Silk Road forums

Discussion => Newbie discussion => Topic started by: hmonz420 on May 07, 2013, 12:16 am

Title: Privnote vs PGP
Post by: hmonz420 on May 07, 2013, 12:16 am
I'm just wondering is PGP that much more effective than privnote? Privnote is easier and quicker imo and I get lazy sometimes.
Title: Re: Privnote vs PGP
Post by: modziw on May 07, 2013, 12:20 am
It's good you have a lot of practice being lazy -- you can use that skill when you're rotting in jail because you didn't use PGP.

There is no substitute for PGP. Here is a substitute for privnote: http://sms4tor3vcr2geip.onion/

Modzi
Title: Re: Privnote vs PGP
Post by: hmonz420 on May 07, 2013, 12:43 am
It's good you have a lot of practice being lazy -- you can use that skill when you're rotting in jail because you didn't use PGP.

There is no substitute for PGP. Here is a substitute for privnote: http://sms4tor3vcr2geip.onion/

Modzi

I use PGP about 90% of the time, just occasionally resort to privnote if it's an a small order or I'm in a rush to get an order in before I have to go out or something. But thanks for the link, will definitely try it out.
Title: Re: Privnote vs PGP
Post by: gtl1987345 on May 07, 2013, 12:47 am
it takes <30 seconds to encode and send a PGP message... why risk it?
Title: Re: Privnote vs PGP
Post by: Gordo on May 07, 2013, 12:56 am
I use both. PGP for SR purchases but privnote is useful for day to day communications...text msg's ect...
Title: Re: Privnote vs PGP
Post by: MasterKief on May 07, 2013, 01:03 am
What is privnote? I see vendors talking about it but i have no clue what it is or how to use it
Title: Re: Privnote vs PGP
Post by: SelfSovereignty on May 07, 2013, 01:11 am
The problem with privnote is that there's no guarantee that the javascript sent from the website won't change tomorrow.  Or tonight.  Or 30 seconds from now.

The circumstance is basically that you're downloading a program that does the encryption for you on-the-fly from the web site, and even though you can look at the program one day and know that the javascript is really safe... you can't trust that it'll be the same 5 minutes from then let alone next week.

The gpg program doesn't change unless you change it, presumably.  It's stored on your computer.  That's why it's safer: it can't just randomly mutate into an insecure, broken encryption scheme without warning.
Title: Re: Privnote vs PGP
Post by: hmonz420 on May 07, 2013, 01:16 am
The problem with privnote is that there's no guarantee that the javascript sent from the website won't change tomorrow.  Or tonight.  Or 30 seconds from now.

The circumstance is basically that you're downloading a program that does the encryption for you on-the-fly from the web site, and even though you can look at the program one day and know that the javascript is really safe... you can't trust that it'll be the same 5 minutes from then let alone next week.

The gpg program doesn't change unless you change it, presumably.  It's stored on your computer.  That's why it's safer: it can't just randomly mutate into an insecure, broken encryption scheme without warning.
Thanks, I had always assumed PGP must be more effective but couldn't see the risk of privnote, appreciate you explaining it. Is sms4tor any more secure than privnote?
Title: Re: Privnote vs PGP
Post by: modziw on May 07, 2013, 03:28 am
What is privnote? I see vendors talking about it but i have no clue what it is or how to use it

(Clearnet) www.privnote.com

or use http://sms4tor3vcr2geip.onion/

Modzi
Title: Re: Privnote vs PGP
Post by: modziw on May 07, 2013, 03:31 am
The problem with privnote is that there's no guarantee that the javascript sent from the website won't change tomorrow.  Or tonight.  Or 30 seconds from now.

The circumstance is basically that you're downloading a program that does the encryption for you on-the-fly from the web site, and even though you can look at the program one day and know that the javascript is really safe... you can't trust that it'll be the same 5 minutes from then let alone next week.

The gpg program doesn't change unless you change it, presumably.  It's stored on your computer.  That's why it's safer: it can't just randomly mutate into an insecure, broken encryption scheme without warning.
Thanks, I had always assumed PGP must be more effective but couldn't see the risk of privnote, appreciate you explaining it. Is sms4tor any more secure than privnote?

No but at least they don't know your real IP.

Modzi