Silk Road forums
Discussion => Security => Topic started by: psytrip on February 10, 2013, 03:59 pm
-
Hello SR family,
How are all of you doing?? I was just browsing the net on google chrome yesterday and was shocked by one of SR forums discussion to be popped up directly on the first page of google.. And the worst part, it doesn't even required a tor browser to open the web address .. It was accessible from google chrome itself.
Now I want to know if these discussions are there on google and no need of a tor browser, how come we all are anonymous. I want opinions, suggestions and feedback's so that our community is safe to browse our own forums, not on any other web browser and results coming up on google, but on tor browser. And what could be done to prevent these kind of issues, and last Should we really worry about all this coming up on google?? There should be a discussion...
Thank you all and for your reference this is the web address which is directly accessible from any other browser :
http://dkn255hz262ypmii.onion.to/index.php?topic=45270.0
Save us Lord Jesus !!!
-
I always thought that if you opted to use that page to see a tor page then you would not be anonymous,you probably shouldnt click on it at all.
-
Onion.to is a website that allows normal browsers to connect to the tor network. Google can access hidden services through sites like onion.to.
Tor hides your real ip address. Having google link to the SR forums does not compromise this.
Using onion.to to access any hidden service will not hide your identity. You are essentially saying:
"Hey onion.to! My IP is xxx.xx.xx.xx and I want to connect to xx hidden service".
I don't think this really brings up any 'issues' to be concerned about, as long as users access hidden services correctly and not through 3rd parties like onion.to
Users are far more likely to deanonymize themselves by inadvertently linking their anonymous persona with their real life identity.
For example: you mention time periods, websites, browsers that I assume you were using from a normal browser (not tor).
Question: How many people accessed that link with chrome, through google - yesterday? Not too many I believe. Who knows. Maybe you are the only person who fits the above descriptors. In fact I know who knows - Google knows.
Also, if you are using your home computer with no proxy your ISP will also have records showing that you were accessing tor at the moment of this post.
I have no idea of the lengths LEA's go to to deanonymize individual users. But there's no reason to make their job easier.
I assume large companies like google and ISP's would have no problem handing info over to LE.
I also assume everything that is written here is saved to an LE hard-drive.
The old addage: 'Fly with the crows - get shot with the crows' is turned on it's head with tor.
-
Also, if you are using your home computer with no proxy your ISP will also have records showing that you were accessing tor at the moment of this post.
So you are saying that if I don't use a proxy my isp will know that I am accessing SILK ROAD. Or will they just know that I am using TOR HIDDEN SERVICE. Please Elaborate???
-
Yes your isp records connections you make - Including the connection to the entry node to access tor. So your isp can see that you are connected to tor since the list of entry nodes is public (unless your using a bridge).
Tor does nothing to prevent this.
Your isp will only be able to tell you have accessed the tor network. Not which sites/services you have connected to.
-
^^ All right so it means I am the one who is accessing darknet through Tor and some LE's may be monitoring my traffic (May be).. For that I need a proxy or know how to use a bridge !! May be I will have to learn this technology as well and become more secure. BTW thanks for the reply and useful information .. :-)
-
from what i have come to understand..
is that Tor connections mix/match with subsequent regular connections.
meaning it all looks the same pretty much..
maybe not if you're on more one than the other...
or using both at the same time for a period of time..
or if your ISP has been asked to monitor your internet activity. :)
not to mention, honestly, you can "change" your IP or MAC address..
without even going through Tor or any hidden service. :)
not to mention the Government has like 2-3 other "highly classified" internets.
WE ARE ALL ANONYMOUS.
fuck the fbi and everyone else!
you all killed Aaron Schwartz!
WE NEED TO WAKE UP.
/thumbs
-
That's why you get a ""big warning"" when you use .to or tor2web or the anonymox tor option.
Those last two have made it impossible to access silkroad.
The warning reads too ,if you want to be anonymous you should not use their site , but tbb or tails etc instead.
No surprises there, the warning is clear.
You are not anonymous !
So don't use the .to option.
Only torbrowser and gpg when you give your real address to your vendor.
They will never catch you , if you stick to use those two.
-
Just Be Safe :-p
Peace,
ChemCat
8)
-
from what i have come to understand..
is that Tor connections mix/match with subsequent regular connections.
meaning it all looks the same pretty much..
maybe not if you're on more one than the other...
or using both at the same time for a period of time..
or if your ISP has been asked to monitor your internet activity. :)
not to mention, honestly, you can "change" your IP or MAC address..
without even going through Tor or any hidden service. :)
not to mention the Government has like 2-3 other "highly classified" internets.
WE ARE ALL ANONYMOUS.
fuck the fbi and everyone else!
you all killed Aaron Schwartz!
WE NEED TO WAKE UP.
/thumbs
Thank you so much for making me aware of changing ip and mac addresses... and from now on no using of .to sites....
So don't use the .to option.
Only torbrowser and gpg when you give your real address to your vendor.
They will never catch you , if you stick to use those two.
Thats cool.. Now I don't have to worry anything about... Because I use these two.. :-)
Just Be Safe :-p
Peace,
ChemCat
8)
Everyone should be safe and you too mate..
psytrip
-
psytrip :)
+1 to ya :)
Peace,
ChemCat
8)
-
TO THE OP I USE CYBERGHOST TO CHAGE /HIDE MY IP... Im already stealing someone eles WIFI but soon as i get on i connected to cyberghost 1t, then go and connect to TOR, Not really needed but why not an xtra layer of protection ya know?
With cyberghost they give u a month free then u have to buy it.. There are many programsVPNS u can download to hide your IP. Im useually showing im in France or the Uk..lol
-
psytrip :)
+1 to ya :)
Peace,
ChemCat
8)
Thank you Chemcat ...
TO THE OP I USE CYBERGHOST TO CHAGE /HIDE MY IP... Im already stealing someone eles WIFI but soon as i get on i connected to cyberghost 1t, then go and connect to TOR, Not really needed but why not an xtra layer of protection ya know?
With cyberghost they give u a month free then u have to buy it.. There are many programsVPNS u can download to hide your IP. Im useually showing im in France or the Uk..lol
Brother will be using some proxy software soon to be completely anonymous.... Thanks for the information.....
-
TO THE OP I USE CYBERGHOST TO CHAGE /HIDE MY IP... Im already stealing someone eles WIFI but soon as i get on i connected to cyberghost 1t, then go and connect to TOR, Not really needed but why not an xtra layer of protection ya know?
With cyberghost they give u a month free then u have to buy it.. There are many programsVPNS u can download to hide your IP. Im useually showing im in France or the Uk..lol
Great idea! Thanks for mentioning this
-
Is it OK to access Silk Road Forum through the onion.to-address if you don't log in?
I did that a couple of times when I was just going to be browsing the forum without logging in.
But I noticed the browsing was faster when I used Torbrowser so I use that every time now.
-
TO THE OP I USE CYBERGHOST TO CHAGE /HIDE MY IP...
There are many programsVPNS u can download to hide your IP. Im useually showing im in France or the Uk..lol
Slightly off topic:
When you change your IP this way, or even when you use Torbrowser, does that mean you get an IP that actually belongs to someone else? So if some illegal activity is linked to the IP someone else can get prosecuted for those activities?
-
When you change your IP this way, or even when you use Torbrowser, does that mean you get an IP that actually belongs to someone else? So if some illegal activity is linked to the IP someone else can get prosecuted for those activities?
With Tor browser the answer is yes and no. Yes, your IP appears to be someone's real IP - it's the IP of the exit node (the last link in the relay chain). But no, they can't be prosecuted because they just show their ISP (or cops, if it ever went that far) they're running a Tor exit node. There's some info about this on the Tor site "abuse FAQ" and they have a standard form people can use to deal with their ISP while running an exit node.
Is it OK to access Silk Road Forum through the onion.to-address if you don't log in?
I did that a couple of times when I was just going to be browsing the forum without logging in.
But I noticed the browsing was faster when I used Torbrowser so I use that every time now.
It's not a good idea because now your IP address can be positively linked to browsing here (and by extension, SR probably). I don't necessarily think anything will come of it, but it makes it easy for the wrong people to peel away your anonymity (if they try). Personally, I prefer the security that comes from making sure that is damn near impossible.
-
Amazing and knowledgeable replies posted by everyone out here... Thank you for your help...
Now, again I have a question... I hope you all don't mind answering this one as well... So here it goes ...
I have configured my vidalia bundle to use tor, as a non exit relay i.e relay all traffic inside the tor network... So when all the traffic is inside the tor network... Is there any chance to reveal my ip address.. Also I use a program ultrasurf... So whenever Vidalia gets started... Ultrasurf is launched at the same time...
Is there any one out there to elaborate if I am doing it rite or wrong to become anonymous??? Any help would be appreciated...
Stay safe,
psytrip
-
Is it OK to access Silk Road Forum through the onion.to-address if you don't log in?
I did that a couple of times when I was just going to be browsing the forum without logging in.
But I noticed the browsing was faster when I used Torbrowser so I use that every time now.
It's not a good idea because now your IP address can be positively linked to browsing here (and by extension, SR probably). I don't necessarily think anything will come of it, but it makes it easy for the wrong people to peel away your anonymity (if they try). Personally, I prefer the security that comes from making sure that is damn near impossible.
Fuck. I guess I made a mistake. I have also been posting on other forums that I've accessed through an ordinary browser where I've talked about Silk Road and asked for advice. On some of those forums I even used my ordinary email-address. I changed the email later but that might have been too late. I guess I've made a lot of stupid mistakes. Maybe I'm pretty much fucked. I haven't ordered anything yet. Maybe it's impossible for me to order anything now??? I feel like there is so much you have to think about that it's impossible not to make some mistake. Any advice is appreciated.
-
Is it OK to access Silk Road Forum through the onion.to-address if you don't log in?
I did that a couple of times when I was just going to be browsing the forum without logging in.
But I noticed the browsing was faster when I used Torbrowser so I use that every time now.
It's not a good idea because now your IP address can be positively linked to browsing here (and by extension, SR probably). I don't necessarily think anything will come of it, but it makes it easy for the wrong people to peel away your anonymity (if they try). Personally, I prefer the security that comes from making sure that is damn near impossible.
Fuck. I guess I made a mistake. I have also been posting on other forums that I've accessed through an ordinary browser where I've talked about Silk Road and asked for advice. On some of those forums I even used my ordinary email-address. I changed the email later but that might have been too late. I guess I've made a lot of stupid mistakes. Maybe I'm pretty much fucked. I haven't ordered anything yet. Maybe it's impossible for me to order anything now??? I feel like there is so much you have to think about that it's impossible not to make some mistake. Any advice is appreciated.
Hey you are not yet engaged in any activity like buying any kind of substance... So u could consider yourself safe for now.... Don't make silly mistakes in future.... Make an anonymous E-mail address at tormail.org ... and use that everywhere.. Don't use any other browser other than tor for accessing SR or any underground website.... And use PGP ... All the best anyways....
stay safe,
psytrip
-
You all worry too much. Unless you're a big fish -- as in you're DPR (the guy who started Silk Road, Dread Pirate Roberts) or you only bother measuring weights in kilos or pounds -- they don't have the resources to bother with you.
Even if they did... it's not illegal to use SR. It's just illegal to buy, possess, or sell the substances for sale on it. You're doing nothing illegal by using this forum or browsing the site (what you admit to here is another matter entirely, of course).
Does this mean it's a good idea not to hide your identity or that it's pointless to be careful? Of course not, but it does mean if you've screwed up here or there, it's not a big deal. Just don't access Silk Road or the forums here through that onion.to proxy site, encrypt your address when making orders, make sure you only order from vendors with highly rated stealth packaging, and unless you're getting pounds of weed shipped overseas there's _VERY_ little chance you'll ever get in trouble from your SR activities (if you sell in person or get caught driving while tripping or some rubbish, obviously that's different).
BTW, these forum posts end up in Google searches because Google crawls the onion.to service.
-
from what i have come to understand..
is that Tor connections mix/match with subsequent regular connections.
meaning it all looks the same pretty much..
maybe not if you're on more one than the other...
or using both at the same time for a period of time..
or if your ISP has been asked to monitor your internet activity. :)
not to mention, honestly, you can "change" your IP or MAC address..
without even going through Tor or any hidden service. :)
not to mention the Government has like 2-3 other "highly classified" internets.
WE ARE ALL ANONYMOUS.
fuck the fbi and everyone else!
you all killed Aaron Schwartz!
WE NEED TO WAKE UP.
/thumbs
+1!!!!!!
-
from what i have come to understand..
is that Tor connections mix/match with subsequent regular connections.
meaning it all looks the same pretty much..
maybe not if you're on more one than the other...
or using both at the same time for a period of time..
or if your ISP has been asked to monitor your internet activity. :)
not to mention, honestly, you can "change" your IP or MAC address..
without even going through Tor or any hidden service. :)
not to mention the Government has like 2-3 other "highly classified" internets.
WE ARE ALL ANONYMOUS.
fuck the fbi and everyone else!
you all killed Aaron Schwartz!
WE NEED TO WAKE UP.
/thumbs
+1!!!!!!
Hey any idea why Aaron Schwartz hanged himself ?? Jail was a better option for him... But still RIP Aaron ....
-
from what i have come to understand..
is that Tor connections mix/match with subsequent regular connections.
meaning it all looks the same pretty much..
maybe not if you're on more one than the other...
or using both at the same time for a period of time..
or if your ISP has been asked to monitor your internet activity. :)
not to mention, honestly, you can "change" your IP or MAC address..
without even going through Tor or any hidden service. :)
not to mention the Government has like 2-3 other "highly classified" internets.
WE ARE ALL ANONYMOUS.
fuck the fbi and everyone else!
you all killed Aaron Schwartz!
WE NEED TO WAKE UP.
/thumbs
That's, not quite accurate, just FYI. Kind of close, but... no. Your ISP provides you with an IP address. It doesn't matter if you change your MAC address. They bill you, thus they know who you are and will happily throw you under a bus if anyone so much as hints they want to know. Most ISPs are that way, at least.
-
This doesn't effect anonymity at all. It only makes it easier for people who don't post here to see what we're saying. I could give a shit. You think my birthname was DMTisinME? Oh, shit I should probably change my profile.....
-
Prepaid smartphone bought with cash. Enable Personal Hotspot. Use Tails on Laptop. Encrypt everything sensitive. Never use phone except for connecting to Tor. Make or buy Faraday bag. Always store phone in the bag when not being used.
Would this be a gewd setup?
-
No, because you're still going to be identified by the location of the cell phone. If you never even turn the thing on anywhere near any property tied to you, then... yes, I suppose that would work. But the mobile device is the weakest link here: they're designed to prevent the end user from having administrative privileges. The carriers love to not let you change their precious spyware and monitoring tools.
Rooting or jailbreaking a phone is literally exploiting a security hole in the operating system to elevate your account to administrator status, so that you can undo or override what the carriers did before they gave you the phone. It's hacking your own device -- maybe that puts into perspective how questionable the security of any mobile device really is.
-
Being here listening to you guys is really an eye opener.....Thanks For Info.
-
TO THE OP I USE CYBERGHOST TO CHAGE /HIDE MY IP... Im already stealing someone eles WIFI but soon as i get on i connected to cyberghost 1t, then go and connect to TOR, Not really needed but why not an xtra layer of protection ya know?
With cyberghost they give u a month free then u have to buy it.. There are many programsVPNS u can download to hide your IP. Im useually showing im in France or the Uk..lol
Doesn't stealing wifi leave you vulnerable to that system admin? I'm a baby with computers and just trying to learn as much as I can. This is the first I've heard of Cyberghost and I'm just learning about vpns...
Consider:
You connect to "Al's" wifi. Al is paranoid and smart with computers and he spots you on his network. Can't he fuck with your pre-TOR connection running through his network?
cheers,
c
-
No, because you're still going to be identified by the location of the cell phone. If you never even turn the thing on anywhere near any property tied to you, then... yes, I suppose that would work. But the mobile device is the weakest link here: they're designed to prevent the end user from having administrative privileges. The carriers love to not let you change their precious spyware and monitoring tools.
Rooting or jailbreaking a phone is literally exploiting a security hole in the operating system to elevate your account to administrator status, so that you can undo or override what the carriers did before they gave you the phone. It's hacking your own device -- maybe that puts into perspective how questionable the security of any mobile device really is.
I'd never incorporate mobile phones in my "setup".
One of the few good things is to make use of virtualization.
For instance get yourself a Linux host OS, fully encrypted and also put your VMs in a hidden volume.
-
moar of this!