Silk Road forums
Market => Rumor mill => Topic started by: PsiloTRON on November 11, 2011, 09:56 pm
-
Ok, so I just clicked on a new message that I received on the main site and a whole list of previously deleted messages popped up... Ok? So I clicked the delete button and it said...
You do not have rights to access this resource
use the contact us link below if you feel you have received this message in error.
Ok... I sent SR message explaining that I couldn't delete all those previously deleted messages.
Anyway, it's very unsettleling that all these previously deleted messages could be stored in some data base. I will stop using the SR's pm's all together so if anyone wishes to contact me please do so at PsiloTRON@tormail.com
Thank you all who read this, I just had to put it out there and hopefully our deleted messages will be permanently deleted for our safety. I'm sure many of you agree with me.
Peace.
-
really? our deleted messages aren't really deleted??? WTF Silk! that seems just plain wrong to me. goodbye SR message system for me as well
Makes me wonder if our "deleted" addresses are stored somewhere
this should be addressed ASAP
-
SR's messaging/address system should be considered INSECURE in the first place.
Don't be lazy. ALWAYS use PGP.
Edit:
And what means "deleted"? Do you think that the SR servers overwrite the disk space your address was on with random 0's and 1's? Hell no.
ALWAYS USE PGP
-
I've got a few newer members that practice their pgp keys with me in pm's and I find it handy for that...I've always felt that I shouldn't presume msgs were wiped clean and deleted. I mean, I *wish* they were, but I never expect it...like I said: good place to practice your pgp skills...and, like psilotron, got my tormail with same username...and I suggest all do that, if nothing else, so that someone else doesn't steal yours....
-
Well, as a seller I love the new messaging. Much easier to keep track of conversations.
But delete should mean delete, agree with that. Anyway, always keep personally identifying info verry private, the rest isnt all that useful to anyone if they found it.
-
Agreed this is very bad!
-
I messaged SR about the new PM system when I got the notice of changes from him, and it contained previous PM's.
He said that it will show previous PM's that have not been deleted by BOTH parties, or that are stale - over 60 days old.
I agree that as a vendor it's nice to have a history of PM's there, allowing me to keep a clean inbox counting on new PMs to have a history, if the person sending has kept previous correspondence.
You should always assume that any information you put out there is out there permanently, so as long as you always PGP critical info like your address.
Like any new feature, it will take a few days to assess and work the kinks out, and SR has lately been swift to respond to any issues, once the new features have had a chance to be examined in depth.
-
SR messaged me back saying the problem had been fixed. Thanks everyone for your input. I hope everyone has/had an awesome 11/11/11 ...I sure am, A nice synergistic combination of "TheMunchies"'s LSD, a bit of DQB's pure MDMA topped of with a pinch of DIMiTriSpice's DMT! makes for a great journey =D Revolutinary! Thank you Silk Road and both, Honest fellow Vendors and Buyers!...
Peace.
-
SR auto-deletes any messages older then 1 month.
Transaction history is also kept only for 1 month.
If you withdraw something the withdrawal address is also not saved.
So i don't really see any problems with the new messaging system. It's very handy actually.
Plus everything within the Tor network is encrypted node-to-node so who cares if SR sees what i am messaging as if he would care. I don't see SR as my adversary and i trust them fully i mean why would he save our addresses etc
All in all SR is pretty secure and protects our anonymity. Thanks for that SR!!
So you guys go ahead and use your email to chat i feel like that is actually a bigger security breach as SR is made for dealing in drugs but those email providers could be more in the look out for illegal activities.
Ok, now it's time for a line of speed. grrrr
-
SR auto-deletes any messages older then 1 month.
Transaction history is also kept only for 1 month.
If you withdraw something the withdrawal address is also not saved.
So i don't really see any problems with the new messaging system. It's very handy actually.
Plus everything within the Tor network is encrypted node-to-node so who cares if SR sees what i am messaging as if he would care. I don't see SR as my adversary and i trust them fully i mean why would he save our addresses etc
All in all SR is pretty secure and protects our anonymity. Thanks for that SR!!
So you guys go ahead and use your email to chat i feel like that is actually a bigger security breach as SR is made for dealing in drugs but those email providers could be more in the look out for illegal activities.
Ok, now it's time for a line of speed. grrrr
Once again, this sort of advice is either from someone who doesn't know what they are talking about or LE. Do NOT assume SR protects your anonymity. Why trust SR and increase the surface area from which you can be attacked when you don't have to? Even if SR was totally trustworthy this site may leak or get hacked by LE. PGP protects your anonymity. PGP keeps your identifying information between you and the only party you have no choice but to provide it to, your vendor. PGP is a billion times less likely to get hacked than SR.
Unless you are completely insane and like taking extra risks for absolutely no reason, NEVER put identifying information in plaintext or deal with vendors that require you to!
-
For all I know, Silk Road COULD be run by LE.
Even if this was the case, proper PGP usage and bitcoin laundering can provide adequate obscurity.
SO many send their address unencrypted - if LE was behind SR, or if SR got hacked by the feds, SO MANY people would be on watchlists it's not even funny. Talk about a honeypot.
-
You guys are so paranoid lol
SR is not run by LE and SR cannot be hacked by LE or taken down.
If it were possible what about all those CP sites? Those must get higher priority.
I trust Tor and it's technology too keep me anonymous. :)
And bitcoin is anonymous an address does not reveal ANYTHING about on which site they are.
You guys don't know what your talking about.
-
What happened to the PM format? The message appears below a small box and we have to type into the latter, gosh PLEASE REVERT BACK TO THE OLD FORMAT PLEASE I AM BEGGING YOU.
-
You guys are so paranoid lol
SR is not run by LE and SR cannot be hacked by LE or taken down.
If it were possible what about all those CP sites? Those must get higher priority.
I trust Tor and it's technology too keep me anonymous. :)
And bitcoin is anonymous an address does not reveal ANYTHING about on which site they are.
You guys don't know what your talking about.
Why do all LE and scammers write double spaced? It hurts my eyes.
I don't think you understand TOR. TOR keeps someone watching your internet traffic from knowing what websites you're visiting and what your transmitting. SSL keeps the final connection between the exit node and the webserver secure. Neither say anything about the security of the server you are connecting to or the web app running on that server. Haven't you seen bugs in the software with your own eyes? Of course there are vulnerabilities, TOR won't keep a webserver from being hacked. Common sense should keep you from wanting incriminating evidence sitting on a webserver, even if it is only exposed through TOR. For all you know some little douchebag kid with nothing better to do is trying to hack to server to steal some bitcoins and when he does he'll post all the PM's on the hidden wiki for shits and giggles.
Anyway, you haven't really explained why you wouldn't protect your identifying information when it's free? Please stop spreading harmful information. Or maybe just reply to this post with your real name and address or PM me your SR password, don't worry the forums are protected by TOR and its technology.
-
As long as you keep your address in the address field when ordering nothing bad can happen too you. I trust SR's mission they are simply removed after confirmal.
They can have all my messages very interesting what they can do with it it's indeed just plaintext.
It's not connected to anybody :) so who cares. PLUS messages older then a month are auto-deleted so only my recent messages/purchases show up.
But i understand you guys are 1337. Nothing i have said so far is invented check it out for yourself ;)
PGP is nice too send your address if you dont trust SR, but i consider it overkill to do all communication over PGP since we are all anonymous anyways.
grr
-
On a little side note that depositing bitcoins to instawallet is also a load of crap. I read the paper about the "robbery" of MyBitcoin where supposedly they had find the thief through their advanced tracking methods.
But when somebody asked Who was the thief then? They had not answer.
Never reveal your BTC address anywhere so it cannot be tied too you and you'll be fine :) It's that easy thank you Bitcoin.
-
How do you know tormail is deleting messages? This is a non-issue. Actually, I like the new message format. This is a clear improvement. If you use PGP, there is no difference between a message being deleted or not.
Want something real to complain about? How about sellers that say "I have a new PGP key" out of the blue. If a seller switches PGP keys, their feedback should be reset to 0 and their profile should have a warning about the suspicious PGP activity.. The only reasonable way around that would be if they signed their new key with the old one.
I strongly agree with this. As a means to this end, sellers' PGP keys should be uploaded in a standardized way as well.