Dnia poniedziałek, 12 sierpnia 2013 00:24:34 CryptoFreak pisze:

On Aug 11, 2013, at 6:44 PM, rysiek wrote:

...

Dnia niedziela, 4 sierpnia 2013 14:12:53 Rich Jones pisze:

...

https://openwatch.net/i/200/anonymous-web-host-freedom-hosting-owner-arre ste d

Well, dang.

Also:

"We have analyzed the security properties of Tor hidden services and shown that attacks to deanonymize hidden services at a large scale are practically possible with only a moderate amount of resources. We have demonstrated that collecting the descriptors of all Tor hidden services is possible in approximately 2 days by spending less than USD 100 in Amazon EC2 resources. Running one or more guard nodes then allows an attacker to correlate hidden services to IP addresses using a primitive traffic analysis attack. Furthermore, we have shown that attackers can impact the availability and sample the popularity of arbitrary hidden services not under their control by selectively becoming their hidden service directories."

http://www.ieee-security.org/TC/SP2013/papers/4977a080.pdf

This is even more troubling, as apparently does not require any exploits.

While I'm certainly not saying "I don't buy it", how does this reconcile with the reality of The Silk Road still being in existance. One would think that governments would use these techniques against the site if for nothing more than to catch/punish them for all the tax evasion going on.

Yeah, that's a conundrum.

If this paper is true, the only reason I could think of why TSR is still alive is because it is some kind of government front, though there is no evidence of that at all.

Well, it can also simply be *used* as a government front. If they can monitor it without SR's consent (or knowledge), they do not need it to control it, do they... -- Pozdr rysiek

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 08/12/2013 02:06 PM, Ted Smith wrote:

Remember, TSR sends drugs *through the mail*. You can't successfully *mail* enough drugs for the NSA/DEA to care.

The NSA? Probably not, no. The DEA? Most definitely. Trafficking and shipping of drugs from point 'a' to points elsewhere are a part of their mission. I just thought of something: It's just come out that NSA intel is being given to other agencies, and classes are being held to launder that intel so that it looks like it came from somewhere else. How likely could it be that the DEA is one of those agencies? - -- The Doctor [412/724/301/703] [ZS] Developer, Project Byzantium: http://project-byzantium.org/ PGP: 0x807B17C1 / 7960 1CDC 85C9 0B63 8D9F DD89 3BD8 FF2B 807B 17C1 WWW: https://drwho.virtadpt.net/ "This time we're using four times the Kevlar." -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.20 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlILu4wACgkQO9j/K4B7F8Fj3QCeKOvFHKDbp4OcYlLF8eRI3vLX msIAnRcuGDKIc9m7YOhUCb/0fP/g6egL =NRGZ -----END PGP SIGNATURE-----

On Wed, 2013-08-14 at 13:27 -0400, Patrick wrote:

...

Remember, TSR sends drugs *through the mail*. You can't successfully *mail* enough drugs for the NSA/DEA to care.

All estimates point to tens of millions of dollars in business per year. Do you think the estimates are off or that that's still too low?

That's distributed over all the users. The site is making a killing, but the individual deals and dealers are all way too small-fry for any three-letter agency to care.

On Wed, Aug 14, 2013 at 1:17 PM, The Doctor wrote: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

On 08/12/2013 02:06 PM, Ted Smith wrote:

> Remember, TSR sends drugs *through the mail*. You can't > successfully *mail* enough drugs for the NSA/DEA to care.

The NSA? Probably not, no. The DEA? Most definitely. Trafficking and shipping of drugs from point 'a' to points elsewhere are a part of their mission.

I just thought of something: It's just come out that NSA intel is being given to other agencies, and classes are being held to launder that intel so that it looks like it came from somewhere else. How likely could it be that the DEA is one of those agencies?

- -- The Doctor [412/724/301/703] [ZS] Developer, Project Byzantium: http://project-byzantium.org/

PGP: 0x807B17C1 / 7960 1CDC 85C9 0B63 8D9F DD89 3BD8 FF2B 807B 17C1 WWW: https://drwho.virtadpt.net/

"This time we're using four times the Kevlar."

-----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.20 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlILu4wACgkQO9j/K4B7F8Fj3QCeKOvFHKDbp4OcYlLF8eRI3vLX msIAnRcuGDKIc9m7YOhUCb/0fP/g6egL =NRGZ -----END PGP SIGNATURE-----

-- Sent from Ubuntu

...

...

Remember, TSR sends drugs *through the mail*. You can't successfully *mail* enough drugs for the NSA/DEA to care.

The NSA? Probably not, no. The DEA? Most definitely. Trafficking and shipping of drugs from point 'a' to points elsewhere are a part of their mission.

I like the idea of DEA's mission being traficking of drugs, well played, Sir. ;)

No, no, no, trafficking the drugs has traditionally been a CIA job.

From: "Ted Smith" To: cypherpunks@cpunks.org Sent: Monday, August 12, 2013 11:06:41 AM Subject: Re: Freedom Hosting Owner Arrested, Tormail Compromised, Malicious JS Discovered On Mon, 2013-08-12 at 10:30 +0200, rysiek wrote:

...

...

While I'm certainly not saying "I don't buy it", how does this reconcile with the reality of The Silk Road still being in existance. One would think that governments would use these techniques against the site if for nothing more than to catch/punish them for all the tax evasion going on.

...

Yeah, that's a conundrum.

No it isn't. The government agencies that could potentially attack Tor to bust the Silk Road would *never* care about the level of drugs moved through it. They care about the people multiple levels above TSR, drastically higher up in the supply chain.

Is there any evidence of this? From all appearances, they care about nothing so much as preserving and expanding their funding.

Remember, TSR sends drugs *through the mail*. You can't successfully *mail* enough drugs for the NSA/DEA to care.

NSA surely doesn't want the publicity, but the DEA is always in search of positive press. If they have to listen to 100K conversations in order to bust one kid, picking up a few hundred Oxycodone pills at the Post Office, is there any reason to suspect they wouldn't do so?