News for hackers. Stuff that matters.
Re:FBI raids alleged online drug market Silk Road, arrests o... by bsullivan01 on Wednesday October 02, 2013 @11:58AM (#6483211)
If they want to get you, they will. Reading how they got him, but I wouldn't be surprised if NSA handed them the info informally and then the FBI had to find another way to justify it. When you know the end results, "connecting the dots" is much easier. Parallel construction http://uk.reuters.com/article/2013/08/05/us-dea-sod-idUKBRE9... and all.
Re:FBI raids alleged online drug market Silk Road, arrests o... by shazow on Wednesday October 02, 2013 @12:06PM (#6483286)
I'm not sure one way or the other, and while it's clear that Ulbright was fairly sloppy, there are a few instances of serendipity:

1. The agent randomly (?) stumbling on a LinkedIn profile which matched the timeline/description of the Silkroad project, which prompted to seek another unidentified agent which had all kinds of juicy deets on the suspect.

2. CBP intercepted a package addressed to Ulbright containing a bunch of counterfeit official documents during a "routine border search".

3. Found Tor/PHP/curl-related posts on Stackoverflow from his real name account, but also says he changed his name/email to a fake one. Did they happen to stumble on it before he changed his name? Or had some kind of access to an earlier archive? Or cooperation from Stackoverflow? Unclear.

I'll update more as I run into them. Super interesting read.

Still, it's clear that they've done a ton of research on Silkroad and DPR. The notes are thorough and accurate. A job well done.

Re:FBI raids alleged online drug market Silk Road, arrests o... by teebs on Wednesday October 02, 2013 @01:14PM (#6483782)
I think that the main slip-up was the use of the same account on BitcoinTalk to both promo SR and to post his personal Gmail account to try to hire Tor experts. Everything else listed above sounded like it either came chronologically after that discovery (the CBP intercept) or it was a result of that discovery (the StackOverflow and LinkedIn accounts)
Re:FBI raids alleged online drug market Silk Road, arrests o... by darkarmani on Wednesday October 02, 2013 @02:11PM (#6484173)
> 1. The agent randomly (?) stumbling on a LinkedIn profile which matched the timeline/description of the Silkroad project, which prompted to seek another unidentified agent which had all kinds of juicy deets on the suspect.

Sounds like parallel construction to give them a legal way to introduce evidence.

Re:FBI raids alleged online drug market Silk Road, arrests o... by maxander on Wednesday October 02, 2013 @02:49PM (#6484408)
I'd imagine the NSA has crawlers that can parse LinkedIn profiles enough to make good guesses on who is likely to be involved in hacking, criminal entrepreneurship, etc., and to pull out relevant dates and other indications of ideological shifts or large secret projects. Cross-reference with banking records to show when someone is unemployed for a long time and yet still has unexplained funds... DPR was probably on a reasonably short list.
Re:FBI raids alleged online drug market Silk Road, arrests o... by kutakbash on Wednesday October 02, 2013 @03:54PM (#6484828)
The curl part is also pretty shoddy btw. Would you really use curl to setup a server running behind TOR? I don't have adequate 'training and experience', but it seems natural that website working through TOR should use normal web server software behind some sort of reverse proxy, not curl. He, whoever, wrote that document, seems to imply that questions about curl and TOR network are necessarily connected with running a website through it. He also doesn't mention dates of the questions.
Re:FBI raids alleged online drug market Silk Road, arrests o... by makomk on Thursday October 03, 2013 @04:53PM (#6491965)
The curl code was probably for querying the latest exchange rates from Mt Gox. It's important he made sure those queries went out through TOR because otherwise they could be used to trace the Silk Road server.
Re:FBI raids alleged online drug market Silk Road, arrests o... by julien on Wednesday October 02, 2013 @03:43PM (#6484760)
The timeline is unclear... but it seems that they've had doubts about Ulbright for a very long time.
Re:FBI raids alleged online drug market Silk Road, arrests o... by untog on Wednesday October 02, 2013 @12:02PM (#6483247)
When you know the end results, "connecting the dots" is much easier.

True, but "connecting the dots" is much easier when it's your job, and something you've spent decades practicing.

Not to say that you're wrong, but there's no evidence to back you up. We might as well assume that the NSA is behind everything, ever.

Re:FBI raids alleged online drug market Silk Road, arrests o... by ctdonath on Wednesday October 02, 2013 @12:47PM (#6483616)
It occurs to me: a great tool of a "know everything" government is the ability to exclude dots, leaving the dots which merely need connecting. Just like the sculptor's aphorism "I just remove everything that isn't the subject, and there it is", a near-omniscient police force can address a crime by eliminating everyone it knows wasn't involved (by their near-continuous presence on metadata, cell tower triangulation, security cameras, etc.), eliminating everywhere it knows the remaining 'dots' couldn't have been, and eliminating every action it knows couldn't have been performed ... leaving a very limited "negative space" for the inferred suspects to operate in. A lot of data to mine, but given NSA-levels of awareness, NSA et al could respond (legally!) to requests for information with a vast list of who/what/where wasn't involved, leaving a conspicuous implication of the guilty.
Re:FBI raids alleged online drug market Silk Road, arrests o... by fleitz on Wednesday October 02, 2013 @01:01PM (#6483693)
Thats the general idea of police work, you start with everyone as a suspect and then use evidence to narrow it down.

It tends to work well from a prosecutorial POV as well because anyone who is accused by that process has little evidence to exclude them.

Re:FBI raids alleged online drug market Silk Road, arrests o... by ctdonath on Wednesday October 02, 2013 @07:36PM (#6486178)
General idea yes, but takes on new implications & scope when operating at NSA levels of universal surveillance exceeding police work by orders of magnitude of orders of magnitude.
Re:FBI raids alleged online drug market Silk Road, arrests o... by Larrikin on Wednesday October 02, 2013 @12:09PM (#6483316)
In this current age, its more likely that the NSA is behind it. We are at a point where we need evidence that the NSA didn't help.
Re:FBI raids alleged online drug market Silk Road, arrests o... by arjie on Wednesday October 02, 2013 @01:18PM (#6483811)
Ah, so the NSA's spying does have positive effects. It helped capture a drug king-pin who hires hitmen. I'd believed that dragnet capture of Internet traffic presents problems in trying to isolate relevant evidence, but you claim that this is not an issue.

This certainly bolsters the claim that the NSA's surveillance is doing society good. I'm not comfortable with that, but there it is.

Re:FBI raids alleged online drug market Silk Road, arrests o... by mikeryan on Wednesday October 02, 2013 @02:42PM (#6484363)
We are at a point where we need evidence that the NSA didn't help.

So we now have to prove a negative or the NSA did it? Logic has officially left the building.

Re:FBI raids alleged online drug market Silk Road, arrests o... by dubfan on Wednesday October 02, 2013 @12:25PM (#6483440)
Then at that point you are no better than 9/11 truthers and moon landing hoaxers.
Re:FBI raids alleged online drug market Silk Road, arrests o... by zero_intp on Wednesday October 02, 2013 @01:34PM (#6483923)
I see what you did there, Mr NSA.

No seriously, the whole parallel construction dialogue for NSA feeding DEA tips is exactly the situation suggested here. Why do you equate published journalism with hoaxes and factually devoid crazies. It is insulting to a fairly civil discussion.

Re:FBI raids alleged online drug market Silk Road, arrests o... by Larrikin on Wednesday October 02, 2013 @12:32PM (#6483489)
Theres no basis in reality for 9/11 truthers and moon landing hoaxers though
Re:FBI raids alleged online drug market Silk Road, arrests o... by fivethree on Wednesday October 02, 2013 @12:47PM (#6483613)
That's the point.
Re:FBI raids alleged online drug market Silk Road, arrests o... by intslack on Wednesday October 02, 2013 @02:52PM (#6484430)
Re:FBI raids alleged online drug market Silk Road, arrests o... by fivethree on Wednesday October 02, 2013 @05:53PM (#6485650)
Delusions of Grandeur aren't either.
Re:FBI raids alleged online drug market Silk Road, arrests o... by kevincennis on Wednesday October 02, 2013 @12:08PM (#6483299)
Not sure why this appears to have been downvoted. Seems like a pretty reasonable point, even if you happen not to agree with it.
Re:FBI raids alleged online drug market Silk Road, arrests o... by tedks on Wednesday October 02, 2013 @05:50PM (#6485629)
Well, we know the NSA is behind some things, or else it wouldn't exist.

We also know this is an incredibly high profile case. It's in the interests of the DEA and FBI to lean on their contacts in the NSA, even.

That said, the FBI is very good at what it does, and finding this sort of thing isn't just what the FBI does, it's what any investigator does. (I have personal experience with this area that I can't disclose, but trust me, everyone knows how to link usernames between websites.)

Re:FBI raids alleged online drug market Silk Road, arrests o... by bsullivan01 on Wednesday October 02, 2013 @12:15PM (#6483356)
First and foremost, I didn't state as a definite fact. The rest of your argument ...oh well.
Re:FBI raids alleged online drug market Silk Road, arrests o... by peregrine on Wednesday October 02, 2013 @12:34PM (#6483508)
The most interesting part was trying to decipher what was got cleanly and what was got with PRISM.

Stackoverflow is one not specifically mentioned as "obtained records from" just that those actions happened on stackoverflow. Non-public actions. Also why would stackoverflow keep a record about each username and email change, but not IP and access times? They never mentioned how he connected to SO or if he masked it. BUT they mentioned that in every other case.

Re:FBI raids alleged online drug market Silk Road, arrests o... by Aloisius on Wednesday October 02, 2013 @04:01PM (#6484904)
I imagine they had access to his gmail account and StackOverflow emailed him when he changed his account information. I would bet that the StackOverflow information came after they identified his gmail account (which had his full name in it!).
Re:FBI raids alleged online drug market Silk Road, arrests o... by Geee on Wednesday October 02, 2013 @03:15PM (#6484581)
He possibly had those actions on record in his Gmail account, in which they would have easy access to.
Re:FBI raids alleged online drug market Silk Road, arrests o... by driverdan on Wednesday October 02, 2013 @01:40PM (#6483963)
Had he not made some pretty amateur mistakes (like using his real email) he probably wouldn't have been caught. My guess is that email address is what lead to his downfall. Without a target the FBI wouldn't have much to investigate.