|
Anonymous #1
|
linking an account to me
#21512738 - 04/06/15 10:19 PM (8 years, 9 months ago) |
|
|
i was wondering how easy it would be for LE to link my posts to myself. i searched and found this post and some dude claiming he could link an account to an ip but did not deliver. can it be done? if so, how and under which conditions?
i have some further questions if someone can clear this up for me. thanks.
|
Alan Rockefeller
Mycologist

Registered: 03/10/07
Posts: 48,266
Last seen: 11 hours, 47 minutes
|
|
It isn't all that easy to turn an account name into an IP address. And it's not always easy to turn an IP address into a name.
Turning an account name into an IP would require one of the following:
1) Get the person to visit a link PM'd to them to a webserver that the attacker controls 2) Sniff the website traffic 3) Subpoena the website
Turning an IP address into a name requires contacting the ISP, usually with a subpoena. That gets the name of the person who signed up for the internet connection - who often is not the person who sent the traffic.
Bottom line is that it can be done, but it generally doesn't happen unless someone committed a very serious crime.
|
Anonymous #2
|
|
can you explain #1 further? would this entail an offsite pm, or do you mean a pm on this site?
|
Alan Rockefeller
Mycologist

Registered: 03/10/07
Posts: 48,266
Last seen: 11 hours, 47 minutes
|
|
A PM on this site which contains an offsite link. If the user clicks on the link and they are the only one that has that link, then you know their IP address by reading the web server logs.
|
Anonymous #2
|
|
okay, so does this mean that a service such as temp.pm or privnote could be such a setup, and then I guess if you did indeed do something such as that, how much extra protection would a vpn provide? thanks for the info and always happy to learn ways to maintain my privacy.
|
Anonymous #3
|
|
Aside from what Alan posted, I'd assume it'd be possible to "profile" a user as well (something like the show Criminal Minds). But that would likely take an extreme amount of effort and time and as Alan said, generally doesn't happen unless a very serious crime is commited.
|
Anonymous #2
|
|
yeah i'm sure it's more common than you'd think it would be considering how many resources and asinine policies they have. there's a lot of interesting stuff written about how they profiled Ross Ulbright, especially some of the Forbes magazine pieces.
|
Anonymous #3
|
|
Definitely some interesting reading. It almost seemed so terrifyingly simple, Find out where this certain website was first mentioned and trace it back.
|
jboredone
Money-The root of all evil....



Registered: 01/19/12
Posts: 4,783
|
|
i don't know about linking an account to "you"...but i do link anonymous to a lot of shitty threads......
-------------------- Peace Pot Micro-Dot God Loves You High or Not!!! In order to grow old and wise, you must once have been young and dumb!

|
Anonymous #2
|
Re: linking an account to me [Re: jboredone]
#21628430 - 05/03/15 12:31 AM (8 years, 8 months ago) |
|
|
read up on snowden/prism
|
Alan Rockefeller
Mycologist

Registered: 03/10/07
Posts: 48,266
Last seen: 11 hours, 47 minutes
|
|
Quote:
Anonymous said: okay, so does this mean that a service such as temp.pm or privnote could be such a setup
Any website could be such a setup, however someone that works there would need to be in on it.
Quote:
and then I guess if you did indeed do something such as that, how much extra protection would a vpn provide?
If you were connecting through a VPN or tor, the website would see the VPN or tor IP instead of yours.
|
Anonymous #1
|
|
Quote:
Alan Rockefeller said: It isn't all that easy to turn an account name into an IP address. And it's not always easy to turn an IP address into a name.
Turning an account name into an IP would require one of the following:
1) Get the person to visit a link PM'd to them to a webserver that the attacker controls 2) Sniff the website traffic 3) Subpoena the website
Turning an IP address into a name requires contacting the ISP, usually with a subpoena. That gets the name of the person who signed up for the internet connection - who often is not the person who sent the traffic.
Bottom line is that it can be done, but it generally doesn't happen unless someone committed a very serious crime.
anybody know what kind of crimes would make it worth it to go through all the trouble?
|
filamentous
Entheomycologist


Registered: 01/20/14
Posts: 422
Last seen: 8 years, 1 month
|
|
If you are worried then delete the account and its contents.
Why haven't you been using VPN to access the site? How much have you reaserched best OPSEC policies before doing whatever your doing?
|
filamentous
Entheomycologist


Registered: 01/20/14
Posts: 422
Last seen: 8 years, 1 month
|
|
Quote:
Anonymous said: yeah i'm sure it's more common than you'd think it would be considering how many resources and asinine policies they have. there's a lot of interesting stuff written about how they profiled Ross Ulbright, especially some of the Forbes magazine pieces.
He, or a nefarious hacker, posted a job listing on a forum with his personal gmail email using the handle that was accosiated with the first posts ever referencing Silk Road. Incidentally that Altoid handle posted here first. FWIW I'm certain he had another handle here too. He was growing mushrooms and chatting with people here. I'm not DOXXing that handle or telling anyone how to find it. On to the next subject.
|
Enlil
OTD God-King




Registered: 08/16/03
Posts: 65,470
Loc: Uncanny Valley
|
|
Quote:
Anonymous said: anybody know what kind of crimes would make it worth it to go through all the trouble?
Acts of terrorism. Perhaps a murder. Kidnapping of a child. Maybe some long-running RICO conspiracy.
-------------------- Censoring opposing views since 2014. Ask an Attorney Fuck the Amish
|
filamentous
Entheomycologist


Registered: 01/20/14
Posts: 422
Last seen: 8 years, 1 month
|
Re: linking an account to me [Re: Enlil]
#21654615 - 05/08/15 07:11 PM (8 years, 8 months ago) |
|
|
Quote:
Enlil said:
Quote:
Anonymous said: anybody know what kind of crimes would make it worth it to go through all the trouble?
Acts of terrorism. Perhaps a murder. Kidnapping of a child. Maybe some long-running RICO conspiracy.
You forgot whistleblowing.
|
Anonymous #2
|
Re: linking an account to me [Re: filamentous]
#21654620 - 05/08/15 07:12 PM (8 years, 8 months ago) |
|
|
Quote:
filamentous said:
Quote:
Anonymous said: yeah i'm sure it's more common than you'd think it would be considering how many resources and asinine policies they have. there's a lot of interesting stuff written about how they profiled Ross Ulbright, especially some of the Forbes magazine pieces.
He, or a nefarious hacker, posted a job listing on a forum with his personal gmail email using the handle that was accosiated with the first posts ever referencing Silk Road. Incidentally that Altoid handle posted here first. FWIW I'm certain he had another handle here too. He was growing mushrooms and chatting with people here. I'm not DOXXing that handle or telling anyone how to find it. On to the next subject.
well, that shows the extensive resources they have. Ulbright is to be admired imo, visionary. anyway, i think it's best to assume you don't have to be Ulbright to get caught up in some fucked up spy web.
|
filamentous
Entheomycologist


Registered: 01/20/14
Posts: 422
Last seen: 8 years, 1 month
|
|
Quote:
Anonymous said: well, that shows the extensive resources they have.
Yeah a webcrawl by thewayback machine.
|
Anonymous #1
|
Re: linking an account to me [Re: filamentous]
#21655335 - 05/08/15 10:22 PM (8 years, 8 months ago) |
|
|
Quote:
filamentous said: If you are worried then delete the account and its contents.
Why haven't you been using VPN to access the site? How much have you reaserched best OPSEC policies before doing whatever your doing?
i'm not worried actually and i deleted anything i considered 'unsafe' years ago. i just want to figure out exactly what an adversary with unlimited resources could actually figure out and under what circumstances they might feel they need to figure anything out. you know, assume-the-worse kind of deal.
|
Anonymous #2
|
Re: linking an account to me [Re: filamentous]
#21655346 - 05/08/15 10:25 PM (8 years, 8 months ago) |
|
|
suit yourself, there's plenty of evidence and real people that have thought the same thing. if you don't have anything to hide you should at least be aware that your activities are monitored, and as somebody mentioned earlier, this board is liable to get you on some watch list or another, vpn or not. i'm given to paranoia to some degree but I honestly believe this is true and worsening. i voted for Obama but I think he's just as bad as Bush in allowing policies like this to continue. If it weren't for Edward Snowden happening we wouldn't even know about it.
I think they would go so far as to do that to catch a drug dealer and not even the biggest.
@#1, that must have been a huge pain in the ass to delete all that shit. I've thought about editing mine but then worse than the snowden snooping I'd be pretty fucked if the majority in my personal life or work life ever discovered and read all this shit.
|
Anonymous #1
|
|
it wasn't that much work actually since i never posted much that could be related to me anyway. i was thinking more about ways other than figuring who i am from stuff i post.
|
Anonymous #2
|
|
well then i've heard conflicting reports but it seems like a vpn offers decent protection and that's a cheap and easy thing to do. i've made the mistake of logging in on my phone before without the vpn on so that pretty much undoes any benefit. not sure how long shroomery keeps ip logs, but reddit definitely keeps them a long time was recently reading.
|
Alan Rockefeller
Mycologist

Registered: 03/10/07
Posts: 48,266
Last seen: 11 hours, 47 minutes
|
|
Quote:
Anonymous said: and as somebody mentioned earlier, this board is liable to get you on some watch list or another, vpn or not.
I have never heard of that watch list. I am friends with a lot of long time shroomery members, and no one has complained about being on any kind of list or getting special attention.
Police are extremely lazy. They get the low hanging fruit, nothing more. There are so many drug busts that just fall into their laps that they don't need to troll the internet for drug users.
Quote:
i voted for Obama but I think he's just as bad as Bush in allowing policies like this to continue. If it weren't for Edward Snowden happening we wouldn't even know about it.
Bush was far worse.
Quote:
I think they would go so far as to do that to catch a drug dealer and not even the biggest.
If they want to catch a drug dealer they can just drive around a bad neighborhood for 5 minutes, no need to do anything fancy with the internet.
|
Anonymous #2
|
|
drug vendor, then. i'd say they're definitely independent of anybody driving around looking for street deals, especially if suspected of DNM activity.
Bush was worse, but Obama (still a supporter for a lot of reasons) hasn't been the drastically thinking man he appeared to be. hasn't ended the war on drugs, escalated wars in other countries, continues another form of "no child left behind" but just calls it something different. sorry, but meet the new boss, same as the old boss applies here.
i've read conflicting reports on who they profile and when etc. but i would not be surprised if there were interests in keeping "lists". it comes out all the time that there are records of millions of phone calls etc. doesn't take a tinfoil hat to believe this stuff when the lessons are in our faces playing out daily.
|
|