print, photograph and file.
So it is a 1000 times more likely threat that some dumb lazy vendor has kept all the address he has done business with, and journal-ed all the transactions.. And then that gets a dui..... That would pose a way highrisk then SR getting compromised would you not agree?

What has a better chance of happening....1 of the 1000 vendors being an idiot and getting caught...or DPRa getting his servers Compromised and not only that...then DPR would have had to be lying to us and in fact the files are not destroyed at all..they have them...from a year ago in another country.... Now again before it gets to this...you have to believe that DPR is lying to us and does not have things protected... so lets go worse case...it is compromised...SO they have fake names or backdoor into the WWW where they can in no way go after the small time buyers....or the small time vendors. on here. It would be a mess to prosecute..some say impossible.. you have different countries,Interpol,FBI and all of them have to sift through tons of shit.. from who knows when... And in fact if you do not believe that DPR as has covered...can you at least agree that He was/is smart enough to make a mess over there...

So again...all this has to heppen...and if it does not happen..it is a 100% waste of time..

Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: Ticket on April 26, 2013, 02:57 pm
Learning PGP is essentially an IQ test. Seriously.

That's why vendors should be especially committed to it. If you are captured and the Feds open your SR account somehow, and they have nothing but encrypted messages, many of their strategies fall flat on their face.

Exactly. As a vendor, I explicitly state that I will cancel any order for which the submitted address is unencrypted. Most people comply. For those that don't, I look at their buying history. Those with no history do NOT pass the IQ test, and I cancel the order. Those that have a substantial order history with no refunds or auto-finalizations pass the IQ test by other metrics, so I simply send them a message notifying them of my policy, and go ahead with the order just this once.

Yes, the cryptography does offer legitimate protection. But as a vendor, I'm also trying to ascertain if I'm dealing with someone who will be able to properly receive the package. PGP is not that difficult. If a buyer can't follow simple instructions listed in full caps on the listing page (as well as my vendor page), then I simply can't do business with them, for my own safety.
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: eddiethegun on April 26, 2013, 08:10 pm
The whole point of PGP is you don't /have/ to trust DPR or Silk Road (and frankly, you're a sucker to trust them now).

If you use PGP then DPR can be sitting in prison and the site can be hosted on Eric Holder's personal laptop, it wouldn't matter.

If you sold what I sold, saying PGP is a waste of time might be a defensible position. If I sold what you sold, I'd be a fucking moron to think that.
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: pine on April 26, 2013, 10:24 pm
You also have idiots like me who have encrypted all sensitive information since day one and then decide one day to place an order without encryption....not so much decide as just go braindead for a minute. :/ It was with a major vendor who is a serious proponent of PGP, as well.  Still waiting for my order and hoping to DPR that they don't decide to teach me a lesson. Trusting they won't though. Luckily, they don't seem to be that type.

I think SR should have a giant 4 fingered cartoon hand that comes out and smacks you upside your head or punches you in the face before you do something that stupid.  Probably would have helped my splitting headache. 

That would mimic government brutality as well, but hey, that's the price we pay for greatness.

This is the reason why I once suggested that DPR put a simple message with a link (to PGP Club!) about PGP on top of the the order box. Forcing all buyers to learn PGP to make their first order would probably drop volume by at least 75%, but I see no reason not to cajole people into doing the right thing with every possible means short of coercion. Some newbies blissfully dismiss PGP because they haven't heard of it and think it's Just Another Technology Acronym, and others occasionally make slips as you've had the misfortune yourself.

@ PINE

There is NO NEED at all to make FE go away. It is a choice. NO ONE forces you to do FE. In fact the buyers control that. The buyers CHOOSE to use a vendor that requires their customers to FE. And each person has the option...yes option.... to do it or not. As a vendor I do not require it and never would. But there have been times on an order of say 10k that I wanted those coins right away...as I was going to trade them for cash and I wanted the rate right then and there...and even waiting 24 hours would have cost me 5k. So in that case the FE was needed. And my customer had no issue with it at all. The fact is the buyer needs to make that decision.

You're presenting it as a choice for more freedom, but I don't think it really is, I think it's more about a lack of options. The reality is that several times scammers have stolen more capital than SR's entire cut per month. This undermines the market's confidence, it doesn't help it. In a free market participants have the choice to transact, but that should not be in conflict with doing business appropriately.

I understand your point about market volatility, but the solution is not FE, it's too blunt an instrument, it gives cover to scammers as well as honest vendors. The solution is using BTC option derivatives to control volatility for vendors. As soon as that structure comes into existence, FE has no reason for existence any more and that's the end of FE scammers. Then everybody gets what they want.

As to the pgp...that is another thing that only affects the buyer...and it only affects the buyer if you believe at one point SR will be compromised and you also believe when compromised that the SR servers will in fact have all the information from messages and from the orders available Even though DPR has stated that information is not saved and even if the servers were compromised that information would not be available.

I think we have to believe that. Even if it's not true, we need to believe it, due to the consequences of being wrong. An attack by a passive adversary is much more dangerous than an aggressive takedown. The only reason to do a "takedown" is to score political points.

It is most important for buyers to use PGP because it creates market confidence.
It is secondly important for SR because it makes it less of a target for hackers.
It is lastly important because vendors inboxes could be used as evidence against them.

Any one of those reasons is enough reason to use PGP!

The truth is, the bigger issue is if a vendor keeps the information or not. That is something that would come back to hurt a buyer a lot more then SR being compromised.

Sure, but it's a separate variable and cannot be controlled for. It's a different problem. I'm also willing to put money down on a PGP aware vendor being less likely to have plaintext addresses on his hard drive.

Also any second year law student can tell you that messages alone are worthless in a criminal case, especially ones from the past, and that even if SR was compromised and they could get messages with addresses and what you ordered from say 1 year ago...or even 1 month ago...that information alone would not get you in trouble.

I don't believe that for a second. You have not studied the Farmer's Market case study?! I don't understand why you think this.

PGP is another layer of security...BUT it is not something that is this big lifesaver. And FE is not something that is a problem. The problem is getting people to understand how things work and what not to d to and what to do.

?

In over 1 year here I can tell you I have witnessed things that buyers do that would blow everyone's minds. If I didn't have these things happen to me...I would never believe people are that dumb. THEY ARE.

Perhaps, but increasing hidden services like SR are going to appeal to a broader consumer demographic, one which is middle class, middle aged and much more likely to buy from SR. Those people are going to be much more likely to use PGP than the traditional product consumer demographic you're used to. You'll have to get used to it, we're moving up the value chain! :)

And you would have to be a total idiot if you believed that PGP alone will in any way protect you. There are 10 other things that are more important then PGP. And as to the FE...that is something that will never go away and actually it really can't. And the beauty of how it now..is YOU HAVE A CHOICE. And I for one like when I have the freedom to choose. And as a buyer if you choose correctly and you have an IQ over 90 you should be able to order and receive your goods on SR with no problem 100% of the time. And in fact I think most buyers do just that.

And the freedom to choose to go to jail, do not pass Go, is not a choice that any aware customer would choose to make because it is irrational. The consequences of being wrong are not you get a disappointing product or service, they are that you become a guest of the state.

By suggesting that we adopt professional protocols I am not suggesting that we adopt soviet economic planning! People who really want to FE can always PM their vendors and conduct business entirely outside SR as well, that is also an option for them. People use SR are doing so because it streamlines business transactions in the same way as Ebay brings buyers and sellers together. You can always send CIM to a vendor on Ebay, but nobody thinks this is a good idea! SR is a value added service, that is how to see it.

LE has historically tried to infiltrate on a network basis, usually moving up the distribution chain, using either communication networks or financial networks. We have the opportunity to kick the ladder out from under them, which is both hilarious and profitable. Read PolyFront!

Anyway, you are free to develop your own opinions. There is all kinds of risk taking, mine is more conservative than most admittedly, but I find the tradeoffs worth it. For one thing, PGP is repeatedly cited by LE agents as a frustration in regard to SR.

Pine...your one smart chick! lol Hot too, it sounds.  :) (going by the picture of a woman by your name, I'm assuming your a chick) I am amazed by the intelligent people who roam the road.

I only admit to being a monotreme, which LE agents do not consider useful information (it's the perfect cover).

Not true that PGP only affects the buyer. More importantly it protects the vendor.

If SR gets compromised and no one used PGP, LE could intercept EVERY package Mr. Vendor sends out.

Dust for fingerprints, swab for touch DNA, photograph and profile the shit out of those packages.

That's a whole lot of evidence of a whole bunch of felonies.

More importantly for the vendor! But yes, it's all true. You've suddenly gone from 1 in 200 average chance of interception to a 1 in 1 chance.

I believe everyone is entitled to their own decision regarding PGP. I for one am not one of those SUPER paranoid people that think the feds will come for me over my 10$ stamp bag of heroin. If ANYTHING i'll get a customs letter at most, or a request to come sign for my package at the PO, which i will ignore obviously. There are bigger fish to fry.

There are two problems with this.

1. You probably live in the United States. At a guess something like a third of SR's customers don't. Different rules apply elsewhere.

2. They aren't going to be catching thousands of vendors any time soon. So anybody they do catch, will get a disproportionate amount of attention. If you get just a few grams of heroin across state lines, they could in theory decide to put you in prison for decades.

So caution is the better part of valor.

Learning PGP is essentially an IQ test. Seriously.

That's why vendors should be especially committed to it. If you are captured and the Feds open your SR account somehow, and they have nothing but encrypted messages, many of their strategies fall flat on their face.

Exactly. As a vendor, I explicitly state that I will cancel any order for which the submitted address is unencrypted. Most people comply. For those that don't, I look at their buying history. Those with no history do NOT pass the IQ test, and I cancel the order. Those that have a substantial order history with no refunds or auto-finalizations pass the IQ test by other metrics, so I simply send them a message notifying them of my policy, and go ahead with the order just this once.

Yes, the cryptography does offer legitimate protection. But as a vendor, I'm also trying to ascertain if I'm dealing with someone who will be able to properly receive the package. PGP is not that difficult. If a buyer can't follow simple instructions listed in full caps on the listing page (as well as my vendor page), then I simply can't do business with them, for my own safety.

Yes. There are all kinds of extra benefits to using PGP that are not strictly cryptography related. Throughout history, it is always the "high priesthood" and their arcane symbols that ruled. Elites have always used a different language to everybody else. Today we have one global language for business, but the same concept is still woven into society. The elite of the information age use cryptography. Montell Williams, who is a moonbear, says PGP Club is a cult. In a way he's superficially right, but also wrong because it exists for a real reason.

He has a program to erase ll information that has already gone through the system. So you would have to believe that all of that is not true  and if you believe that all of that is possible...then yes the messages that were pgp protected could not be found...But also at that point...SR is down...meaning  they would not be able to intercept the packages at all.

As SR would be down at this stage... And so they wont have anything to finger print, photograph and file.

If a LE agency finds or has found the physical location of SR's server(s), I assure you they will take every precaution to capture "live" servers.

I, some people think I'm aiming for PGP utopia, don't believe everybody has to use PGP. I *do* believe that we cannot expect to win forever in a linear fashion. Our growth is likely to follow that of bacterial growth in an agar dish.

https://en.wikipedia.org/wiki/Bacterial_growth

In the death phase, a small number of the bacteria survive to fight another day due to their adaptive properties. Surrounded by waste and lack of food, they remain dormant until the environmental conditions renew themselves. These more evolved bacteria are super soldiers in comparison to their dying neighbors, because they have a special wall to protect against external environmental conditions. In the case of our system, I believe that protective wall to be secure communications. PGP is a form of disaster insurance, not a panacea. Everybody, including DPR, can have this protection by choosing to use PGP all the time and encouraging its adoption. It's a blue pill, red pill decision.

Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: HitTheRoad on April 26, 2013, 11:11 pm
I used to work in IT and still found it tough enough to learn to use but once you get it obviously it's great and easy!

I even screwed up by sending a seller who required all messages to be encrypted and that message needed to include your public key for a reply and I stupidly sent my private key!

The seller replied advising me to change that.

Can't work out how to double quote two posts in the one go if any of you can let me know how that simple task is done?

Quote tags. Like HTML, but using square brackets instead of angle brackets.

Code: [Select]
[quote author=HitTheRoad link=topic=152005.msg1054539#msg1054539 date=1366937150] <-----------------------
Something HitTheRoad said.
[/quote] <------------------------------------------------------------------------------------------------------------------

[quote author=HitTheRoad link=topic=152005.msg1054539#msg1054539 date=1366937150] <-----------------------
Something HitTheRoad said yet again.
[/quote] <------------------------------------------------------------------------------------------------------------------

which is:


Something HitTheRoad said.


Something HitTheRoad said yet again.

Thank you!
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: RxKing on April 27, 2013, 12:26 am
Quote from: RxKing on Today at 05:44 am

    Also any second year law student can tell you that messages alone are worthless in a criminal case, especially ones from the past, and that even if SR was compromised and they could get messages with addresses and what you ordered from say 1 year ago...or even 1 month ago...that information alone would not get you in trouble.
*********************************************************************************************************
from PINE-

I don't believe that for a second. You have not studied the Farmer's Market case study?! I don't understand why you think this.



This is a perfect example and I am glad you brought this up. I have studied it...and the FACTS are the ONLY reason they got caught was because of how they took payments...They processed funds with credit card machines..I mean they actually ran it like a Subway sandwiches would...They took Paypal, Visa, Mastercard ect. Also the government had that fall into there lap. If SR was compromised today.. they could not prosecute one single person based on what they would find on the servers...PERIOD.


In this case...PGP would in no way helped the situation.

But just because PGP would not have helped  is not reason to not use it.. Also I am not against it in any way.. I am just against people saying that using it would save everything. And in doing so you are so much safer. That is simply not true.

Again I am not against PGP... I just do not believe it is THE answer.

I like the points you make PINE. but you you must admit they come from a very paranoid place. It is almost like talking to a Prep-per. They firmly believe that the government is going to take away guns and money. And they are getting prepared. And there are a lot of others that believe they are just crazy. And it is never going to happen. I guess you can already tell what I believe. But I would never stop them from doing what they are doing. I would tell them to go talk to some of the Y2Kers...as they did the exact same shit...and they believed the exact same thing...

I am not trying to compare pgp to Preparers btw...I was just saying that all of this comes from the angle something will happen to SR...and if it does and you use pgp...you will be safer. And I totally disagree. 



Also PINE as you know...there have been 100's of claims on here that so and so vendor got busted and so and so's package got seized and he is arrested and every single time....they are 100% false. So much so that they have all but stopped...and they use to happen 2-3 times a week. And you and many others would be in there( the thread) believing the bullshit that was said...and after 12 pages...it could come out not true...and everyone would wait for the next thread...and this time it really was true....except it was not.. When I say this was a normal occurrence...I mean that. 1-3 a week  and I could dig them up...and every time they came out completely false.  And everyone would say it is just a matter of time. And then they would accuse a certain vendor of being a honey hole for LEO...and everyone would jump in...and people swore it was true...and yet again it was 100% false.

This went on for months..and it finally stopped. Now we see it less then 1 time per month...and it is usually when someone writes a post and they put SR in the title and they try to make it out like a vendor on SR in Australia was busted...when the facts are it is not true...though I have read a few people...hero members at that...pass on that knowledge that a vendor in AUS was busted..And it is simply not true.

Now of course non of this has anything to do with you or with PGP. But it does have to do with a lot of people that swear to pgp...are the same people that are always in these bullshit threads. And I would not doubt that a lot of them are Preparers IRL.
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: pine on April 27, 2013, 01:56 am
As paranoid as a platypus, so crazy doesn't even rate.

Anyway, I think we shall have to agree to disagree because I have no desire to argue.
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: RxKing on April 27, 2013, 08:09 am
As paranoid as a platypus, so crazy doesn't even rate.

Anyway, I think we shall have to agree to disagree because I have no desire to argue.

Well I agree you are totally paranoid! And I agree I do not want to argue.

 :)
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: samesamebutdifferent on April 27, 2013, 08:44 am
Greater than 80% of customers don't PGP encrypt their address.

I'm all in favor of having a mandatory PGP tutorial/test to get SR privileges.

I never encrypt my shipping details because they are not linked to me in any way shape or form. I obviously tell people to never send identifiable information unencrypted but when the drop addy is a burner who cares. I am pretty sure most people who do not encrypt though are just being ignorant or lazy, fucked if I would be sending my home address unencrypted that's for sure but I bet a lot of people do, craziness.
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: RxKing on April 27, 2013, 10:28 am
And instead of A PGP test...they should actually have to pass a BTC test. They also need to pass a Hedged VS un-hedged test.

I can not believe how many people do not understand 24 hour weighted average and how great it is that SR uses it.

Also just as unreal, maybe even more so, how many vendors  do not understand Hedging their listings vs not.


Both those things are more important then PGP.  The ones to past the PGP test should be buyers. Or even better SR users. 

The one thing that is kind of strange is how bothered some people are that others do not use PGP. It is NO WAY affects them. And before the idiot says " it affects them if it is a vendor that does not use it" Actually no it does not. DO NOT USE THAT VENDOR. Just like if you do not like FE. GREAT! Do not use a vendor that requires it! Simple!
 
Also has anyone else realized how much less scamming there is since the vendor fee went up? And that with the affect the Mods have had at getting the information across to not do BTC for Money Pack with anyone other then a trusted vendor. Yes scamming still happens and it always will no matter what. The simple fact is the more education there is for the newbies the better! I think it is great what DPR has done and it is also great what he has not done. You never going to make everyone happy and since that is a fact, it is better to have less regulation and let everyone choose on there own what to do then to make everyone do 1 thing. Some people are just not as paranoid as others. And some people like choices.
Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: somewhere27 on April 27, 2013, 11:16 am
Personally, I know Im the minority about this but I just dont trust PGP, I used it in the beginning, now I actually trust prvnote more, I just like it because only one person (the vendor) will have my information.  And I've made plenty of transactions.

Total transactions: 151
Total spent: $3517.56
Refund rate: 0%
Auto-finalize rate: 0%
Member for: 1 year

Title: Re: Everyone should pass a PGP test before allowed to order from vender!
Post by: pine on April 27, 2013, 09:49 pm
Personally, I know Im the minority about this but I just dont trust PGP, I used it in the beginning, now I actually trust prvnote more, I just like it because only one person (the vendor) will have my information.  And I've made plenty of transactions.

Total transactions: 151
Total spent: $3517.56
Refund rate: 0%
Auto-finalize rate: 0%
Member for: 1 year

You seriously need to do some research. PGP would be more secure than privnote if you were using a 2 bit public key. Hell, plaintext is superior!