Please Scroll Down to See Forums Below
napsgear
genezapharmateuticals
domestic-supply
puritysourcelabs
UGL OZ
UGFREAK
napsgeargenezapharmateuticals domestic-supplypuritysourcelabsUGL OZUGFREAK

security article, good one

cgtnaeb

New member
Great Article On Security!!!
Tips For Secruity On The Net. Everyone Should Read!
SECURITY ON THE INTERNET


Often overlooked, and never well respected, personal privacy and security is of utmost importance to our community. We as a bodybuilding community are a bit outside the bounds of current main stream thought and law. Operating outside these bounds puts us under ever increasing scrutiny by DEA and other law enforcement officials. Because I am a firm believer that anabolic steroids pose no more social and health problems than any other over the counter or prescription drugs, I am writing this article to hopefully help both buyers, sellers, and everyone in between keep your identity a secret on the net. Without an identity you can never be caught!! Remember this and take it very seriously. Whereas nothing is foolproof, I am not claiming to know everything or guaranteeing you secrecy of your identity. I do know a lot, and I stay current on encryption techniques. So here we go:

YOUR COMPUTER

First step in keeping your identity a secret is to mask your real IP address. An IP address is a number assigned to each computer on the net. Your IP is given to you by your ISP. Usually it is changed every few months by your ISP. This number can identity you very easily. If an agent had your IP he could easily have the billing info in a matter if minutes from your ISP. Two easy websites to mask your IP are www. anonymizer.com and http://www.megaproxy.com./ Megaproxy is 100% free. Another way to permanently hide your IP for free is http://www.multiproxy.org/ which provides a small program to mask your IP. Now for most of you this is probably as far as you would go, but I would go much further. Using the services I just described you do hide your IP from websites you visit, but your ISP still knows where you’re going and what you’re doing. ISP’s are required to report suspicious activity to the government. Besides what your ISP may voluntarily give to the government, you have to now worry about Carnivore. Carnivore is the governments program that runs on your Email and ISP servers reading emails, communications, websites, and more looking for key words. Once certain key words are found (Like DECA, KETAMINE, EXTACY) you are reported for further investigation. So how do you view the web without your ISP knowing where you’re going? It’s called SSH Tunneling. SSH Tunneling allows your computer to securely connect to a proxy server over an encrypted connection. All your HTTP (web) traffic is routed over port 22 so all your ISP can see is that encrypted traffic is running over port 22 from your computer. This connection is unbreakable even by the most sophisticated computers in the world. Carnivore is therefore useless, and so is any eavesdropping from your ISP. SSH is generally a paid for service, and can be bought and setup through http://www.anonymizer.com./ To get your SSH software I suggest getting it for free at http://www.ssh.com/ (non commercial version) instead of paying for anonymizer’s version. Anonymizer is unique in that they set up there systems so that logged in users cannot be associated with what web traffic they’ve looked at. This is to ensure that even with a court order no identification is possible. Using an SSH connection will ensure your IP address and web sites you view will be private to only you. Now that you know how to hide your IP, do you know how to hide info on your computer? I suggest PGP Corporate Desktop 7.1 with disk encryption. You can do a simple search on Yahoo and find a working copy. Once you have this software installed setup an encrypted disk to keep all those incriminating files you have in. Once the disk is created it will be protected by unbreakable encryption that you will need a password to get into. Another neat aspect of this software is it allows you to truly erase files off your computer. The Wipe feature totally deletes incriminating files. In case you didn’t know simply deleting a file does not permanently erase a file, it is easily retrievable given the right software. Can you see how this PGP software keeps you safe just in case feds were to enter your home and take possession of your computer? Don’t forget PGP is the ultimate weapon in email too, but too complicated for most. Thank god for hushmail which I will talk about in a minute. One other suggestion is that you never input any real information about yourself into Windows. This information is very easily found. For instance when you first use windows it asks for your name. Don’t use your real info. Keep this in mind as windows asks for personal info. What may seem paranoid shouldn’t, this is a serious game we are all playing.

EMAIL

I’m secure right, I use Ziplip (http://www.ziplip.com/)? No!! Not unless you and the person you are sending to are both using ziplip and you are password protecting every message. Simply sending an email from ziplip is not secure! Let me repeat that again for the people who insist on using ziplip incorrectly. Simply sending an email from ziplip is not secure! Emails sitting on ziplips servers not password protected can easily be picked over by Carnivore or Ziplip employees. Now I am not saying ziplip is a bad service. It is in fact secure and safe if used correctly (still the issue of how to exchange passwords securely is a serious flaw in ziplip). Now since no one uses it correctly lets just give it up. Ok good job, we are all going to give ziplip up right? I hope so. Now on to real email, hands down HUSHMAIL (http://www.hushmail.com/) is leaps and bounds superior to ziplip. HUSHMAIL is secure end to end. Emails and attachments are secure without the need for a separate password as long as both parties are using HUSHMAIL. This takes all the guess work out of this. Emails won’t sit on the server unencryped for Carnivore, and hushmail employees cannot read them. It’s so simple a 5 yr. old could use it. It’s truly an amazing system. When HUSHMAIL first appeared there were rumors that it wasn’t secure at all, well Phil Zimrnerrnann was brought on as chief technology officer of HUSHMAIL. He is the creator of PGP, and would never put his reputation in the encryption community on the line for a shady company not living up to its promises. Phil’s commitment to the company gives me even more faith that HUSHMAIL is the premier email and web based encryption company on the net. Also another good feature of HUSHMAIL is that its subsidiaries http://www.cyber-rights.net,/ http://www.elitefitness.com,/ and http://www.keptprivate.net/ are all compatible with it. If you don’t like using hushmail, I suggest you learn to use PGP. Otherwise Carnivore is picking your emails for key words. How does it feel to be watched?

MONETARY TRANSACTIONS

Ok all sellers please read. What the hell are you doing taking money by mail from people you don’t know well?? Sellers should view every single customer as a fed until they have proven they are not. Are you going to give your address to a fed? Well how do you know you haven’t so far? How long would it take a fed to find out all the personal info on a PMB, PO Box, or Home Address? I would bet less than 10 minutes. I’ve never had any problems getting the real info using a PI even on a PMB. Then of course once the feds have your box they have it flagged, and for months packages are watched and let through then they’ve got ya. Ok so what’s the smart thing to do here? I would say lets start by not giving out our addresses to strangers. Instead payments should be made electronically. Simple and efficient. Only 5 companies make my cut http://www.evocash.com/ (I consider the best as cheapest fees), http://www.e-gold.com,/ http://www.e-bullion.com,/ western union, and moneygram. Reason for this is they are well backed, can be 100% anonymous, and safe. Evocash is my first choice as its fees are cheap, you are 100% anonymous with them, and they do not cooperate with law enforcement agencies as they are offshore and out of US jurisdiction. Sellers I know you are reluctant to make your customers use these services, because they are resistant to change and may take their business elsewhere, but if all sources go to these methods we will all be safer. Buyers, when a seller won’t let you to pay by mail remember they will be around longer and less likely to get busted taking your guys money with them.

Hope most of you find this article of use. Email if you have any questions.
 
cgtnaeb said:
First step in keeping your identity a secret is to mask your real IP address.
While I won't disagree. Doing this is very annoying. Running through a proxy means you have to route all traffic through the proxy. This can drastically slow down your connection. BTW, people have found ways to track through anonymizer.com.

ISP’s are required to report suspicious activity to the government.
An ISP doesn't give a shit. They're in business to make money, not monitor thier customers. Most ISP's are very reluctant to work with law enforcement because it can be very damaging to thier business when/if it becomes public knowledge that they'll bend over and hand out private information at the drop of the hat. Unless you have an overly generous ISP, a warrant will be required for them to take any personal info or to monitor your connection. If the gov't can get a warrant, you most likely already screwed.

Carnivore is the governments program that runs on your Email and ISP servers reading emails, communications, websites, and more looking for key words. Once certain key words are found (Like DECA, KETAMINE, EXTACY) you are reported for further investigation.
I HIGHLY doubt carnivore scans for drug terms. Even assuming they did, do you really think big brother is going to come after someone because he sent an email to a source trying to purchase a couple hundred, or even a couple thousand dollars worth of gear? On top of that, details of carnivore are very secretive. Big brother won't ruin the details of thier system for even the largest dealers. While I'm not positive, I doubt the gov't can use any evidence they obtained from carnivore because they're peeping on supposedly private conversations, without a warrant.

So how do you view the web without your ISP knowing where you’re going? It’s called SSH Tunneling.
SSH tunneling to a server inside the USA, or a US friendly country means that the server could be monitored and you can still be screwed, albeit with a little inconvenience. Tunneling to a foriegn server introduces latencies which are highly unacceptable in my opinion.

Carnivore is therefore useless, and so is any eavesdropping from your ISP.
Technically a gov't agency could do traffic analysis and provide a pretty good case of what your doing. Although again, they wouldn't bother to waste thier resources on even large dealers.

I suggest PGP Corporate Desktop 7.1
Decent program, I used it for awhile. For those who are super paranoid, which this article targets, I'd recommend drive crypt plus pack (google search for drive crypt) which will encrypt the entire disk. TThe advantage here is that you'll be encrypting files that PGP disk wouldn't normally encrypt (i.e. slack space, temp files, browser histories, "deleted files", etc). This makes forensic examinations useless.

Won't argue with section although people need to realize that if they send email to someone without a hushmail account, it won't be encrypted.

MONETARY TRANSACTIONS
Seems logical to me. Not my area of expertise so I'll trust ya.

Hope most of you find this article of use. Email if you have any questions.
Overall good article. I just thought I could add/clarify a little info.

For most small time users, common sense and a little precaution is all you need. The gov't does not have the resources to go after the little guy. Unless you make it obvious, like international orders with poor packing or a domestic delivery with broken leaking amps, you should be pretty safe.

Btw, first person to post in this thread that evidence eliminator is a "great program" gets negative karma for being a retard.
 
daemon - excellent replies. Saved me a lot of time. ;)

The only other thing I'll add to that is the Ziplip part is incorrect. Ziplip went sent "secure" IS secure even when sending to another e-mail addy. The reason is you're not using the other e-mail addy's website anymore but rather ziplip as it takes you to the Ziplip website. Using an alpha-numeric password helps even more.

And hushmail is only secure when sending to addys using the hush encryption engine (ie elitefitness, cyber-rights.net, etc)
 
One thing though: How is Western Union anonymous? Don't you have to provide personal info (and an ID) to send money WU? Isn't that traceable?

-Spidey
 
Anything over like $900 or $1k. I forget the exact amount. Anything under does not require ID.
 
Top Bottom