Silk Road forums

Discussion => Security => Topic started by: AnonymousAddict on January 18, 2013, 08:02 am

Title: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: AnonymousAddict on January 18, 2013, 08:02 am
OK i got a pgp ley from somone, and the name was a plane name, i would never do nothing with this, so i msg the guy and said bro is your name blank ...IRL...HE SAID YEAH how do u know?? i told him bro change your pgp ASAP RIGHT NOW TAKE IT DOWN, NOW!!! U R SURE TO GET BYSTED,..WELL HE ALREADY HAD 80 OTHER SALES ATM AND HE SAID NO ONE TOLD HIM.... SO IM worried about the guy...80 ppl saw his real name, and he did go on to say someone said if he didnt send them drugs or so many btc he knw hes name but he thought it was bs now he knws....man o man...
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: scout on January 18, 2013, 08:09 am
Yikes.  That's horrible.  Has he fixed the problem now that you told him about it?
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: opi on January 18, 2013, 08:10 am
What was the point of this thread??

doesn't seem like anything worth posting in a forum for dude..... seems pretty pointless
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: Stonedstupor on January 18, 2013, 08:15 am
what a dumbass how you gunna put in your real goddamn name for a PGP key for SILK ROAD. especially being a vendor haha.
this being said, hope he doesn't get busted.
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: kmfkewm on January 18, 2013, 08:17 am
Back in the day on the private forums when we first mandated GPG, probably a good 2 or 3 percent of people put their real names and/or email addresses on them.
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: gingerballs on January 18, 2013, 08:48 am
well at least i know i'm far from the dumbest guy on SR.
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: AnonymousAddict on January 18, 2013, 08:49 am
What was the point of this thread??

doesn't seem like anything worth posting in a forum for dude..... seems pretty pointless

U seem to have a smart ass remark about allot of my posts dude, u dont like what i say dont bother to read or keeP moving...I posted it cause its a security matter ..DUHHHH
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: jagfug on January 18, 2013, 02:32 pm
What was the point of this thread??

doesn't seem like anything worth posting in a forum for dude..... seems pretty pointless

U seem to have a smart ass remark about allot of my posts dude, u dont like what i say dont bother to read or keeP moving...I posted it cause its a security matter ..DUHHHH
Some guys seem to get huge ego problems when they get on a forum like this. It's usually an inferiority complex (most likely a small penis). ;D
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: AlistairCook on January 18, 2013, 02:49 pm
Whats wrong with using your real name?

Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: Nightcrawler on January 18, 2013, 03:11 pm
Back in the day on the private forums when we first mandated GPG, probably a good 2 or 3 percent of people put their real names and/or email addresses on them.

Probably about the same percentage of people here do the same thing. It's almost as if, when the computer tells them to do something, their critical thinking faculties turn off or something.

Nightcrawler <Nightcrawler@SR>
PGP-Key: 4096R/BBF7433B 2012-09-22
Key fingerprint = D870 C6AC CC6E 46B0 E0C7 3955 B8F1 D88E BBF7 433B
PGP Key: http://dkn255hz262ypmii.onion/index.php?topic=174.msg633090#msg633090
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: AnonymousAddict on January 18, 2013, 03:25 pm
Whats wrong with using your real name?


DUDE UR JOKING RIGHT?? WHATS THE BIG DEAL IN USING YOUR REAL NAME ON YOUR PGP? YOUR ENCRYPTION DEVICE? U R CLEARLY SOMEONE WHO DOESNT PRACTICE PGP AND WILL BE ONE OF THE ONES WHO GETS BUSTED...
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: Nightcrawler on January 18, 2013, 03:44 pm
Whats wrong with using your real name?

If you post a PGP key, anyone who downloads that key can see what is on it.  That includes the police, who doubtless harvest all the keys posted here.

If your key shows that you name is John Smith and your email address is jsmith@yahoo.com,  then the authorities can get your IP address pretty easily. Your IP address, coupled with the dates/times of your logins, reveals your ISP.  Yahoo gives the police the IP addresses, and the dates/times of the logins. The IP address leads to the ISP, let's say Comcast.

Comcast informs the police that the subscriber information for this account is:

John Smith
123 Main Street
Burlington, Vermont

Now do you see where there's a problem?

Nightcrawler <Nightcrawler@SR>
PGP-Key: 4096R/BBF7433B 2012-09-22
Key fingerprint = D870 C6AC CC6E 46B0 E0C7 3955 B8F1 D88E BBF7 433B
PGP Key: http://dkn255hz262ypmii.onion/index.php?topic=174.msg633090#msg633090

Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: Oompaloompa on January 18, 2013, 06:09 pm
Given this vendor has now given probably 80 people his real name I'd say his privacy is out of the bag.
This presents a real problem for anyone who deals with him in the future - even once he gets a new PGP key.
He's currently near the top of the 'most likely to get busted' list & if he's got a bag of packages with addresses on them when he is then a lot of others are going to be dragged into some serious trouble.

Are you prepared to name this vendor so we can all keep our distance - at least until he gets a new vendor name?
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: NOTspacecase on January 18, 2013, 06:24 pm
What was the point of this thread??

doesn't seem like anything worth posting in a forum for dude..... seems pretty pointless

LOL, I get where opi is coming from because on your average drug forum everything anonymousaddict does can be considered rude/offensive but over here on SR, it's good to have these people. It's not your average drug board and we all know why we want to keep people like this around for obvious reasons.

Run off the scammers not the good people...
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: grdr on January 18, 2013, 07:04 pm
no need for posting his name publicly just tell him to remove listings and get new seller account, change photos, use new pgp. But police might already have his address and will be watching him already.
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: Novartis on January 18, 2013, 07:09 pm
AH fuck! so we shouldn't have our Novartis@tormail.org email address on the PGP??

wtf, can we change this without having to make a new key??
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: astor on January 18, 2013, 07:39 pm
What was the point of this thread??

This is AnonymousAddict's freak out of the day. :)

Yesterday it was three separate threads about avatars. Tomorrow it will be something different.

That being said, I'd like to know the name of this vendor so I can stay away from him.
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: Nightcrawler on January 18, 2013, 08:01 pm
AH fuck! so we shouldn't have our Novartis@tormail.org email address on the PGP??

No, that is NOT what he is saying, at all.  What he is referring to is a vendor who is apparently using their real name (and possibly clearnet email address) on their PGP key. 

Is your real name Novartis?  Is Novartis@Tormail.org a clearnet address? No on both counts.  You have nothing to worry about.

wtf, can we change this without having to make a new key??

Yes, it is possible to edit the information on a key. No, it is not necessary, in your case. 

In any event,  there is nothing wrong with having multiple PGP keys.

Nightcrawler <Nightcrawler@SR>
PGP-Key: 4096R/BBF7433B 2012-09-22
Key fingerprint = D870 C6AC CC6E 46B0 E0C7 3955 B8F1 D88E BBF7 433B
PGP Key: http://dkn255hz262ypmii.onion/index.php?topic=174.msg633090#msg633090
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: Nightcrawler on January 18, 2013, 08:03 pm
What was the point of this thread??

This is AnonymousAddict's freak out of the day. :)

Yes, but in this case it is justified.

Yesterday it was three separate threads about avatars. Tomorrow it will be something different.

That being said, I'd like to know the name of this vendor so I can stay away from him.

Agreed.

Nightcrawler <Nightcrawler@SR>
PGP-Key: 4096R/BBF7433B 2012-09-22
Key fingerprint = D870 C6AC CC6E 46B0 E0C7 3955 B8F1 D88E BBF7 433B
PGP Key: http://dkn255hz262ypmii.onion/index.php?topic=174.msg633090#msg633090

Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: CrazyBart on January 18, 2013, 08:53 pm
The name on my Key is probably somebodies real name, not mine tho.

Maybe he does the same thing as me, use a "real" name that isnt his, and his response was a sarcastic one when you asked him if that was his real name.
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: astor on January 18, 2013, 09:05 pm
Maybe he does the same thing as me, use a "real" name that isnt his, and his response was a sarcastic one when you asked him if that was his real name.

The vendor supposedly admitted it was his real name:

so i msg the guy and said bro is your name blank ...IRL...HE SAID YEAH how do u know??
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: Skeezer on January 18, 2013, 09:10 pm
Maybe he does the same thing as me, use a "real" name that isnt his, and his response was a sarcastic one when you asked him if that was his real name.

The vendor supposedly admitted it was his real name:

so i msg the guy and said bro is your name blank ...IRL...HE SAID YEAH how do u know??

That could be sarcasm is what he's saying. If I was a vendor and somebody asks me if blahblahblah is my name (and he was right), I sure as hell wouldn't admit to it.
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: SorryMario on January 18, 2013, 11:55 pm
I agree, it's gotta be sarcasm on the part of the vendor.

I mean with newb buyers who know absolutely nothing about PGP or information privacy and only want to know the absolute minimum necessary to be able to get drugs shipped to them - sure, I can believe a fair number of them are stupid enough to put their real identity information in the PGP fields.

But a vendor? A vendor who's gone through the trouble to get a vendor account on SR and has been in the drug game long enough to maintain a steady supply of whichever drug(s)? That guy is gonna attach a public PGP key linked to his real identity to a bunch of pictures of the dope he's got for sale on SR?

Sorry, but if this is actually true I think you should reveal which vendor it is since ordering from him would be an incredible security risk for everyone! It will also give the guy a chance to post 'hey numbnutz, I was joking - obviously my real name isn't "Ernest Borgnine" (or whatever).' Seriously, oust this fucker so he can defend himself or so we all can avoid him if not.
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: robotrippin on January 19, 2013, 12:37 am
Really if you don't out this dude then this post has no point. I don't give a shit about a story of this happening. I want to know who the vendor is. They can come here and state their case and we can all make our own judgement as to what to believe and how to move forward. It seems your intent was to try to help the vendor and potential customers and none of that can happen if the vendor is not called out. This post is about as worthless as the spam if the account isn't noted in it.
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: motek on January 19, 2013, 01:33 am
 
Code: [Select]
That could be sarcasm is what he's saying. If I was a vendor and somebody asks me if blahblahblah is my name (and he was right), I sure as hell wouldn't admit to it.
wouldn't you want to know HOW they had you correct name IRL?


The other day I was importing some keys, and all of them had the vendors name except for one, which had a 'normal looking'  name ... the problem was that I didn't know which vendor it was from

I cant say the idea of checking with the vendor IF this was their name IRL though  :-\

   AAAAAAARRRRRGGGHHHH!!!!!     FFS!!!   capcha try  # 9!!!
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: Skeezer on January 19, 2013, 03:47 am
Yeah, obviously. But it would basically be incriminating yourself to admit that it was indeed your name.
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: Novartis on January 24, 2013, 03:32 am
AH fuck! so we shouldn't have our Novartis@tormail.org email address on the PGP??

No, that is NOT what he is saying, at all.  What he is referring to is a vendor who is apparently using their real name (and possibly clearnet email address) on their PGP key. 

Is your real name Novartis?  Is Novartis@Tormail.org a clearnet address? No on both counts.  You have nothing to worry about.

wtf, can we change this without having to make a new key??

Yes, it is possible to edit the information on a key. No, it is not necessary, in your case. 

In any event,  there is nothing wrong with having multiple PGP keys.

Nightcrawler <Nightcrawler@SR>
PGP-Key: 4096R/BBF7433B 2012-09-22
Key fingerprint = D870 C6AC CC6E 46B0 E0C7 3955 B8F1 D88E BBF7 433B
PGP Key: http://dkn255hz262ypmii.onion/index.php?topic=174.msg633090#msg633090


Ohhh haha so I shit myself for nothing then lol, thanks for the info. It's very much appreciated. As is all the info on this forum.

Thanks all!
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: darthvaderstar on January 24, 2013, 07:51 am
i concur that this is his freak out of the day.
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: AnonymousAddict on January 25, 2013, 12:03 am
We all know your from Pensacola idiot don't worry.


WHAT IS THIS WITH U OUT OF NO WHERE IN THREADS SAYING IM FROM PENSACOLA??? I do not even live in FL im east Coast but not that far east u dumb fuck.. And if i did giving out ppls locations is enough to get you booted the fuck off like u should have been long ago for your trolling and BS u do.. U bring nothing to the SR table but BS.

Nobody like you, your annoying and youv gotta be no older than 13 by the way u act, what are u a neo nazi>? o wait i fogot u bash on every race.. So your just a IT.. 

Grow up stop trolling.. btw If i was from what place u say im from what does it matter?? U have thrown that comment on several threads out the blue iv read that have nothing to do with me.. Your probley the same one stalking me one here. Crazy little fuck go take your Bi Polar Meds Mommy sits on the counter for you every day and night, and go in your room get mad and punch a wall like the bad ass u are.. LOOSER!!!   

BTW GUYS the issue has been handled long ago he sent me a new key to prove, The reason why i believed it was legit is cause he was seriously asking how i knew his name and etc etc...  Its fine now thread locked
Title: Re: Guys MAJOR SECURITY ISSUE WITH SENSITIVE INFO
Post by: AnonymousAddict on January 25, 2013, 12:18 am
Guys Non of us know who are cops and who are not cops on here.. So for me to give the vendors name out who has changed his key so which says a little something IMO, BOUT THE NAME ISSUE i would be sending cops right to his profile to import his key and have his name...


I dont trust no one on this thread and neather should any of you..Am i RIGHT?  Im  locking this thread now though cause it as far as i see is no longer important. I see people post BS all the time and i post some thing about a security issue and some ass holes troll about it.. R we not suppose to be a community there to help AID AN ASSIST ONE ANOTHER AND DO WHAT WE CAN WHEN WE CAN WHEN WE SHOULD FOR THIS COMMUNITY?? not troll the boards but Help one another and spread righteous knowledge worth reading that could save our fucking ASS. Or help our ass out.. Not the other way around.

This new Generation is turning it into 4chan..BTW 4CHAN IS GAY.. locking thread guys