Silk Road forums
Discussion => Security => Topic started by: John Keats on March 15, 2012, 03:52 am
-
The Complete All-in-One Guide on
How to Anonymously Use Silk Road
@-}-,-`- -
Mar 14: All new, much simpler guide that now includes a lot more than just a how-to on setting up a liveUSB. Updated with the new Liberte snapshot.
Please continue to leave your valuable feedback and discuss this setup so that we can help further protect the community's security from the bilderbergs
and their local law enforcement agency puppets.
@-}-,-`- -
Directory
Part 1: Creating your liveUSB
1. Format the USB
2. Install Liberte to USB
3. Boot from USB
4. Using Liberte
Part 2: Bitcoins, GPG, Mail
1. Getting Bitcoins
2. Moving Bitcoins
3. Buying on SR
4. Using GPG
5. Receiving Packages
Part 3: Мiscellaneous Tips & Tricks
1. Coming soon
@-}-,-`- -
=========================================================================================
You'll need a USB flashdrive that has at least a 500MB capacity. I bought a 4GB USB flashdrive at a Best Buy for $7.
Download Liberte Linux from here: http://sourceforge.net/projects/liberte/files/snapshots/liberte-snapshot-20120229.zip/download
Part 1: Creating your liveUSB
1. Format the USB
Find the icon for your USB in Windows Explorer. Right-click on it and select the "Format" option. Make sure the "File System" option is set to "FAT32".
Hit "Start" and wait a few seconds for it to finish (time depends on capacity of flashdrive).
2. Install Liberte to USB
Extract the ".zip" you just downloaded to the root of your USB flashdrive. Open the "liberte" folder, right-click over "setup.bat" and select "Run as
administrator". The batch file will do its thing and will prompt you with a "Press any key to continue..." message once it's done.
3. Boot from USB
Now shut down your computer. To be able to boot from a USB flashdrive, you will have to change some settings in the BIOS. To access the BIOS, power-on
your computer and press whichever key is specified on your screen (usually something like "Press F12 to access Boot menu..."). Using the arrow keys,
scroll over to the "Boot" tab. Scroll down to the option "USB HDD: YOUR USB's NAME HERE" and move it to the top of the list. Save changes and exit.
4. Using Liberte
The first time you boot Liberte will be really slow because it has to create an encrypted key for you. The loading bar will stop at about 3/4ths of the way,
pause for around 10 minutes, then you'll be prompted to enter a password for your system, at which point a hash will be generated for the password
which could also take around 10 minutes. Just sit tight, you'll be able to use your new configuration very soon.
Once you get in, establish an internet connection by clicking on the first icon to the left of the time (lower-left corner). To access the onion network click
on the computer monitor icon (lower-right corner), hover over to "Internet" and select "Midori". In this same menu you have the ability to switch your Tor
identity, as well as a non-Torified browser for connecting to Wi-Fi hotspots.
Whenever you're done using Liberte, close out of all your applications and shut down by going back over to the computer icon and hitting "Logout".
@-}-,-`- -
Part 2: Bitcoins, GPG, Mail
1. Getting Bitcoins
People all have their own methods on how to get bitcoins, but here's how I do it which works great and is completely anonymous. Also this is only for the
United States as far as I know.
First create a Mt Gox account. Mt Gox is a great bitcoin exchange but they now unfortunately flag anyone accessing their site through Tor. So I went to
my local library and made my Mt Gox there. Use a disposable e-mail to sign up for Mt Gox and make sure to only access it at a computer not associated
with you (such as the library). Write down your Mt Gox account number, as you'll need it in the next step.
Now go to "bitinstant.com". This is a middle-man service that lets you deposit cash at a local bank and get bitcoins in your Mt Gox account within
MINUTES. Select "Cash Bank Deposit" as the payment method, "Mt. Gox" as the destination, type in your account number as the destination account,
and lastly put an e-mail that IS NOT the e-mail you used to create your Mt Gox account (I would suggest getting a Tormail). The bottom of the page will
give you a quote with the amount you will receive after their fees have been subtracted.
Hit "Send Funds". Then press the big green "Click to Pay Now" button. You'll be redirected to the TrustCash website. Go through the steps and make sure
to print a copy of your invoice at the last page. You have 3 days to deposit the cash before the invoice will expire. Take the invoice to the bank you
chose in the steps, tell the teller you'd like to deposit the money into the account detailed on the invoice, and hand him/her the exact amount specified.
If he/she starts asking questions, just say you're trying to get started in the forex trading market.
2. Moving Bitcoins
By the time you get home (or back to the library), you'll get an e-mail with a Mt Gox redeemable code for your bitcoins. Again make sure you access Mt
Gox from a computer not in any way connected to you. At this point you should send the funds through a couple of instawallets. ABSOLUTELY MAKE
SURE YOU BOOKMARK THE INSTAWALLET ADDRESSES!!! EVEN WRITE THEM DOWN!!! You can also put the coins through a tumbling service like BitcoinFog, but I don't find it necessary. The fact that the coins can't be linked to you in the first place is what really matters. Whenever you're happy with the degree
to which your coins have been obscured, transfer your funds into your Silk Road wallet.
3. Buying on Silk Road
No vendor will allow you to stay in escrow until you have at least 5 purchases. To solve this just go over to the digital goods section and buy 5 books.
Once you have a history, find a product you're interested in (mmm, Mushrooms ;P) and add it to your cart. SR is a lot like Amazon so the procedure
shouldn't be too much of a mystery for anyone. Select a shipping option (it almost always costs extra, so keep that in mind with the price of the product),
enter in your information (encrypted of course! see the next section on how to use PGP) and hit buy.
If you have over 5 purchases, do not EVER finalize early, even for trusted vendors. If a vendor tells you that you have to finalize in order to have your order
sent, demand them to cancel your order. The escrow system is the ONLY way for SR to protect your money and SR is not responsible if you finalize
early and get scammed.
4. Using GPG
GPG stands for Gnu Privacy Guard. It is a free replacement for PGP, which was recently bought by Symantec and now costs money. Liberte comes with
GPG pre-configured. To use it, hit the computer icon, and under "System Tools" select "gpa".
The first time you open up "gpa" you'll have to create a keypair. Enter in your SR name, your tormail as the contact, and a strong password. Create a
backup copy of your private key and save it to "persist>security>pgp" for now (I highly recommend saving it on Tormail and deleting it off of your USB).
To encrypt a message with pgp, first find the public key of the person you want to send the message to. Save that key as a file and import that to gpa
with the "Import" button. Now press the "Clipboard" button, type your message, and hit "Encrypt". Choose the key of the person you're sending the
message to and your message will become encrypted. Unless you want to get an encrypted message back, you don't have to include your public key.
5. Receiving Packages
Always use the real name of a person registered at the house you are sending to. The Post Office checks to make sure the two match up, they'll realize somethings up when they get a package to "John Smith" at a random street. Don't spell your name slightly wrong either as again that can raise a flag at the post office. I recommend getting a friend to pick up packages for you (always ask him/her first!).
Once you get the package, write "RETURN TO SENDER" in big red letters with a marker across the package. Wait 1 day, and if the police don't come banging down your door then you should be fine. Never use your product at the house you received it at. I also recommend only buying personal amounts as local law enforcement doesn't have the time or resources to bust someone getting an 1/8th of weed in the mail. If they do catch it, they'll probably just send you a love letter. Freakonomics (a popular book) showed that most street level drug dealers make less than minimum wage, so buying ounces of stuff off of SR is really not that worth it.
If the police does come knocking, DENY that the package is yours. Remember that anyone can send you drugs in the mail. Don't consent to any searches, don't say much at all, call your lawyer and let his expensive lips do the talking.
To Be Continued....................
-
Awesome info. dude. Thanks so much! ;)
-
Very nice. Thank you. I think I'll be switching my method of obtaining BTC very soon. Fuck MoneyPaks.
Do you think encrypting a USB with TrueCrypt, and making a dummy key is sufficient?
-
I can't believe you don't have a +karma for helping the newbs, so here's one! ;)
-
great tutorial! you beat me to it
-
i wish i could contribute more to the community but i don't have any kind of IT background. taking the time to do these is very much appreciated and more importantly should make this community the stronger as long as people take the time to read and follow your suggestions. thanks J.K!
-
Thanks from a new member looking for facts. How is it safe to use your own bank acct?
-
Very nice. Thank you. I think I'll be switching my method of obtaining BTC very soon. Fuck MoneyPaks.
Do you think encrypting a USB with TrueCrypt, and making a dummy key is sufficient?
I've read extensively into using TrueCrypt and there is no viable way to use it portably. The portable version doesn't let you really do the things you need to with Truecrypt. Which key are you talking about? Your liberte key isn't stored on your machine, rather a hash of it is used to compare correct passwords. If you're talking about your PGP key, I would recommend storing it on your Tormail and deleting it completely off of your USB.
-
what exactly do you mean by saying a portable version of true crypt doesn't let you do what you need to?
great tutorial by the way.
I'm outside of USA so i cant really use that way of getting bitcoins but tell me what do you think of the following:
i got a friend that knows I'm using SR he's trustworthy.
If he buys the bitcoins for me and then sends them to my wallet, afterwards i use bitcoinfog to tumble them coins and send them to sr.
that breaks the chain of ownership and seems pretty secure to me as the shipments arrive to My address and not his.
-
Very nice. Thank you. I think I'll be switching my method of obtaining BTC very soon. Fuck MoneyPaks.
Do you think encrypting a USB with TrueCrypt, and making a dummy key is sufficient?
I've read extensively into using TrueCrypt and there is no viable way to use it portably. The portable version doesn't let you really do the things you need to with Truecrypt. Which key are you talking about? Your liberte key isn't stored on your machine, rather a hash of it is used to compare correct passwords. If you're talking about your PGP key, I would recommend storing it on your Tormail and deleting it completely off of your USB.
Sorry. Poor explaining on my part. TrueCrypt is installed on my laptop, and I used it to fully encrypt my USB. And by dummy key, I mean a dummy partition or drive. So if I am ever forced to give up my password for TrueCrypt, I have one which contains scandalous porn. The password I use regularly contains Tor and GPG.
-
Going to the library is very DUMB !!! That's the last place you want to use the computer. First, you have to be registered to use the computers. That means you have to give an ID. You also have to sign up to use the computer. Nowadys libraries have cameras. Second, All internet activity is monitored and filtered. Using the library is the worst advise someone can give you !
-
Hey i'm looking forward to the receiving package tips. Please post those ASAP. I'm new to SR but know a good bit about computers, i'm actually very disappointed with myself that it took me so long to find this godsend.
Thanks from a new member looking for facts. How is it safe to use your own bank acct?
Your misunderstanding, I thought same thing at first as well, but I think how this works is you select a random bank that they accept business with & you goto the random local bank you select & wire money to there account. You don't use your own bank account, hell no that wouldn't be safe. Then he's saying just make up an excuse if they ask why your sending $1000's to random act numbers that your getting into trading.
Very nice. Thank you. I think I'll be switching my method of obtaining BTC very soon. Fuck MoneyPaks.
I actually don't like the OPs method for getting BTC, what is wrong with money packs? Like i said i'm new & only made one BTC transaction & got burned on $58 WU fees (my fault though for not knowing in advance) then currency exchange rate miscommunication (again my fault). I actually saw BTC Buddy which is on SR & he will take MP for BTC exchange at no fee USD to USD. MP is $5 to load. send him number & he sends you btc quicker then mt gox would. I haven't used this method yet, is this not better? completely no connections to anyone. You pay cash for MP (assuming no id needed) then send code to no name person & get btc from random act this doesn't require all the hoops of the OPs method. Only question is do money packs require id for say up to $1K? what is max you can load on one?
Do you think encrypting a USB with TrueCrypt, and making a dummy key is sufficient?
I think the proper way to use Truecrypt which is what i'm setting up this weekend, is to completely format your harddrive with at least one zeroing or random pass. There is a great blog (anti-forensics) which states more than one pass on modern media isn't needed really, but you can to be safe. You need to install a "decoy" operating system "A". after that's installed, do a complete system encryption from Truecrypt. After that you want to install a 2nd hidden parititon/OS. This will be your SR/Tor/Everything-you-want-hidden OS. Use decoy system to store a few fake pgp messages signed with fake keys and crap & set one password. Set your 2nd hidden os with a COMPLETELY different password. Depending on what password is used during bootloader will determine what os is started either your decoy or hidden. This is the best thing in the world because if you ever did get investigated I'm sure nowadays a court could force you to reveal passwords for shit like this, so you give them that password for your decoy system. Because your hidden os/2nd os is in fact hidden no one can see that it exists within your decoy system. Also refer to that blog for how to remove the words truecrypt loader from the bootloader & replace with words windows booloader to make more secure.
Then if we want to get crazy with shit, i'm going to run 2 windows 7 installs, one for decoy, one for hidden. From within my hidden OS set (correct) virtualization & run liberte from within your hidden os & access tor/SR off that. Now if ever a trace of anything leaked or was saved from liberte it would be hidden in single, double, triple encryption (whichever you choose).
All the portable version of Truecrypt does is let you make an encrypted container to store a text document for instance in. What makes it really shine is the hidden os that gives you plausible deniability, in that if forced for WHATEVER reason to give up your password you can w/o being compromised.
However having liberte on a flash drive for using on random PCs when you don't have your main Truecrypt encrypted rig wether this be desktop or laptop, does make a handy tool in your arsenal.
Edit:Just went & google'd it, no id needed for MP AFAIK. Again, wouldn't my method be more secure & less cumbersome?
-
sooo helpful!! thanks
-
Just to clear up a few questions people have had:
1. Truecrypt simply doesn't work very well on a USB. Get over it people...
2. With the method of getting bitcoins I described, you do not have to have a bank account. You simply deposit your money. The only non-anonymous part is you'll be on the bank's cameras, so just wear a hat or something.
3. You don't need to be a registered user to access computers at most libraries. I always just ask for a "Guest Pass". And last time I checked its not illegal to use Mt Gox at a library... or anywhere for that matter.
4. Again truecrypt does not work well on USBs... Liberte has solid encryption called LUKS so really believe me ya'll will be fine. As long as you don't keep any sensitive information on the USB in the first place then you don't even need to worry about having it encrypted in the first place.
5. I have a feeling people don't even know what truecrypt does... it only protects you if your harddrive or USB was stolen and someone tries to look at your files... it's not a firewall or anonymity device of some sort...
6. To use portable Truecrypt, you have to have Truecrypt fully installed on whatever machine you are booting from to decrypt the contents of the USB. If you ever have to use your USB from a machine that doesn't have Truecrypt installed... well you have yourself a slight problem.
7. Again I don't recommend using bitcoin fog. As long as you can't be traced to buying the bitcoins in the first place, you don't have to worry about obscuring the bitcoin trail very much. Also SR has its own bitcoin tumbler as soon as you make a purchase.
8. Guys, don't use Money Paks... it's SO EASY to get scammed. The vendor can just say that your code didn't work and they'll just steal your money and fuck you over. And if you don't, the rates on SR are CRAZY. Last time I checked, Suga_Mama charged like 17% for MPs under $100...
-
What should one do if they've already been on silkroad and not been using Liberte?
-
What should one do if they've already been on silkroad and not been using Liberte?
I'll update the thread on how to wipe your old system, so stay tuned for now. But as long as you're not a vendor, I wouldn't worry (unless you're buying like ounces of weed...).
-
Is there a way to store links and passwords on liberte without using trucrypt?
I mean you do need some addresses and links saved to access them from that Linux OS.
can you install truecrypt on liberte?
how does it work :D
also if i've already used my PC to use silk road is there a way to erase tracks without formatting?
-
Just to clear up a few questions people have had:
3. You don't need to be a registered user to access computers at most libraries. I always just ask for a "Guest Pass". And last time I checked its not illegal to use Mt Gox at a library... or anywhere for that matter.
High John! Good stuff!
I actually have read to do one thing opposite of your way. 2nd from the top topic on the same page as this one > http://dkn255hz262ypmii.onion/index.php?topic=131.0 << Your way makes more since to me. Where you say to put your SR name and correct e-mail address for keys, the pictured instructions I just saw said to put in a fake name, fake address for the keys.
Whew! So confusing what to do. For me it is so mixed up on a good day, then I read something else that contradicts and confuses me more. Not that it matters much. I installed GNU encrypting program and even made my key (with a fake name and e-mail as those instructions strongly suggested) ...... then what? I can't figure out what to do next. But that's a whole other nightmare for me.
What I wanted to say about libraries for the West Coast from S. Cal to the US/Canada border anyway, ALL of the libraries require photo ID to use any online service they have. And most of them of any size have lots of cameras. I wouldn't worry about it too much, but for the West Coast of he US, there is no way to use their libraries with out photo ID.
I lived in my van with 2 beautiful Lab sisters for a couple of years and just traversed the West Coast, north to south and then back again. This was from 2007 to 2009. Even the very small towns that had a library required ID, photo passport or other state accepted photo ID to use their computers. What part of the US do you live in John?
Just wanted to clarify from personal experience and not from a post. The whole idea is to get no more contradictions, right? Even if it gets there little by little. Verified correction after verified correction. I love being able to see something I actually have personal long term experience about ANYTHING here. Quite rare I assure you all!
Thanx for the directions John! Nice of you to take the time! Take care!
And thank you who learned something from this! Have a great life!
Oz
-
I just want to say thanx like many others this has been helpful in getting started with anonymity.
There is one thing that happened in the course of getting bitcoins, and so I want to pose the question here. I know its been covered but I couldn't find the thread.
In your step-by-step, I completed it no problem to get Bitcoins. The second time, when I went to deposit money at Bank of America with the Trust Fund invoice, the nice lady at the counter asked for a out of state deposit slip.
Knowing that its been covered, does anyone have fresh advice or point the way to what to do when asked for an "out of state" deposit slip? Btw I was late for a bus and said I'd turn it in later...
Common sense says to fill it out with a little bit of falsity and be done with it, but it asks for my name, address, signature, and so I didn't bother turning it in. The first time (same bank) they didn't ask for one, and so it was easier. any advice for me?
Thanx All!
-
Is there a way to store links and passwords on liberte without using trucrypt?
Go to "GPA" under System Tools, go into the clipboard and copy and paste all your links, addresses, passwords, or any other sensitive information. Encrypt it with your key and then copy and paste the encrypted message into a tormail e-mail that you send to yourself. Don't leave any traces of the message or of your key on the USB.
High John! Good stuff!
I installed GNU encrypting program and even made my key (with a fake name and e-mail as those instructions strongly suggested) ...... then what? I can't figure out what to do next. But that's a whole other nightmare for me.
Use a fake name but not a fake e-mail (use your real tormail). To encrypt a message go to "gpa" under System Tools, hit the "Clipboard" button, type a message, hit the "Encrypt" button and choose the key of the person you want to send the message to, copy and paste the encrypted text over to wherever. Reply back if you're still having trouble.
What I wanted to say about libraries for the West Coast from S. Cal to the US/Canada border anyway, ALL of the libraries require photo ID to use any online service they have. And most of them of any size have lots of cameras.
I realize you need photo ID to REGISTER for a library card, but are you sure you can't just ask for a guest pass to use the computers? I live in the midwest and I have no trouble at all using library computers. And about cameras, just wear a hat and cover up all piercings/tattoos.
In your step-by-step, I completed it no problem to get Bitcoins. The second time, when I went to deposit money at Bank of America with the Trust Fund invoice, the nice lady at the counter asked for a out of state deposit slip.
Knowing that its been covered, does anyone have fresh advice or point the way to what to do when asked for an "out of state" deposit slip? Btw I was late for a bus and said I'd turn it in later...
Common sense says to fill it out with a little bit of falsity and be done with it, but it asks for my name, address, signature, and so I didn't bother turning it in. The first time (same bank) they didn't ask for one, and so it was easier. any advice for me?
Hmm, I've never encountered "out of state" deposit slips before... did your bitcoins transfer fine the first time? Never put real information on anything ever. I wouldn't recommend putting your neighbors info on there either 'cause they might also ask for identification and at that point you'll be fucked for fraud. I'll look at this issue further and get back to you, but for now just go to a different bank location.
-
Thank you again
To recap, I went to B of A where the teller took my cash and that was it. The money went straight to Mt. Gox.
I went to B of A again and was asked for the out of state slip. This was at a different location.
Ideas about the "out of state" slip have appeared here before, in the forums. I read them over the summer. It might not be a huge problem, but I was going to check more experienced users too. I will search as well. It always helps to learn more...
-
Hello. Thanks for posting this! This is my first forum post but I've been lurking around SR for a little while, trying to research things before rushing into anything. Anyway, following your guide here I just downloaded liberte and extracted it to my USB drive, ran the setup, and booted from the USB drive. But I'm having trouble connecting to the internet. I use a laptop pc to connect to a home wireless internet connection. I tried to enable wireless in liberte, but it didn't seem to do anything. The limited info I've been able to find seems to indicate that many wireless adapters aren't compatible with linux. Am I just doin it wrong, or do you think it's likely a hardware issue? I'm really not trying to waste your time, but I'm not sure where to look for a basic crash course on using liberte. The wiki linked in the readme seems geared towards people far more advanced than myself at being shady on teh interwebs.
-
Hello, Good post/compilation of many things I have read on this forum. Although I have to disagree with the guidance on writing "return to sender" with every package. I suppose as long you as know when the mail is delivered everyday it could sort of work, but don't you think if law enforcement is really planning on waiting to see if you take the package that they would wait for the mail man to pick it up the next day? Cause if you just pop the package out side right away, I would think they would call your bluff and sit on it till the postage man picks it up. If that's the case you're in a loose loose situation. Either the post man takes back your shit, or you go outside like a dummy the next morning and take it in and open it before the post man arrives.
Isn't it just simpler to just ship the shit to a po box or fake business name or even a neighbors place where you know you can get to it before them instead of playing this game? Just asking, but still like the time and effort you put into it.
-Krank
-
signing the thread for later read.
-
The limited info I've been able to find seems to indicate that many wireless adapters aren't compatible with linux. Am I just doin it wrong, or do you think it's likely a hardware issue? I'm really not trying to waste your time, but I'm not sure where to look for a basic crash course on using liberte.
You can ask the developer of liberte directly on this issue at https://forum.dee.su/
Usually he's very patient and helpful.
I have to disagree with the guidance on writing "return to sender" with every package. I suppose as long you as know when the mail is delivered everyday it could sort of work, but don't you think if law enforcement is really planning on waiting to see if you take the package that they would wait for the mail man to pick it up the next day? Cause if you just pop the package out side right away, I would think they would call your bluff and sit on it till the postage man picks it up. If that's the case you're in a loose loose situation. Either the post man takes back your shit, or you go outside like a dummy the next morning and take it in and open it before the post man arrives.
Isn't it just simpler to just ship the shit to a po box or fake business name or even a neighbors place where you know you can get to it before them instead of playing this game? Just asking, but still like the time and effort you put into it.
-Krank
This isn't simply my advice, this is what the whole community has recommended. Putting "RETURN TO SENDER" protects you when you have the package sitting on your kitchen counter and the feds knock down your front door. That's when you plead that the package is not yours and you were going to give it back to the post office.
A P.O. box is a bad idea. Mail is never accidentally sent to the wrong P.O. box... since noone other than the post office knows who the P.O. box belongs to, it's HIGHLY unlikely that you had no prior knowledge of a package being sent to you. Again, fake names are checked so don't do that as it's the biggest red flag.
Putting in the little extra time and effort to play this "game" is crucial if you don't want to be getting fucked in prison showers for the next 10 years.
-
Completely hypothetical situation, but what if you're >18? Can you still deposit money at the bank using the invoice you received from bitinstant?
-
great guide john. it was seriously helpful. now having said that i have encountered a hiccup in the process of booting liberte.
i got up to the point where i make a password and it generates a key. then the bar fully loads up and then the screen just goes black. i let it stay like that for about an hour thinking it just needed some time but it just stayed as a black screen.
do you have any insight on this? i am pretty confident i followed your instructions carefully and correctly. thanks for the help.
-
Great guide. but i created a mt.gox account b4 reading this so i used a new email just for mt.gox, but i did it all at home. I'm sure i'm not the only one too. So now i'll just have to go forward and cross my fingers. can't just forget about the coins.
-
What should one do if they've already been on silkroad and not been using Liberte?
I'll update the thread on how to wipe your old system, so stay tuned for now. But as long as you're not a vendor, I wouldn't worry (unless you're buying like ounces of weed...).
great guide, looking forward to following it one day when i have the spare time. waiting on your update on how to wipe the old system, since ive been accessing the darknet with just vidalia and tor button on my firefox browser.
-
I just want to say thanx like many others this has been helpful in getting started with anonymity.
There is one thing that happened in the course of getting bitcoins, and so I want to pose the question here. I know its been covered but I couldn't find the thread.
In your step-by-step, I completed it no problem to get Bitcoins. The second time, when I went to deposit money at Bank of America with the Trust Fund invoice, the nice lady at the counter asked for a out of state deposit slip.
Knowing that its been covered, does anyone have fresh advice or point the way to what to do when asked for an "out of state" deposit slip? Btw I was late for a bus and said I'd turn it in later...
Common sense says to fill it out with a little bit of falsity and be done with it, but it asks for my name, address, signature, and so I didn't bother turning it in. The first time (same bank) they didn't ask for one, and so it was easier. any advice for me?
Thanx All!
The out of state deposit slips are simply the ones required to make the deposit.. I assume you used trustcash to make the deposit... so... when you go to bank just ask for the out of state deposit slip up front (i always do it this way). The name/address/phone and business state that you write down is the one that is on the trustcash invoice, along with the acct and routing numbers of the 'business acct' that you are depositing into.... It IS NOT asking for your personal information... none of your personal info is needed for this kind of deposit to get bitcoins. I try to go to a different bank each time I deposit, walk right in and politey ask for the out of state deposit slip, i pull up my email with the invoice info and just copy it right down, hand over the cash and make a comment about "how great the weather is lately", i get my receipt for the transaction and im out the door. if i havent recieved the confirmation email in the next hour or so i just call the 1800 number to verify the deposit was made and then poof! usd is ready to trade for btc
-
I have to disagree with the guidance on writing "return to sender" with every package. I suppose as long you as know when the mail is delivered everyday it could sort of work, but don't you think if law enforcement is really planning on waiting to see if you take the package that they would wait for the mail man to pick it up the next day? Cause if you just pop the package out side right away, I would think they would call your bluff and sit on it till the postage man picks it up. If that's the case you're in a loose loose situation. Either the post man takes back your shit, or you go outside like a dummy the next morning and take it in and open it before the post man arrives.
Isn't it just simpler to just ship the shit to a po box or fake business name or even a neighbors place where you know you can get to it before them instead of playing this game? Just asking, but still like the time and effort you put into it.
-Krank
This isn't simply my advice, this is what the whole community has recommended. Putting "RETURN TO SENDER" protects you when you have the package sitting on your kitchen counter and the feds knock down your front door. That's when you plead that the package is not yours and you were going to give it back to the post office.
A P.O. box is a bad idea. Mail is never accidentally sent to the wrong P.O. box... since noone other than the post office knows who the P.O. box belongs to, it's HIGHLY unlikely that you had no prior knowledge of a package being sent to you. Again, fake names are checked so don't do that as it's the biggest red flag.
Putting in the little extra time and effort to play this "game" is crucial if you don't want to be getting fucked in prison showers for the next 10 years.
So since you shouldn't have it shipped to your place, but shouldn't use a fake name... Do you recommend a friend's house? What about to an apartment building sent to someone who USED to live there? I.E. At my room mate's old apartment, packages would sit there FOREVER if the person no longer lived there. I just don't think I have any friends who are willing to get my drugs shipped to them, so I'm trying to figure out the best way.
-
I was thinking of running Virtual PC/Vmware and storing the virtual hard drive drive on a USB key with truecrypt (or similar program) installed?
Can anyone see any issues with doing that ?
I have read the the tutorial (thanks heaps for that :) ) but if i read correctly the USB drive is not be encrypted ??
thanks all
-
Thanks so much, this helps this n00b out a lot. Still doing more research though. Thanks again.
-
I was thinking of running Virtual PC/Vmware and storing the virtual hard drive drive on a USB key with truecrypt (or similar program) installed?
Can anyone see any issues with doing that ?
I have read the the tutorial (thanks heaps for that :) ) but if i read correctly the USB drive is not be encrypted ??
thanks all
it's possible according to him, but would only work on a trucrypted system. would be cool if he made a guide for that, since i dont use other people's comps/laptops, anyway.
-
was playing around today.... found portable version of virtualbox that runs directory off the USB (off the hidden truecrypt volume). This means theres not really a trace of virtual desktop software/whatever on main computer, which is better than just storing the virtual hdd on the usb. Hidden truecrypt folder also means I can give someone...the passwd to the truecrypt hdd... but still have secret stuff they wont know is there =)
I was thinking of running Virtual PC/Vmware and storing the virtual hard drive drive on a USB key with truecrypt (or similar program) installed?
Can anyone see any issues with doing that ?
I have read the the tutorial (thanks heaps for that :) ) but if i read correctly the USB drive is not be encrypted ??
thanks all
it's possible according to him, but would only work on a trucrypted system. would be cool if he made a guide for that, since i dont use other people's comps/laptops, anyway.
-
was playing around today.... found portable version of virtualbox that runs directory off the USB (off the hidden truecrypt volume). This means theres not really a trace of virtual desktop software/whatever on main computer, which is better than just storing the virtual hdd on the usb. Hidden truecrypt folder also means I can give someone...the passwd to the truecrypt hdd... but still have secret stuff they wont know is there =)
I was thinking of running Virtual PC/Vmware and storing the virtual hard drive drive on a USB key with truecrypt (or similar program) installed?
Can anyone see any issues with doing that ?
I have read the the tutorial (thanks heaps for that :) ) but if i read correctly the USB drive is not be encrypted ??
thanks all
it's possible according to him, but would only work on a trucrypted system. would be cool if he made a guide for that, since i dont use other people's comps/laptops, anyway.
could u possibly write up a step-by-step guide in your spare time on this? including trucrypting your system.
-
Excellent post, I know it's been said but thank you so much!
-
Yip will do over this weekend.
was playing around today.... found portable version of virtualbox that runs directory off the USB (off the hidden truecrypt volume). This means theres not really a trace of virtual desktop software/whatever on main computer, which is better than just storing the virtual hdd on the usb. Hidden truecrypt folder also means I can give someone...the passwd to the truecrypt hdd... but still have secret stuff they wont know is there =)
I was thinking of running Virtual PC/Vmware and storing the virtual hard drive drive on a USB key with truecrypt (or similar program) installed?
Can anyone see any issues with doing that ?
I have read the the tutorial (thanks heaps for that :) ) but if i read correctly the USB drive is not be encrypted ??
thanks all
it's possible according to him, but would only work on a trucrypted system. would be cool if he made a guide for that, since i dont use other people's comps/laptops, anyway.
could u possibly write up a step-by-step guide in your spare time on this? including trucrypting your system.
-
thank you! if u could include how to wipe the history of my system (not files, got too much important data) before starting this, that'd be great, considering ive been accessing SR without a usb drive, vm and whatnot.
-
signing the thread for later read.
+1
-
hugely helpful, cheers!
-
No vendor will allow you to stay in escrow until you have at least 5 purchases. To solve this just go over to the digital goods section and buy 5 books.
Is that necessary? Does everyone really do that?
-
After you get everything up in Virtualbox or VMware you save the snapshot. Go find the .VDI file or whatever VMware saves it as and put it in a Truecrypt container. Good enough for just buying.
If you really want crazy security can always buy an Ironkey and store your .VDI files on it inside a TC container. Double encrypted.
-
The Complete All-in-One Guide on
How to Anonymously Use Silk Road
@-}-,-`- -
Mar 14: All new, much simpler guide that now includes a lot more than just a how-to on setting up a liveUSB. Updated with the new Liberte snapshot.
Please continue to leave your valuable feedback and discuss this setup so that we can help further protect the community's security from the bilderbergs
and their local law enforcement agency puppets.
@-}-,-`- -
Directory
Part 1: Creating your liveUSB
1. Format the USB
2. Install Liberte to USB
3. Boot from USB
4. Using Liberte
Part 2: Bitcoins, GPG, Mail
1. Getting Bitcoins
2. Moving Bitcoins
3. Buying on SR
4. Using GPG
5. Receiving Packages
Part 3: Мiscellaneous Tips & Tricks
1. Coming soon
@-}-,-`- -
=========================================================================================
You'll need a USB flashdrive that has at least a 500MB capacity. I bought a 4GB USB flashdrive at a Best Buy for $7.
Download Liberte Linux from here: http://sourceforge.net/projects/liberte/files/snapshots/liberte-snapshot-20120229.zip/download
Part 1: Creating your liveUSB
1. Format the USB
Find the icon for your USB in Windows Explorer. Right-click on it and select the "Format" option. Make sure the "File System" option is set to "FAT32".
Hit "Start" and wait a few seconds for it to finish (time depends on capacity of flashdrive).
2. Install Liberte to USB
Extract the ".zip" you just downloaded to the root of your USB flashdrive. Open the "liberte" folder, right-click over "setup.bat" and select "Run as
administrator". The batch file will do its thing and will prompt you with a "Press any key to continue..." message once it's done.
3. Boot from USB
Now shut down your computer. To be able to boot from a USB flashdrive, you will have to change some settings in the BIOS. To access the BIOS, power-on
your computer and press whichever key is specified on your screen (usually something like "Press F12 to access Boot menu..."). Using the arrow keys,
scroll over to the "Boot" tab. Scroll down to the option "USB HDD: YOUR USB's NAME HERE" and move it to the top of the list. Save changes and exit.
4. Using Liberte
The first time you boot Liberte will be really slow because it has to create an encrypted key for you. The loading bar will stop at about 3/4ths of the way,
pause for around 10 minutes, then you'll be prompted to enter a password for your system, at which point a hash will be generated for the password
which could also take around 10 minutes. Just sit tight, you'll be able to use your new configuration very soon.
Once you get in, establish an internet connection by clicking on the first icon to the left of the time (lower-left corner). To access the onion network click
on the computer monitor icon (lower-right corner), hover over to "Internet" and select "Midori". In this same menu you have the ability to switch your Tor
identity, as well as a non-Torified browser for connecting to Wi-Fi hotspots.
Whenever you're done using Liberte, close out of all your applications and shut down by going back over to the computer icon and hitting "Logout".
@-}-,-`- -
Part 2: Bitcoins, GPG, Mail
1. Getting Bitcoins
People all have their own methods on how to get bitcoins, but here's how I do it which works great and is completely anonymous. Also this is only for the
United States as far as I know.
First create a Mt Gox account. Mt Gox is a great bitcoin exchange but they now unfortunately flag anyone accessing their site through Tor. So I went to
my local library and made my Mt Gox there. Use a disposable e-mail to sign up for Mt Gox and make sure to only access it at a computer not associated
with you (such as the library). Write down your Mt Gox account number, as you'll need it in the next step.
Now go to "bitinstant.com". This is a middle-man service that lets you deposit cash at a local bank and get bitcoins in your Mt Gox account within
MINUTES. Select "Cash Bank Deposit" as the payment method, "Mt. Gox" as the destination, type in your account number as the destination account,
and lastly put an e-mail that IS NOT the e-mail you used to create your Mt Gox account (I would suggest getting a Tormail). The bottom of the page will
give you a quote with the amount you will receive after their fees have been subtracted.
Hit "Send Funds". Then press the big green "Click to Pay Now" button. You'll be redirected to the TrustCash website. Go through the steps and make sure
to print a copy of your invoice at the last page. You have 3 days to deposit the cash before the invoice will expire. Take the invoice to the bank you
chose in the steps, tell the teller you'd like to deposit the money into the account detailed on the invoice, and hand him/her the exact amount specified.
If he/she starts asking questions, just say you're trying to get started in the forex trading market.
2. Moving Bitcoins
By the time you get home (or back to the library), you'll get an e-mail with a Mt Gox redeemable code for your bitcoins. Again make sure you access Mt
Gox from a computer not in any way connected to you. At this point you should send the funds through a couple of instawallets. ABSOLUTELY MAKE
SURE YOU BOOKMARK THE INSTAWALLET ADDRESSES!!! EVEN WRITE THEM DOWN!!! You can also put the coins through a tumbling service like BitcoinFog, but I don't find it necessary. The fact that the coins can't be linked to you in the first place is what really matters. Whenever you're happy with the degree
to which your coins have been obscured, transfer your funds into your Silk Road wallet.
3. Buying on Silk Road
No vendor will allow you to stay in escrow until you have at least 5 purchases. To solve this just go over to the digital goods section and buy 5 books.
Once you have a history, find a product you're interested in (mmm, Mushrooms ;P) and add it to your cart. SR is a lot like Amazon so the procedure
shouldn't be too much of a mystery for anyone. Select a shipping option (it almost always costs extra, so keep that in mind with the price of the product),
enter in your information (encrypted of course! see the next section on how to use PGP) and hit buy.
If you have over 5 purchases, do not EVER finalize early, even for trusted vendors. If a vendor tells you that you have to finalize in order to have your order
sent, demand them to cancel your order. The escrow system is the ONLY way for SR to protect your money and SR is not responsible if you finalize
early and get scammed.
4. Using GPG
GPG stands for Gnu Privacy Guard. It is a free replacement for PGP, which was recently bought by Symantec and now costs money. Liberte comes with
GPG pre-configured. To use it, hit the computer icon, and under "System Tools" select "gpa".
The first time you open up "gpa" you'll have to create a keypair. Enter in your SR name, your tormail as the contact, and a strong password. Create a
backup copy of your private key and save it to "persist>security>pgp" for now (I highly recommend saving it on Tormail and deleting it off of your USB).
To encrypt a message with pgp, first find the public key of the person you want to send the message to. Save that key as a file and import that to gpa
with the "Import" button. Now press the "Clipboard" button, type your message, and hit "Encrypt". Choose the key of the person you're sending the
message to and your message will become encrypted. Unless you want to get an encrypted message back, you don't have to include your public key.
5. Receiving Packages
Always use the real name of a person registered at the house you are sending to. The Post Office checks to make sure the two match up, they'll realize somethings up when they get a package to "John Smith" at a random street. Don't spell your name slightly wrong either as again that can raise a flag at the post office. I recommend getting a friend to pick up packages for you (always ask him/her first!).
Once you get the package, write "RETURN TO SENDER" in big red letters with a marker across the package. Wait 1 day, and if the police don't come banging down your door then you should be fine. Never use your product at the house you received it at. I also recommend only buying personal amounts as local law enforcement doesn't have the time or resources to bust someone getting an 1/8th of weed in the mail. If they do catch it, they'll probably just send you a love letter. Freakonomics (a popular book) showed that most street level drug dealers make less than minimum wage, so buying ounces of stuff off of SR is really not that worth it.
If the police does come knocking, DENY that the package is yours. Remember that anyone can send you drugs in the mail. Don't consent to any searches, don't say much at all, call your lawyer and let his expensive lips do the talking.
To Be Continued....................
Is there one for Mac Users?
-
Worthy of a sticky, but I will give it a bump. ;)
-
Was it really necessary to quote the entire post.. Haha, if you're hung up on the GPG part, you could use this site as an online utility.
https://www.igolder.com/PGP/
I must confess when I was much younger I used this very site to create keys and encode/decode messages. If you access it via Tor you're probably safe enough but if in the nature of things you're going to have to paste your private key into an online form and input your password, you're entrusting a stranger with this information.
I don't mean to sound paranoid but the Portable Version of PGP is very easy to download and install onto a USB, there's no reason even a small child can't do this. Hell, I first did it when I was 14 and I'm a moron - ask anyone! :-)
V.
-
Was it really necessary to quote the entire post.. Haha, if you're hung up on the GPG part, you could use this site as an online utility.
https://www.igolder.com/PGP/
I must confess when I was much younger I used this very site to create keys and encode/decode messages. If you access it via Tor you're probably safe enough but if in the nature of things you're going to have to paste your private key into an online form and input your password, you're entrusting a stranger with this information.
I don't mean to sound paranoid but the Portable Version of PGP is very easy to download and install onto a USB, there's no reason even a small child can't do this. Hell, I first did it when I was 14 and I'm a moron - ask anyone! :-)
V.
Understandable, I might go and just do that for my USB right now haha.
Needless to say you should encrypt the USB itself to make sure if you lose it or the boys in blue get their hands on it they can't see your Public Key - have you used Truecrypt before? Very easy to set up and gives you peace of mind! :)
V.
-
Im having trouble extracting the file. Can someone help? Im putting it on usb
-
Going to the library is very DUMB !!! That's the last place you want to use the computer. First, you have to be registered to use the computers. That means you have to give an ID. You also have to sign up to use the computer. Nowadys libraries have cameras. Second, All internet activity is monitored and filtered. Using the library is the worst advise someone can give you !
That is a very good point. Instead of going to the library...could you use your own laptop, and connect at a local coffee shops wifi, and do the process there? Any other suggestions?
-
Going to the library is very DUMB !!! That's the last place you want to use the computer. First, you have to be registered to use the computers. That means you have to give an ID. You also have to sign up to use the computer. Nowadys libraries have cameras. Second, All internet activity is monitored and filtered. Using the library is the worst advise someone can give you !
That is a very good point. Instead of going to the library...could you use your own laptop, and connect at a local coffee shops wifi, and do the process there? Any other suggestions?
Feel free to use free Wifi in a cafe or library but there really is no need if you're using a Tor browser - it's a very trivial thing technically speaking to detect someone is using Tor, but since the connection is encrypted via onion routing, there's no way of detecting what information you're exchanging - you could be accessing a news website or you could be going on SR.
Compare and contrast with seeing someone in a train station in a locked briefcase - the fact that you know they own one doesn't give you any clue to its contents.
Having said that, it might be possible for someone who specialises in digital forensics to recover your PGP keys or browsing habits if they have access to your machine.I'm sure it's been mentioned before you should have full disk encryption on your laptop / PC in case it is stolen or confiscated. The best program for Windows to do this is Truecrypt as it's extremely easy to use and is free of charge.
In Layman's terms the program works by encrypting the information on your machine. It also fills the blank space on your hard drive with random "chaff" data. Most importantly, it's not possible to detect the difference between this random data and your own without inputting the correct password.
Truecrypt also allows you to create "containers" of any size to store your personal information and programs such as the Tor Browser bundle. I would suggest you do this too to be on the safe side. This is also very useful if you have to share your computer with someone else!
V.
-
Going to the library is very DUMB !!! That's the last place you want to use the computer. First, you have to be registered to use the computers. That means you have to give an ID. You also have to sign up to use the computer. Nowadys libraries have cameras. Second, All internet activity is monitored and filtered. Using the library is the worst advise someone can give you !
That is a very good point. Instead of going to the library...could you use your own laptop, and connect at a local coffee shops wifi, and do the process there? Any other suggestions?
cool thanks for the info! When I was talking aboout connecting to public wifi, I meant when trying to obtain bitcoins, going through mt gox, etc. Aren't you not supposed to use a tor browser to do that?
Feel free to use free Wifi in a cafe or library but there really is no need if you're using a Tor browser - it's a very trivial thing technically speaking to detect someone is using Tor, but since the connection is encrypted via onion routing, there's no way of detecting what information you're exchanging - you could be accessing a news website or you could be going on SR.
Compare and contrast with seeing someone in a train station in a locked briefcase - the fact that you know they own one doesn't give you any clue to its contents.
Having said that, it might be possible for someone who specialises in digital forensics to recover your PGP keys or browsing habits if they have access to your machine.I'm sure it's been mentioned before you should have full disk encryption on your laptop / PC in case it is stolen or confiscated. The best program for Windows to do this is Truecrypt as it's extremely easy to use and is free of charge.
In Layman's terms the program works by encrypting the information on your machine. It also fills the blank space on your hard drive with random "chaff" data. Most importantly, it's not possible to detect the difference between this random data and your own without inputting the correct password.
Truecrypt also allows you to create "containers" of any size to store your personal information and programs such as the Tor Browser bundle. I would suggest you do this too to be on the safe side. This is also very useful if you have to share your computer with someone else!
V.
-
Going to the library is very DUMB !!! That's the last place you want to use the computer. First, you have to be registered to use the computers. That means you have to give an ID. You also have to sign up to use the computer. Nowadys libraries have cameras. Second, All internet activity is monitored and filtered. Using the library is the worst advise someone can give you !
That is a very good point. Instead of going to the library...could you use your own laptop, and connect at a local coffee shops wifi, and do the process there? Any other suggestions?
cool thanks for the info! When I was talking aboout connecting to public wifi, I meant when trying to obtain bitcoins, going through mt gox, etc. Aren't you not supposed to use a tor browser to do that?
Feel free to use free Wifi in a cafe or library but there really is no need if you're using a Tor browser - it's a very trivial thing technically speaking to detect someone is using Tor, but since the connection is encrypted via onion routing, there's no way of detecting what information you're exchanging - you could be accessing a news website or you could be going on SR.
Compare and contrast with seeing someone in a train station in a locked briefcase - the fact that you know they own one doesn't give you any clue to its contents.
Having said that, it might be possible for someone who specialises in digital forensics to recover your PGP keys or browsing habits if they have access to your machine.I'm sure it's been mentioned before you should have full disk encryption on your laptop / PC in case it is stolen or confiscated. The best program for Windows to do this is Truecrypt as it's extremely easy to use and is free of charge.
In Layman's terms the program works by encrypting the information on your machine. It also fills the blank space on your hard drive with random "chaff" data. Most importantly, it's not possible to detect the difference between this random data and your own without inputting the correct password.
Truecrypt also allows you to create "containers" of any size to store your personal information and programs such as the Tor Browser bundle. I would suggest you do this too to be on the safe side. This is also very useful if you have to share your computer with someone else!
V.
Hi Miles,
Yes, you shouldn't use Tor to access MtGox as they can freeze your account. In any case there is really no need. I access MtGox all the time from my office as I trade in Bitcoins which is perfectly legal.
If you're feeling particularly paranoid there are other ways to keep your connection private besides using Tor (I have posted on a separate thread about using an encrypted SSH tunnel for instance) but I really don't think it's necessary.
Let's say you were under Police survevillance (which is very unlikely), and they were able to obtain a court order from your ISP to look at what sites you've been visiting, which once again would be extremely unlikely. All they could tell was that you had accessed the MtGox website. Your connection is secured by SSL, so they wouldn't even be able to tell which account was in your name, let alone how many Bitcoins you're buying or where you're sending them.
But let's say you're one unlucky guy and they manage to get a Judge to seize MtGox's servers and get hold of your account details - all they would be able to prove is that you bought some Bitcoins. Even if you have transferred them to your wallet on SR they have no way of telling the difference between BTC addresses belonging to SR from any other.
The worst they could do if they managed to get hold of this information is trace the passage of the Bitcoins you bought through MtGox through the network but even then that proves nothing in itself. Sellers on SR have a "mixer" built into their accounts so that Bitcoins are shuffled around before being withdrawn, so it wouldn't be possible to know what you had bought on SR by analysing transactions, nor where your Bitcoins went after they got there.
This is why I don't feel at all worried about buying Bitcoins with my own bank account and accessing MtGox from my office as in themselves they are perfectly legal activities - for now at least. :-)
V.
-
This is a great topic, it always amazes me that people buy anything from SR without using liberte (or at least a live cd/usb). Liberte has the added security advantage that it is encrypted already.
As I see it the real weak point in this whole system is the ability of LE to link a given bank account to you as a person. Thus I doubt it would be a good idea to access SR from my native OS and home IP (I use my home IP at the moment while I am reading the forums & will discard this username when I actually go on to get something), a public wifi couldn't hurt either. Also when transferring BTC around it might be worthwhile changing tor circuits and using the mac changer in liberte between each transaction. The number of movements and use of laundries is entirely dependent on personal preference and level of paranoia.
I guess even if the worst scenario occurs and your seller gets busted and stupidly has not yet wiped your info (or not wiped it securely), or has done so but gives up the password to the authorities (under threat of 5 years jail time in the uk) then all they have is your name and address. While this might bring some scrutiny onto you, if you have been careful it doesn't mean its all over (you may want to move before ordering again though :P)
For more specific issue of getting bitcoins anonymously in the uk, vlad1m1r has mentioned previously that barclays bank allow cash deposits to mt. gox, this allows an end to end secure method of getting bitcoins. Now if only someone can devise a secure method of delivery we're all set.
-
UK you can cash deposit through Aurumxchange and a few others now.
I bet if you made threads on bitcointalk.org there would be somebody in your town/city who can exchange for cash.
-
UK you can cash deposit through Aurumxchange and a few others now.
I bet if you made threads on bitcointalk.org there would be somebody in your town/city who can exchange for cash.
I looked into the GBP cash deposit option for AurumXChange but they seem to make it clear they expect to receive the funds via wire transfer. Intersango did have a Lloyds TSB account but now they use Metro bank - unfortunately there isn't one near where I live but I use my own bank account to buy BTC as I only use them for trading purposes and not to buy illegal goods - others amongst you might want to be more cautious.
As I mentioned, you can switch your currency of choice to GBP in MtGox and receive the details for a Barclays account. It is possible to pay in cash over the counter but I should stress I did this a couple of times with Barclays in the past for paying my rent and they failed to put in the reference code on my deposit slip unless I asked them specifically.
There are deposit points in every branch whereby you can put cash into an envelope and pay in which would be fairly anonymous but personally I'd be worried they wouldn't record your unique reference no. If it would help, next week I will try to deposit a small sum (say £10) in this way using a deposit point rather than over the counter - shall I let you all know if goes through? Perhaps I just had a couple of bovine cashiers...
At the end of the month I intend to set up a seller account - one of the services I am going to offer to UK/European SR user is BTC in exchange for cash in the mail which I'm sure you'll agree would offer you the best level of protection as you wouldn't have to walk into a bank full of security cameras to get your coins.
I'm not allowed to advertise this as a specific service until I own a seller account but if anyone wants further details of how this is going to work, please send me a message.
V.
-
Shit, looks like they temp disabled cash deposit they used to have it.
Intersango is I guess one of the last UK exchangers, but it's all online banking no cash deposit.
Everybody should do bitcoins->cash by mail or in person then we all avoid banks and IDs.
-
Oh dear!
Well as I said on the 25th when I open a sellers account I fully intend to offer this a cash in mail service for buying and selling Bitcoins.
In the mean time I suggest people worried for their safety buy using Intersango and run the coins through the BitcoinFog mixer.
V.
Shit, looks like they temp disabled cash deposit they used to have it.
Intersango is I guess one of the last UK exchangers, but it's all online banking no cash deposit.
Everybody should do bitcoins->cash by mail or in person then we all avoid banks and IDs.
-
Oh dear!
Well as I said on the 25th when I open a sellers account I fully intend to offer this a cash in mail service for buying and selling Bitcoins.
In the mean time I suggest people worried for their safety buy using Intersango and run the coins through the BitcoinFog mixer.
V.
It will be most interesting to see how you fare with this.. I suspect it might do really well. On the other hand unless you are EXTREMELY scrupulous and possess lots of attention to detail the inevitable problems will certainly result in a reputation for scams. I wish you great success in the venture.
-
Oh dear!
Well as I said on the 25th when I open a sellers account I fully intend to offer this a cash in mail service for buying and selling Bitcoins.
In the mean time I suggest people worried for their safety buy using Intersango and run the coins through the BitcoinFog mixer.
V.
It will be most interesting to see how you fare with this.. I suspect it might do really well. On the other hand unless you are EXTREMELY scrupulous and possess lots of attention to detail the inevitable problems will certainly result in a reputation for scams. I wish you great success in the venture.
Thanks Philter,
You're absolutely right in saying it's going to require absolute honesty and rigorous attention to detail.
My two main worries have to do with cash being lost in the post and the volatility of the Bitcoin.
When sending cash I am going to add a pound or so for signature delivery but some people may be unhappy with signing for items so I think I'll give them the option. Similarly if they're sending large amounts of cash to me to exchange for BTC I'm going to suggest they send via Special Delivery (which is insured) but some people don't want to to the expense - a small price to pay for peace of mind! :-)
The other niggling worry has to do with the BTC's volatility. I think the fairest thing to do is say that I will give buyers the BTC equivalent of the cash they send on the day it's received.
As an alternative I was thinking instead of sending BTC, maybe sending a redeemable MtGox GBP code for a fixed amount which a buyer could cash in at their leisure and use to buy BTC when the time is right, do you think this would be a better idea? I prefer the idea of using a wallet though as it would provide proof in case a scammer tried to say they didn't get their coins.
Obviously trust is a major issue here, I'm hoping to get some good testimonials from fellow SR users during the "sunrise" period when I'll be offering specially discounted rates. Watch this space.
V.
-
I can't believe you don't have a +karma for helping the newbs, so here's one! ;)
Is that a fake profile picture or is "pine" the indie goddess of my dreams
-
I can't believe you don't have a +karma for helping the newbs, so here's one! ;)
Is that a fake profile picture or is "pine" the indie goddess of my dreams
I've been wondering this too but haven't had the balls to ask. My guess would be no, it'd be pretty ballsy to post a real pic of yourself on here, would it not?
Someone else, whose name is eluding me because I tried to think of it too fast, also has an unbelievably foxy pic of a pretty girl with short hair on their profile.
Women who can pull of that style are the most definitely the hottest...
Fuck man, you're getting me all curious and shit.
Hey pine: if nothing works out in life and you share my hate of the the average human, lets get married ;)
-
I can't believe you don't have a +karma for helping the newbs, so here's one! ;)
Is that a fake profile picture or is "pine" the indie goddess of my dreams
I've been wondering this too but haven't had the balls to ask. My guess would be no, it'd be pretty ballsy to post a real pic of yourself on here, would it not?
Someone else, whose name is eluding me because I tried to think of it too fast, also has an unbelievably foxy pic of a pretty girl with short hair on their profile.
Women who can pull of that style are the most definitely the hottest...
Fuck man, you're getting me all curious and shit.
Hey pine: if nothing works out in life and you share my hate of the the average human, lets get married ;)
Something of a milestone for SR - the first engagement. :-)
V.
-
Bump for noobies (like myself)
-
Awesome tutorial! THANK YOU!!!!!!!!!!!!!!!!!!!!
-
So I have just accepted the fact that I really shouldn't be using windows 7 whilst on SR - I will be buying a new hard drive.
What data can I swap over from my old HDD to my new one without making the act of getting a new hard drive (removing and eliminating unencrypted harmful data against me) pointless? Are things like games, movies, music, pictures etc good to swap over?
I assume that all things to do with the internet should definitely not be swapped over, not that I would want to anyway.
Basically yeah what am I alright to swap over to save me re-downloading everything?
-
I wouldn't buy a new hard drive just because you use Windows 7 to access Silk Road - just encrypt it with Truecrypt (very easy to use) and you can keep all your files in place. You should still use a separate OS for accessing SR in future though.
V.
So I have just accepted the fact that I really shouldn't be using windows 7 whilst on SR - I will be buying a new hard drive.
What data can I swap over from my old HDD to my new one without making the act of getting a new hard drive (removing and eliminating unencrypted harmful data against me) pointless? Are things like games, movies, music, pictures etc good to swap over?
I assume that all things to do with the internet should definitely not be swapped over, not that I would want to anyway.
Basically yeah what am I alright to swap over to save me re-downloading everything?
-
So I have just accepted the fact that I really shouldn't be using windows 7 whilst on SR - I will be buying a new hard drive.
What data can I swap over from my old HDD to my new one without making the act of getting a new hard drive (removing and eliminating unencrypted harmful data against me) pointless? Are things like games, movies, music, pictures etc good to swap over?
I assume that all things to do with the internet should definitely not be swapped over, not that I would want to anyway.
Basically yeah what am I alright to swap over to save me re-downloading everything?
Vlad is right, no need to go overboard here, a simple secure shredding of incriminating documents and overwriting of free space should be plenty as long as you never use the win 7 OS for SR business again. If you are too worried for that go get DBAN, wipe the whole drive and start again either with windows or a linux distro if you don't want to pay for another copy of windows.
-
Well I have unencrypted data littered all over my hard drive because of it, I could reformat but I was thinking of getting a new hard drive anyway.
What type of unencrypted data is actually stored on windows 7 then?
For now I think I will:
1. Move all files over to partition on hard drive that I want to save (games, videos etc this is okay to do?)
2. Format hard drive (not the partitioned bit of course)
3. Install windows 7
4. Download linux liberte
5. Put on USB, download tor on there, access tor from there.
Sound good?
-
Well I have unencrypted data littered all over my hard drive because of it, I could reformat but I was thinking of getting a new hard drive anyway.
What type of unencrypted data is actually stored on windows 7 then?
For now I think I will:
1. Move all files over to partition on hard drive that I want to save (games, videos etc this is okay to do?)
2. Format hard drive (not the partitioned bit of course)
3. Install windows 7
4. Download linux liberte
5. Put on USB, download tor on there, access tor from there.
Sound good?
Depends on what the encrypted data is I suppose. Is it incriminating? If you are worried about traces on your computer (though at this point they may well be moot as anything worth saving will be stored upstream by your isp ect ect) then messing about with partitions will not do the job. Formatting is also not a secure way of removing data from a drive, like deleting data within an OS this does nothing to remove the data but simply removes the marker thus designating that section of the disc as free space once again.
I would recommend putting all the files you want to keep onto an external drive and downloading DBAN (Dariks Boot And Nuke) which can be easily put on a USB and used to wipe your hard drive in a way that would make it very very hard (if not impossible) for anything to be retrieved from the disk.
Then reinstall windows and liberte (the new snapshot is much nicer looking and easier to use). all browser use on liberte is automatically torified - liberte is pretty bomb-proof in terms of users doing it wrong. The only non-torifed browser is clearly marked as such.
Dont forget to activate i2p when your done!
-
Was it really necessary to quote the entire post.. Haha, if you're hung up on the GPG part, you could use this site as an online utility.
https://www.igolder.com/PGP/
Please don't use sites like this people. Submitting private keys to an unknown, untrusted entity completely defeats the point of using encryption in the first place. Private keys are named as they are for a reason: They are intended to be kept private.
Look up MacGPG. It's not that hard to set up.
-
Well I have unencrypted data littered all over my hard drive because of it, I could reformat but I was thinking of getting a new hard drive anyway.
What type of unencrypted data is actually stored on windows 7 then?
For now I think I will:
1. Move all files over to partition on hard drive that I want to save (games, videos etc this is okay to do?)
2. Format hard drive (not the partitioned bit of course)
3. Install windows 7
4. Download linux liberte
5. Put on USB, download tor on there, access tor from there.
Sound good?
Depends on what the encrypted data is I suppose. Is it incriminating? If you are worried about traces on your computer (though at this point they may well be moot as anything worth saving will be stored upstream by your isp ect ect) then messing about with partitions will not do the job. Formatting is also not a secure way of removing data from a drive, like deleting data within an OS this does nothing to remove the data but simply removes the marker thus designating that section of the disc as free space once again.
I would recommend putting all the files you want to keep onto an external drive and downloading DBAN (Dariks Boot And Nuke) which can be easily put on a USB and used to wipe your hard drive in a way that would make it very very hard (if not impossible) for anything to be retrieved from the disk.
Then reinstall windows and liberte (the new snapshot is much nicer looking and easier to use). all browser use on liberte is automatically torified - liberte is pretty bomb-proof in terms of users doing it wrong. The only non-torifed browser is clearly marked as such.
Dont forget to activate i2p when your done!
No external drive, may just get a new one and DBAN the other and use it on an old computer?
-
Does any one know how to install/get the wireless drivers for Liberte? Thanks.
-
this is good and all but i just buy through BTCKing. He has no idea who I am and my BTC's are deposited directly to my account.
Also, what does liberte do?
-
this is good and all but i just buy through BTCKing. He has no idea who I am and my BTC's are deposited directly to my account.
Also, what does liberte do?
I am pleased to announce my seller account is up and running I will be shortly offering cash in exchange for Bitcoins to SR and the darknet at large.
On to more immediate matters, Liberte is a stripped down Operating System which has been made with privacy in mind. It is encrypted and can fit easily on a USB stick. All connections run through Tor including e-mail, web browsing and chat. It's an excellent secure OS for beginners but as I stated previously I don't use it any more as it has no Bitcoin wallet and you can't install new apps without modifying the kernel.
Any more questions, please feel free to ask.
V.
-
I am trying to boot Liberte from a USB drive on my Mac with no success. Is it even possible to boot Liberte from a USB drive on a Mac? I hope so, because my current setup is pretty weak. Thanks guys.
-
Is it possible to boot it from a Virtual Machine running Windows on my Mac? Or would that defeat the purpose?
-
THANK YOU so very much as a newbie here ,I have found it to be a hostile place and rude and lots of folk trying to nick my cash.
Ive been waiting just for a guide like that i only hope it works with intersango,if not i;ll mt Gox many thanks.
I treat as i wanna be treated, and from longevity in the game ,honesty is the best way in biznizz. :) :) :)
-
Great thread!! Thanks alot for the guide, and I am absolutely loving LIberte!!
Cheers
-
Ok,let say I did all that.Now I wanna sell something.Bam sold,a few grand in my sr account,let say 3k..Now I wanna withdraw it all..Is there a fee?How long does that process take?.. 1 or 2 days I hope?
-
Ok,let say I did all that.Now I wanna sell something.Bam sold,a few grand in my sr account,let say 3k..Now I wanna withdraw it all..Is there a fee?How long is does that process take?.. 1 or 2 days I hope?
This entirely depends on where you live, what exchange you use and how you withdraw the money. For example if you use Intersango and live in the UK, you can withdraw amounts of over £100 to a UK bank account free of charge. BitcoinNZ in New Zealand likewise do not charge for withdrawal of NZD once you have sold BTC via their exchange. MtGox allows withdrawal by Dwolla which in turn allows you to transfer funds to your account - I don't know if they charge any withdrawal fees for this, perhaps one of our US users can confirm?
Bear in mind that rate at which BTC are bought are less than the rate at which they are sold - and the Bitcoin can fluctuate quite a lot in value so take this into account when calculating your prices. SR itself has features to help peg your listings to the USD.
V.
-
Is it possible to boot it from a Virtual Machine running Windows on my Mac? Or would that defeat the purpose?
Hi buddy,
Yes this is perfectly feasible.
I used to have a Windows VM on a Mac using the free program Virtualbox - and there's no reason you can't use Windows for your nefarious dealings. A few things to take into account:
- The virtual disk image file is just as vulnerable to being seized and analysed as a regular hard disk. For this reason I'd suggest using Truecrypt to perform full disk encryption on the Virtual Machine. Of course you also can (and should!) do this to your regular hard drive on your Mac too!
- Windows has more security holes than other Operating Systems and is more vulnerable to malware/viruses so make sure you install an effective Internet Security suite (my personal favourite is AVG free Antivirus plus the firewall Zonealarm) but my knowledge of Windows is a little dated so please anyone in the know feel free to contradict!
- If you decide to go ahead and do this, be careful when downloading Windows CD from torrenting websites which may have been modified to include malware. A second hand official copy of Windows XP Home Edition will set you back about $30 - a small price to pay for the peace of mind!
Liberte Linux is also available as a virtual machine as well as a bootable USB version. It's excellent for beginners as by its very nature it's encrypted from Day 1 and all connections are immediately Torified. In addition you can't install any new programs so viruses don't get a look in. That said, the lack of Bitcoin wallet software in particular means that you'll probably want to move on from this after a while.
V.
-
Hey, so I've just recently joined SR and I'm just trying to get everything in order before I make any buys.
Ive got TOR and Bitcoin setup and Ive organised bitcoins today through https://www.spendbitcoins.com/buy/ (like aussie get-bitcoins) and run them through an instawallet and on to SR.
As far as encrypting I dont really wanna boot off a usb or have a hidden operating system because I'd like to be able to jump on TOR for a browse without shutting down my system.
I was thinking I would make a truecypt partition on a new hard drive and store all TOR and SR related stuff on that and access it when I need to.
would that be sufficient? or am I missing something?
Thanks
-
Make a truecrypt hidden OS with a VM running this.
Anyone know how to setup wifi on librerte.
-
Hey, so I've just recently joined SR and I'm just trying to get everything in order before I make any buys.
Ive got TOR and Bitcoin setup and Ive organised bitcoins today through https://www.spendbitcoins.com/buy/ (like aussie get-bitcoins) and run them through an instawallet and on to SR.
As far as encrypting I dont really wanna boot off a usb or have a hidden operating system because I'd like to be able to jump on TOR for a browse without shutting down my system.
I was thinking I would make a truecypt partition on a new hard drive and store all TOR and SR related stuff on that and access it when I need to.
would that be sufficient? or am I missing something?
Thanks
Hi buddy,
Absolutely no reason you can't install your Tor Browser / GPG software and Bitcoin wallet program to a Truecrypt encrypted drive and run from there. In theory an expert at digital forensics might be able to recover virtual fingerprints left by the Tor Browser to show you may have another browser running on your system but that largely depends on the Operating System you're using.
My own set up is to use Ubuntu with an encrypted Home Folder (contains all passwords, keys, user settings etc.), inside of which there's a Truecrypt Partition.
Just one word of caution - without using a hidden OS you won't have plausible denial when it comes to encryption so I would suggest you use Truecrypt to encode your new hard drive completely. The program will fill up the free space both with your encrypted data and random "chaff" data and even the most brilliant Computer Scientist wouldn't be able to tell it was encrypted by examining the data alone as many programs for wiping hard drives use a similar technique - only you, with the right password will be able to unlock it - this is only true for extenal drives though - if you encrypt your own computer's drive it will be possible to detect the Truecrypt "bootloader" which is necessary for entering the password.
Since you're going to have the programs on a separate hard drive, I would also suggest that in addition to using a password to unlock the drive, have a Key File on your computer itself, which significantly increases your level of protection.
Hope this helps,
V.
-
Hey, Thanks for the quick reply.
I was reading about key files before and thinking to myself that they seem less secure? clearly I'm wrong, but wouldnt having a key file on your computer be like having a password written down in the computer?
And I was thinking because my spare hdd is 500gb and I dont need that sort of space to hold a few programs and passwords. could I just make a truecrypt container with a hidden container inside so that if I did ever get checked for it I could simply provide the wrong password and all theyll find is some porn or something? also does it matter if I have GPG4Win and my bitcoin wallet installed on the normal drives since they arent illegal programs anyway? or are they going to leave something behind?
thanks
-
Hi Sterling Archer,
To answer your question, the key file is a layer of security to be used in addition to your password. It massively increases the security of your Truecrypt partition. If you encrypt the hard disk on your computer using Truecrypt and keep the Keyfile on there, it will mean no one can access the Truecrypt partition except you.
By all means use a container rather than a partition but you should do as you say and have a hidden volume with some hard porn/bank details in case you're compelled to hand over the password.
As for having GPG4WIN / Bitcoin wallet I would suggest you encrypt your hard disk with Truecrypt as I said. There's a small risk that if your computer were seized that analysing the programs would compromise your identity.
As far as GPG is concerned an analysis of your keyring would reveal your public and private keys. At the very least it would be possible to determine who you'd been in contact with. In the worst case if your private key was protected with a weak password it would be possible to decrypt e-mails to you!
In terms of your Bitcoin client, it's true owning Bitcoins in itself isn't illegal but as the software contains the Bitcoin addresses you've been using it would be possible to trace the passage of any coins that have passed through your wallet.
If you're going to set up a TC container, you might as well install Portable PGP / your Bitcoin wallet to there. Try to keep the size below 1GB so you can back up the container online.
V.
Hey, Thanks for the quick reply.
I was reading about key files before and thinking to myself that they seem less secure? clearly I'm wrong, but wouldnt having a key file on your computer be like having a password written down in the computer?
And I was thinking because my spare hdd is 500gb and I dont need that sort of space to hold a few programs and passwords. could I just make a truecrypt container with a hidden container inside so that if I did ever get checked for it I could simply provide the wrong password and all theyll find is some porn or something? also does it matter if I have GPG4Win and my bitcoin wallet installed on the normal drives since they arent illegal programs anyway? or are they going to leave something behind?
thanks
-
This write-up was extremely helpful. Thanks.
-
2. Install Liberte to USB
Extract the ".zip" you just downloaded to the root of your USB flashdrive. Open the "liberte" folder, right-click over "setup.bat" and select "Run as
administrator". The batch file will do its thing and will prompt you with a "Press any key to continue..." message once it's done.
I get stuck around here when trying to boot from a mac os x operating system. There is no default program to run the "setup.bat" file. Like macs don't recognize it. I can find no way to run this file and successfully install liberte to my usb so it's impossible for me to boot from it. Can anyone help me with this?
-
Does anybody know how to use PGP with Liberte?
I tried using gpa that comes with it, but I can't save my key to the USB drive running liberte (read-only) and by nature it won't save anything to my hard disk. I really want to use liberte, so if anybody has any advice, I'd greatly appreciate it!
Thanks.
-
These questions might be retarded, let me start with that.
1. As another couple of guys asked, does the liberte linux download work for mac?
2. Should this be downloaded while in Tor or through a standard browser?
3. If I've been browsing SR in my regular OS through Tor, is it cause for concern?
4. How do I go about encrypting my entire OS? This sounds like a smart thing to do in general
-
Great info!
-
I can't seem to save files I created in Liberte. They disappear every time I reboot. Someone explain to me what I'm doing wrong. I'd really appreciate it.
-
Read the whole guide and the thread. Great stuff- thank you.
These questions might be retarded, let me start with that.
1. As another couple of guys asked, does the liberte linux download work for mac?
2. Should this be downloaded while in Tor or through a standard browser?
3. If I've been browsing SR in my regular OS through Tor, is it cause for concern?
4. How do I go about encrypting my entire OS? This sounds like a smart thing to do in general
My thoughts exactly. Concerning encrypting my OS, I looked it up and TrueCrypt only supports up to OS X not Lion?
-
In my town, there's virtually nowhere to access a computer not linked to me in some way...the library requires a library card to log on, and the computers at the university require a university ID. I don't have any access to any computer not belonging to a close friend or relative...any recommendations for accessing Mt. Gox? I'm not quite sure where to go to best do this, or if there's another secure way to go about it on my own computer?
-
It was mentioned earlier in the thread that you cant have a Bitcoin wallet in Liberte?
Can someone explain this and how to manage and transfer bitcoins securely in Liberte?
-
It was mentioned earlier in the thread that you cant have a Bitcoin wallet in Liberte?
Can someone explain this and how to manage and transfer bitcoins securely in Liberte?
You could use an online bitcoin wallet that you can just access through TOR. there are a few of them around, I'm not sure which is the best though
-
It was mentioned earlier in the thread that you cant have a Bitcoin wallet in Liberte?
Can someone explain this and how to manage and transfer bitcoins securely in Liberte?
Transfer your btc from mtgox or whatever you use to an online wallet. I use easywallet. And from there transfer your btc to your SR wallet. Viola.
-
I have successfully installed liberte onto my usb, and changed the settings so now it boots automatically when plugged into my computer. Once I get into liberte, however, and try to open midori, I get a "forwarding error" message and cannot access the internet. Similarly, out of curiousity, I tried to open the non-torified browser and had the same result. It says that my computer is connected to the household wifi (though a popup box asking my for the wifi password pops up every minute or so...) what am I doing wrong? I'm not a particularly computer oriented person, so forgive me if I'm doing something dumb.
-
awesome info, thanks for the tutorial, most informative!
-
Ima crossposting this because I don't think the implications of it are being realized, or else it's not being read enough. Probably both. Anyway:
SubTopic: This shows you how to anonymously use Bitcoins.
--
Your problem is now to disassociate yourself from the bitcoins you have purchased. You've kinda screwed up you see unless you did what I mentioned in 'Future Reference' below. Now you must do some work to cover your tracks. Read everything carefully.
--
For future reference:
Ideally you should have remained anonymous right from the onset before your purchased anything. You would have to buy the bitcoins with a cash deposit at a bank *and* access the (mtgox) exchange website through a private proxy in your region of the world. You would have been using Tor to access that proxy which accesses the exchange clearnet site. I appreciate that sounds wildly complicated, but it's actually quite simple once you know how. Not only will it save you money, but it is many many times more secure. It's also less complex than what you need to do now unless you sell your coins and start over.
--
Your work today:
--
Since you've already bought B$ through clearnet at mtgox, you should send them to an instawallet (a one time address service offered by some B$ services online). Bookmark the instawallet URL otherwise you'll lose your money. Do not use Tor with instawallet or mtgox at this stage, that would be a red flag leading directly to you, you are assuming that both instawallet and mtgox relay all information to law enforcement and using Tor is bad news bears because mtgox will likely request a positive ID of you to release the funds citing AML requirements.
Use Tor to find a Bitcoin laundering service, search our forums to find a reliable one. They will give you an address to send to. Don't send anything to it just yet (and note that it would take roughly a day for a mix to operate, so don't panic if it takes time, it's not instantaneous).
Go to instawallet through clearnet and forward the coins to a Bitcoin wallet on your own computer (you need to download some bitcoin wallet software for this, you also need to torify your bitcoin wallet and download the block chain (will take a couple of hours), read this document: http://en.bitcoin.it/wiki/Tor). Now it appears that you've paid somebody in a different country Bitcoins because your Bitcoin wallet is torified.
Ok, now you have an option. For more security, you can use a mix (the bitcoin laundering service I mentioned, it will cost you money), or you go proceed directly to sending bitcoin from your wallet to a new instawallet which you've accessed via Tor. Then from instawallet to the SR address you have.
I suggest you first do this with a small amount of bitcoin to ensure this all makes sense and then you can be confident enough to do it again. At each stage you should be using a different Bitcoin address, never use the same one twice because that creates a loop, indicating that it is highly likely that any transactions in the loop are authorized by the same person.
Yes, you could just link your mtgox a/c to your SR account. But if you read in the newspaper that the Silk Road got busted, then you're going to feel rather queasy and wish you'd followed the above instructions.
If all of this sounds like too much of a headache (albeit it would be hugely educational), then just sell the bitcoins, retrieve your money and start again. If you aren't confident enough, that would be best.
---------------------------------------------------------------------------------------------------------------------------------------
Condensed Iteration of everything above the line:
--
Here's the tldr; version where instructions are separated from advice:
Future Activity:
Cash deposit at bank to an exchange -> Use Tor to access private proxy* in your country -> communicate through that proxy to the exchange -> convert cash to bitcoins -> open an online wallet service -> send bitcoins to that service -> optionally put those bitcoins through a mix -> send bitcoins to your SR wallet.
--
If you already have bitcoins connected to your identity. e.g. used a credit card to buy, transferred from your bank account to exchange etc.
--
Go onto Tor and download bitcoin wallet software -> Printscreen http://en.bitcoin.it/wiki/Tor instructions -> Turn off interweb -> Install and torify your bitcoin wallet software -> Turn on interweb and download the block chain to torified bitcoin wallet, now you are ready to proceed -> On clearnet, access your exchange account with the bitcoins -> Make an instawallet/online bitcoin wallet provider account through clearnet -> transfer bitcoins from exchange to instawallet -> transfer from instawallet to your torified bitcoin wallet -> Open new instawallet with Tor -> transfer from torified bitcoin wallet to instawallet on Tor -> Optionally transfer to a bitcoin mixing service -> wait a couple of hours/days -> transfer from mixing service or online wallet to SR.
Advice:
1. Don't have your clearnet browser and Tor browser open at the same time.
2. Never use a Bitcoin address more than once.
3. Search forum for bitcoin mixing services and online bitcoin wallet providers.
4. If you think you see flaws, you point them out. The only stupid question is one never asked.
5. Although the above procedures might make you more paranoid, you should really sleep a whole lot sounder since every service you've used from the exchange to the Silk Road itself could be compromised and it wouldn't matter a whole lot.
6. Clearnet means being on the normal web and you're not using Tor software. Darknet is the opposite.
7. To torify something means that its internet traffic is being routed though the Tor network.
8. Don't access exchange websites with Tor, period. Unless you're doing what I described above
9. Don't access any website with Tor e.g. your instawallet, and then access the same web address/URL using Tor. Now instawallet knows who you are if you do.
10. Under no circumstances, none, forward bitcoins from A to B and then put the bitcoins back into a wallet you used earlier. This is circumstantial evidence that all bitcoin activity in that loop belongs to a single entity.
11. The larger the quantities being transacted, the more you want to be thinking about ferrying varying amounts of bitcoin over time with different Tor identities. I believe there is bitcoin software that can do this for you, future scheduled deposits that is, and your Tor software periodically changes identity anyway.
* It's like the Home Cooking Channel! Here's one we made earlier!
-
Thanks for the info, the added advice really helps.
I kindof wanted a straightforward method to anonymize the money.
This makes it easier.
-
I read in another thread that Liberte isn't safe to use at the moment, what do you guys suggest we use instead?
-
I read in another thread that Liberte isn't safe to use at the moment, what do you guys suggest we use instead?
tails ;)
-
Hi. I've run into a problem booting Liberte on my laptop (for the first time, I'm just starting out with Tor and SR :)). When "Enter LUKS Passphrase" appears, I can't type in any characters. Does it have anything to do with that it says "keyboard map: US"? I'm in north-west Europe, with a laptop to match. Also, it didn't take very long before this message appears and I'm just stuck.
-
This is awesome info for people just starting out (like me!) Good karma to you...
-
Dude, thanks a ton on this guide. You really helped me out a lot. One question though, given you being a windows user you might not be able to provide insight. But how will the liveusb steps vary for a mac user?
-
I read in another thread that Liberte isn't safe to use at the moment, what do you guys suggest we use instead?
I read that, too and asked for clarification, but no one ever posted any supporting evidence. The reason stated was that "Liberte leaks DNS requests", but I've not read anything that confirms this. I understand how an application can leak DNS requests, but I'd like a bit more of an explanation as to how a distro designed for anonymity does the same.
The Midori browser Liberte uses is an example, but when configured through Privoxy, any leaked DNS requests are contained and not an issue.
https://trac.torproject.org/projects/tor/wiki/doc/Preventing_Tor_DNS_Leaks
http://www.hermann-uwe.de/blog/howto-anonymous-communication-with-tor-some-hints-and-some-pitfalls
http://securitystreetknowledge.com/?p=283
It was an unsupported blanket statement that I would still like to see confirmed or dispelled with some sort of reference. Guess I'm saying I don't believe it to be true, but am open to the possibility that I'm wrong because I'm not an expert on the subject...
"Please explain how and why Liberte 'leaks DNS requests', rendering it unsafe to use?"
-
Hey guys I'm new to silk road. Just want to purchase a few small things. I had a question about this whole process though; is all this "liberte","truecrypt" stuff really necessary? i just want to purchase a small amount of stuff and i am not worried about my computer being stolen or anything....
Im really just afraid of messing around with how the computer operates (saying you have to change start up options for usb and all that)
-
Thank you all so much. This cleared up a lot of lil questions i had about some things. So in your guys opinion. just using Tor to access SR is not enough security wise? I plain on eventually using Liberte. and windows 7 is bad?
-
Regarding covert internet access... I often just poach the available wireless networks available where ever I am, you'd be surprised (or not) how many home and business networks are wide open on wireless, either default access or simply open. Multi-story office buildings are especially handy. So many networks just open to the universe....
-
If you have over 5 purchases, do not EVER finalize early, even for trusted vendors. If a vendor tells you that you have to finalize in order to have your order
sent, demand them to cancel your order. The escrow system is the ONLY way for SR to protect your money and SR is not responsible if you finalize
early and get scammed.
- Finalizing early for your trusted vendors is a sign of respect, and they appreciate it, some vendors even offer incentives. Obviously you have to use your best judgement (hopefully good judgement) when selecting your vendors. Top 5% you can almost bet on. What I like to do is look at how many people "finalized early" and try to calculate how much money they are holding on to (main incentive for scamming to my knowledge). You can put this into relative perspective with Top%'s and GUESS how likely they are to scam during your order.
5. Receiving Packages
Always use the real name of a person registered at the house you are sending to. The Post Office checks to make sure the two match up, they'll realize somethings up when they get a package to "John Smith" at a random street. Don't spell your name slightly wrong either as again that can raise a flag at the post office. I recommend getting a friend to pick up packages for you (always ask him/her first!).
To my knowledge the USPS doesnt keep records on the current residents of the house, unlike some UK countries.
Please let me know if i am misinformed about any of this.
Once you get the package, write "RETURN TO SENDER"
The security entitled to USPS users: unlike FedEX, UPS, etc, a special warrant is need to open up this quasi-federal mailing company's packages. I hear it doesn't matter if it has been put through the system or not (has USPS processing marks or whatever they are called).
If they do catch it, they'll probably just send you a love letter.
I hear LE stopped doing that because it helps build trust between the buyer and seller.
If you didn't receive the package and have no evidence the dealer sent a package, he could've stolen your money and say it got intercepted.
On the other side, if it did get intercepted why should the dealer believe you? You might be able to get a refund of some sorts.
However, if you have the letter its a little more proof that the package got intercepted.
Do you see how this builds trust and goes against what LE wants?
I hope I can be disproved because this is valuable information.
-
Hi. I've run into a problem booting Liberte on my laptop (for the first time, I'm just starting out with Tor and SR :)). When "Enter LUKS Passphrase" appears, I can't type in any characters. Does it have anything to do with that it says "keyboard map: US"? I'm in north-west Europe, with a laptop to match. Also, it didn't take very long before this message appears and I'm just stuck.
the letters are being typed in, it's just so that nobody looking over your shoulder can see what you're typing or how many characters it contains (that's my guess, anyway)
-
Is there any benefit of using different usernames for the marketplace and the forums?
I have different names thinking it may just add that tiny little bit of extra "piece of mind" rather than security. If in the unlikely chance I get done, both accounts will not be linked. Is this realistic or just a little naive?
-
"Cash Bank Deposit" is no longer an option on "bitinstant.com".
Should I use the "Major Bank Branch" option instead?
-
for the mac users among you i wrote a little guide to Tails:
for securing a macbook i suggest using a bootable live operating system.
There are operating systems preconfigured for TOR that are really easy to use and come with handy tools like pgp pre-installed. On shut down the system wipes your ram and leaves no trace of activity.
The Amnesic Incognito Live System - Tails, is one of those systems that runs fine on a Macbook.
1 Download the current version @ https://tails.boum.org/
2 Burn the ISO image onto a DVD
a Insert blank DVD
b Open "Disk Utility" (OSX feature)
c In the "File" Menu click on "Open Disk Image..." and choose the Tails ISO
d The ISO will now appear in the lower part of the left column
e Select the image there and click on the atomic "Burn" icon in the top left corner and burn to the DVD with slow speed (2x/4x)
3 If you restart your Macbook with the DVD inserted wait for the screen to get white and immediately press and hold the alt button until you reach the bootloader. Navigate to the DVD entry labeled "Windows" and press enter.
Voilá! You are now ready to go. Network drivers, Touchpad, etc. all supported by default.
You also have the option to insert a Thumbdrive and clone the system to it via Applications - System Tools - Tails USB Installer
This will give you the option to create a persistent Volume (e.g. save files, pgp keys) and will work much faster than a DVD.
Although booting from a USB drive is not possible with the default apple bootloader you can download and install rEFIt from you OSX, which will recognize the drive.
rEFIt: http://refit.sourceforge.net/
hope that helped :)
peace
-
excellent guide for using the SR! I really appreciate it!
-
Thanks a lot :)
-
For some reason i cant seem to figure out how to save the sellers PGP key as a file one linux liberte. Ive used the encryption software before without liberte and understand how to use it but i need help with liberte. Typically i would copy the key to my notepad and then save as file but i cant see how to do this with liberte. thanks
-
Anybody care to give me some feedback on my internet setup?
1. Using Tor in Liberte Linux (from home internet connection)
2. Using bitinstant cash deposit to email to obtain bitcoins
3. Send bitcoins to one-time temporary email address (will using Tormail raise any suspicions?)
4. Send bitcoins from there to instawallet, then send it on to BCFog (all using Tor)
5. Sending bitcoins to SR
6. Place order on SR, send information to vendor via GPG encryption
7. Have package sent to my address with real name on it.
Am I missing something here? I've spent a few weeks lurking and reading trying to figure all of this stuff now, and have finally got Liberte Linux up and running to post this. Security is extremely important to me, so I want to make sure that I'm airtight.
-
This is awesome man. I am grateful for people like you who look out for nubs like me. I am new to this and the instructions are crystal clear. They conveyed the basic idea for remaining hidden. People shouldn't critique your post but add or suggest their methods. Thank you, I am definitely on the right track to being part of the SR Community. From what I've read, this place is more than a bunch of druggies trying to score. This is more about freedom, privacy, and telling big brother to go fuck himself. I was about to make a purchase but now I realize I have more learning and reading to do, not only to protect myself but SR as well. I may have questions in the near future but I see everyone helps out and I will be well taken care of.
-
What about exchanging btc for USD without ID?
-
Hey so as you can see im a new user here, Ive installed linux liberte but I cant get it to connect to the internet. Any suggestions on what I may be doing wrong? I followed the steps and at the boot menu I did the usb option, should I try the HDD one?
maybe linux is just offline when I try?
-
What about exchanging btc for USD without ID?
You could use the paybycash option, direct to BTC account
basically pay zipzap through money gram to get BTC in minutes
Make sure you use a fake name and email tho :)
-
What about exchanging btc for USD without ID?
to get BTC in minutes
How do you get CASH from btc?
-
Awsome info!
-
Thanks for this JohnKeats.
Great info for a newbie. Of course I now see where I've been going wrong and might have to back track a little but better safe than sorry. I mean the whole reason for doing this is to separate myself from the risk element of scoring...
Once again - Cheers
Goto
-
I got my botcoins in my mtgox account but i cannot for the life of me find out how to get my bitcoins into my SR account someone please help me out. obviously im a retard.
-
A well detailed guide, very intricate at that. Appreciate it ;)
-
when sending bitcoins to yourself could you just send them to your bitcoin address instead of mt gox
-
Thanks its very usefull
-
THX so much for this thread. 3 weeks ago i knew nothing, now as a small buyer i have a vendor's security on my computer (i think.. ;)') when accessing SR. keep it up.
-
So very new to SR and all this encryption stuff, trying to get Liberte going and everything. When I extract it and get it on my computer and everything, there's no option to run it as administrator when I right-click over the set-up. When I just double-click it and it comes up though, it says that if there's an error button I should click that script and then can say to run as administrator, but that didn't happen - it just said to click any button to continue and it did its thing and that was it, so...can I still use it? Should I just go ahead with it or will it not work right otherwise? Anyone got any idea on this? Guidance is greatly appreciated.
-
Nice info.
-
for the mac users among you i wrote a little guide to Tails:
for securing a macbook i suggest using a bootable live operating system.
There are operating systems preconfigured for TOR that are really easy to use and come with handy tools like pgp pre-installed. On shut down the system wipes your ram and leaves no trace of activity.
The Amnesic Incognito Live System - Tails, is one of those systems that runs fine on a Macbook.
1 Download the current version @ https://tails.boum.org/
2 Burn the ISO image onto a DVD
a Insert blank DVD
b Open "Disk Utility" (OSX feature)
c In the "File" Menu click on "Open Disk Image..." and choose the Tails ISO
d The ISO will now appear in the lower part of the left column
e Select the image there and click on the atomic "Burn" icon in the top left corner and burn to the DVD with slow speed (2x/4x)
3 If you restart your Macbook with the DVD inserted wait for the screen to get white and immediately press and hold the alt button until you reach the bootloader. Navigate to the DVD entry labeled "Windows" and press enter.
Voilá! You are now ready to go. Network drivers, Touchpad, etc. all supported by default.
You also have the option to insert a Thumbdrive and clone the system to it via Applications - System Tools - Tails USB Installer
This will give you the option to create a persistent Volume (e.g. save files, pgp keys) and will work much faster than a DVD.
Although booting from a USB drive is not possible with the default apple bootloader you can download and install rEFIt from you OSX, which will recognize the drive.
rEFIt: http://refit.sourceforge.net/
hope that helped :)
peace
Wow, Thanks for this!! Any ideas for a MB Air users? No optical drive on Air's. Could this be done via USB? Thanks!
-
Hello there, new user here, trying to learn the ropes and what to do aaaaaaaand I got a couple of questions.
I'm running vista 7 on my stationary PC at the moment, and do I need to do anything else besides making Liberte work via a USB-stick? Seems awfully easy to me... Too easy. I don't need to format my PC or anything like that?
OT: SR seems like a lovely place, not at all the malicious and evil (maybe apart from the rare scam or two I've read about)
-
Hey there I am new to silk road currently i am using the tor browser as I have downloaded liberte linux on my usb and used it on my laptop however when it asked me for the password it just kept waiting for about 30 mins first time I kept hitting enter as I didnt know what to do or why it wouldnt start it didnt work second time I entered my security key for the router and it worked is that what I am suppose to do I am so confused please help as I would really like to start purchasing
-
What about the new ID requirements? Is there another way to get btc? Also the issue of going out to a library is kind of a hard step when your busy/no close libraries in farmland here
Anyway to skip that step of library and be secure? Also the MtGox ID Requirement is effed and im not doing that. Whats best method to be secure using another method now
-
What about the new ID requirements? Is there another way to get btc? Also the issue of going out to a library is kind of a hard step when your busy/no close libraries in farmland here
Anyway to skip that step of library and be secure? Also the MtGox ID Requirement is effed and im not doing that. Whats best method to be secure using another method now
Use bitinstant and send the money to an email, or directly to a BTC address. No need for Mt Gox
-
Excellent post. Thanks! Just looking for a bit of info on the safe extraction of bitcoins (cashing out) etc.
-
When i install Liberte and boot using my usb will it erase my data from windows? Also can i easily switch back to windows after im finished?
-
Thanks! You're a champ!
-
When i install Liberte and boot using my usb will it erase my data from windows? Also can i easily switch back to windows after im finished?
Yup, all your regular windows data will be fine. Unless you enter bios and specifically boot from your USB, your computer will load like normal through windows as it does every day you use it.
-
Thanks so much for the help
-
I am super new to this. I am just now starting to wrap my head around public keys and encryption. However, before I go and try to purchase some Bitcoins, what does this mean exactly:
"At this point you should send the funds through a couple of instawallets. ABSOLUTELY MAKE
SURE YOU BOOKMARK THE INSTAWALLET ADDRESSES"
What are instawallets, and how do you move bitcoins between them? is it easy/instantaneous to do so? are there any charges involved in moving from one instawallet to another?
-
What exactly does Liberte do? Does it just make you a little bit more anonymous
-
Excellent guide, wish i had read this before anything else. It should be on the front page of the SR.
-
hey guys ive boon looking through this thread a bit, so far ive got liberte downloaded and can run it from a usb stick.
The problem im having just now is that it cant seem to find any wireless connections. Sometimes if i leave it for a while it will come up with 1 connection which is not mine.
Im not really technically minded for this stuff but i tried going to set up a new connection and connect to a hidden network but cant seem to get any further with those.
Anyone that can help me out at all?
Also i was wondering if you can use other apps on this OS like can i run bitcoin wallet through it?
Thanks.
-
fantastic read! thanks! downloading liberte now
-
Lots of useful information in this thread. Glad I read this before checking anything out. I finally think I'm starting to grasp some of these tech-savvy concepts. Thanks a bundle.
-
In Step 3 under moving bitcoins, you said "At this point you should send the funds through a couple of instawallets.".
I'm not sure which instawallets to use and how to make sure I move them enough to not be tracked. I'm new to bitcoins and your guide is helpful but this is the part I'm confused about.
-
Thanks for the Tutorial, currently trying to install liberte on my laptop. Excited to see how all this will work out, since i'm very new to silkroad/onion in general.
-
Thanks John Keats, successfully running off a USB with Liberte which would have taken me a lot longer to work out (if i did at all) without your tutorial.
A must read and a massive help for any noob starting up on SR!!! As soon as i work out how, karma's on its way!
-
What if you were a vendor? For anonymously buying postage without being identified by post office cameras or revealing identifiable information to a re loadable debit card? Im using usps and I can't seem to find a way to completely eliminate my traces just so it doesnt show direct proof..
-
What if you were a vendor? For anonymously buying postage without being identified by post office cameras or revealing identifiable information to a re loadable debit card? Im using usps and I can't seem to find a way to completely eliminate my traces just so it doesnt show direct proof..
I would tell the vendor that you do not need to go in to post office to send priority or first class mail. You can buy $100.00 of $1.00 stamps and for the priority mail packages, attach six $1.00 stamps or five $1.00 and .one 15cent stamp) to the envelope (only works with "flat rate" envelopes that can fit through the mail slot inside post office near scale) For first class, the postage is $1.95 but you have to throw the envelope on the scale and make sure it's less than 13 ounces. All can be done anonymously. Hope this helps!
Peace 8)
Libby
-
What if you were a vendor? For anonymously buying postage without being identified by post office cameras or revealing identifiable information to a re loadable debit card? Im using usps and I can't seem to find a way to completely eliminate my traces just so it doesnt show direct proof..
I would tell the vendor that you do not need to go in to post office to send priority or first class mail. You can buy $100.00 of $1.00 stamps and for the priority mail packages, attach six $1.00 stamps or five $1.00 and .one 15cent stamp) to the envelope (only works with "flat rate" envelopes that can fit through the mail slot inside post office near scale) For first class, the postage is $1.95 but you have to throw the envelope on the scale and make sure it's less than 13 ounces. All can be done anonymously. Hope this helps!
Peace 8)
Libby
Thanks for all the great advice!!! And so I usually use the flat rate boxes, could you do the same anonymously only if you keep it less than 13ozs to be put in a drop box? im sending ganja in all quanities less than a lb. per shipment.
-
In Step 3 under moving bitcoins, you said "At this point you should send the funds through a couple of instawallets.".
I'm not sure which instawallets to use and how to make sure I move them enough to not be tracked. I'm new to bitcoins and your guide is helpful but this is the part I'm confused about.
There is only one Instawallet. The site gives you a random wallet every time you visit the site. Keep track of the url it gives you when you land there -- that is the location of 1 Instawallet. If you went to the site again, it'd give you a 2nd Instawallet.
-
hi, is it safe to use Liberte in a Virtual Machine (VM)? I am currently just using TOR Browser bundle in an XP VM I am not actually running it through any proxies, I have bought bitcoins through MtGox and transferred directly to my wallet (didn't see this guide) I have learnt and successfully sent and received PGP messages thanks to Pine :)
I was going to have it sent to my address but with another name on. Am I just jumping up and down with a red flashing light shouting come arrest me?? (I have not made an order yet, I was going to start with a weed sample and take it from there). Please don't flame the noob :)
-
Hi, this might be stupid but what exactly am i supposed to enter in the 'PIN' field in the shopping cart page? thanks
-
Nice post, all good on liberte up until connect to internet, I get 503 error. Suggestions?
P.S. my ISP blocks different MAC addresses, so I originally use my old MAC on my new PC.
How to change MAC on Liberte? I tried to create new internet connection but it does not solve anything. Btw on the last used tab it shows "never", thought connect automatic is selected. I cannot access config files because I don't know root password which obviously is not my passphere. Any help is appreciated.
Thanks in advance.
-
So in my over zealousness I skipped the part about going somewhere remote to use mt. gox, how endangered am I? Obviously I plan to cease that immediately but shit... should I be worried?
-
Hi Ketchup:
I think I had this same question when I first started. I believe you can open a new account (as we all have done when we first started) and not actually create a PIN for that account. In that case there is no pin, so you could just order by putting nothing in there. I think it would be better to create a PIN by going to your settings page and creating a PIN (since there is a space for "old PIN", I guess you would leave that blank. Alternatively, and the way I remember doing it, is to create another user account with a different name and start fresh by creating a PIN from the beginning.
I hope this is correct and that you are on your way to having one of the most profoundly happy experiences: getting drugs in the mail :)
-
total newbie here.
would it be much safer to buy a prepaid visa/mastercard (they sell them at stores - they are like giftcards) and use thoes to buy bitcoins?
what bitcoin site is good and which ones accept payments like this? would it be safe if accessed at home through tor?
-
Can anyone answer the question that's been asked a few times in this thread about not being able to save your own PGP key anywhere in Liberte? Is that step even necessary in order to be able to encrypt and decrypt messages?
-
Ima crossposting this because I don't think the implications of it are being realized, or else it's not being read enough. Probably both. Anyway:
SubTopic: This shows you how to anonymously use Bitcoins.
--
Your problem is now to disassociate yourself from the bitcoins you have purchased. You've kinda screwed up you see unless you did what I mentioned in 'Future Reference' below. Now you must do some work to cover your tracks. Read everything carefully.
--
For future reference:
Ideally you should have remained anonymous right from the onset before your purchased anything. You would have to buy the bitcoins with a cash deposit at a bank *and* access the (mtgox) exchange website through a private proxy in your region of the world. You would have been using Tor to access that proxy which accesses the exchange clearnet site. I appreciate that sounds wildly complicated, but it's actually quite simple once you know how. Not only will it save you money, but it is many many times more secure. It's also less complex than what you need to do now unless you sell your coins and start over.
--
Your work today:
--
Since you've already bought B$ through clearnet at mtgox, you should send them to an instawallet (a one time address service offered by some B$ services online). Bookmark the instawallet URL otherwise you'll lose your money. Do not use Tor with instawallet or mtgox at this stage, that would be a red flag leading directly to you, you are assuming that both instawallet and mtgox relay all information to law enforcement and using Tor is bad news bears because mtgox will likely request a positive ID of you to release the funds citing AML requirements.
Use Tor to find a Bitcoin laundering service, search our forums to find a reliable one. They will give you an address to send to. Don't send anything to it just yet (and note that it would take roughly a day for a mix to operate, so don't panic if it takes time, it's not instantaneous).
Go to instawallet through clearnet and forward the coins to a Bitcoin wallet on your own computer (you need to download some bitcoin wallet software for this, you also need to torify your bitcoin wallet and download the block chain (will take a couple of hours), read this document: http://en.bitcoin.it/wiki/Tor). Now it appears that you've paid somebody in a different country Bitcoins because your Bitcoin wallet is torified.
Ok, now you have an option. For more security, you can use a mix (the bitcoin laundering service I mentioned, it will cost you money), or you go proceed directly to sending bitcoin from your wallet to a new instawallet which you've accessed via Tor. Then from instawallet to the SR address you have.
I suggest you first do this with a small amount of bitcoin to ensure this all makes sense and then you can be confident enough to do it again. At each stage you should be using a different Bitcoin address, never use the same one twice because that creates a loop, indicating that it is highly likely that any transactions in the loop are authorized by the same person.
Yes, you could just link your mtgox a/c to your SR account. But if you read in the newspaper that the Silk Road got busted, then you're going to feel rather queasy and wish you'd followed the above instructions.
If all of this sounds like too much of a headache (albeit it would be hugely educational), then just sell the bitcoins, retrieve your money and start again. If you aren't confident enough, that would be best.
---------------------------------------------------------------------------------------------------------------------------------------
Condensed Iteration of everything above the line:
--
Here's the tldr; version where instructions are separated from advice:
Future Activity:
Cash deposit at bank to an exchange -> Use Tor to access private proxy* in your country -> communicate through that proxy to the exchange -> convert cash to bitcoins -> open an online wallet service -> send bitcoins to that service -> optionally put those bitcoins through a mix -> send bitcoins to your SR wallet.
--
If you already have bitcoins connected to your identity. e.g. used a credit card to buy, transferred from your bank account to exchange etc.
--
Go onto Tor and download bitcoin wallet software -> Printscreen http://en.bitcoin.it/wiki/Tor instructions -> Turn off interweb -> Install and torify your bitcoin wallet software -> Turn on interweb and download the block chain to torified bitcoin wallet, now you are ready to proceed -> On clearnet, access your exchange account with the bitcoins -> Make an instawallet/online bitcoin wallet provider account through clearnet -> transfer bitcoins from exchange to instawallet -> transfer from instawallet to your torified bitcoin wallet -> Open new instawallet with Tor -> transfer from torified bitcoin wallet to instawallet on Tor -> Optionally transfer to a bitcoin mixing service -> wait a couple of hours/days -> transfer from mixing service or online wallet to SR.
Advice:
1. Don't have your clearnet browser and Tor browser open at the same time.
2. Never use a Bitcoin address more than once.
3. Search forum for bitcoin mixing services and online bitcoin wallet providers.
4. If you think you see flaws, you point them out. The only stupid question is one never asked.
5. Although the above procedures might make you more paranoid, you should really sleep a whole lot sounder since every service you've used from the exchange to the Silk Road itself could be compromised and it wouldn't matter a whole lot.
6. Clearnet means being on the normal web and you're not using Tor software. Darknet is the opposite.
7. To torify something means that its internet traffic is being routed though the Tor network.
8. Don't access exchange websites with Tor, period. Unless you're doing what I described above
9. Don't access any website with Tor e.g. your instawallet, and then access the same web address/URL using Tor. Now instawallet knows who you are if you do.
10. Under no circumstances, none, forward bitcoins from A to B and then put the bitcoins back into a wallet you used earlier. This is circumstantial evidence that all bitcoin activity in that loop belongs to a single entity.
11. The larger the quantities being transacted, the more you want to be thinking about ferrying varying amounts of bitcoin over time with different Tor identities. I believe there is bitcoin software that can do this for you, future scheduled deposits that is, and your Tor software periodically changes identity anyway.
* It's like the Home Cooking Channel! Here's one we made earlier!
Taught me/confirmed a few things, thanks. :)
You get all my Karmas(not literally....of course) when I am able to give them. +<3
Thought it deserved reposting.
-
thanks heaps for ur info :) im a newb and trying to learn all the tricks ya need to know !! does any1 know if these steps are good from australia ??
ta ;)
-
I'm using TOR on my imac but don't feel comfortably having it installed on work/life computer.
Is it possible to create one of those USB things and get it to work on a mac?
cheers
-
Hey guys - thanks for such an informative read. I just wanted to clarify some things around best practices for receiving. The wording used in the original post was a little sparse - is it recommended to ship to your home address with your real name? Or are we supposed to ship to someone ELSE's house and intercept the package?
thanks!
-
for 100% security or privacy do i have to use Liberte to usb ??
is dangeours use just the Tor and doing business on SR ?
thx
-
The Complete All-in-One Guide on
How to Anonymously Use Silk Road
@-}-,-`- -
Mar 14: All new, much simpler guide that now includes a lot more than just a how-to on setting up a liveUSB. Updated with the new Liberte snapshot.
Please continue to leave your valuable feedback and discuss this setup so that we can help further protect the community's security from the bilderbergs
and their local law enforcement agency puppets.
@-}-,-`- -
Directory
Part 1: Creating your liveUSB
1. Format the USB
2. Install Liberte to USB
3. Boot from USB
4. Using Liberte
Part 2: Bitcoins, GPG, Mail
1. Getting Bitcoins
2. Moving Bitcoins
3. Buying on SR
4. Using GPG
5. Receiving Packages
Part 3: Мiscellaneous Tips & Tricks
1. Coming soon
@-}-,-`- -
=========================================================================================
You'll need a USB flashdrive that has at least a 500MB capacity. I bought a 4GB USB flashdrive at a Best Buy for $7.
Download Liberte Linux from here: http://sourceforge.net/projects/liberte/files/snapshots/liberte-snapshot-20120229.zip/download
Part 1: Creating your liveUSB
1. Format the USB
Find the icon for your USB in Windows Explorer. Right-click on it and select the "Format" option. Make sure the "File System" option is set to "FAT32".
Hit "Start" and wait a few seconds for it to finish (time depends on capacity of flashdrive).
2. Install Liberte to USB
Extract the ".zip" you just downloaded to the root of your USB flashdrive. Open the "liberte" folder, right-click over "setup.bat" and select "Run as
administrator". The batch file will do its thing and will prompt you with a "Press any key to continue..." message once it's done.
3. Boot from USB
Now shut down your computer. To be able to boot from a USB flashdrive, you will have to change some settings in the BIOS. To access the BIOS, power-on
your computer and press whichever key is specified on your screen (usually something like "Press F12 to access Boot menu..."). Using the arrow keys,
scroll over to the "Boot" tab. Scroll down to the option "USB HDD: YOUR USB's NAME HERE" and move it to the top of the list. Save changes and exit.
4. Using Liberte
The first time you boot Liberte will be really slow because it has to create an encrypted key for you. The loading bar will stop at about 3/4ths of the way,
pause for around 10 minutes, then you'll be prompted to enter a password for your system, at which point a hash will be generated for the password
which could also take around 10 minutes. Just sit tight, you'll be able to use your new configuration very soon.
Once you get in, establish an internet connection by clicking on the first icon to the left of the time (lower-left corner). To access the onion network click
on the computer monitor icon (lower-right corner), hover over to "Internet" and select "Midori". In this same menu you have the ability to switch your Tor
identity, as well as a non-Torified browser for connecting to Wi-Fi hotspots.
Whenever you're done using Liberte, close out of all your applications and shut down by going back over to the computer icon and hitting "Logout".
@-}-,-`- -
Part 2: Bitcoins, GPG, Mail
1. Getting Bitcoins
People all have their own methods on how to get bitcoins, but here's how I do it which works great and is completely anonymous. Also this is only for the
United States as far as I know.
First create a Mt Gox account. Mt Gox is a great bitcoin exchange but they now unfortunately flag anyone accessing their site through Tor. So I went to
my local library and made my Mt Gox there. Use a disposable e-mail to sign up for Mt Gox and make sure to only access it at a computer not associated
with you (such as the library). Write down your Mt Gox account number, as you'll need it in the next step.
Now go to "bitinstant.com". This is a middle-man service that lets you deposit cash at a local bank and get bitcoins in your Mt Gox account within
MINUTES. Select "Cash Bank Deposit" as the payment method, "Mt. Gox" as the destination, type in your account number as the destination account,
and lastly put an e-mail that IS NOT the e-mail you used to create your Mt Gox account (I would suggest getting a Tormail). The bottom of the page will
give you a quote with the amount you will receive after their fees have been subtracted.
Hit "Send Funds". Then press the big green "Click to Pay Now" button. You'll be redirected to the TrustCash website. Go through the steps and make sure
to print a copy of your invoice at the last page. You have 3 days to deposit the cash before the invoice will expire. Take the invoice to the bank you
chose in the steps, tell the teller you'd like to deposit the money into the account detailed on the invoice, and hand him/her the exact amount specified.
If he/she starts asking questions, just say you're trying to get started in the forex trading market.
2. Moving Bitcoins
By the time you get home (or back to the library), you'll get an e-mail with a Mt Gox redeemable code for your bitcoins. Again make sure you access Mt
Gox from a computer not in any way connected to you. At this point you should send the funds through a couple of instawallets. ABSOLUTELY MAKE
SURE YOU BOOKMARK THE INSTAWALLET ADDRESSES!!! EVEN WRITE THEM DOWN!!! You can also put the coins through a tumbling service like BitcoinFog, but I don't find it necessary. The fact that the coins can't be linked to you in the first place is what really matters. Whenever you're happy with the degree
to which your coins have been obscured, transfer your funds into your Silk Road wallet.
3. Buying on Silk Road
No vendor will allow you to stay in escrow until you have at least 5 purchases. To solve this just go over to the digital goods section and buy 5 books.
Once you have a history, find a product you're interested in (mmm, Mushrooms ;P) and add it to your cart. SR is a lot like Amazon so the procedure
shouldn't be too much of a mystery for anyone. Select a shipping option (it almost always costs extra, so keep that in mind with the price of the product),
enter in your information (encrypted of course! see the next section on how to use PGP) and hit buy.
If you have over 5 purchases, do not EVER finalize early, even for trusted vendors. If a vendor tells you that you have to finalize in order to have your order
sent, demand them to cancel your order. The escrow system is the ONLY way for SR to protect your money and SR is not responsible if you finalize
early and get scammed.
4. Using GPG
GPG stands for Gnu Privacy Guard. It is a free replacement for PGP, which was recently bought by Symantec and now costs money. Liberte comes with
GPG pre-configured. To use it, hit the computer icon, and under "System Tools" select "gpa".
The first time you open up "gpa" you'll have to create a keypair. Enter in your SR name, your tormail as the contact, and a strong password. Create a
backup copy of your private key and save it to "persist>security>pgp" for now (I highly recommend saving it on Tormail and deleting it off of your USB).
To encrypt a message with pgp, first find the public key of the person you want to send the message to. Save that key as a file and import that to gpa
with the "Import" button. Now press the "Clipboard" button, type your message, and hit "Encrypt". Choose the key of the person you're sending the
message to and your message will become encrypted. Unless you want to get an encrypted message back, you don't have to include your public key.
5. Receiving Packages
Always use the real name of a person registered at the house you are sending to. The Post Office checks to make sure the two match up, they'll realize somethings up when they get a package to "John Smith" at a random street. Don't spell your name slightly wrong either as again that can raise a flag at the post office. I recommend getting a friend to pick up packages for you (always ask him/her first!).
Once you get the package, write "RETURN TO SENDER" in big red letters with a marker across the package. Wait 1 day, and if the police don't come banging down your door then you should be fine. Never use your product at the house you received it at. I also recommend only buying personal amounts as local law enforcement doesn't have the time or resources to bust someone getting an 1/8th of weed in the mail. If they do catch it, they'll probably just send you a love letter. Freakonomics (a popular book) showed that most street level drug dealers make less than minimum wage, so buying ounces of stuff off of SR is really not that worth it.
If the police does come knocking, DENY that the package is yours. Remember that anyone can send you drugs in the mail. Don't consent to any searches, don't say much at all, call your lawyer and let his expensive lips do the talking.
To Be Continued....................
This was an eye opening post. So if someone knew nothing about security and took no steps to hide them selves while accessing Silk Roads and moving Bitcoins, should they stop what they are doing? Meaning not move forward with there purchase because they could be compromised. Are they placing undue risk on a seller(s) even if they have followed the delivery steps to a T?
Wouldn't want to in danger anyone with ignorance or place one's self in danger of getting caught for something small-under 1/8 of weed?
-
Don't access any website with Tor e.g. your instawallet, and then access the same web address/URL using Tor. Now instawallet knows who you are if you do.
What the hell does that mean? Dont access anything with tor and then visit the same addy with tor???
-
pretty sure he meant with and without
-
I have this question about BTC. There is no infrastructure in my country to get anonymous BTC and only way is in the BTC market such as https://www.bitcoin.de using SEPA transfer.
Could anyone advise me how should I do this?
Right now I would:
Buy BTC using SEPA to instawallet then transfer them to torified wallet that wasn't accessed without Tor.
Then do some mixing in my Torified wallet (same wallet different address?). Should I use BTC wallet soft on my PC for this?
What other precautions should I take. How safe is this?
Mony in mail is not good, because it tends to disappear in our post offices.
Any advice or comment on this is highly appreciated, Thanks in advance.
-
Anyone?
Please help me. I am impatient to start buying.
-
THANK YOU John K, for this topic ;D!!!!!
-
A good solution I would like to see is SR mixing incoming coins (I beleive they do for outgoing coins?).
That would solve this whole issue.
-
ta for the info buddy !! im yet to make my first purchase and buy bitcoins. This has helped heaps with tryin to figure out the whole process
-
Great information on this thread, just trying to digest everything. One simple quick question I have is what is the best place to setup a BTC wallet using TOR that will not be flagged since I understand Mt. Gox flags accounts set up with TOR ?
-
Why do people use a USB stick instead of a live CD? The guide recommends not saving anything, anyway.
-
OK FIRST OFF, I AM USING CAPS TO SO I CAN READ NOT YELLING. I MUST BE A COMPLETE SUPER NOOOB I HAVE READ THE GUIDE AND READ THE GUIDE AND I AM STILL AT A LOSS AS WHAT TO DO. I GUESS I NEED SOME ONE TO TAKE THE TIME AND DO A STEP BY STEP PROCESS ON USING THE SR . SOME HOW I MANAGED TO GET BET SOME BITCOINS INTO A MTGOX ACCOUNT NOW I HAVE A VENDOR THAT I WOULD TO DO BUSINESS WITH. MY QUESTION IS HOW DO I GET THE BITCOINS TO SAID VENDOR, I AM ALSO ATTEMPTING TO USE A GPG PROGRAM NOT REALLY SURE WHAT I AM DOING THERE ALSO. AND TOR MAIL? WHAT I THINK WOULD BE COOL IS A SR FOR DUMMIES BOOK. OK WELL I HOPE TO HEAR FROM OTHERS WITH SOME HELPFUL ADVICE AND HELPFUL INSTRUCTIONS THANKS SLAVE1531
-
I'm still a bit new so pardon if this question was brought but I didn't see anything that gave me an answer. I recently go a msg from a vendor. Nice guy but he told me the I should encrypt my info. All I did was place an order. I placed a real name and address in the order box. Is this secure and if not can you use kleopatra?
-
It is maybe a bit more secure than sending it per email, but not really.
Even if SR stores the address encrypted, the SW must have access to it, so anyone who can hack into SR
(which hopefully isn't easy ;) ), can also read your messages.
Using GPG/PGP ensures that only the intended recipient (i.e. the person who has the private key matching the public key on the vendors profile) can decrypt the message (in theory the NSA might eb able to crack it, or if the site has already been hacked, have changed the public key, but it is certainly more secure than just sending it unencrypted).
Almost all vendors have PGP-keys, some only use this "securenote" thing (web based one-time messages), which imo doesn't really improve the security, rather it involves a 4th party you have to trust.
Some vendors do not use GPG at all, it's up to you to decide whether it's worth the risk to buy online from a vendor who doesn't care to learn to use GPG (a matter of hours for the purposes here).
-
It is maybe a bit more secure than sending it per email, but not really.
Even if SR stores the address encrypted, the SW must have access to it, so anyone who can hack into SR
(which hopefully isn't easy ;) ), can also read your messages.
Using GPG/PGP ensures that only the intended recipient (i.e. the person who has the private key matching the public key on the vendors profile) can decrypt the message (in theory the NSA might eb able to crack it, or if the site has already been hacked, have changed the public key, but it is certainly more secure than just sending it unencrypted).
Almost all vendors have PGP-keys, some only use this "securenote" thing (web based one-time messages), which imo doesn't really improve the security, rather it involves a 4th party you have to trust.
Some vendors do not use GPG at all, it's up to you to decide whether it's worth the risk to buy online from a vendor who doesn't care to learn to use GPG (a matter of hours for the purposes here).
Yes thanks. Is there a PGP tutorial on here?
How do I use it?
Where do I put the vendors key in the subject line?
haha I know im a noob! but with your help Im learning! Thanks for all your help ppl. (anyone with info on my asia post please help also).
We are part of exciting times!
-
yes, there is one for windows here:
http://dkn255hz262ypmii.onion/index.php?topic=131.0
You don't put the vendors key in the subject line or anywhere else in an email.
You have to import the key into your "keyring" and then encrypt your message using
this key, but all of that is better described in the guide.
-
Why do people use a USB stick instead of a live CD? The guide recommends not saving anything, anyway.
you lose your keys and any messages during that session using a cd ???
I wanna set it up on a micro sd card that can be at least locked and easily swallowed....
Got a spare 16gb micro but having dramas getting liberte set up on it....
Noted, but you can upload your keys to an anonymous tormail (memorise/scribble the name + pass). SR keeps the msgs.
1) The only problem I've found is Liberte crashes roughly within a 1/2 hour on my laptop, so write the addresses down _before_ you make transfers or setup accounts.
2) Vlad noted you're trusting SR with your btc in case it crashes (what's their backup situation?), so I guess this is a problem. Move fast.
-
Sorry, if my question was already asked. How can I install Bitcoin-client on Liberte linux, and which client i should to choose?
When somebody send Bitcoins it is possible to watch IP address.
-
So I just found out a bout this site and trying to find the best way to use the bitcoin's some of the info is a little confusing think I can figure it out I hope is MT.Gox the best way to get bitcoin's and one question why would you have to go to the library if the tor program changes your ip address so they don't know what computer you're using If someone can get back to me and give me some more info that would be helpful and I was wondering it looks like prices are high on the site is that true or are they reasonable
-
Could I just send bitcoins to my silkroad bitcoin adress using bitinstant? thanks!
-
So apparently I fail at very simple things since John Keates laid it out so well.
I followed his instructions exactly as written , but cannot boot off the USB stick, it just said Boot Error (thank you Liberte for being more specific lol).
I'm 100% certain it's the USB drive it's trying to boot off of cuz its called JetFlash blah blah in BIOS and it was set to the 1st priority to boot from.
I went one step further in removing all drives (hard drive and optical drive) just to make sure, but it still won't boot giving that error.
This is a new machine (well I bought it 7 months ago, i7, 6gb ram, etc. etc.) so it should boot off a USB one would think, the BIOS recognized the USB stick, but it just ... doesn't.
Does anyone have ANY idea what's wrong and how i'd go about fixing it?
Thanks.
-
4. Using Liberte
The first time you boot Liberte will be really slow because it has to create an encrypted key for you. The loading bar will stop at about 3/4ths of the way,
pause for around 10 minutes, then you'll be prompted to enter a password for your system, at which point a hash will be generated for the password
which could also take around 10 minutes. Just sit tight, you'll be able to use your new configuration very soon.
Once you get in, establish an internet connection by clicking on the first icon to the left of the time (lower-left corner). To access the onion network click
on the computer monitor icon (lower-right corner), hover over to "Internet" and select "Midori". In this same menu you have the ability to switch your Tor
identity, as well as a non-Torified browser for connecting to Wi-Fi hotspots.
So I was able to successfully download, install & use the Virtual Machine file of Liberte (liberte.ova)
I see the internet icon on the bottom left, it's called Epiphany, but I don't see any Midori browser? Is Epiphany a new browser for the latest distro of Liberte? Do I need to download Midori instead?
Also it's been hell for me all day to access a couple of sites, kept getting a 503 forwarding proxy error. Why is this? I recently changed identities & was able to then log in. Does this have anything to do with the 503 error? (sorry new to TOR & the like)
From my understanding I want to disable javascript from within the internet browser of Liberte to be safer correct? When I did this & also disabled cookies I couldn't log into TORmail.org for the life of me until I turned java back on & enabled cookies again. What was I doing wrong?
-
Can someone please help with installing Liberte from an external??? When I reboot from the external I get all the way to the message "Searching for Media" and get stuck there. Anyone know how to go from here??
-
Great explano for noob here.
-
So I just found out a bout this site and trying to find the best way to use the bitcoin's some of the info is a little confusing think I can figure it out I hope is MT.Gox the best way to get bitcoin's and one question why would you have to go to the library if the tor program changes your ip address so they don't know what computer you're using If someone can get back to me and give me some more info that would be helpful and I was wondering it looks like prices are high on the site is that true or are they reasonable
Tor does change your IP address so no need to go to the library, except some sites don't like tor )like Mt Gox) so you might go to the library to deal with that. The prices are higher but your safety is worth it.
Modzi
-
4. Using Liberte
The first time you boot Liberte will be really slow because it has to create an encrypted key for you. The loading bar will stop at about 3/4ths of the way,
pause for around 10 minutes, then you'll be prompted to enter a password for your system, at which point a hash will be generated for the password
which could also take around 10 minutes. Just sit tight, you'll be able to use your new configuration very soon.
Once you get in, establish an internet connection by clicking on the first icon to the left of the time (lower-left corner). To access the onion network click
on the computer monitor icon (lower-right corner), hover over to "Internet" and select "Midori". In this same menu you have the ability to switch your Tor
identity, as well as a non-Torified browser for connecting to Wi-Fi hotspots.
So I was able to successfully download, install & use the Virtual Machine file of Liberte (liberte.ova)
I see the internet icon on the bottom left, it's called Epiphany, but I don't see any Midori browser? Is Epiphany a new browser for the latest distro of Liberte? Do I need to download Midori instead?
Also it's been hell for me all day to access a couple of sites, kept getting a 503 forwarding proxy error. Why is this? I recently changed identities & was able to then log in. Does this have anything to do with the 503 error? (sorry new to TOR & the like)
From my understanding I want to disable javascript from within the internet browser of Liberte to be safer correct? When I did this & also disabled cookies I couldn't log into TORmail.org for the life of me until I turned java back on & enabled cookies again. What was I doing wrong?
Still looking for answers to my last series of questions, but have a bigger issue that needs addressed as well.
Can anyone explain why I'm getting a 503 forwarding issue about 90% of the time when using Liberte??? It's getting beyond frustrating.
It says: 503 Forwarding This is Privoxy 3.x.xx on localhost (12x.x.x.x), port 8xxx, enabled
Privoxy was unable to socks5-forward your request http://dkn255hz262ypmii.onion/index.php through 12x.x.x.x: SOCKS5 TTL expired
Just try again to see if this is a temporary problem, or check your forwarding settings and make sure that all forwarding servers are working correctly and listening where they are supposed to be listening.
I edited the socks5 #'s in the error message, not sure if that should be kept private, figured I would be proactive in-case it is supposed to be private.
It seems when I disable javascript & cookies in Liberte I have a much harder time with this issue.
I never experienced this problem with TOR inside of windows.
Would this have anything to do with the Ubuntu walk-thru I started & talking about in the beginning of this thread?
What is not safe about using TOR inside of windows?
Also if anyone could elaborate anything on my previous questions in previous posts in this thread it would be appreciated.
-
Thanks for all the great info! I had no idea about the five transactions rule. Should I be worried if it's my first transaction and the vendor hasn't demanded an early finalization or is it possible that he/she's just really cool? Feedback is 100% so . . .
-
Thanks for all the great info! I had no idea about the five transactions rule. Should I be worried if it's my first transaction and the vendor hasn't demanded an early finalization or is it possible that he/she's just really cool? Feedback is 100% so . . .
It's not a rule, just a tentency. It's all good.
Modzi
-
Ima crossposting this because I don't think the implications of it are being realized, or else it's not being read enough. Probably both. Anyway:
SubTopic: This shows you how to anonymously use Bitcoins.
--
Your problem is now to disassociate yourself from the bitcoins you have purchased. You've kinda screwed up you see unless you did what I mentioned in 'Future Reference' below. Now you must do some work to cover your tracks. Read everything carefully.
--
For future reference:
Ideally you should have remained anonymous right from the onset before your purchased anything. You would have to buy the bitcoins with a cash deposit at a bank *and* access the (mtgox) exchange website through a private proxy in your region of the world. You would have been using Tor to access that proxy which accesses the exchange clearnet site. I appreciate that sounds wildly complicated, but it's actually quite simple once you know how. Not only will it save you money, but it is many many times more secure. It's also less complex than what you need to do now unless you sell your coins and start over.
--
Your work today:
--
Since you've already bought B$ through clearnet at mtgox, you should send them to an instawallet (a one time address service offered by some B$ services online). Bookmark the instawallet URL otherwise you'll lose your money. Do not use Tor with instawallet or mtgox at this stage, that would be a red flag leading directly to you, you are assuming that both instawallet and mtgox relay all information to law enforcement and using Tor is bad news bears because mtgox will likely request a positive ID of you to release the funds citing AML requirements.
Use Tor to find a Bitcoin laundering service, search our forums to find a reliable one. They will give you an address to send to. Don't send anything to it just yet (and note that it would take roughly a day for a mix to operate, so don't panic if it takes time, it's not instantaneous).
Go to instawallet through clearnet and forward the coins to a Bitcoin wallet on your own computer (you need to download some bitcoin wallet software for this, you also need to torify your bitcoin wallet and download the block chain (will take a couple of hours), read this document: http://en.bitcoin.it/wiki/Tor). Now it appears that you've paid somebody in a different country Bitcoins because your Bitcoin wallet is torified.
Ok, now you have an option. For more security, you can use a mix (the bitcoin laundering service I mentioned, it will cost you money), or you go proceed directly to sending bitcoin from your wallet to a new instawallet which you've accessed via Tor. Then from instawallet to the SR address you have.
I suggest you first do this with a small amount of bitcoin to ensure this all makes sense and then you can be confident enough to do it again. At each stage you should be using a different Bitcoin address, never use the same one twice because that creates a loop, indicating that it is highly likely that any transactions in the loop are authorized by the same person.
Yes, you could just link your mtgox a/c to your SR account. But if you read in the newspaper that the Silk Road got busted, then you're going to feel rather queasy and wish you'd followed the above instructions.
If all of this sounds like too much of a headache (albeit it would be hugely educational), then just sell the bitcoins, retrieve your money and start again. If you aren't confident enough, that would be best.
---------------------------------------------------------------------------------------------------------------------------------------
Condensed Iteration of everything above the line:
--
Here's the tldr; version where instructions are separated from advice:
Future Activity:
Cash deposit at bank to an exchange -> Use Tor to access private proxy* in your country -> communicate through that proxy to the exchange -> convert cash to bitcoins -> open an online wallet service -> send bitcoins to that service -> optionally put those bitcoins through a mix -> send bitcoins to your SR wallet.
--
If you already have bitcoins connected to your identity. e.g. used a credit card to buy, transferred from your bank account to exchange etc.
--
Go onto Tor and download bitcoin wallet software -> Printscreen http://en.bitcoin.it/wiki/Tor instructions -> Turn off interweb -> Install and torify your bitcoin wallet software -> Turn on interweb and download the block chain to torified bitcoin wallet, now you are ready to proceed -> On clearnet, access your exchange account with the bitcoins -> Make an instawallet/online bitcoin wallet provider account through clearnet -> transfer bitcoins from exchange to instawallet -> transfer from instawallet to your torified bitcoin wallet -> Open new instawallet with Tor -> transfer from torified bitcoin wallet to instawallet on Tor -> Optionally transfer to a bitcoin mixing service -> wait a couple of hours/days -> transfer from mixing service or online wallet to SR.
Advice:
1. Don't have your clearnet browser and Tor browser open at the same time.
2. Never use a Bitcoin address more than once.
3. Search forum for bitcoin mixing services and online bitcoin wallet providers.
4. If you think you see flaws, you point them out. The only stupid question is one never asked.
5. Although the above procedures might make you more paranoid, you should really sleep a whole lot sounder since every service you've used from the exchange to the Silk Road itself could be compromised and it wouldn't matter a whole lot.
6. Clearnet means being on the normal web and you're not using Tor software. Darknet is the opposite.
7. To torify something means that its internet traffic is being routed though the Tor network.
8. Don't access exchange websites with Tor, period. Unless you're doing what I described above
9. Don't access any website with Tor e.g. your instawallet, and then access the same web address/URL using Tor. Now instawallet knows who you are if you do.
10. Under no circumstances, none, forward bitcoins from A to B and then put the bitcoins back into a wallet you used earlier. This is circumstantial evidence that all bitcoin activity in that loop belongs to a single entity.
11. The larger the quantities being transacted, the more you want to be thinking about ferrying varying amounts of bitcoin over time with different Tor identities. I believe there is bitcoin software that can do this for you, future scheduled deposits that is, and your Tor software periodically changes identity anyway.
* It's like the Home Cooking Channel! Here's one we made earlier!
Thanks pine!
-
total newbie here.
would it be much safer to buy a prepaid visa/mastercard (they sell them at stores - they are like giftcards) and use thoes to buy bitcoins?
what bitcoin site is good and which ones accept payments like this? would it be safe if accessed at home through tor?
Good question, I was wondering the same. As long as the cards were purchased with cash of course.
-
Thank you for the awesome guide! I now have some cleaning up to do!
-
Thanks a lot for these facts, as a new member I´m trying to inform about how everything here in our community goes, and what are the terms and rules. So this is very helpful, and I think the 5-transactions-rule without escrow isn´t a risk when you find good vendor(s).
And good vendors are possible to find, of course.
-
Hi I had a question about Bitinstant...I'm on the cusp of buying bitcoins I've finally got the fundamentals down as far as GPG (that was a bitch) and the forum. I found some reputable vendors and am ready to pop my cherry so to speak...I've read the Bitinstant Monegram method works anonymously....My question is If I go to walmart, cvs, etc and do the moneygram to bitisnant anonymously no Id fake name etc into my Torified bitcoin wallet and then Transfer to silk road from bitcoin wallet is this safe I mean I'm not tied to the transfer and tor is hiding both the bitwallet and ipaddress its coming from to SR isn't this safe? Any repsones are helpful thanks Community!!! P.S. I'm not worried about CC cameras or anything My occupation allows me to use multiple walmarts all over the country so I would never use the same one!!!
-
I was thinking of going orwell's method as well, so I'm also curious to know if this is enough to maintain anonymity.
-
Moving Bitcoins
By the time you get home (or back to the library), you'll get an e-mail with a Mt Gox redeemable code for your bitcoins. Again make sure you access Mt
Gox from a computer not in any way connected to you.
What should one do if they have accessed Mt Gox from their computer and phone to check their balance?
Will passing the bitcoins through two Instawallets be safe enough or should something else be done?
-
Is it possible to get a guide on how to clean up your computer?
I think I have broken every rule in the "dont do" book and want to start lifting my game.
-
What about simply using clearweb for the bank-to-exchange transfer, then sending the exchanged BTC to another exchange -which you only acces through tor- then spreading it out over wallet sites and rerouting it to SR? Am I missing someting?
-
Upon further research I think everyone, including myself, are being a little paranoid....The only thing that can be traced are the addresses the bitcoins are being sent too...there is no way to see what was bought....There are legal items on SR so as far as that goes really no danger. The danger comes on the other end when you run the risk of being scammed, package intercepted, or police following package to your home....All these scenarios are easily avoidable just look in the forums there are guides upon guides that will help you utilize SR to is fullest safely and anonymously....SR is a beautiful thing and should be respected don't come here new on your first day and start making purchases and flooding the forums with questions that have already been covered spend a few days reading through the WIKI and the forums and allow the SR community to guide on your journey to bliss!!!
-
So, I'm not sure if this is considered to be related to this topic.... but once you have said anonymous bitcoins in your wallet, what services do most of the big vendors use to then completely anonymously take those bitcoins and turn them into cash. So far I've read about turning them into pre-paid visa cards (not sure what a reliable source to do this is). Also, I've read that you can sell them on paypal or something like that. But what do I do if I want to anonymously sell bitcoins for cash? and not that counterfit cash nonsense I see on the hiddenwiki.... is there a post for this or a trusted place everyone uses??
-
Hello,
I need help with the liveusb, It's driving me crazy!
I installed liberte on a usb using lili (it didnt work with the tutorial, i had a black screen).
the usb is shown as LiveUsb with the flower icon
So I power off the computer and power on with the usb plugged.
Now I am in GRUB4DOS 0.4.4 with a grub prompt. What do I do?
I went on a few forum and tried a few things: my usb is (hd0,0), i tried to boot it typing chainloader (hd0)+1 then boot, it does a few things then comes back to the grub prompt,
also tried other typing, it says about kernel, no idea
I am lost as you can understand.
How to I boot liberte throught this grub thing ??
Thank you
-
Someone answered my question on another post... basically use the financial services on SR and get cash sent... THE most anonymous.
-
Someone answered my question on another post... basically use the financial services on SR and get cash sent... THE most anonymous.
Yes its a good idea.
But those sr exchange $ vendor is charging too much fee :P
I hope they will reduce their fee a little bit though. ;D
-
Great write up! I had one problem though. When I try to do the BIOS and move the USB HDD to the first priority it doesn't show the name of my USB drive. I think its creating a problem because I am unable to set up the program from the USB.
-
HELP!! Should a http be in green in the box? mine isnt. when i click on the dotted line box at the head of the http box, it says my connection isnt encrypted. Im completely new to this and I know I dont know anything, but the first couple times running tor the http was green. so what gives? anybody? :(
-
I don't understand the purpose of booting from a USB to access TOR/Silkroad. I thought the whole idea of TOR was that it was anonymous to begin with? I assume I'm just missing something but, if someone could explain, I'd appreciate it.
-
I don't understand the purpose of booting from a USB to access TOR/Silkroad. I thought the whole idea of TOR was that it was anonymous to begin with? I assume I'm just missing something but, if someone could explain, I'd appreciate it.
You keep your own information on your personal computer.
You keep your drugbuying information on another computer that doesn't have permanent storage (a hard drive).
This way, if LE does manage to compromise SR even if you're in the middle of a transaction as it's being raided, your activities can't be traced back to your personal computer (and your identity).
You're on a forum with some of the most active drug manufacturers in the world, so it's safe to assume that some users take their privacy a lot more seriously than others.
Is it really worth the hassel of setting up a blank laptop with a livecd so that you can buy 1/8th of pot every other week online? Probably not. If you're slinging 10g of meth every week though, it's probably a good idea to invest in some solid security measures.
-
I don't understand the purpose of booting from a USB to access TOR/Silkroad. I thought the whole idea of TOR was that it was anonymous to begin with? I assume I'm just missing something but, if someone could explain, I'd appreciate it.
You keep your own information on your personal computer.
You keep your drugbuying information on another computer that doesn't have permanent storage (a hard drive).
This way, if LE does manage to compromise SR even if you're in the middle of a transaction as it's being raided, your activities can't be traced back to your personal computer (and your identity).
You're on a forum with some of the most active drug manufacturers in the world, so it's safe to assume that some users take their privacy a lot more seriously than others.
Is it really worth the hassel of setting up a blank laptop with a livecd so that you can buy 1/8th of pot every other week online? Probably not. If you're slinging 10g of meth every week though, it's probably a good idea to invest in some solid security measures.
Purely as a buyer, what drug buying information do I need to keep? I can physically write down bitcoin addresses and dispose of them once I'm done. I have all of passwords committed to memory. What else do I need to save? Is the whole point of booting from an external source just in case SilkRoad becomes compromised? What are the odds of that?
Sorry for all of the questions. I just don't want to leave anything up to conjecture
-
Useful information, need to bump it so that I can refer newbies to it.
-
help please I new PIN does not send for five days
What do I do? Thank you.
-
A question use the liberte in virtual machine is a good idea ?
-
help please I new PIN does not send for five days
What do I do? Thank you.
Sorry, cannot understand. You mean you have contacted SR Admin and they have not sent PIN? Because you can change the PIN yourself.
Or do you mean you have lost your PIN and want SR to reset your PIN or send you a new one. If it is the latter, ask them again, tell them it has been 5 days. Perhaps they could not understand either!
-
Thanks a million for the info. Can be a bit daunting starting out and clearly worded, well thought articles are a huge help to the Luddites on the road.
-
Liberte will automatically save some of your settings to an encrypted "persistent" settings directory. This includes your bookmarks, any PGP keys you generate or add, your desktop, other settings, and any files you save there.
If you want to save stuff (notes, etc.), you need to save your files to the persist directory (~/persist). There should be a "persist" folder on the left of any save dialog you use. Any files not in that persist directory will disappear when you shut down.
-
What stops me from running a linux vm in a truecrypt container and using public wifi? I don't see how this is in any way less safe.
-
The problem is that most Windows machines are infested with trojans (advanced keyloggers that can capture your keystrokes, record everything you see on your screen, etc). Anybody who used your computer may have also installed spyware to spy on you (i.e. parents, wife, girlfriend, sibling, etc). LE can easily compromise your system remotely and see everything you do on your computer. Nowadays, even Macs and Linux systems are not safe from these trojans. All you really need to do is visit a malicious website (i.e. porn) and you are infected (or insert an infected usb, or install infected software (i.e. pirated software), the new breed of malware is made so that it is undetectable by antivirus programs. Chances are your system is already infested with malware as we speak, logging your keystrokes, recording your screen, and sending the info to them. Virtual boxes/machines won't help you.
The solution is a live USB/CD, whereby even if you get infected by malware, it is gone after you shut down the system as nothing is stored.
Hope this answers your question.
P.S. - Just a tip: Turn javascript off when using TOR, this will prevent 99.99% of malware from infecting your computer or live USB/CD session.
-
I got some malware on my laptop the other day a mate of mine suggested 3 FREE programmes
1 Avast
2 Super Anti Spyware
3 Malware bites
1 Download all 3
2 Load all 3
3 switch off wifi connection
4 run a)Avast b) super anti spyware c) Malware bites in that order
Anything detected move to vault
5 Reboot machine
6 Keep virus /malware updated
-
I really think that someone who has malware on his machine is in the wrong place if he thinks that he can safely do illegal activities online. Up until now I didn't bother too much with it because I don't think I'd get busted over 5g of weed but I used gpg in order to make it safer for the seller.
I think this might have already been discussed but are there any good wifi adapters that actually work with gnu/linux or liberte for that matter? I don't feel like using the library or internet cafés if I decide to purchase bigger batches because they usually have cameras setup or require your id and my town has loads of unsecured wifi connections.
-
I really think that someone who has malware on his machine is in the wrong place if he thinks that he can safely do illegal activities online. Up until now I didn't bother too much with it because I don't think I'd get busted over 5g of weed but I used gpg in order to make it safer for the seller.
I think this might have already been discussed but are there any good wifi adapters that actually work with gnu/linux or liberte for that matter? I don't feel like using the library or internet cafés if I decide to purchase bigger batches because they usually have cameras setup or require your id and my town has loads of unsecured wifi connections.
The malware happened before I came onto SR , and engaging on SR is not an offence ;-)
-
Great Guide! :D
I'm sure tonnes of people have benefited!
- The Consultant
-
Great Guide!!
Thanks so much for posting!
septgirl
-
I did install the latest snapshot of Liberte on a external USB drive.
Now i see, basically it works, but very uncomfortable.
1. After a reboot i have to do the network settings. For LAN / WLAN. Why they will be nit saved? I use a static IP.
2. Apparently, it is not possible to print out something. Printer drivers are not implemented.
3. On my newer notebook, i could use LAN and WLAN. Just when i plug the LAN cable i am able to connect to the router. But on an older LG notebook, Liberte dont recognize LAN. How this comes?
4. There is no chance to use a Bitcoin client with Liberte. I dont feel comfortable to keep my Bitcoins on a online wallet.
Could Tails be a better solution for me?
-
Ridiculously useful thread - should be pinned in my opinion. Great work, Mr. Keats.
-
Although this method is a bit more involved than what I use, it was definitely useful to hear all of your reasoning.
Thanks!
-
Hello,
So this was posted about 8 pages back but is exactly where I am at aswell. Could someone please comment on this?
Anybody care to give me some feedback on my internet setup?
1. Using Tor in Liberte Linux (from home internet connection)
2. Using bitinstant cash deposit to email to obtain bitcoins
3. Send bitcoins to one-time temporary email address (will using Tormail raise any suspicions?)
4. Send bitcoins from there to instawallet, then send it on to BCFog (all using Tor)
5. Sending bitcoins to SR
6. Place order on SR, send information to vendor via GPG encryption
7. Have package sent to my address with real name on it.
Am I missing something here? I've spent a few weeks lurking and reading trying to figure all of this stuff now, and have finally got Liberte Linux up and running to post this. Security is extremely important to me, so I want to make sure that I'm airtight.
Lastly, I heard something about MT Gox needing ID now? What should I use instead?
Thanks
-
help please I new PIN does not send for five days
What do I do? Thank you.
Sorry, cannot understand. You mean you have contacted SR Admin and they have not sent PIN? Because you can change the PIN yourself.
Or do you mean you have lost your PIN and want SR to reset your PIN or send you a new one. If it is the latter, ask them again, tell them it has been 5 days. Perhaps they could not understand either!
Would anyone kindly tell me how to change my PIN? Thanks!
-
Hello SR brothers and sisters!
First timer here on the road.
I have a few questions pertaining to the process of acquiring goods from silk road without being fucked by the long dick of the law.
I went to my local library today to use Mt.Gox. I logged on using my library card ID, which is connected to me -_-, to conduct exchanges with mt.gox to instawallet. I then moved the bitcoins to another wallet.
I'm assuming it would be unwise to access the wallet on Tor?
From what I've read of Pine's post, I should use clearnet to transfer funds from the wallet to a torified bitcoin wallet, etc, before I move the funds to my SR account.
Which starts to make me wonder, because what Pine recommends is different from the OP's method.
quoting one of OP's steps for his method:
2. Moving Bitcoins
By the time you get home (or back to the library), you'll get an e-mail with a Mt Gox redeemable code for your bitcoins. Again make sure you access Mt
Gox from a computer not in any way connected to you. At this point you should send the funds through a couple of instawallets. ABSOLUTELY MAKE
SURE YOU BOOKMARK THE INSTAWALLET ADDRESSES!!! EVEN WRITE THEM DOWN!!! You can also put the coins through a tumbling service like BitcoinFog, but I don't find it necessary. The fact that the coins can't be linked to you in the first place is what really matters. Whenever you're happy with the degree
to which your coins have been obscured, transfer your funds into your Silk Road wallet.
what do you mean, when he says that the coins can't be linked to me is what really matters? does the exchange between mtgox and instawallets anonymize the transactions? let's say i use instawallet and move funds from one wallet to another on clearnet. and then i use tor to access that wallet so i can move the funds to SR. wouldn't LE find it odd that the funds were being transferred from one wallet to another in one fixed location in the US, and then tor comes in, and all of a sudden the wallet's being accessed from lets say, tokyo?
err, i don't know if i'm making too much sense with all this.
i'm probably coming off as uber paranoid, but i kinda freaked out after i read that article on that couple getting arrested for 50 tabs of LSD.
it doesn't help that I live in a really small town next to NYC with fucking black hawk helicopters flying around every 20 minutes. man these guys are draconian as fuck.
help would be greatly appreciated <3
-
Awesome post from all of us noobs.
-
Perhaps a stupid question, but I am only moderately computer savvy. What security or anonymity issues does booting from a liberte enabled usb drive circumvent, that the tor browser does not already? I can't imagine that there is much of a trace being left on your hard drive when visiting SR from the tor browser. Or am I way off?
-
thanks for this info
-
pine's instructions are great but.. i was wondering, what should one look for when exploring the blockchain as definitive proof that the chain is broken, just to be sure?
-
Isn't it a bit erroneous to have everybody on typical software? Sounds like a great vector to start a hack from since the member base will end up homogenized.
I want to ask about deep packet inspection and TOR nodes on the net. Let's say DPI is being deployed against us specifically on border routers. The first 1000 bytes are fingerprinted in the encryption payload in the US and for some crappy reason the entrance and exit from the TOR network stayed in the US. Problem? Due to the fact that the user's asynchronous keys do not change what stops the entrance and exit DPI fingerprinting, nothing, IMHO. (Within the US or within any other countries domain. There are language differences which weaken TOR due to clustering.) My next question regards the internal TOR network. I assume that these TOR nodes are wildly divergent machines with very different capabilities hardware-wise. I was thinking about any leverage which could be gained from a TOR entrance node that was powerful enough to engage in DPI. In the event that the feds have placed TOR nodes in the network that are powerful enough for DPI inspection within the network could this allow for escalation to other areas within the network? Is there an internal re-wrapping mechanism that would thwart DPI within the network itself? And if so what really secures the asynchronous keys from machine to machine in relation? At this time, seeing that DPI is not overt due to legal issues, could a mapping process already be underway that could be used against our infrastructure in the future? The NSA made some pretty impressive build-outs in the last few years.
I'm sure there is some type of federal presence here already. I'm not uber paranoid. I just know the turf well. If there is any relevance in what I've written here to you and you have questions or comments that are sensitive, PM me. I may be missing something that I should be aware of and need to be schooled. I have a few thoughts on encryption and it's relevancy. Due to the sensitive nature of this site why bother to decrypt the messages anyway? Just trace out the network and the users and there will be all kinds of end user holes and opportunity for physical investigation, starting with surveillance if the DPI can really leverage that over time. Defenders have to defend everything they have all the time, attackers have all the time in the world and they only need one hole. PGP was broken BTW....
Has anybody read about Jeremy Hammond? He got busted awhile back for popping Stratfor Intel. Read up on how he got it, pretty simple shit really, wet-ware gets fucked up easily, and exits the mouth or keyboard. Once the feds trace you down they sit on you and monitor your uptime and relative nics in chats, forums, SILK ROAD, and etc. They record when you login, logout, when you leave your home, enter your home. Couple this with an informant that you think you can trust. BUSTED!!!! This happened within the anonymous network and trust me that the SR user base is nowhere near as cryptic as these folks. On the other hand, SR's majority is just a bunch of dope really, nothing like Jeremy, he ripped Strafor's user base off for $700,000 and then because of that they got hit with a $1.26 million dollar lawsuit. I think they are still pissed and putting their fucked up little palace back together. That's why the feds took the time on him. I read a post from a member that said that he was excited about SR & these are "interesting times". That was a mouthful!
I have read this whole thread. There are about 6 folks who have decent encryption knowledge here. Trust is a very fickle thing. I seen quite a few threads asking for liberte wifi drivers....and I'll bet they're out there downloading all kinds of shit to there super-secret liberte dongle, hehehehe. Ala instant website with a great driver, including a nice hash of the binary with my malware already in it and they won't cross-check this shit against other sources anyway so I'll nail a lot of you. That's a theoretical black hat thinking who would love to rip off your bitcoins or a fed who would like to cool your heels for awhile.
I'm keeping my eye on this community to see what develops. That is my interest. Drugs are all over I don't see the need to expose ones self to this; especially if you're in the forums crying "NEWB!!!!!" iyiyi, the internet is SERIOUS FUCKING BUSINESS folks, trust me on this. Somehow you still need to receive whatever you're after so in the end there are physical connections and data collections out there with your fingerprint on them. The "Return to Sender" thing is hilarious but as a last ditch hail mary it's cool for the lawyers to play with. I think you're better off finding a few local drug dealers and keeping this shit to the sneakernet. I cannot think of anyway better than a good darkweb remailer for SOME protection; he/she can still get the screws put to them though; make cross-validated bust detectors with an email triad. (at least?) each remailer keep a laptop in an encrypted private VPN that does nothing but run cron jobs minutely detecting the presence of the others. If the door gets knocked down the laptop lid gets slammed shut to a power off mode, down go the cron jobs, the remailer triad immediately folds and all data is flushed magnetically on the other two. Cron runs a BASH script that fires up an electromagnet on the data drive in question wherever it may be. You'll need to understand some engineering and Arduinos for this type of tech-foo. The more the merrier but the cost will rise with each remailer used. The remailers will still be holding all of this shit and I would feel bad for them. If trusted computing comes to the net this is all over anyway, we'll be fucked in the long run. The facial recognition software is amazing shit too; another piece of very useful data for the savvy investigator. So before you walk in the bank put on a ski mask, lol.
1nz74g8
-
Thanks for the info. im going to have to read this 10x over to figure out all this encryption stuff. Im far from computer savy. The Bit coin seems simple enough though.
-
This is a very old article on Wired that is still relevant. It sums up the state of things very nicely.
http://www.wired.com/politics/security/commentary/securitymatters/2007/09/security_matters_0920?currentPage=all
I looked around some more and went over the TOR pages for the umpteenth time in almost as many years. I looked at the Wired article again and I still concur. The technology of the web has not stopped its light speed advance concerning the breaking of online anonymity. In fact, since I have other written works on the web under different identities, there is a project that can heuristically match my writing style up to a 95% accuracy. That is my "fist" in sigint speak. There is a trove of other shit out there. If you do not dedicate the most part of your waking hours reading IT material you are not up on things and can be tricked very easily.
I think true anonymity, serious hacking really, is actually quite brutal.
I will now tell a you a scenario that I call "Ghetto Hacking".
You find people in an area of interest that are vulnerable. This may be a vulnerability that takes many forms. Bums, drug dealers, whores, pedophiles, the gullible, and the just plain retarded. You handle yourself and others with kid gloves; you just dropped in too, are needy and irrelevant, but hey, I have some cash! Pick your mark carefully, MDMA, excessive vodka consumption, whatever, just stay away from crackheads, set up house-keeping, let things cool down and bring in your equipment. The way you procured your hardware is important. It must be untraceable. You are using people who are not good witnesses as defined by law. Your mark rented a place with a garage, right? Watch the physical security. If this doesn't flow out get lost, especially if you just stuck your .45 in someones face because of some unforeseen problem that developed.
We have our human proxies and they are totally disposable. (The level of which depends on how much of a bastard you are.) If you are a total bastard your operation is very deep, has a lot of cash or serious benefactors, and it is clear to you that if you fuck up you get planted. You run your hacks, do your business. Get into a serious dealer for intel. In Chicago, and other major cities, they have kids running around the neighborhood with pagers; if you look out of place, someone hears about it. You can watch your mail drops like this if you need them. The cops and feds really hate getting shot and the south side is a fucking meat-grinder. Your lab is outfitted with thermite and/or electromagnetic wiping on the encrypted drives. I destroyed them, fuck you, here is the password, sorry about that grenade in the case.
The job can be in and out; your going to take down some credit cards off a server and sell the files to seattle cc punks. Get the bum to set up internet, do your business and split. If you need more time, you can distribute your access through wireless nodes around your location. If you need low profile high bandwidth, consider your needs and multiplex the APs accordingly. If you need more bust-time. consider spreading this by linking with laser or microwave LOS connections to aggregated AP nodes with your kids watching just in case. This is done black bag or on a loosely associated set of greased hands. I would suggest befriending anarchist collectives. I would not leave any equipment behind. Good assassins wear gloves and drop a clean gun right on the marks chest and split. Your keyboard, case and peripherals are most likely filled with DNA, as is the room/house/apt that you were in. You deal with it, bleach and sulpher are your friends. At the extreme, burn the equipment thoroughly off-site after wiping, crush it, mix it into a batch of concrete and drop that block into the ocean. Really good hackers are never detected for the most part. Depending on the level you want to operate at you may need to get down like this.
I believe that ALL data that crosses the internet in ANY way can be reconstituted at this time. The level of the infraction in relation to the cost of the operations for blackhats and the corresponding writehats is constantly weighed and adjusted accordingly. Once seriously burned the feds file the fist and watch for it actively in routers, switches, and server honeypots. 0 day is NOT a rain ticket. I have had it and I will attest to the fact that usually these things are patched very quickly, thus WATCHED. I did not come here to scare everybody away from using sr. I just beleive in the hard, honest truth about the internet. Someone mentioned a couple that got popped with fifty hits of lsd in a post on this site. Do you folks realize how totally serious-fucking-OMG-I'm-fucked charges those are!? THEY ARE FUCKED HARD. I'm completely positive that it utterly destroyed their lives. Use whatever savvy you have to social engineer the living shit out of your physical delivery mechanism. I think this is the most crucial step in dealing on sr. This takes into account that you have the electronic part nailed down really well. Furthermore, the sloppier you are electronically, the closer they could potentially get to you and the seller. Find your level of bastard and stick to it or in the long run, this is not for you IMHO. I stated some problems about DPI in the last post. As far as I know, in and out node connections are in the clear on TOR. Even if they were encrypted the keys would not change either. Sooo........in the event that the in and out nodes were under the control of a combined DPI comb the hash would be traced. This means a full end to end tie through TOR with timestamps and encryption sigs existing on the clearweb routers. If your good enough to go look at them go ahead but don't forget about network taps slick.
Ok, I'm getting sick of this topic now but I decided to be helpful when I got up. I need to finish this with a few final comments. It may be prudent to poll the site for people who got popped and try to tie the shit back to the court records; start pulling the court transcripts; key evidence files under open records. Some people are howling and I'm sure some of these cases can be sniffed out for study based on weighed coincidence. (SR mentioned maybe....) The final proof will be in the transcripts of the case. It will take time; I'm not up for it. Someone else may care. I don't really. The whole gig draws skills from more than just fiddling with computers. You're going to need more than that to even get close to bulletproof. The actual definition for intelligence relates directly to your knowledge of the environment; not the little fantasy environment you may be having in windoze. Go out and look at every possible avenue available to you, plan according to your needs, and your level of experience. This dude that started this thread is cool doing this but I think it comes off as so defacto when there are many different avenues to approach this with. Give a man a fish you feed him for a day. Teach him how to fish and he is fed for a lifetime. Final thought. Some may think I'm a bit daft outing this really serious hacker post. Not really. I'm not a thief, nor do I put myself in compromising situations. I don't have to send drugs through the mail. If I want them I have people who can bring them to me, usually in a few minutes. Have fun, get advice, make advice, and don't forget to sometimes take advice.
1nz74g8
-
From Part 1, #2: "Extract the ".zip" you just downloaded to the root of your USB flashdrive."
I am not sure what this means or how to do it. Can anyone help?
-
Oh my, do be careful....
Anyhow, the "root" of any drive is basically the first thing that you would see when clicking on any typical drive from your windoze exploder. All of the folders/files in this first area are "at the root of the drive". In DOS it is denoted (usually) as "C://" in a command prompt. (dir and cd will work in DOS but not ls, BTW, read on...) In Linux this is denoted as "/" (forget quotes, get used to BASH & DOS if you want to get into this deeper.) You would find this in terminal. Beware though that you will most likely start terminal from the root users home directory "~". a "cd /" will put you at the root of the terminal's focus. To go back to the root users home directory "cd ~", to step back "cd ..". The "dir" & "ls" commands will help you see what is in the different directories. Things may also be hidden using basic convention such as "./" and can be seen by attempting to cd into "./" or using "ls -a". Google is your friend dude, seriously, use that before posting. This is really really simple first steps kinda stuff.....
1nz74g8
-
Dude, I did try google before posting but could not find the answer, dude.
So I tried the thread designed to help newbies. Editorialising about the I.T. skills of a noob on a thread specifically aimed at noobs is a waste of time and entirely unhelpful. As was your post, for reasons which should be obvious. But thanks for trying.
-
thanks for this, i found it very helpful!
-
hi im a newby and in Australia ,im only wanting to purchase on SR so is it nessesary to go through the process of booting from usb stick or is there another way for ppl just wishing to purchase ? a pointer in the right direction much appreciated...cheers.
-
Thx so much for this in depth guide. Coming into this it was all a little confusing. This definitely helped a lot.
-
You are getting lied to by capitalistic assholes supporting SR. The newbs need to scatter because we are going to have a hacking free-for-all. Sr is not aligned with the cryptoanarchists in faith, you are a fucking travesty.
-
How necessary is creating a live USB?
-
Whats wrong with simply downloading an iso of a common linux distro like debian or centos or whatever, burning it to cd/dvd, and booting live mode from that, then using the encryption options already included with the live distro environment (openssl, cryptsetup etc) to access the encrypted persistent data you need (PGP keys, tor bundle, ISP login scripts etc, ) on your removable flash storage?
- Z
-
Thanks so much for the guide it is really helpful! Unfortunately I opened my mt.gox account before I read the guide using my home computer and I also had the account verified which meant much of my personal info is in the account. Should I not use/close the mt.gox account I already opened and open a second amt.gox account using an anonymous computer?
-
This is a very old article on Wired that is still relevant. It sums up the state of things very nicely.
http://www.wired.com/politics/security/commentary/securitymatters/2007/09/security_matters_0920?currentPage=all
I looked around some more and went over the TOR pages for the umpteenth time in almost as many years. I looked at the Wired article again and I still concur. The technology of the web has not stopped its light speed advance concerning the breaking of online anonymity. In fact, since I have other written works on the web under different identities, there is a project that can heuristically match my writing style up to a 95% accuracy. That is my "fist" in sigint speak. There is a trove of other shit out there. If you do not dedicate the most part of your waking hours reading IT material you are not up on things and can be tricked very easily.
I think true anonymity, serious hacking really, is actually quite brutal.
I will now tell a you a scenario that I call "Ghetto Hacking".
You find people in an area of interest that are vulnerable. This may be a vulnerability that takes many forms. Bums, drug dealers, whores, pedophiles, the gullible, and the just plain retarded. You handle yourself and others with kid gloves; you just dropped in too, are needy and irrelevant, but hey, I have some cash! Pick your mark carefully, MDMA, excessive vodka consumption, whatever, just stay away from crackheads, set up house-keeping, let things cool down and bring in your equipment. The way you procured your hardware is important. It must be untraceable. You are using people who are not good witnesses as defined by law. Your mark rented a place with a garage, right? Watch the physical security. If this doesn't flow out get lost, especially if you just stuck your .45 in someones face because of some unforeseen problem that developed.
We have our human proxies and they are totally disposable. (The level of which depends on how much of a bastard you are.) If you are a total bastard your operation is very deep, has a lot of cash or serious benefactors, and it is clear to you that if you fuck up you get planted. You run your hacks, do your business. Get into a serious dealer for intel. In Chicago, and other major cities, they have kids running around the neighborhood with pagers; if you look out of place, someone hears about it. You can watch your mail drops like this if you need them. The cops and feds really hate getting shot and the south side is a fucking meat-grinder. Your lab is outfitted with thermite and/or electromagnetic wiping on the encrypted drives. I destroyed them, fuck you, here is the password, sorry about that grenade in the case.
The job can be in and out; your going to take down some credit cards off a server and sell the files to seattle cc punks. Get the bum to set up internet, do your business and split. If you need more time, you can distribute your access through wireless nodes around your location. If you need low profile high bandwidth, consider your needs and multiplex the APs accordingly. If you need more bust-time. consider spreading this by linking with laser or microwave LOS connections to aggregated AP nodes with your kids watching just in case. This is done black bag or on a loosely associated set of greased hands. I would suggest befriending anarchist collectives. I would not leave any equipment behind. Good assassins wear gloves and drop a clean gun right on the marks chest and split. Your keyboard, case and peripherals are most likely filled with DNA, as is the room/house/apt that you were in. You deal with it, bleach and sulpher are your friends. At the extreme, burn the equipment thoroughly off-site after wiping, crush it, mix it into a batch of concrete and drop that block into the ocean. Really good hackers are never detected for the most part. Depending on the level you want to operate at you may need to get down like this.
I believe that ALL data that crosses the internet in ANY way can be reconstituted at this time. The level of the infraction in relation to the cost of the operations for blackhats and the corresponding writehats is constantly weighed and adjusted accordingly. Once seriously burned the feds file the fist and watch for it actively in routers, switches, and server honeypots. 0 day is NOT a rain ticket. I have had it and I will attest to the fact that usually these things are patched very quickly, thus WATCHED. I did not come here to scare everybody away from using sr. I just beleive in the hard, honest truth about the internet. Someone mentioned a couple that got popped with fifty hits of lsd in a post on this site. Do you folks realize how totally serious-fucking-OMG-I'm-fucked charges those are!? THEY ARE FUCKED HARD. I'm completely positive that it utterly destroyed their lives. Use whatever savvy you have to social engineer the living shit out of your physical delivery mechanism. I think this is the most crucial step in dealing on sr. This takes into account that you have the electronic part nailed down really well. Furthermore, the sloppier you are electronically, the closer they could potentially get to you and the seller. Find your level of bastard and stick to it or in the long run, this is not for you IMHO. I stated some problems about DPI in the last post. As far as I know, in and out node connections are in the clear on TOR. Even if they were encrypted the keys would not change either. Sooo........in the event that the in and out nodes were under the control of a combined DPI comb the hash would be traced. This means a full end to end tie through TOR with timestamps and encryption sigs existing on the clearweb routers. If your good enough to go look at them go ahead but don't forget about network taps slick.
Ok, I'm getting sick of this topic now but I decided to be helpful when I got up. I need to finish this with a few final comments. It may be prudent to poll the site for people who got popped and try to tie the shit back to the court records; start pulling the court transcripts; key evidence files under open records. Some people are howling and I'm sure some of these cases can be sniffed out for study based on weighed coincidence. (SR mentioned maybe....) The final proof will be in the transcripts of the case. It will take time; I'm not up for it. Someone else may care. I don't really. The whole gig draws skills from more than just fiddling with computers. You're going to need more than that to even get close to bulletproof. The actual definition for intelligence relates directly to your knowledge of the environment; not the little fantasy environment you may be having in windoze. Go out and look at every possible avenue available to you, plan according to your needs, and your level of experience. This dude that started this thread is cool doing this but I think it comes off as so defacto when there are many different avenues to approach this with. Give a man a fish you feed him for a day. Teach him how to fish and he is fed for a lifetime. Final thought. Some may think I'm a bit daft outing this really serious hacker post. Not really. I'm not a thief, nor do I put myself in compromising situations. I don't have to send drugs through the mail. If I want them I have people who can bring them to me, usually in a few minutes. Have fun, get advice, make advice, and don't forget to sometimes take advice.
1nz74g8
As far as the handwritieng thing goes.... we combat that (hopefully) by having multiple people type, and then also people type when shitty drunk, stoned, benzo'd etc to get the general point across but still remain anonymous. if they figure it out, id be surpriced. hahae
-
Thanks for your posts. You've helped me navigate through everything with ease.
-
Thanks for the tips!!
One question, sometimes I get really bored at work especially my late shift. What's the best way to surf anonymously, and how would you do it?
My choices are
1. Use 2nd machine Liberte USB boot wi-fi connection to my iphone tethering. (not connected to work netowork)
2. Use my main primary corporate machine with VM or Virtualbox Ubuntu install (Tor connection via work network)
3. Use my main primary corporate machine with VM or Virtualbox Ubuntu install (usb wi-fi and Tor connection via iphone tethering)
The corporate laptop is Win7 with corporate image.
- Symantec Endpoint (always updated)
- VPN connection to file servers.
I am sure IT guys have monitor the network usage and keep logs for security reasons, but I was hoping to surf the web anonymously using just my primary machine. Any tips?
-
Do we really have to wait 1 day to open a package?
-
some awesome and really very helpful news posted here! Thanks for providing our community with such important news!
-
I'd like to repeat a prev. posted ? for answering:
Why would you not simply have BTC's purchased via Bitinstant deposited directly into your SR acct? How would doing this compromise anonymity?
-
I've been a member and basically window shopped and searched around, and I finally found this. but i'm confused a bit.. What exactly is liberte and why is it necessary? Is it just to have a secure flashdrive? I currently just have the Tor Browser Bundle installed on an external hardrive. How inadequate/dangerous is this?
I don't plan on doing any vending whatsoever, but I do plan on making some decent molly purchases along with some other things...
-
Can all these steps be made through a Mac computer? It's all I have at hand, I really need to get myself a windows.
-
you call this simple? sounds like getting bitcoins is very complicated. I'm not a computer whiz and don't understand most of this.
is there a more simple guide?
-
Quick questions
Should I use a tormail for both the mt gox and bitinstant accounts? I ask this because I read that tormail can only be accessed through tor and im not sure if i can use tor at my local library.
Is it safe to use all accounts (emails, mt gox, bitinstant) for multiple transactions at different times or should i create new accounts each time i purchase bitcoins?
Also thank you for all the helpful step-by-step. I now only access silk road and anything related to it via my USB. Before i was just using Tor on my browser, so do i need to wipe my computer of any past silk road history? If so, is there anything i have to do other than a basic history wipe? I have not made any transactions yet, just visited silk road and the forums.
-
very useful
thanks to the OP
-
+1 OP!!!! Greath thread/ read.
-
subbing
-
thanks so much!
-
For all the geeks out there I came across digital forensics article on "De-Anonymizing Live CDs through Physical Memory Analysis". Most notably tails.
Clearnet Warning
https://media.blackhat.com/bh-dc-11/Case/BlackHat_DC_2011_Case_De-Anonymizing_Live_CDs-wp.pdf
Nice article BTW, a hypothetical +1 to you.
-
Can all these steps be made through a Mac computer? It's all I have at hand, I really need to get myself a windows.
Yes, macs are Unix based systems and can be made quite secure. Note that GPGtools doesn't have an "armor" switch and can be a little finicky setting up properly. Also if you need windows, use bootcamp.
-
following
-
you call this simple? sounds like getting bitcoins is very complicated. I'm not a computer whiz and don't understand most of this.
is there a more simple guide?
I've just read the first few pages of this thread and I am totally lost.
I'm not computer savvy neither.
-
I am very thankful for this thread, thank you very many mr. Keats :)
I understand that now that I have a (almost, more on that later) working Liberte on a USB, I'm pretty much all set to use SR with reasonable security? After a total cleanup of my comps and backups, I will not have any trace whatsoever of me visiting the shady parts of the interwebz, right? All I have is this USB drive that I just found laying on the street and picked it up, which is encrypted and doesnt even appear to have any content in it when you first take a look?
So when the LE comes through my door (this is the scenario I think everyone should be preparing themselves to), my house is clean, my comps are clean, everything is clean - except for the parcel someone sent me that I know nothing about.
Right?
Can all these steps be made through a Mac computer? It's all I have at hand, I really need to get myself a windows.
I did this with a Mac.
I downloaded the trial version of Parallels for Mac and set it up with an old copy of XP that I happened to have (I think these are readily available from the torrent site of your choice). I then dragged the Liberte.zip to the XP desktop. Next I formatted (FAT32) my USB key with XP, and exctracted the .zip to my newly formatted USB drive. "Liberte" -folder has to be at root level. Locate and run "setup.bat", read the onscreen info, this takes a minute. You're done! Shut down the comp, and power it back on holding the "alt" -key.
(After creating the USB you can get rid of XP and Parallels if you wish. I did, I have no use for them anymore.)
I had previously installed rEFIt, to help boot from the USB (didnt work initially as I tried to make a bootable usb on OSX), and I was able to boot from Liberte. I then tried to remove rEFIt, and guess what?? It still worked, straight from the normal Mac boot chooser. Yeah!
Only problem I now have is my wifi, which is not working in Liberte. The wireless card is recognized, and it finds all the networks near me, but cannot connect to any of them. Bummer! The Internet is working through ethernet, I presume (as read from many many forums; I haven't tried it yet, I haven't got an ethernet port in my MBAir), so if you're using a desktop mac this might not be a problem for you at all.
I would be very happy if someone would be able to help me with the WiFi problem. I found a solution from the Liberte forums (CLEARNET WARNING!! https://forum.dee.su/topic/connection-problem), but it has its drawbacks: with this, the MAC Address could not be masked. And I think that my real MAC is probably a wise thing to hide is it not?
Any help on this one would be very much appreciated! In the meantime, I'm gonna go get me an el-cheapo -USB-wifi -dongle somewhere and hope that works better.
-
________________________
TOR/Liberte USE Approach
________________________
1. Boot liberty.
2. Load epiphany.
3. TOR Check
4. Proceed to learn.
-
subbed
-
Wow, this is a fantastic thread!
Thanks for the information!
-
is usb really necessary i just run tor on my mac i mean there would be no way to link me unless they found me with something illegal and found my computer right
-
is usb really necessary i just run tor on my mac i mean there would be no way to link me unless they found me with something illegal and found my computer right
If you're using an Apple or Windows or proprietary device, then you are already flagged. This isn't just fear mongering, but a facet of the market in which global powers are effortlessly trying to resolve. Google, Windows, Apple, Spring, Verizon, AT&T, Comcasst, etc., are all big players in national security, i.e. Big Brother, NSA, CIA, FBI. I'm not saying those guys are outright enemies, but they do wanna prevent terrorism and money laundering. The closer to honest you make your money and your gear, the less problems everyone will have. Terrorism is not limited to explosives, but economic terrorism (US Banks; Nigerian scams; Russian malware), environmental terrorism (PETA, Whale Wars, Fracking, BP), etc.
If you care about the safety of others, then you will get out from under the umbrella of proprietary malware/spyware and into open source. BTC is open source. Why would you not commit to the same regime that offers anonymity and solidarity?
-
is usb really necessary i just run tor on my mac i mean there would be no way to link me unless they found me with something illegal and found my computer right
If you're using an Apple or Windows or proprietary device, then you are already flagged. This isn't just fear mongering, but a facet of the market in which global powers are effortlessly trying to resolve. Google, Windows, Apple, Spring, Verizon, AT&T, Comcasst, etc., are all big players in national security, i.e. Big Brother, NSA, CIA, FBI. I'm not saying those guys are outright enemies, but they do wanna prevent terrorism and money laundering. The closer to honest you make your money and your gear, the less problems everyone will have. Terrorism is not limited to explosives, but economic terrorism (US Banks; Nigerian scams; Russian malware), environmental terrorism (PETA, Whale Wars, Fracking, BP), etc.
If you care about the safety of others, then you will get out from under the umbrella of proprietary malware/spyware and into open source. BTC is open source. Why would you not commit to the same regime that offers anonymity and solidarity?
does this mean i have to buy a new computer and restart
-
for the mac users among you i wrote a little guide to Tails:
for securing a macbook i suggest using a bootable live operating system.
There are operating systems preconfigured for TOR that are really easy to use and come with handy tools like pgp pre-installed. On shut down the system wipes your ram and leaves no trace of activity.
The Amnesic Incognito Live System - Tails, is one of those systems that runs fine on a Macbook.
1 Download the current version @ https://tails.boum.org/
2 Burn the ISO image onto a DVD
a Insert blank DVD
b Open "Disk Utility" (OSX feature)
c In the "File" Menu click on "Open Disk Image..." and choose the Tails ISO
d The ISO will now appear in the lower part of the left column
e Select the image there and click on the atomic "Burn" icon in the top left corner and burn to the DVD with slow speed (2x/4x)
3 If you restart your Macbook with the DVD inserted wait for the screen to get white and immediately press and hold the alt button until you reach the bootloader. Navigate to the DVD entry labeled "Windows" and press enter.
Voilá! You are now ready to go. Network drivers, Touchpad, etc. all supported by default.
You also have the option to insert a Thumbdrive and clone the system to it via Applications - System Tools - Tails USB Installer
This will give you the option to create a persistent Volume (e.g. save files, pgp keys) and will work much faster than a DVD.
Although booting from a USB drive is not possible with the default apple bootloader you can download and install rEFIt from you OSX, which will recognize the drive.
rEFIt: http://refit.sourceforge.net/
hope that helped :)
peace
i read something like people should not use tails, did i misread or is this method ok
-
If you use Windows, Apple, Google, Facebook, Twitter, or any proprietary and social bullshit, then you are a fool.
You expose yourself to identity thieves, foreign and domestic intelligence gathering, and general faggotry. It is not anonymous or secure or trustworthy.
If you do not learn how a computer works, including hardware and software, then you are a fool.
You are using "borrowed" devices. User Agreements are for stooges that believe that corporations can own property that you payed for and OWN. Do you not understand what OWNERSHIP means? Or are you some sort of Communist? Or Fascist?
-
If you use Windows, Apple, Google, Facebook, Twitter, or any proprietary and social bullshit, then you are a fool.
You expose yourself to identity thieves, foreign and domestic intelligence gathering, and general faggotry. It is not anonymous or secure or trustworthy.
If you do not learn how a computer works, including hardware and software, then you are a fool.
You are using "borrowed" devices. User Agreements are for stooges that believe that corporations can own property that you payed for and OWN. Do you not understand what OWNERSHIP means? Or are you some sort of Communist? Or Fascist?
i dont understand a word from ur rant.. im just trying to find a legit method or set of instructions that will have me anonymous but run on my mac too
-
If you use Windows, Apple, Google, Facebook, Twitter, or any proprietary and social bullshit, then you are a fool.
You expose yourself to identity thieves, foreign and domestic intelligence gathering, and general faggotry. It is not anonymous or secure or trustworthy.
If you do not learn how a computer works, including hardware and software, then you are a fool.
You are using "borrowed" devices. User Agreements are for stooges that believe that corporations can own property that you payed for and OWN. Do you not understand what OWNERSHIP means? Or are you some sort of Communist? Or Fascist?
i dont understand a word from ur rant.. im just trying to find a legit method or set of instructions that will have me anonymous but run on my mac too
Use tails or Liberte man. They are both considered pretty safe.
-
i dont understand a word from ur rant.. im just trying to find a legit method or set of instructions that will have me anonymous but run on my mac too
As long as it is an Intel Mac, Tails will run just fine.
-
i dont understand a word from ur rant.. im just trying to find a legit method or set of instructions that will have me anonymous but run on my mac too
As long as it is an Intel Mac, Tails will run just fine.
Well, Tails runs fine on a mac with a DVD, but I have been trying, unsuccessfully, to run it with a usb...
I can't find any good information ..
-
subbed thanks for the great info.
-
Hi Guys,
A newbie here, working up to my first purchase on SR and trying to make sure I do it right. So the guide looks fantastic but I have a couple of quick questions.
1. This guide is over a year old now. Is it all still pertinent information for the new guys or are there any parts of it I need to do differently.
2. Bearing in mind I'll only be buying small amounts of class B or Cs (I'm in the UK), is having the package sent to someone else's address really necessary? It seems to me that I'd just be transferring the risks involved to the other person and that seems like a kinda shitty thing to do.
Thanks guys, any help will be greatly appreciated.
-
Hi Guys,
A newbie here, working up to my first purchase on SR and trying to make sure I do it right. So the guide looks fantastic but I have a couple of quick questions.
1. This guide is over a year old now. Is it all still pertinent information for the new guys or are there any parts of it I need to do differently.
2. Bearing in mind I'll only be buying small amounts of class B or Cs (I'm in the UK), is having the package sent to someone else's address really necessary? It seems to me that I'd just be transferring the risks involved to the other person and that seems like a kinda shitty thing to do.
Thanks guys, any help will be greatly appreciated.
Hey Septimus W Smith!
Also new to the road, yesterday i placed my first order. I used my home address because i dont have a second address like you, and i dont want to get my friends involved in this just like you!
Before placing and order just make sure that there are no other drugs / drug accessories (bong and the like) at your place! And if the package arrives enjoy it until your next order ;) i think this method is as safe as ordering to another address!
-
You're fine using your home address just encrypt sensitive information, never FE, don't panic, and enjoy your stuff.
-
Hi Guys,
A newbie here, working up to my first purchase on SR and trying to make sure I do it right. So the guide looks fantastic but I have a couple of quick questions.
1. This guide is over a year old now. Is it all still pertinent information for the new guys or are there any parts of it I need to do differently.
2. Bearing in mind I'll only be buying small amounts of class B or Cs (I'm in the UK), is having the package sent to someone else's address really necessary? It seems to me that I'd just be transferring the risks involved to the other person and that seems like a kinda shitty thing to do.
Thanks guys, any help will be greatly appreciated.
I just noticed a couple guides a guy wrote the other day on here
http://dkn255hz262ypmii.onion/index.php?topic=151666 - Where to buy, move, obfuscate, and sell bitcoins
http://dkn255hz262ypmii.onion/index.php?topic=94939 - Keep your bitcoins safe on Tails liveUSB and Electrum wallet
I haven't read them in depth but they seem correct when I skimmed. It'll give you a nice starting place. I wanted to add that I had problems using Liberte' and it seemed to be in the program itself. It wouldn't allow me to access file manager after I had copied files from my hard drive to paste elsewhere and you are forced to log off and back on for it to work each time. Might not be with everyone but it was a problem with me. Good Luck.