News for hackers. Stuff that matters.
Re:FBI raids alleged online drug market Silk Road, arrests o... by AJ007 on Wednesday October 02, 2013 @01:50PM (#6484036)
Starting on page 24,

1) Located the first reference to "silk road" on the internet. You can find this yourself on Google: "silk road" site:shroomery.org Date range: Jan 1,2011 - Jan 31,2011 *

2) The same username, "altoid", showed up on a bitcointalk days later.

3) Later in 2011 "altoid" made a post on bitcointalk with his email address, containing his real name, in it: https://bitcointalk.org/index.php?topic=47811.msg568744#msg5... If you search the name on Google it doesn't show up, but if you look at the user's page you can see it in his posts.

That seems like more than enough for a warrant for this individual. Everything after that should be easy.

I've used Google before to locate when a particular word or phrase first appeared. Kind of surprising someone didn't figure this one out quicker.

* Obviously this is a common word, so either adding other keywords with it would be likely.

Re:FBI raids alleged online drug market Silk Road, arrests o... by dlss on Wednesday October 02, 2013 @04:27PM (#6485122)
This does seem plausible, so I almost don't think this is worth mentioning, but don't forget about "parallel construction".

Having the world believe they can't reverse Tor would clearly be more valuable than having the world believe they can. Remember that Tor explicitly doesn't protect against a global passive adversary.

Re:FBI raids alleged online drug market Silk Road, arrests o... by deathhand on Wednesday October 02, 2013 @06:03PM (#6485713)
1984 wasn't supposed to be a manual god damn it! (This is how the main character was caught. He believed in a 'alternative' system. Much like how we like to pretend TOR is untouchable)
Re:FBI raids alleged online drug market Silk Road, arrests o... by VMG on Wednesday October 02, 2013 @06:20PM (#6485822)
this has nothing to do with 1984 -- DPR was very sloppy, this is an indication that TOR works.

I'm betting a dozen entrepreneurs are looking at this right now thinking "I can do this better" and are designing their systems as this is happening.

Re:FBI raids alleged online drug market Silk Road, arrests o... by mindcrime on Wednesday October 02, 2013 @07:58PM (#6486273)
That's what they want you to think, so they can snare you in their FBI ran honeypot...

All joking aside, I hope you're right, and that the next few SR alternative sites figure out how to get it right, and that Tor itself isn't fundamentally broken by the FBI.

Re:FBI raids alleged online drug market Silk Road, arrests o... by bigiain on Wednesday October 02, 2013 @09:03PM (#6486471)
Agreed - I'd like to think both this, and the Lavabit being coerced to hand over private SSL keys news elsewhere today - indicates that TOR and SSL are still "as secure as needed" against even targeted FBI attacks.

Unfortunately that all now needs to be viewed with the suspicion of "parallel reconstruction" - I'm somewhat less convinced that if the NSA targeted someone specific that SSL and TOR would resist their efforts (and that for something like Silk Road, that the NSA wouldn't happily break and read everything DPR did over his SSL secured TOR connections, and "share" just the right tidbits with the FBI for them to go and create a plausible explanation involving google searches and old forum posts).

Welcome to the post Snowden era - where we know that our governments not only don't have our best interests in mind, but have sophisticated programs in place to lie to us about how they arrive at the evidence they present (in those annoying occasions where they have to use courts who aren't just rubber-stamping everything they're told too).

(Edit: on reflection, it's kinda sad that this might well have been good detective work by diligent, talented, and persistent FBI investigators doing exactly what he taxpayer employs them to do - but that effort is now permanently under the dark cloud of suspicion of unconstitutional dragnet surveillance and morally corrupt processes like "parallel reconstruction".)

Re:FBI raids alleged online drug market Silk Road, arrests o... by VMG on Thursday October 03, 2013 @04:23AM (#6487746)
The question is - what was the service provided by Silk Road at the end of the day, and what can be decentralized?

The trust and review system, the search engine and the communication platform can all run independently and don't need to happen on the same platform.

The web interface can be provided by an open-source turn-key package, so the next DPRs only need to figure out the hosting.

Re:FBI raids alleged online drug market Silk Road, arrests o... by ledge on Thursday October 03, 2013 @05:47AM (#6487936)
The escrow system was probably the most critical service that SR provided. Unfortunately that seems to require a centralized model.
Re:FBI raids alleged online drug market Silk Road, arrests o... by butler14 on Wednesday October 02, 2013 @06:41PM (#6485925)
exactly what i was thinking, the amount of work involved despite some pretty horrendous slip-ups, implies TOR + basic common sense can be a pretty powerful thing
Re:FBI raids alleged online drug market Silk Road, arrests o... by debaserab2 on Thursday October 03, 2013 @01:28AM (#6487357)
In principle I agree with what you're saying, but I think it's harder than you realize to maintain basic common sense all the time. People do irrational things, all the time. Even the normal ones.
Re:FBI raids alleged online drug market Silk Road, arrests o... by XorNot on Thursday October 03, 2013 @03:14AM (#6487568)
Also anyone talking about it here on HackerNews is already failing at it.
Re:FBI raids alleged online drug market Silk Road, arrests o... by makomk on Thursday October 03, 2013 @04:11PM (#6491646)
Meh. The FBI and DEA can investigate my Silk Road seller account all they want and they won't find anything interesting.
Re:FBI raids alleged online drug market Silk Road, arrests o... by deathhand on Friday October 04, 2013 @04:07PM (#6497607)
Re:FBI raids alleged online drug market Silk Road, arrests o... by ramchip on Thursday October 03, 2013 @06:26AM (#6488014)
> Much like how we like to pretend TOR is untouchable

Who are you talking about? Everywhere I look people are saying tor is certainly broken, the NSA is watching us, etc.

Re:FBI raids alleged online drug market Silk Road, arrests o... by pyre on Wednesday October 02, 2013 @04:50PM (#6485283)
We don't know that any "parallel construction" is at work here. It seems like most of the information stemmed from the discovery of the Silk Road web server, and I haven't seen how they were able to determine that. If this goes to trial, then the FBI will have to say how it got that information (assuming he has a competent defense team).
Re:FBI raids alleged online drug market Silk Road, arrests o... by princess3000 on Wednesday October 02, 2013 @06:18PM (#6485803)
That's the thing though. We know that as of very recently the NSA is helping other alphabet agencies construct cases in parallel. If you knew the guy's name or handle or whatever information the NSA could have given the FBI then coming up with an alternate story of how they ID'd the guy (page 24 onwards in the criminal complaint) would be incredibly easy. The point is that we'll probably never know either way.
Re:FBI raids alleged online drug market Silk Road, arrests o... by mculp on Wednesday October 02, 2013 @05:37PM (#6485563)
The point of parallel construction is that we don't know that it's at work.
Re:FBI raids alleged online drug market Silk Road, arrests o... by frank_boyd on Thursday October 03, 2013 @02:39AM (#6487514)
True, and the next Silk Road owner will certainly take that point into account.

Obviously, the disappearance of such a site leaves a gaping hole on the Web:

Silk Road has proven that the demand/market is there, that people are willing to use the Web to acquire those goods, that they are willing to pay, that the whole transaction works and that this leads to a massive amount of cash.

So, make no mistake, the next Silk Road creator is certainly out there, probably technically more astute and careful, and already building.

Re:FBI raids alleged online drug market Silk Road, arrests o... by rolux on Thursday October 03, 2013 @04:11AM (#6487714)
The next Silk Road owner will call himself the "CEO" of his operation and won't do an interview with Forbes, but an AMA on Reddit. Strange times.

http://www.reddit.com/r/IAmA/comments/1fwi48/im_the_ceo_of_a...

Re:FBI raids alleged online drug market Silk Road, arrests o... by frank_boyd on Thursday October 03, 2013 @04:17AM (#6487726)
> Q: How do you rate yourself compared to the road?

> A: The road has more users, but our service is better (to put it bluntly).

> [...] We have automated PGP encryption of messages for the members who refuse to send their messages using PGP.

Ouch.

Re:FBI raids alleged online drug market Silk Road, arrests o... by rdl on Thursday October 03, 2013 @06:33AM (#6488037)
Atlantis is pretty widely known to be either a honeypot or a scam.

Black Market Reloaded is the odds-on favorite to be the new Silk Road.

Drugs are bad, mm'kay?

Re:FBI raids alleged online drug market Silk Road, arrests o... by jessaustin on Thursday October 03, 2013 @09:03PM (#6493156)
...the next Silk Road creator is certainly out there, probably technically more astute and careful...

And almost as certainly: more experienced in the use of serious violence. The next guy won't be hiring hitters without introductions from fellow violent criminals. (Not that undercover cops have never been vouched for in such a manner, but it raises the stakes significantly.) Yay Drug War!

Re:FBI raids alleged online drug market Silk Road, arrests o... by pyre on Wednesday October 02, 2013 @07:00PM (#6486019)
If they used parallel construction, then why didn't they list how they got the information about the location/IP of the Silk Road webserver? I would assume that they would have ParallelConstruction'd a reasonable way for them to have obtained that information, no?
Re:FBI raids alleged online drug market Silk Road, arrests o... by vidarh on Wednesday October 02, 2013 @10:29PM (#6486747)
Why would they show their hand before they need to, and give more opportunities for poking holes in it?
Re:FBI raids alleged online drug market Silk Road, arrests o... by pyre on Thursday October 03, 2013 @01:15AM (#6487319)
Because they are legally obligated to 'show their hand' when the defendant's legal representative asks for it?
Re:FBI raids alleged online drug market Silk Road, arrests o... by deathanatos on Thursday October 03, 2013 @03:52AM (#6487673)
You appear to be missing the point of parallel construction. The point is that they show a true, but-not-the-whole-truth "hand" (the parallel construction) while obscuring the full truth. That is, you spy on someone, and obtain a bunch of evidence, either illegally or that is fruit of the poisonous tree. From that knowledge, you construct a (fictitious or only partially fictitious, but plausible) story about how you gathered enough evidence to incriminate your victim, without revealing that you came across this evidence illegally. See http://en.wikipedia.org/wiki/Parallel_construction.

Yes, they are legally obligated to not lie about the true means of how they came to have the evidence. But if nobody can prove you're lying, they can't call you on it.

Re:FBI raids alleged online drug market Silk Road, arrests o... by kanzure on Thursday October 03, 2013 @03:56AM (#6487682)
Gee, parallel construction sounds an awful lot like money laundering except with my bytes. :|
Re:FBI raids alleged online drug market Silk Road, arrests o... by bradleyjg on Thursday October 03, 2013 @05:46PM (#6492345)
Few cases make it to trial, especially in the federal system. He's been charged with at least two capital eligible charges. They'll offer to plead down to life in prision (or 100+ years same difference) and he'll take it. We'll never see the government's full case.
Re:FBI raids alleged online drug market Silk Road, arrests o... by ig1 on Wednesday October 02, 2013 @06:53PM (#6485979)
It's already known that they have attacks against Tor (i.e. Flying Pig)
Re:FBI raids alleged online drug market Silk Road, arrests o... by rayiner on Wednesday October 02, 2013 @02:55PM (#6484445)
From the GP: "If that's the case, it betrays a level of capability that ought to be frightening for the operators of other anonymous Tor services."

Google searches and reading some public forum threads... Staggering sophistication!

Re:FBI raids alleged online drug market Silk Road, arrests o... by zaroth on Wednesday October 02, 2013 @10:16PM (#6486723)
Seems likely to me that NSA found the server and imaged it. FBI's job was pretty easy after that.

Someone asking for help on the bitcointalk forum for a new venture? Happens almost daily. Someone asking a question on SO about how to access Tor? Ditto.

You don't discover who "Dread Pirate Roberts" is from this. But you do discover these types of things pretty easily AFTER the NSA tells you who DPR is.

Re:FBI raids alleged online drug market Silk Road, arrests o... by davmre on Wednesday October 02, 2013 @04:31PM (#6485148)
The Google searches give a hint at DPR's identity. They don't give you the location of the actual Silk Road server.

Obviously there's lots of ways that guessing DPR's identity might allow someone with the FBI's resources to unmask the Silk Road server, though I don't know enough to know whether the forum post on its own would be considered sufficient evidence for a warrant to bug all of Ross Ulbricht's online activities. A lot of the more damning evidence for Ross Ulbricht as DPR (IP logs, the connection to the counterfeit documents, hostname of his personal machine, etc) seems to come from forensics on the captured server image. Analysis of Tor traffic doesn't seem like an implausible hypothesis, especially because that's a capability we'd be expecting the FBI/NSA to be developing anyway.

Re:FBI raids alleged online drug market Silk Road, arrests o... by jawr on Thursday October 03, 2013 @06:08AM (#6487978)
Reminds me of the recent South Park episode on the NSA/public privacy.
Re:FBI raids alleged online drug market Silk Road, arrests o... by mcosta on Wednesday October 02, 2013 @02:30PM (#6484299)
> 3) Later in 2011 "altoid" made a post on bitcointalk with his email address, containing his real name, in it: https://bitcointalk.org/index.php?topic=47811.msg568744#msg5.... If you search the name on Google it doesn't show up, but if you look at the user's page you can see it in his posts.

And a few post below someone says:

> I'm interested Ross

Spy film discretion here.

Re:FBI raids alleged online drug market Silk Road, arrests o... by zaroth on Wednesday October 02, 2013 @02:39PM (#6484348)
Umm... that reply was posted TODAY, not back in October 2011.
Re:FBI raids alleged online drug market Silk Road, arrests o... by pyre on Wednesday October 02, 2013 @05:08PM (#6485401)
To be fair, someone back in October 2011 could have made that comment too, as his name was in the email address that he gave.
Re:FBI raids alleged online drug market Silk Road, arrests o... by fnordfnordfnord on Wednesday October 02, 2013 @02:46PM (#6484386)
>And a few post below someone says: >> I'm interested Ross >Spy film discretion here.

That post was made today.

Re:FBI raids alleged online drug market Silk Road, arrests o... by leokun on Wednesday October 02, 2013 @02:06PM (#6484146)
That's not enough for a warrant. No way, I don't believe it.
Re:FBI raids alleged online drug market Silk Road, arrests o... by rollo_tommasi on Wednesday October 02, 2013 @02:51PM (#6484423)
It is definitely enough to have CBP flag any packages crossing the border that are associated with that name, for which no warrant is required. After that, well, I'm no lawyer, but I think intercepting a package full of fake IDs is enough to justify a broader criminal investigation.
Re:FBI raids alleged online drug market Silk Road, arrests o... by bcrescimanno on Wednesday October 02, 2013 @02:19PM (#6484212)
Alone, no. Read the 10 pages of corroborating evidence following these initial steps and there's definitely enough for a warrant.
Re:FBI raids alleged online drug market Silk Road, arrests o... by mpyne on Wednesday October 02, 2013 @03:03PM (#6484507)
A warrant for search and seizure of his computers and everything in his apartment? Probably not.

A warrant to keep "pulling the string", issuing subpoenas, and compelling production of evidence from those who might have it? Absolutely!

Re:FBI raids alleged online drug market Silk Road, arrests o... by AJ007 on Wednesday October 02, 2013 @04:30PM (#6485141)
What is the cut off for using pseudonyms on obtaining a warrant?

I assumed bitcointalk had a small member base when "altoid" joined. A quick look at their tables show 3,694 total new registered users through January 2011.

"altoid" registered on shroomery on January 27th 2011 and the "altoid" who revealed his name publicly registered on bitcointalk on January 29th 2011.

Re:FBI raids alleged online drug market Silk Road, arrests o... by tedks on Wednesday October 02, 2013 @05:34PM (#6485550)
It's definitely enough to ask Google, and possibly his bank or credit card company (to see if he bought any servers recently).
Re:FBI raids alleged online drug market Silk Road, arrests o... by nazgulnarsil on Wednesday October 02, 2013 @02:31PM (#6484306)
adorable.
Re:FBI raids alleged online drug market Silk Road, arrests o... by hisabness on Wednesday October 02, 2013 @06:34PM (#6485897)
is there anyway to prove that the post in the forum occurred when alleged?