Silk Road forums
Discussion => Security => Topic started by: dduckpad on March 29, 2012, 02:33 am
-
Just wondering which is a better choice, safe-mail good enough for security?
-
safe-mail is shit. Not only does it tell everybody when you're online so they can profile you it doesn't even work half the time.
I personally don't trust SSL cert authorities, so at least with tormail you have better encryption instead of exiting through a tor node running this: http://www.thoughtcrime.org/software/sslstrip/
-
tormail. with pgp. using the squrelmail login.
-
thx, making the switch
-
safe-mail I believe will rat you out if need be.
-
that's strange Holly, cause rat-mail is supposed to keep you safe.
-
Neither (although tormail a bit more, because it stays inside Tor). You'll never know what either provider will do with your mail, so I wouldn't trust them with it (unless it contains nothing of interest or is all encrypted).
-
Personally, I like the big FUCK YOU which is directed towards authority on tormail's start page:
"Notice to Officials - Abuse Complaints
This web site is just an informational web page.
None of Tor Mail's mail systems are hosted on this server, or on any server that you can find the IP address.
Siezing or shutting down this web site will have no effect on Tor Mail's services.
Tor Mail consists of several servers, a Tor hidden service, and an incoming and outgoing internet facing mail servers.
These internet facing mail servers are relays, they relay mail in and out of the Tor network, they are disposable servers purchased anonymously and not tracable to us.
The only thing stored on the hard drive of those servers is the Exim mail server, and the Tor software.
No emails or logs or anything important are stored on those servers, thus it doesn't matter if they are seized or shut down.
We are prepared to quickly replace any relay that is taken offline for any reason.
The Tor Mail hidden service and SMTP/IMAP/POP3 are on a hidden server completely seperate from the relays, the relays do not know the IP of the hidden service.
Tor Mail does not co-operate with anyone attempting to identify or censor a Tor Mail user.
Tor Mail's goal is to provide completely anonymous and private communications to anyone who needs it.
We are anonymous and cannot be forced to reveal anything about a Tor Mail user.
You can only sign up and access Tor Mail via our Tor Hidden Service, we do not ask for any identifying information such as name or address, our service is free so we do not have billing information and tor hidden services cannot see your IP so we have no way to identify any user.
We have no information to give you or to respond to any subpeona's or court orders.
Do not bother contacting us for information on, or to view the contents of a Tor Mail user inbox, you will be ignored.
If you wish to contact us for any reason, you may send an email to click here to reveal email address."
-
tormail. with pgp. using the squrelmail login.
Well said Wretched - Squirrelmail may not look as pretty but it also doesn't contain any scripts which might compromise your privacy. Suffice it to say that Tormail is set up in such a way that intercepting e-mails by third parties is virtually impossible - however if you want to be certain of your privacy, suggest using PGP to encrypt your messages as Wretched says - that way even if there's a mole in Tormail, they'll only be able to intercept protected messages.
If you need a more convenient way to speak to people there are a number of messaging applications than can be run through Tor and use encryption - Pidgin with the OTR plugin is good - I have just been introduced to Psi+ which can import PGP keys for each user, saving you the trouble of having to encrypt messages each time.
V.
-
get a yahoo account - best mail provider ever, so many users - well hidden! ;)
just kidding... take a look at - "riseup.net" or "lavabit.com"!
-
What is the link for Tormail please?
-
Your provider is kind of irrelevant as you should be using GPG and always accessing your account anonymously.
-
What is the link for Tormail please?
www.tormail.net
http://jhiwjjlqpyawmpjx.onion/
-
Thanks, I have been trying to get hold of a vendor through his tormail all day and my emails have been bouncing back. It's bloody annoying.
-
tormail was hacked since the afternoon yesterday...i thought you guys would have noticed that!
-
Hacked or just down?
-
that's strange Holly, cause rat-mail is supposed to keep you safe.
lol
-
it was hacked...had checked the page last night and it said it was hacked by so and so and had a picture of some person and had the people who hacked it...the sites down now so don't know what happen to it...
-
That's not entirely true - their welcome page which contains no information about individual Tor users may have been compromised but that wouldn't do any good if you wanted to trace individual users.
Of course using PGP to encrypt your messages is also essential - that way even if a corrupt Tormail admin were to leak the location of their servers all they could hand over is your encrypted inbox.
V.
tormail was hacked since the afternoon yesterday...i thought you guys would have noticed that!
-
safe-mail I believe will rat you out if need be.
facking narcs
-
Personally, I like the big FUCK YOU which is directed towards authority on tormail's start page:
Gotta +1 for you posting that from the tormails front page, (I didn't include it in this quote due to space) I never read that before, that is the biggest middle finger to the man I've read by a service provider!
thanks for sharing that :)
(yes I always use the squirrel mail option, no java script :)
-
Safe-Mail is such a load of shit, as the posters said above it's back-doored and you can hardly ever successfully send/receive an email anyway. TORmail with GnuPG through the Squirrel login FTW.
-
Personally, I like the big FUCK YOU which is directed towards authority on tormail's start page:
"Notice to Officials - Abuse Complaints
This web site is just an informational web page.
None of Tor Mail's mail systems are hosted on this server, or on any server that you can find the IP address.
Siezing or shutting down this web site will have no effect on Tor Mail's services.
Tor Mail consists of several servers, a Tor hidden service, and an incoming and outgoing internet facing mail servers.
These internet facing mail servers are relays, they relay mail in and out of the Tor network, they are disposable servers purchased anonymously and not tracable to us.
The only thing stored on the hard drive of those servers is the Exim mail server, and the Tor software.
No emails or logs or anything important are stored on those servers, thus it doesn't matter if they are seized or shut down.
We are prepared to quickly replace any relay that is taken offline for any reason.
The Tor Mail hidden service and SMTP/IMAP/POP3 are on a hidden server completely seperate from the relays, the relays do not know the IP of the hidden service.
Tor Mail does not co-operate with anyone attempting to identify or censor a Tor Mail user.
Tor Mail's goal is to provide completely anonymous and private communications to anyone who needs it.
We are anonymous and cannot be forced to reveal anything about a Tor Mail user.
You can only sign up and access Tor Mail via our Tor Hidden Service, we do not ask for any identifying information such as name or address, our service is free so we do not have billing information and tor hidden services cannot see your IP so we have no way to identify any user.
We have no information to give you or to respond to any subpeona's or court orders.
Do not bother contacting us for information on, or to view the contents of a Tor Mail user inbox, you will be ignored.
If you wish to contact us for any reason, you may send an email to click here to reveal email address."
+1. Literally.. +1 Karma
-
I guess tormail wins over safe-mail if you read through the thread.
Still, sometimes you may not have access to TOR (on another computer or whatever) and maybe you are in grave need of getting access to your mail.
In that case, I have some hopes on the quite new https://countermail.com/
It's created by some like-minded people to be used as a safe-mail. They've done some nice security measures. Their USB-key alternative to security makes it even more interesting. It's worth a look!
-
Everybody probably knows this by now but don't use hushmail either, they handed over a bunch of decrypted emails to the feds as part of Operation Raw Deal a few years ago: http://www.wired.com/images_blogs/threatlevel/files/steroids.source.prod_affiliate.25.pdf
-
@Ronind: tormail.com != tormail.net
-
...so how do tormail offer a free service if they have to maintain all the infrastructure?!
-
Personally, I like the big FUCK YOU which is directed towards authority on tormail's start page:
Gotta +1 for you posting that from the tormails front page, (I didn't include it in this quote due to space) I never read that before, that is the biggest middle finger to the man I've read by a service provider!
thanks for sharing that :)
(yes I always use the squirrel mail option, no java script :)
Lol, Dunno if they really mean it, but it makes me feel good to read it. You don't see very many disclaimers of that nature... Usually, they say the exact opposite.
-
Yea I heard safemail was crap, as is hushmail, what about countermail?? I heard that provider isnt to bad any thoughts??
-
Yea I heard safemail was crap, as is hushmail, what about countermail?? I heard that provider isnt to bad any thoughts??
It doesn't matter, you should be only connecting anonymously and using encryption for all messages.
-
Yea I heard safemail was crap, as is hushmail, what about countermail?? I heard that provider isnt to bad any thoughts??
They are the best one on the "common" encrypted email market but they will still back-door you if someone flashes a warrant shaped piece of paper. Use TORmail with GnuPG mate, that's best way forward. :)
-
Sending an email with tormail to a commercial email (like yahoo, hotmail, gmail) it's safe or not?
You pass through an exit node but this should be ok until the nodes are not compromised.
Tormail doesn't know who you are and is not able to give that away (since you're always connecting through Tor with them), but you are of course able to give away clues in your actual e-mail. Remember that your e-mail will probably pass through the Internet unencrypted and more importantly, it will be probably be stored unencrypted by the receiving party. So, encrypt your e-mail with PGP and you'll be fine.
-
Yea I heard safemail was crap, as is hushmail, what about countermail?? I heard that provider isnt to bad any thoughts??
They are the best one on the "common" encrypted email market but they will still back-door you if someone flashes a warrant shaped piece of paper. Use TORmail with GnuPG mate, that's best way forward. :)
Thank you kindly for the info Limitless :) Appreciated ;D thats what I figured.. I have been using tormail lately however..
-
Tormail with PGP is the way to go. :-)