To start, I would like to make this clear to everyone involved that Silk Road does not have malicious intentions or an anti-competition attitude, we actually require competition to keep us motivated and for the diversity of the network but in order to fulfill that function the competition must be a safe one which does not put people in harms way or subject to possible exploit. This post I hope will demonstrate to you why claims a market makes does not correlate to the true story and we would like to demonstrate this with Tormarket.

At this moment in time, I also want to clarify in light of recent events the full disclosure everyone deserves to know. This investigation started under the suspicion that Tormarket was behind the ongoing DDOS against Silk Road but has since taken another turn when we looked below the surface a little more. I have no conclusive proof Tormarket did or did not order the DDOS currently hitting us and personally I don't believe I ever will so I won't go on about this much more as it is actually not something that matters any more since we are definitely en route to fixing it if you have watched our recent developments, but over Tor such attacks are not trivial to correct. All of this is done in the name of safety and I hope the owners of Tormarket can take this seriously, go away and rethink their strategies because as I will discuss later we didn't even put much effort in to extracting this data.

**What is it I am attempting to prove?**To take it from the home page of Tormarket, I wish to publicly overturn the rumors and falsehoods of some of the below:

Darknet Market done right

Secure codebase, competent operators, and common sense.

Common sense I will allow that to pass as a subjective matter and how they wish to operate their market is none of my business. Competent operators - again it would depend on your individual definition of that. Secure codebase - let us put that to the test.

**Let's start with the basics**One of the most valuable pieces of any website is the database. It controls so many parts of the site and without it there could be no effective market, so we started trying to extract the information from that. Surprise surprise, it didn't take long to grab the structure:

`orders table`

- id

- price

- status

- qt

- address

- notes

- crypto_currency_id

- buyer_id

- buyer_username

- vendor_username

- vendor_id

vendor table

- id

- username

- banned

- currency

- location

- messages_id

- messages_body

Now we've had a sneak peak at their table structure, it was decided to have a trawl through the messages that vendors had sent to customers. We will list a little segment below, some vendors here might recognize their own messages with of course sensitive information removed from below.

`Paulwalker : thank you. `

S0wl : has been sent. if?

17538 : here's a screenshot

Strings999 : hello,i was sent an invite while

OGCorleone : hello, thanks for your order :)

Puntitot1 : has been sent. if?

Berndman : hello, your order is ready to ship. you have to finalize now.

Crepuscular : hello, did you order here or on heep? what am i missing?

Jackpot1875 : hello, your order is ready to ship. you have to finalize now.

Spartanec731 : hello to you as well . indeed it is the original haizenberg , and offence non taken , :)

Dogtanian : hello my friend good to hear from you,

Levlvov70 : hehe i was joking, but you seem cool man. i ll send you a sample of one each...

Az12er34ty56 : hello! i requiered a seller account here i am matrixx on bmr with more than 180 positives feedback!

Strom : hello, your order is ready to ship. you have to finalize now.

MickeyMantle : hi there, when your product has arrived please mark as arrived and set a positive feedback on your experience

Qwertyqazwsx : haha, won't do so brother... your order will ship asap.

Toefia : abgemacht. dann sind 7 tage rum und dann kann ich dir reship anbieten.

Spaniard : always verify identity using pgp key

Gtiv : allso mit unserem shop werden wir im lauf der nexten woche online gehen. wenn du willst kanst du auch dar ber verkauf n. wegen den geb ren bist du mit 1 einverstanden? einfach f r hosting arbeit usw. ich werde noch ein paar andere verkaufer fragen ab

JTLeary : always verify identity using pgp key

MrTrump : ah yes i just saw it! i think with out 1700 orders and 100 feedback on sheep it will be going strong! -)

Slappfisk : bare

Piccolabesti : azi fb

Mushinmusa : bajs fr n katter?...

Then an order note which was from a buyer to a vendor, we'll keep this very select for obvious reasons:

`From: JackCubrick`

To: GodfatherNL

Purchase: *** 1 gram pure uncut cocaine ***

Message: hey there. please ship asap as i would like to place a large order before christmas once i have confirmed weigh in and quality

Worried? So were we.

Up to this point we weren't looking for any kind of mass data extraction, but in the interest of ensuring the users of Tormarket are safe, we had to do it anyway. The summary of some of the data we went through was to see who the top buyers were, something of equal interest to law enforcement as vendors except it is more likely a buyer will have leaked personal information on the site than a vendor. So who are the top buyers:

`Top 15 Buyers by number of products purchased`

Buyer ID Buyer Name

16759 icq

13621 jackcubrick

12226 shedrik

11994 dreamsage

13100 purpleextreme

12274 [redacted]

18634 [redacted]

10625 sebb66g

13572 choicethespi

16611 felsad

14731 marvel

11001 madcunt33

13127 sleep12

18308 roxas50

13132 rstevens

So user icq has the highest amount of products purchased. We investigated a little further to see precisely what he bought (and we could do this for every buyer I would like to point out):

`ID Buyer Vendor Product`

16759 icq moneysell Brazzers.com - [LIFETIME PORN PREMIUM ACCOUNT]

16759 icq rainbowbear INTERNATIONAL 100 grams bulk methylone M1 moonrock 99.9% purity

16759 icq moneysell Teenpornopass.com - [LIFETIME PORN PREMIUM ACCOUNT]

16759 icq moneysell PornPros.com - [LIFETIME PORN PREMIUM ACCOUNT]

16759 icq moneysell Asiansexdiary.com - [LIFETIME PORN PREMIUM ACCOUNT]

16759 icq moneysell Babes.com - [LIFETIME PORN PREMIUM ACCOUNT]

16759 icq dipsycards An Idiot's Guide to Fleeing to Mexico

16759 icq positive Xbox One Console!

16759 icq moneysell 3dxstar.com - [LIFETIME PORN PREMIUM ACCOUNT]

16759 icq moneysell Sexart.com - [LIFETIME PORN PREMIUM ACCOUNT]

Somebody tell him you don't need to pay these days. Let's try another (jackcubrick):

`Purchases made by jackcubrick`

Vendor: Product

PureHeaven : 3 Grams of Tested 90% Cocaine...Verified Vendor!

ozconnection L 1 gram Peru Cocaine Australia

sunwu : 250mg Pure Alprazolam Powder (Xanax) - USA

tomorrowman : 3 grams tan mdma crystals 85%+ purity

demoniak : 2GR PINK Speed (dry)

sunwu : 250mg Pure Alprazolam Powder (Xanax) - UK

wilfred : 3.5g Hydroponic BUDS - HIGH THC - New Vendor Special !!

justincase : 10 regular seeds - Hindu's Shiva

uperspeedbros : 2g of Speed -- Amphetamine sulfate

godfathernl : *** 1 gram pure uncut cocaine ***

So can this extraction be scaled up to getting entire lists of users? Well we found out:

`BuyerID,BuyerUsername`

10011,giveemhere

10037,brian146

10039,jayjay

10042,downlowfunk

10046,torrex

10061,minimilk

10066,mightymax

10067,screwtape

10069,datamatrix

10072,shlooky

10073,okipoki

10078,brithney85w

10081,greenjoker

10082,odyssey47

10086,magmush

10090,mxwssh

10095,gaviboy

10100,milky

10106,timtimebomb

10107,slappfisk

10108,brainman123

10113,creepers1

10127,ronaldo72

10130,ch0sen

10134,4corner

10136,posrednik

10146,lulz87

10156,cweistein

10158,afiddlerfair

10171,frankiemachi

10185,2q2

10186,skizzdaghost

10190,waltermichae

10200,violetraindr

10203,raeuberhotze

10213,parleybowl84

10215,boogersugar3

10218,reiji

10226,tjebbe

10254,quiziti_

10259,xylitol

10268,bugnine9

10282,skobeywan

10296,muggle

10298,melvvinn_

10299,hdth

10302,treemonk

10310,silvercarrot

10312,blaster2438

10313,agape

10316,gzo_

10318,crevtiae

10321,hitman

10324,bigstoners

10330,gigglebox

10370,irishjunkie4

10371,dimitriglitc

10372,factory9

10389,arya420

10399,az12er34ty56

10402,theroland

10413,meggymix

10418,monkeydust

10418,m_

10431,flipit

10433,mrviking

10437,h4rdc0r3

10453,mcg324

10455,loffer

10455,_

10461,thecrazyman1

10467,pallymally

10474,thayle

10476,twistedrx

10477,olddetleff

10496,bigone77

10498,groovetime79

10511,dimetho

10512,beardofneptune

10518,unahmedishe

10534,pretzelmaste

10554,krick75

10555,haremmac

10558,stupid123

10560,keeker34

10562,angeldemom

10567,fevolution

10593,cocacoca

10595,jackpot1875

10610,hatchet13a

10623,stimpackuser

10624,lemon714

10625,sebb66g

10627,horstschorst

10643,c17h21no4

10648,rekt

10649,snicker

10653,eltorrelo

10665,g0awayb4t1ng

10671,cilius

10704,mango420

10706,depre553

10708,hohoho

10709,sulph84

10732,davidian

10733,renniemint

10753,marcotb1287

10756,neilarmstron

10757,weedplease

10758,acid420

10769,skinnymalink

10799,sternkraft

10812,elesdee

10819,graves

10827,toplessmind

10835,peterborough

10841,bbb2

10861,slapchop

10885,needthatnow

10892,nanonyymi

10907,rator93

10908,jumboballs7

10909,gimmeabreak

10921,planb

10928,trevelyan

10947,kappagrande

10963,joe121

10967,canesnake

10968,monkey18

10976,mr2happy

10981,godsnameissm

10982,raresh

11001,madcunt33

11012,stankydanky

11016,1bigdog

11038,d1rkd1g1tal

11046,gyste1

11053,johns282

11071,trailertrash

11078,masterblaste

11100,lastresort

11102,thcbuds

11104,jeffhawkins

11114,thelionshare

11116,sournycd

11120,hobbes

11123,jameson

11126,strom

11137,ruffiee

11147,jenslover

11160,tiririca

11162,blentron

11168,5orlorn

11170,jonnoj

11175,mrmonster123

11180,sillysally

11182,deepelmo

11188,panlanwan

11200,scolopax

11204,wikid50

11222,thall

11245,methy

11256,jb299999

11262,dendrix

11268,westhebeast

11271,docbenway71

11274,moi_

11280,pinecone25

11288,phoon

11293,damane033

11296,jaystiles

11317,gagao

11320,spoot36

11352,sloppyjoe

11367,toomertoo

11369,robertfr

11377,rollin

11381,carlitolegen

11388,dogtanian

11405,catlessrugged

11413,kelevrahz

11427,mmmesopus101

11429,bubi

11452,candles

11453,goldbond

11464,blustik

11465,ballsacker

11480,thetonik

11484,boc

11498,mrmagoo

11499,tap

11500,vaan1

11508,zounce

11511,bikerbum

11524,acidroom123

11533,zeek01

11541,valueadded

11545,50fifty

11549,lionfish37

11550,trent

11564,sonicdeathmo

11566,i7847463846

11588,dr67p

11595,wingotodman

11597,brookey

11601,motibiti

11625,dack

11647,poundtownher

11651,luckycampbel

11667,vidali_

11683,potatobread

11687,shaveandahai

11693,heavyduty744

11695,fpm10

11708,rucksichlos

11710,pinkpowerran

11732,belzhikr

11736,oogaboogagoo

11737,seek3r00

11746,boringgirl

11773,jakndex

11811,bitcoinbitco

11818,red99

11819,holyghost

11820,amesghali

11821,principalway

11829,mrm

11835,dagger

11842,anonlifestyle

11848,demoniakk

11849,mortondumal

11865,dakeera

11866,xxxxman

11879,blahblah1

11886,atouttsmanne

11891,bluebossa

11905,nsimeh417

11915,hofsdiufwebk

11917,z0rfire

11918,mynameishate_

11921,elegantfile

11923,blimpy22

11924,athomebomb

11930,clobro1

11932,bluester

11939,irishaustral

11963,gentoo

11967,newchanges

11972,danimus

11973,spaniard

11980,djevans71

11985,mrsmith

11994,dreamsage

12010,soylentgreen

12016,ellisdee3

12044,testeraccount90

12048,dshas

12049,improbable

12053,h20

12078,pedro21

12085,phoenixender

12100,nickyblades

12101,getupped

12116,vbh

12128,oubaya

12133,canda

12145,tk005

12164,pipwalker

12173,namename

12176,aslanchik

12180,datz

12214,mhitchens42

12215,brownevo

12224,fts123

12226,shedrik

12240,khanbongo

12245,jinkz

12247,glycerat100

12254,dadinio3213

12264,cumknot

12269,d8jd8jd8j

12275,psytranceg

12287,swissprog

12289,ohmathea

12290,ctrlalth

12304,zeeozwei

12306,sophocles

12318,bluefox

12337,shamus68

12338,bealzebobs

12340,jeanlefebvre

12348,lostinspace

12373,herpmcderp

12382,unknown555

12388,shaft

12424,leirbag

12444,snorro119

12454,piratecannon

12457,mrtrump

12463,niall2012

12468,rossisucht

12472,stlbigkahu_

12475,hurstwok

12484,plitzein

12491,fireflyx

12499,swizzlestick

12503,kindle

12509,sourmonkey

12524,qwertyqazwsx

12543,balanter

12549,forellebabbe

12554,buffalos

12558,ctrlctrl

12566,freeparking

12570,brbdriver

12584,keneeth

12603,spaceminers6

12605,topsecnick

12606,ilovepnr

12613,dotdash

12628,rambo512

12631,herhim2009

12634,shingles

12650,headspace123

12655,fiskar

12675,boybreathran

12696,kerin28

12706,phishfan

12717,redman

12735,jellyrajah

12736,theargonaut

12748,spartanec731

12751,44xseba

12764,rs6k

12782,moz

12791,squirrelmast

12797,diddlerizzle

12824,theendall

12826,anto6901

12829,r3aliize

12834,psychonaut123

12836,django13

12838,scunkysmerf

12843,finearts

12863,casanostra25

12866,overc375

12869,byron2013

12876,nighthawk

12888,filonxhp3k59

12889,speedweed

12895,dreamfox

12903,brick888

12932,trippinf0x

12953,piccolabesti

12956,untergrundsz

12971,tmko

12985,jflynn

12986,alienthc

12991,cbozwiek22

12995,berndman

13000,traderbtc

13001,ne0ngirl

13007,nestea01

13009,johnmiller

13019,tberry

13028,778dexter778

13031,zaklinaczcip

13033,coolethan

13035,onionsoup

13050,wilbert89

13057,surfer

13070,tsm123

13073,jla

13085,whiteflight

13088,superskunk79

13090,facemelt

13093,nurse80

13100,purpleextreme

13111,dracula

13116,unknown79

13119,asdfuiops

13124,mikenewbit

13125,mtothex

13127,sleep12

13130,scunnered

13132,rstevens

13147,komaschaedel

13148,granville999

13149,levlvov70

13150,libertas1234

13154,heimderdokto

13162,akafreak

13166,svenzzon

13173,relaxedsoup

13178,mssdark

13180,fla_

13195,ahdls

13199,astrid

13208,m911j

13219,guple520

13226,wwmjax

13240,jollyrogers

13266,thisaintme89

13272,cannsument

13284,tambour

13286,dextermorgan

13294,rubberducklo

13298,turner13

13303,mrkobayashi

13312,foxcloud

13319,alligatorsmi

13324,dandan

13326,gizdog

13333,aurai

13343,rayray60

13354,zapzarap

13361,gmtmaster

13362,bluegoat

13408,whitesferry

13409,hexdebt

13411,pebbles200

13424,wiecz

13450,alfr40jd

13455,epicdick

13463,rotrier

13467,xteb112

13472,pryzak

13473,the70th

13483,stonedude

13487,happyguy72

13494,rasputin

13495,xk5910

13548,starshiptent

13571,justmarried

13572,choicethespi

13574,merlo

13583,jacofaco11

13597,aussiehq

13612,fearlessfred

13619,kronhjorten1

13621,jackcubrick

13625,uhr

13633,cloudso_

13637,pablo6666

13645,roth

13652,anonym254

13673,bushmans

13688,doctorgig

13690,following

13698,celvin

13706,gazer

13724,re3r25rw1

13725,jtleary

13733,flex

13740,guanaci

13742,redtree13

13743,annonnymous

13764,sanctiman

13795,billy1234

13819,immortalis66

13819,immortalis666

13828,frink

13829,donaldtruck

13830,toefia

13832,dizzydinosaur

13834,mott

13837,testingdis

13838,normannormal

13852,nextlegacy

13858,bool

13862,digitalluv3r

13869,rufio

13875,icho

13894,blackburn74

13897,zaszax

13901,franco21

13903,spookeemeeto

13918,lacticacid

13920,jabato

13925,tootelage

13933,spsp

13938,nickbla

13940,cuco

13944,mrmustard

13949,mariejuana

13951,tranquil

13965,lordbonk

13967,findingsolac

13974,uberstat1

13977,fooney

13980,care696

13982,a845631

13990,mongoose88

13997,scotty1278

14000,griselda

14008,vad0r

14010,barepiff

14019,googleplus

14022,suppertime

14025,snoffle

14032,fox0r

14038,lemonhaze

14047,niwatat

14075,catlicker420

14081,dimwizzle

14084,verde

14089,lovechild96

14092,mileycyrus21

14093,intothemist

14128,0verlord

14130,bigplateofcr

14134,hapticreel

14138,vermithrax

14140,cabbagetree

14143,snowflake91

14150,tvizzle88

14166,smilebob

14169,punisher

14173,virt4321

14185,meow

14202,bunnyrabbit3

14204,fatarcher

14210,mavlito

14215,darthvader

14217,kanets2

14232,spliffy420

14245,neb11

14247,zidane99

14278,esc0bare

14284,mrsimmer100

14287,coffeeblack

14292,redone1

14296,joejackson19

14300,mybuyguy2

14305,scootie2

14313,jezisjevzkri

14315,pollyanna99

14326,ata100t

14366,trampdyna

14398,atxrebel

14400,twilightprin

14403,quedlo

14411,traumarked

14415,spyguymarket

14417,ganjaman

14437,tkolts

14446,bowser

14456,shablam123

14475,bigrat2

14486,d537719

14509,icarus212121

14512,dabbb1

14525,bobdylan21

14541,sdfseg32tg2

14543,saber45

14554,diminion

14562,matix22

14566,millionaires

14567,markymark102

14576,dimon114

14580,pillpig

14585,aznlova

14587,qstrong

14596,junipergreen

14601,bruda372_

14604,mikejonas

14605,omega06

14617,jimmybuffet

14625,shrodinger

14629,gratuity

14653,davematthews

14655,jonesy63au

14661,jimbojones29

14662,4ncb

14667,arthur

14678,greengo420

14699,heaviside

14702,jabb3rwock

14716,trainwreck

14724,blackcodedog

14725,colin1

14730,yellow43

14731,marvel

14759,theheard

14762,dudeguymanpe

14769,sdgsdf

14770,paulwalker

14804,helper77777

14818,stinkybudz

14820,rexthecat

14821,jblaze

14837,badpacers

14841,mediamonkey

14844,rogalach

14845,calvin

14853,hell0

14860,shakur6pack

14875,ace619

14877,l2h2k

14883,1surg

14889,quakez

14891,lanochen

14896,silentworker

14898,grineflip

14902,luxornight

14920,krauch

14926,iknes

14985,zazoo

14986,olpalk

14990,georgeb

15002,marketman1

15005,anon7869

15011,hubihubsn

15020,septaflyer

15023,ogcorleone

15027,puntitot1

15034,harbinger168

15041,psytrance

15048,eris

15093,b13q7tey6qe3

15095,waid123

15099,pedroc5123

15112,holygrail

15121,goliat

15143,nyymi

15158,federalhero

15168,undecylic

15169,salimmk

15171,ninjadab

15182,king2000

15186,mrp

15191,strainhunter

15206,e0n

15222,senior

15237,boxn2

15255,majschmidt

15256,yuyi

15270,dreamchild

15274,dutchy

15280,mangohedgeho

15295,rezin

15296,q77uvctj

15298,smartbuyer

15317,wesmantoothh

15322,qplabr

15323,hakunamatada

15324,undergroundd

15325,ljqaq

15342,dmad

15384,qwerty123

15395,thebear

15398,formula22

15425,quickben

15426,wahamann

15439,somethingveg

15446,blkmn

15457,pinotgrigio

15472,captainpanic

15476,pineapples

15489,notrelluf

15490,ragnar

15493,wonkachole

15501,demeter

15525,neversummer

15529,lilbooseyfan

15533,h3xagon

15547,mindbender

15576,papabear

15584,1berty

15590,dickvanhinte

15594,freed

15600,walterwhitej

15613,darkdweller

15616,greatbig

15642,fiatxu454

15650,snoww

15653,craftypie

15683,cornelius23

15690,thesumofallb

15712,dolby23

15714,blank2052

15722,theaaaconnec

15739,rawrang

15747,gundy0101

15748,tracy

15755,beams

15758,bigenus

15759,zany88

15763,givemeoil420

15772,yimmy

15799,chopinnuun1

15804,happymerry

15818,looksaround

15832,hellojava

15836,smackdown

15853,liquid

15864,thefist

15867,wickedwitch6

15890,drhellokitty

15910,maryann

15920,viciousbiscuit

15951,auston

15953,crazyb

15955,charlesfarle

15961,laksmi

15984,9bibby

15986,wuzups

15995,ryobie9

15997,stickyman

16001,trainmaster

16035,bilb0

16047,st00sh1e

16054,djaybjay

16055,neverbeenbetter

16057,ronfuckingsw

16075,wanteddetnaw

16080,baang

16082,gr_

16084,seziertier

16095,seadragon

16098,g_

16098,god

16111,namekevo

16119,keram

16123,raigen

16126,carlex

16152,brudes1

16158,rhodjab

16160,mrx8552

16168,mrinnocent

16174,trancemaster

16175,sweatywookie

16183,arjuna

16204,charvo95

16206,caraboulou

16216,penguin1

16218,importsbrasi

16224,james69

16225,inspectahdeck

16235,stevo1234

16237,poizulimo

16250,hansopel

16257,herbalking

16279,kbdhro

16280,sleesh

16282,whitefish000

16288,arraki_

16294,muffyduffy1984

16303,ericcartman

16322,acervol

16331,farmhand

16343,mushinmusa

16369,alliwantisso

16377,nfw91

16397,wholebuy

16401,ezio14

16417,icansee

16429,feodorbelved

16466,pilotflying

16470,ooopdcbza

16473,boboav

16474,ggl3000

16477,misfits69

16485,rodneybusine

16490,nope

16492,3zero

16512,jonathanpric

16525,theotherguy

16528,trit

16536,gjchjr

16551,ab_

16557,snaprabbit

16579,jdjdjd

16587,jeffast

16589,libertadhoy

16603,fermion

16610,mickeymantle

16611,felsad

16643,flip36

16689,style2121

16700,taronga

16704,voracious

16718,youngmorpheu

16720,salvo77

16721,dosethrasher612

16724,upthecreek

16759,icq

16771,circussam

16792,caloway

16794,buxton

16830,livefree

16839,o0rainman0o

16858,darkstar7736

16867,paploo07

16878,kinghappy

16884,niggaz

16884,_

16892,sonabe

16908,coffeetime04

16931,sugarfree

16934,gesundheit

16938,beerman

16986,strings999

16994,dima88

16998,tampico

16999,carlosbrindi

17034,spider

17057,nickel

17064,lojin99

17066,sottodue

17095,ch3dd3rdr4g0

17100,jdobie

17106,barry21

17111,salma6

17122,transactor

17145,antoine

17146,bobtastic

17150,heroin666

17166,sennzy

17167,chickenwings

17172,raskolnikov

17175,tedblanders

17212,thedude

17214,thefunkybunc

17233,marketface20

17237,thewineohs

17251,ketchup1000

17254,soulpatch141

17265,skzap

17270,senordingdon

17277,m4lk4v14n

17288,zhangxuelian

17308,fostershome4

17319,larsiboy13

17330,glowtape

17343,supertramp

17352,ableapp1

17367,kermitthetoad

17371,dadieoo

17396,smokedoutsun

17415,ilovewater

17424,inri1010

17435,kak1828

17440,happyhippy

17446,trip78

17463,crummytits

17472,ninjaslipper

17474,rockybalboa7

17479,whowhatwhere

17491,sargas93

17494,joshdavey

17496,eric2267

17517,zeq8nxwn

17536,iigivegoodre

17574,coreyi7

17603,brucious

17613,eaststand

17621,mrbojangles

17631,rachet

17638,pansymansy

17639,jumpinforseals

17664,lazerbeam

17687,iaminnocent

17692,chattylego

17697,whitewallet

17709,cheego

17719,inpetus

17725,6singfried6

17751,xotillweover

17761,gardenhose

17773,tolly37

17781,lake1212

17786,nanjazz25

17812,sunshadow4

17815,3juanvaldez

17829,fishscale

17831,kollasx

17843,endymion

17851,fnordle

17862,s0wl

17863,81kaisa81

17879,oaxacan

17881,lakshmi

17883,memorylane

17884,usserioummer

17887,desnudito

17887,d_

17893,toxinld

17899,moosdagoose

17902,bobby178

17917,oklol

17971,lakomka

17983,marley91

17984,cogeneration

17989,mightyreal

18017,funkytown7

18022,xtcking

18026,singularity

18033,toxicmadhatt

18034,cloudsof

18047,colforbin

18048,dmtbliss

18073,soupsuser

18113,pingpong99

18152,medibird

18157,pooter

18171,wvwnl

18189,lawnmower

18190,h0ll0wfry

18210,multitox

18232,unn4m3d

18245,sanostrike

18256,gotfried

18274,killareese1

18285,mrmutto

18292,gameristo

18307,liveaction86

18308,roxas50

18336,sunflowersin

18356,shineforever

18373,finite

18419,marialionza

18425,rainbain

18426,d4fre2fmxn

18441,dah38esi

18461,tkkg

18466,physicalhatr

18521,rackyrule

18547,bum85

18560,_

18578,xyz001

18585,itistruth

18613,gunakiktomar

18620,xelab2

18627,aliasof1

18636,bitcoinsboi

18650,mdfrankie

18655,wooly8

18661,mx876

18666,bobdavis33

18669,sampson

18674,adamaisha

18703,grungygringo

18712,iqvirus

18719,larrythefalc

18730,jk4477

18739,thefinn

18754,weedman2013

18763,rezat

18785,greenfish

18795,james546

18824,suavalava

18844,happywanderi

18845,rline

18870,yp1445

18908,bee

18909,alibrite

18914,bigbee69

18918,toeknee

18934,teeveestar

18935,beaconofgod

18969,trachta

18987,dexguy20

19016,milton

19020,cain1919

19037,manasek

19046,crazybobmarley

19058,ketaminekier

19075,poiuytrewq

19079,berrabus

19080,gtiv

19082,elephant

19091,kingsizesilv

19124,derekderek

19137,mensget

19139,grasssea

19151,rgodo26

19152,b5x44

19153,bertandernie

19194,spacetravele

19204,fannybaws11

19206,sh0p

19218,crepuscular

19240,noly

19246,anaccount

19253,highasakite

19255,martinus91

19285,betelgeidze

**Should I be worried?**Well let us put this forward as a simple notion. All of the above was gathered without us resorting to fancy tricky or advanced web hacks or 0-day exploits, it was something most clearnet websites run in an automated test and don't expect to find it to pull anything. It is so simple I could actually teach the masses (very easily) how to conduct their own data gathering using some of the techniques we used and still we haven't even explored the more advanced ones as we know we already have the information in front of us. This kind of attack shouldn't even work against the most primitive database driven systems, let alone an online black market and absolutely anyone can do it. If law enforcement are watching I would have no doubt they found this long before us.

The observant among you have noticed by now we haven't exposed addresses yet that is on the database table above - I trust I don't need to dox somebody to prove my point right now and so I won't be posting any dox and nor shall I ever, we deleted that information from our records when we saw it as it is outrageous. We tested TorMarket and found yes there is javascript on the page and sometimes it refuses to accept plaintext addresses, but the fact there are plaintext addresses in that database only concludes it is not effective at filtering addresses and in my opinion decreases security by taking the responsibility away from the user - the alternate explanation of this is that plaintext addresses are being kept as well as an encrypted form which is presented to vendors but the whole topic of saving addresses I won't delve in to further.

Do we have more data than the above? Yes. Significantly more, but I will only do harm by publishing more so I will leave this case study with you, the users of Tor and our spectators, do you believe that Tormarket has a secure codebase, or is it just another claim like the many others who have a "secure" reputation because they just haven't been hacked yet.

Dread Pirate Roberts