Silk Road forums
Discussion => Silk Road discussion => Topic started by: kablammo9000 on December 06, 2011, 01:51 am
-
Hi all,
I'm a brand new member of the community -- the world is now a freer place :)
But first thing's first: I noticed that Silk Road (the user, the head honcho) cryptographically signs most or all of his/her posts, which is great. I would love to be able to confirm that messages are truly from him/her. But to do so, I must have a trusted public key! I have looked around (searching forums and wiki for all kinds of variations on "silk road public key"), but have failed to find anything. I admit this could be a personal failing, but I would have expected a sticky forum thread, or an uneditable wiki page, or something prominently displayed on the SR main site, or something like that! What do people here *trust* to be SR's public key, and how did you acquire it?
-
I can't personally help you, and I mean no offense, but your paragraph sounds like it's almost copied word for word out of the LE handbook on infiltration. I know you probably didn't intend this and aren't actually LE, but I can't be the only one to find the writing style... off.
-
I can't speak to whether the poster is LE or not, but frankly there is no way for a new user to acquire a copy of the SR public key the validity of which they can be confidant in. A sticky could easily be edited and no wiki post is truly uneditable. There are copies of the public key around, but you really won't be able to trust it for verification until at the very least you perform some successful transactions with long-time members who vouch for a copy of the key, perhaps signed with their own public kesy used for arranging your transactions. Even then, you cannot be sure, but it's a start.
-
I can't personally help you, and I mean no offense, but your paragraph sounds like it's almost copied word for word out of the LE handbook on infiltration. I know you probably didn't intend this and aren't actually LE, but I can't be the only one to find the writing style... off.
I can't personally help you, and I mean no offense, but your paragraph sounds like it's almost copied word for word out of the stupid persons handbook on making wild accusations with no basis in fact whatsoever, just because a guy asks a perfectly valid question about how can he be sure what SR's real public key is. I know you probably didn't intend this and aren't actually a real stupid person, but I can't be the only one to find the writing style... stupid.
-
I can't personally help you, and I mean no offense, but your paragraph sounds like it's almost copied word for word out of the LE handbook on infiltration. I know you probably didn't intend this and aren't actually LE, but I can't be the only one to find the writing style... off.
I can't personally help you, and I mean no offense, but your paragraph sounds like it's almost copied word for word out of the stupid persons handbook on making wild accusations with no basis in fact whatsoever, just because a guy asks a perfectly valid question about how can he be sure what SR's real public key is. I know you probably didn't intend this and aren't actually a real stupid person, but I can't be the only one to find the writing style... stupid.
Touche, maybe I've become a bit jaded in my time here and I do apologize, but I do think I at least said it in a nice way instead of running around to every forum board screaming scammer or LE, I noticed something that my gut told me was weird and I posted it in hopes that others notice and can make their own decisions. No one would be happier than me if I was wrong.
-
This key was posted in the "new .onion url?" thread:
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)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=kHyk
-----END PGP PUBLIC KEY BLOCK-----
-
Thanks, calcium. That public key seems to verify the signatures in SR's forum posts, and of course one can't fully "trust" anything, but insofar as SR's forum posts often contain information that it would be difficult to imagine someone who isn't actually running SR (or otherwise closely associated) knowing, it gives reasonable confidence, for me anyway.
-
I can't personally help you, and I mean no offense, but your paragraph sounds like it's almost copied word for word out of the LE handbook on infiltration. I know you probably didn't intend this and aren't actually LE, but I can't be the only one to find the writing style... off.
LOL, good to know I'm not the only paranoiac. It was my use of "his/her", right? In hindsight it does sound like something copy-and-pasted from some handbook, but I was only trying to be literal about the fact that we (I) have no idea who SR is.
-
Not entirely possible for the whole f2f for trust, I'm sure senior members as well as SR staff or trusted vendors would be suitable signers of his key indicating it is signed and trusted.
The irony of this whole thread is it's not like SR's key is hidden, he's user 1 so all you have to do is pull up his user profile and there it is. Why you would attempt to conceal this seems a little comical... Given that it's totally publicized...
-
Good point the public key being on SR's user profile in the main site. I just discovered that myself and was about to mention it. Only trouble is there's no obvious link to it, so you have to manually edit the URL to view user 1's profile (unless you have messages to/from SR, in which case you can click their user name).
-
I can't personally help you, and I mean no offense, but your paragraph sounds like it's almost copied word for word out of the LE handbook on infiltration. I know you probably didn't intend this and aren't actually LE, but I can't be the only one to find the writing style... off.
LOL, good to know I'm not the only paranoiac. It was my use of "his/her", right? In hindsight it does sound like something copy-and-pasted from some handbook, but I was only trying to be literal about the fact that we (I) have no idea who SR is.
Cool, no hard feelings then?
-
lol.... am I the only one that noticed SR's key was created on April Fool's day.... I swear one day we will be in neighboring jail cells laughing at the signs we missed. ;)