• 🇳🇿 🇲🇲 🇯🇵 🇨🇳 🇦🇺 🇦🇶 🇮🇳
    Australian & Asian
    Drug Discussion


    Welcome Guest!
    Posting Rules Bluelight Rules
  • AADD Moderators: Tronica

The Drug's in the Mail - The Silk Road and our very own Tronica!

Status
Not open for further replies.
BPhO-byCYAAix4f.jpg
 
Hopefully door to door anonymous delivery of anything you could dream of. (you cunts)
Maybe not straight away but maybe by the time all of us are old and wrinkly

I'm hoping for some kind of replicator device where you just supply the basic elements (carbon, hydrogen etc.) and it assembles those elements into whatever molecules you want. Would have to do some kind of hack to allow 'pirated' substances to be made on consumer device, and download the 'recipes' from the internets.

Don't think it'll be available in our lifetime unfortunately :( some pretty major hurdles to overcome before it's feasible or even possible.
 
I'm hoping for some kind of replicator device where you just supply the basic elements (carbon, hydrogen etc.) and it assembles those elements into whatever molecules you want. Would have to do some kind of hack to allow 'pirated' substances to be made on consumer device, and download the 'recipes' from the internets.

Don't think it'll be available in our lifetime unfortunately :( some pretty major hurdles to overcome before it's feasible or even possible.

Actually it will be available, not too many years away. 3D printing will change the whole drug situation IMHO: http://theweek.com/article/index/246091/can-you-3d-print-drugs
 
Of course, you can all believe what you like... but I don't see it as logical to blame westy for increased scrutiny on SR. LE have been highly aware and very much monitoring SR and sites like it for a long time, way before westy's 1st interview on 7:30 in December 2012. Actually in that episode of 7:30, there was an anonymous SR vendor who spoke on camera (voice changed, face shadowed) who was open about SR too. But there is no backlash against that person. By this logic, myself or anyone else who 'talks' at SR publicly is somehow responsible for LE cracking down on it. LE is doing it anyway... they will do whatever is technically possible to disrupt the site. The strength of SR and sites like it is in its capacity to withstand attacks and to remain difficult (impossible?) to take down.

In one of the many debates on the SR forums about publicity or no publicity, and how some people think that when SR gets publicity it makes it considerably more likely that they will get caught... one of the posters wrote a greater response about how if you are relying on your adversary's ignorance to protect you, you are already gone. +1 !
 
Security through obscurity has always been the worst form of security.

Then again, snitching has got to be the worst form of life out there.
 
id like to know who exactly Westy snitched on? SR is set up in such a way that the buyers are the vulnerable ones as the buyers are the ones who hand over their addresses and money to telative strangers for illicit products, Westy was a buyer who then sold on to small time consumers. The only leads LE would have had would be some postage stamp from the senders country which is hardly enough to bring down SR or any vendors. The only thing I see him being guilty of is stupidity.

have a look at pictures of him, he looks like a geeky kid, hardly a hardened criminal and more than likely he did it to feel special among his peers, from a nobody to the "go to guy".

This brings up an important point about SR. The average person doesn't have the connections or is too afraid to deal with the underbelly of society that generally go hand in hand when dealing with drugs. The unfortunate consequences of these endeavours involve the courts and jail time if caught and not everyone is prepared or capable of handling the outcome and are understandably shitting their pants. "it sounded like a good idea at the time" springs to mind.

To those screaming for retribution you can take this as you please, to me you sound like the 2 bit low life criminals the government and media loves to portray us as. Just druggy thugs.

Witch hunt anyone?

as Rick from The Young Ones said "I cant go to prison, im too pretty, ill get raped"
 
Last edited:
and I hope you realise that the amount of time we have spent discussing westy far outways the time the media spent on him. Time to move on dont you think?
 
Yeah I dont see it as snitching as far as I saw. But none of us no all the details and therefor shouldn't jump to any conclusions. I don't really care if he got paid for the tv things or not. People have been busted for using SR before westy and the ones I recall were just buyers who sold from their places, like westy. I doubt any more heat or crackdowns would or will come from him going on some shitty show. There must be loads of people still using it and having no issues, can't say I've read about any Aussie SR busts in the media in quite a while now.
 
and I hope you realise that the amount of time we have spent discussing westy far outways the time the media spent on him. Time to move on dont you think?
Yes, I agree.

Some more news about the Road and Atlantis:

Exposed: The dark side of the internet, where you can buy drugs, sex and indecent images - The Independent, UK. 21 July 2013


It has all the hallmarks of a drugs turf war. The don is under threat, wounded by a series of attacks, with key players swapping sides and prices undercut by a hungry young rival. He lashes back: the newcomer “gets no respect from me” and the dealers watch carefully for shifts in power.

This, however, is not a battle fought with weapons on street corners. The fight is for ownership of one of the darkest corners of the internet, where high-grade drugs at street-level prices are available at the click of the button.

After more than two years of undisputed leadership, Silk Road – the one-stop shop for drugs, porn and dodgy documents described as an “amoral eBay” – is facing a challenge from a rival hungry for a slice of its multimillion-pound revenues. Established in 2011 by a shadowy founder known as Dread Pirate Roberts, Silk Road has been a business success story. It has provided anonymity to its users and sellers on a sub-layer of the internet unreachable by normal search engines such as Google.

Now a new start-up, Atlantis, has copied many of its features but changed the rules with an unexpectedly public promotional campaign and financial incentives to dealers to switch to its marketplace.

Founded by libertarian activists with backgrounds in business, technology and drug dealing, Atlantis stepped up its offering last month with a YouTube advertising campaign and a question and answer session with its anonymous chief executive officer. The advert – featuring an animated figure called Charlie the stoner – led to rapid growth with 500 sign-ups a day and 50,000 registered users, according to a senior figure at Atlantis, “Heisenberg2.0”, in response to a series of questions from The Independent on Sunday. Among its selling points: next-day delivery, no hidden fees and an “eBay-style feedback system”.

“If we continue growing at the pace we are now we will be bigger than Silk Road this time next year, but we are playing the long game and know a lot will change in the world around us between now and then,” said Heisenberg2.0. “Maybe when the world’s leaders are ready to give up the prohibition game we will be ready to come out of the shadows and help clean up the mess they made. In the meantime we are quite happy to operate outside of the current legal frameworks that exist.”

The site is set up like a typical online marketplace offering forgeries, porn, memorabilia, sports shirts and a deal to “buy” Twitter followers for the online narcissist. Items banned from sale include “anything related to paedophilia, poisons, loans, investment opportunities, assassination services or anything which can inflict harm on another person”.

But its staple is drugs. Though the sums represent a tiny fraction of the multibillion-pound global market, the sites represent an emerging threat to law enforcement and an end to the reliance on street-corner deals. High-grade cocaine with purity claimed at more than 80 per cent is sold at £65 a gramme, and shipped from Belgium. Average street price in the UK is £46 a gramme, according to the charity DrugScope, but for inferior purity.

“If people can become aware of being able to source cocaine of that purity ... then we will see a change,” said Allen Morgan, an expert witness and former police officer. “There’s definitely a market for high-grade cocaine among professionals, and people are fed up of getting ripped off with low-quality cocaine. I think we will see a seismic shift in the UK drugs market and it will take the police a long time to get a grip on this.”

Atlantis is just the latest example of anonymous online markets – offering illegal merchandise or services – which are beginning to prosper and proliferate. Only The Armory – which sold weapons – was scrapped, because of low sales. Operators use the cloaking anonymity of the Tor network – known as the hidden web – created by the US military and designed to hide the identity of users and sellers.

Nicolas Christin, of Carnegie Mellon University, who has studied Silk Road, says the proof of its success is the emergence of competition. “You don’t have to interact with shady characters, you just click on a few buttons and you get what you want in the mail,” he said. “Silk Road was always under the radar. Atlantis is very aggressively marketing itself. It’s a very different approach.”

Deals on Atlantis are done via encrypted software and paid for with cybercurrency, an internet cash equivalent. Sellers are encouraged to “creatively disguise” shipments as business mail, and vacuum-pack them to avoid sniffer-dog detection.

The identity of those behind Atlantis is a mystery, and Heisenberg2.0 declined to reveal even the nationality of its founders. The Serious Organised Crime Agency said it was “aware of the so-called ‘hidden’ areas of the internet, and has the capability to investigate organised criminal groups seeking to exploit them”.

Police have successfully targeted sellers on such sites. In April 2012, US authorities busted a secret drugs marketplace known as the Farmer’s Market, resulting in eight arrests in the US, the Netherlands and Colombia. Officials said the ring handled over $1m (£655,000) in drugs sales from 2007 to 2009. It had customers in every US state, and in 34 countries, according to court documents.

Peter Wood, the founder of the ethical hacking firm First Base Technologies, said breaking open the networks depended on identifying individuals, then seizing their computer equipment. “It’s a case of tricking the person into engaging with them to get access to a computer,” he said. “It’s the same sort of techniques as traditional police work, and conning the conmen.”

Global crime goes online

Organised gangs are increasingly switching from traditional crimes to cyber scams to tap lucrative new opportunities through the relative anonymity of the web, statistics showed this week – with a sharp rise in online crimes recorded in England and Wales.

The cracking of criminal rings involved in child sex abuse, fake credit cards and online drug sales have led to gangs going deeper into the so-called Darknet to avoid the law. The Child Exploitation and Online Protection Centre this month revealed its concern over the growing use of anonymous online encrypted networks, with use in Britain increasing by two-thirds, one of the largest increases globally.

Europol warns that new technologies adopted by criminals mean that previous investigative methods “will prove ineffective”.

Deputy Chief Constable Jeff Farrar, of the Association of Chief Police Officers, said: “Crime is moving to the online world.”

The advantages for criminals are clear: the web allows greater penetration of global markets without the risk of border security, and profit potential is huge through the activities of small numbers of criminals. The 27 per cent rise in frauds last year was accompanied by falls in most other crimes.

The benefits were highlighted by the tiny operation that ran a “Facebook for fraudsters” from an internet café but acted as a supermarket for a global network of cyber criminals that led to losses of tens of millions of pounds. A Sri Lankan-born Briton, Renukanth Subramaniam, was jailed for nearly five years for orchestrating the Darkmarket site, where 2,000 fraudsters traded credit cards and viruses. Prosecutors said that the scam utilised modern technology with “no more than a dishonest will, a laptop, a mouse and internet access” to commit theft on an unprecedented scale.

But Darkmarket is dwarfed by what US authorities claim is a £4bn money-laundering project by a firm that hid proceeds of crimes such as theft, drug trafficking and child porn. Liberty Reserve was the front for 55 million illegal transactions, according to an indictment lodged in the US courts after its founder was arrested in Spain in May.

The Serious Organised Crime Agency said it had sent “cyber liaison officers” to key locations abroad to work with other agencies.
 
There was a segment on Monday night on the Project on Atlantis too. It can be found here, I'd sift through the episode to find which part it was at but ,my internet is playing up so it takes too long to load. http://theprojecttv.com.au/video.htm?vid=2558845734001 < It can be found in this episode though

They interviewed a guy named Heisenberg 2.0 who helped create Atlantis but with a fake voice and blacked out of course. There was nothing ground breaking but still interesting.
 
Gotta say, SR has been a godsend for druggies like me, moved cities and knew not a single soul a while ago and even bought some synthetic weed crap from offyatree a coupla times out of desperation, lol.
Only lost money through being scammed once, and that was really my own fault as I didn't fully understand the system. Nothing but good deals for the last year or two.
 
some interesting events have happened over the last few days that COULD have a major impact on SR and other onion sites.
BREAKING: HALF OF TOR SITES COMPROMISED, INCLUDING TORMAIL

The founder of Freedom Hosting has been arrested in Ireland and is awaiting extradition to USA.

In a crackdown that FBI claims to be about hunting down pedophiles, half of the onion sites in the TOR network has been compromised, including the e-mail counterpart of TOR deep web, TORmail.

http://www.independent.ie/irish-new...gest-childporn-dealer-on-planet-29469402.html

This is undoubtedly a big blow to the TOR community, Crypto Anarchists, and more generally, to Internet anonymity. All of this happening during DEFCON.

If you happen to use and account name and or password combinations that you have re used in the TOR deep web, change them NOW.

Eric Eoin Marques who was arrested runs a company called Host Ultra Limited.

http://www.solocheck.ie/Irish-Company/Host-Ultra-Limited-399806
http://www.hostultra.com/

He has an account at WebHosting Talk forums.

http://www.webhostingtalk.com/showthread.php?t=157698

A few days ago there were mass outages of Tor hidden services that predominantly effected Freedom Hosting websites.

http://postimg.org/image/ltj1j1j6v/

"Down for Maintenance
Sorry, This server is currently offline for maintenance. Please try again in a few hours."

If you saw this while browsing Tor you went to an onion hosted by Freedom Hosting. The javascript exploit was injected into your browser if you had javascript enabled.

What the exploit does:

The JavaScript zero-day exploit that creates a unique cookie and sends a request to a random server that basically fingerprints your browser in some way, which is probably then correlated somewhere else since the cookie doesn't get deleted. Presumably it reports the victim's IP back to the FBI.

An iframe is injected into FH-hosted sites:

TOR/FREEDOM HOST COMPORMISED
By: a guest on Aug 3rd, 2013
http://pastebin.com/pmGEj9bV

Which leads to this obfuscated code:

Javascript Mozilla Pastebin
Posted by Anonymous on Sun 4th Aug 02:52
http://pastebin.mozilla.org/2776374

FH STILL COMPROMISED
By: a guest on Aug 3rd, 2013
http://pastebin.com/K61QZpzb

FBI Hidden Service in connection with the JavaScript exploit:
7ydnpplko5lbgfx5

Who's affected Time scales:

Anyone who accessed an FH site in the past two days with JavaScript enabled. Eric Eoin Marques was arrested on Sunday so that's the earliest possible date.

"In this paper we expose flaws both in the design and implementation of Tor’s hidden services that allow an attacker to measure the popularity of arbitrary hidden services, take down hidden services and deanonymize hidden services
Trawling for Tor Hidden Services: Detection, Measurement, Deanonymization"

http://www.ieee-security.org/TC/SP2013/papers/4977a080.pdf

The FBI Ran a Child Porn Site for Two Whole Weeks
http://gizmodo.com/why-the-fbi-ran-a-child-porn-site-for-two-whole-weeks-510247728

http://postimg.org/image/o4qaep8pz/

On any other day one would say these sick perverts got what they deserved. Unfortunately the Feds are stepping far beyond just pedophiles in this latest issue.

The js inserted at Freedom Hosting? Nothing really, just an iframe inject script with a UUID embedded server-side.

The iframe then delivers an exploit kit that appears to be a JavaScript 0day leading to...something. It only attempts to exploit Firefox (17 and up) on Windows NT. There's definitely some heap spraying and some possible shell code. The suspect shell code block contains some strings that look to formulate an HTTP request, but I haven't been able to collect the final payload yet. The shell code also contains the UUID with which the exploit was delivered. Any UUID will work to get this part of the exploit.

I'm still pulling this little bundle of malware apart. So far, I've got that the attack is split across three separate files, each loaded into an iframe. Calls are made between the frames to further obfuscate the control flow. The 'content_2.html' and 'content_3.html' files are only served up if the request "looks like" Firefox and has a correct Referer header. The 'content_2.html' is loaded from the main exploit iframe and in turn loads 'content_3.html'.

Short version. Preliminary analysis: This little thing probably CAN reach out without going through Tor. It appears to be exploiting the JavaScript runtime in Firefox to download something.

UPDATE: The exploit only affects Firefox 17 and involves several JS heap-sprays. Note that the current Extended Support Release is Firefox 17, so this may also affect some large organizations using Firefox ESR.

http://pastebin.mozilla.org/2777139

The script will only attempt the exploit on Firefox 17, so I'm no longer worried about it being some new 0day. Enough of the "Critical" MFSAs are for various sorts of memory corruption that I don't have the time to find out if this is actually a new exploit or something seen before.

http://postimg.org/image/mb66vvjsh/

Logical outcomes from this?

1. FBI/NSA just shut down the #1 biggest hosting site and #1 most wanted person on Tor

2. Silkroad is next on their list, being the #2 most wanted (#1 was Child Porn, #2 is drugs)

3. Bitcoin and all crypto currenecies set to absolutely CRASH as a result since the feds can not completely control this currency as they please.

I don't always call the Feds agenda transparent, but when i do, I say they can be trying harder."

source: http://www.twitlonger.com/show/n_1rlo0uu

If you do use SR or any other onion sites to buy drugs PLEASE make sure javascript and Iframe is disabled, its not disabled by default so you have to do this manually.
 
Only skimming this post, it sounds to me like it's only Firefox 17 that is targeted/they have found an exploit for. I'm on version 22, so this is by no means what I would call "0-day". That is the good news. The bad news is they are using these illegal tactics. Since when are governments allowed to use 0-day exploits in order to infect computers, when if a hacker/cracker did the same thing and was caught, they'd be facing serious jail time.

Who watchers the watchers? Who gave the state the power Eric Cartman has? "I am above the law"
 
Only skimming this post, it sounds to me like it's only Firefox 17 that is targeted/they have found an exploit for. I'm on version 22, so this is by no means what I would call "0-day". That is the good news. The bad news is they are using these illegal tactics. Since when are governments allowed to use 0-day exploits in order to infect computers, when if a hacker/cracker did the same thing and was caught, they'd be facing serious jail time.

Who watchers the watchers? Who gave the state the power Eric Cartman has? "I am above the law"

the latest version of Tor is 17 not the normal version of firefox.

im sure most small buyers have nothing to worry about but...."who watches the watchers?"....give them nothing.
 
Security researchers tonight are poring over a piece of malicious software that takes advantage of a Firefox security vulnerability to identify some users of the privacy-protecting Tor anonymity network.

The malware showed up Sunday morning on multiple websites hosted by the anonymous hosting company Freedom Hosting. That would normally be considered a blatantly criminal “drive-by” hack attack, but nobody’s calling in the FBI this time. The FBI is the prime suspect.

“It just sends identifying information to some IP in Reston, Virginia,” says reverse-engineer Vlad Tsyrklevich. “It’s pretty clear that it’s FBI or it’s some other law enforcement agency that’s U.S.-based.”

If Tsrklevich and other researchers are right, the code is likely the first sample captured in the wild of the FBI’s “computer and internet protocol address verifier,” or CIPAV, the law enforcement spyware first reported by WIRED in 2007.

Court documents and FBI files released under the FOIA have described the CIPAV as software the FBI can deliver through a browser exploit to gather information from the target’s machine and send it to an FBI server in Virginia. The FBI has been using the CIPAV since 2002 against hackers, online sexual predators, extortionists, and others, primarily to identify suspects who are disguising their location using proxy servers or anonymity services, like Tor.

The code has been used sparingly in the past, which kept it from leaking out and being analyzed or added to anti-virus databases.

The broad Freedom Hosting deployment of the malware coincides with the arrest of Eric Eoin Marques in Ireland on Thursday on an U.S. extradition request. The Irish Independent reports that Marques is wanted for distributing child pornography in a federal case filed in Maryland, and quotes an FBI special agent describing Marques as “the largest facilitator of child porn on the planet.”

Freedom Hosting has long been notorious for allowing child porn to live on its servers. In 2011, the hactivist collective Anonymous singled out Freedom Hosting for denial-of-service attacks after allegedly finding the firm hosted 95 percent of the child porn hidden services on the Tor network.

Freedom Hosting is a provider of turnkey “Tor hidden service” sites — special sites, with addresses ending in .onion — that hide their geographic location behind layers of routing, and can be reached only over the Tor anonymity network.

Tor hidden services are ideal for websites that need to evade surveillance or protect users’ privacy to an extraordinary degree – which can include human rights groups and journalists. But it also naturally appeals to serious criminal elements.

Shortly after Marques’ arrest last week, all of the hidden service sites hosted by Freedom Hosting began displaying a “Down for Maintenance” message. That included websites that had nothing to do with child pornography, such as the secure email provider TorMail.

Some visitors looking at the source code of the maintenance page realized that it included a hidden iframe tag that loaded a mysterious clump of Javascript code from a Verizon Business internet address located in Virginia.

By midday Sunday, the code was being circulated and dissected all over the net. Mozilla confirmed the code exploits a critical memory management vulnerability in Firefox that was publicly reported on June 25, and is fixed in the latest version of the browser.

Though many older revisions of Firefox are vulnerable to that bug, the malware only targets Firefox 17 ESR, the version of Firefox that forms the basis of the Tor Browser Bundle – the easiest, most user-friendly package for using the Tor anonymity network.

“The malware payload could be trying to exploit potential bugs in Firefox 17 ESR, on which our Tor Browser is based,” the non-profit Tor Project wrote in a blog post Sunday. “We’re investigating these bugs and will fix them if we can.”

The inevitable conclusion is that the malware is designed specifically to attack the Tor browser. The strongest clue that the culprit is the FBI, beyond the circumstantial timing of Marques’ arrest, is that the malware does nothing but identify the target.

The payload for the Tor Browser Bundle malware is hidden in a variable called “magneto”.

The heart of the malicious Javascript is a tiny Windows executable hidden in a variable named “Magneto.” A traditional virus would use that executable to download and install a full-featured backdoor, so the hacker could come in later and steal passwords, enlist the computer in a DDoS botnet, and generally do all the other nasty things that happen to a hacked Windows box.

But the Magneto code doesn’t download anything. It looks up the victim’s MAC address — a unique hardware identifier for the computer’s network or Wi-Fi card — and the victim’s Windows hostname. Then it sends it to the Virginia server, outside of Tor, to expose the user’s real IP address, and coded as a standard HTTP web request.

“The attackers spent a reasonable amount of time writing a reliable exploit, and a fairly customized payload, and it doesn’t allow them to download a backdoor or conduct any secondary activity,” says Tsyrklevich, who reverse-engineered the Magneto code.

The malware also sends, at the same time, a serial number that likely ties the target to his or her visit to the hacked Freedom Hosting-hosted website.

In short, Magneto reads like the x86 machine code embodiment of a carefully crafted court order authorizing an agency to blindly trespass into the personal computers of a large number of people, but for the limited purpose of identifying them.

But plenty of questions remain. For one, now that there’s a sample of the code, will anti-virus companies start detecting it?

Update 8.5.13 12:50: According to Domaintools, the malware’s command-and-control IP address in Virginia is allocated to Science Applications International Corporation. Based in McLean, Virginia, SAIC is a major technology contractor for defense and intelligence agencies, including the FBI. I have a call in to the firm.

13:50 Tor Browser Bundle users who installed or manually updated after June 26 are safe from the exploit, according to the Tor Project’s new security advisory on the hack.

14:30: SAIC has no comment.

15:10: There are incorrect press reports circulating that the command-and-control IP address belongs to the NSA. Those reports are based on a misreading of domain name resolution records. The NSA’s public website, NSA.gov, is served by the same upstream Verizon network as the Tor malware command-and-control server, but that network handles tons of government agencies and contractors in the Washington DC area

http://www.wired.com/threatlevel/2013/08/freedom-hosting/

Fucking American government have to try and control everything, they make me vomit.
 
the latest version of Tor is 17 not the normal version of firefox.

im sure most small buyers have nothing to worry about but...."who watches the watchers?"....give them nothing.

Sorry mate, I haven't used the Tor bundle for a long time now, I thought it was kept more up to date than that.

It's obviously a much larger problem than I originally thought for users of Silk Road.
 
I use tor because the stupid sydney morning herald site and others are trying to make people pay for access now and you only get a limited amount of views of articles per month if you dont pay and then you cant access the articles, so I just browse it with tor when that happens.
 
17? hrm mine is only - Tor Browser Bundle 2.3.25-10 but I thought it asked me to upgrade it recently and I did. fuck knows, it works tho.
 
Sorry mate, I haven't used the Tor bundle for a long time now, I thought it was kept more up to date than that.

It's obviously a much larger problem than I originally thought for users of Silk Road.

nobody knows yet mate, SR isnt hosted by FH so SR is safe in that respect. Its the people using Tormail and not encrypting their mail that should be worried as Tormail was hosted on FH servers.

I think this whole episode has scared people because now they know the US government isnt turning a blind eye, or doesnt have the technology, and certainly is prepared to use any methods including infecting peoples computers to catch their prey.
 
Status
Not open for further replies.
Top