Safe-mail

[D-S]

I just noticed this on the safe-mail site the other day

http://www.safe-mail.net/premium/haven.html

Could this be of good use?

[Mr.Freeze]

hmmmm good question?

[Xplode]

I just noticed this on the safe-mail site the other day

http://www.safe-mail.net/premium/haven.html

Could this be of good use?

That could be a good idea...but how would you KNOW it was stored "off-shore"?

[tarnow]

Off-shore or on-shore it doesn't matter. If LE gets a warrant they will get the info they need.

I think their plan is to protect data from actual theft and espionage from the servers at the physical location. Moving it off-shore makes it that much harder to get access to the actual servers.

Don't think it will provide a legal security blanket for our community. It's not meant to protect our type of business information.

[D-S]

bahhh I was somewhat excited for a bit

[BolicPower]

i cant think of anything "really" safe

[MassNutrition]

Off-shore or on-shore it doesn't matter. If LE gets a warrant they will get the info they need.

I think their plan is to protect data from actual theft and espionage from the servers at the physical location. Moving it off-shore makes it that much harder to get access to the actual servers.

Don't think it will provide a legal security blanket for our community. It's not meant to protect our type of business information.

Perfectly said. Nothing is safe...

[St]

Best thing to do is go the a internet cafe and start your e-mail from there as it won't show your real IP addy.

[frenchy]

Best thing to do is go the a internet cafe and start your e-mail from there as it won't show your real IP addy.

doesn't it update at every message you will send?

[St]

doesn't it update at every message you will send?


I don't think so but i could be wrong,so you might as well be right,as i'm no expert when it comes to computers,only right when it comes for lady's.

[gsxr750]

Get a cheap laptop for $300 of someone used. Pay cash. Pick up a different wireless network card for it at Futureshop. Pay cash.

Drive around the block from your house. I guarantee you will find an unsecured wireless network to get on the net through.

Don't use your laptop for ANYTHING else.

Safe-mail publishes IP's. I recently did some PI work for a lady, and Safe-mail handed over all the mail headers to me without a warrant or anything.

And don't think that because it's deleted you're OK. You can restore a hard-drive that's been formatted 100 times in about 30 minutes.

Go wireless. If you need advice on how to remain 100% anonymous I can help you.

[gsxr750]

I don't think so but i could be wrong,so you might as well be right,as i'm no expert when it comes to computers,only right when it comes for lady's.

Yes, mail headers updated every e-mail. So unless you want to conduct your e-mails from the cybercafe every time it wont help. And most cyber cafe's take your drivers license or some form of ID before you log into their system.

You know how that goes, all they gotta do is check who was on that # PC at that time and they have all your personal info.. game over!

If you take my advice about getting a laptop and getting a different wireless card here's the big picture:

No record of who purchased the laptop.
No record of who paid for the wireless network card with the specific MAC address ( unless they somehow check security cams at the store you purchase it from but even then get someone else to buy it for you cash )

All they will ever see is the IP address from the wireless router you're leeching off. The next step, they'd talk to the owner of that wireless router. They'd see the history of your MAC address registering on their router. They'd try and track the manufacturer of the MAC address. You're not using a specific one that can be tied back to a laptop and where it was purchased. Just don't use the same one for a long period of time, you'll always be 10 steps ahead. A little inconvenient, but 100% anonymous.

[Blitz-Test]

In my opinon that would only be useful if you were a large domestic ugl, not the ordered..

[gsxr750]

True, but maybe someone wants to be anonymous for other things...

Tell people in your e-mails that you're availble these days at these times.

Then all you'd have to do is drive to a parking lot that has a Starbucks and you're online anonymous... they all have free wireless internet.

Don't go to the same Starbucks every time, sit in your vehicle on your laptop, safe as it gets.

:)

[gsxr750]

Also here is a list of many other locations by Province / City with public Wifi access:

http://www.wififreespot.com/can.html

[Hidngod]

Awesome info, man.

[CBB loves Japan]

No offense GSXR, but the info you're giving isn't the best. So let's say the RCMP is watching you, they watch you for awhile, not for a week, if you're anyone worth watching. First of all, they're not idiots, they're going to talk to old lady you stole internet from and they know it's not her already, they already know it's you.

aND THEN THEY WATCH YOU DRIVEING TO HER HOUSE EVERYDAY TO STEAL HER INTERNET, C'MON BRO THAT'S THE WORST IDEA EVER, THE le AINT' DUMB sorry cap locks there.

I can tell you anyone's IP addy and longitude in 2 seconds with free oftware.
send me an email, check source header and feeed it into ip locator at ww.ip2location.com and i have your IP addy and exact long and latitude in 2 seconds and a picture of your house, lol.

My point being. People, set up Tor. Developed by the US navy, no back doors, routes everything through the whole world, check my IP and im in germany right now. Worried about exit nodes controlled by government and leaked flash and java info? Install firefox and vidalia which contains privoxy and you are good to go.

Oh and PGP everything.

[gsxr750]

Man, it's bad because i'm kind of under the influence right now and I can't stop myself.

You're wrong. Very wrong. You think you know what you're talking about from what i'm reading but I can tell you don't.

First off, there's no program that exists that can tell you where an IP address is specifically. You know how DHCP works right? You know how nodes on cable systems are split into linecards in pockets of 300 homes right? So you tell me how just by an IP address you can give my location. The only location you'll get is the closest headend in that IP range. ( The only way you'd get an address is to have access to the ISP's DHCP server to see the lease, tie that to the MAC of the modem, look up the MAC in the ISP's customer database and find an address ) Your program off the net doesn't have access to every ISP in the worlds DHCP server and customer datbase.

Oh and of course the advice I gave wont work if you're already being watched. That's kind of a given I thought.

Look, I can check your IP in Germany, and know you're behind a proxy, but guess what - everything on the internet leaves a trail. Your packets to your proxy, your proxys packets to the provider, the service provider to the peers.. it's all logged and can be tracked.

If you understood my advice you would know that by having a MAC address that's not stored in any purchase / company database, the only IP address the LE would get is that of the router putting out the WAP access or WIFI. So you tell me, since you obviously know so much, how the LE can find an IP, track it to a wireless router, and be able to tell who was there using it at that time and date. Impossible. YOU ARE ANONYMOUS AT THE SOURCE.

Oh and yea, when you run your magic program that gets the IP address that leads you to a Starbucks out in the middle of nowhere, don't forget to take a picture of my house! :P

And don't sit at the same house, use the list I gave you and make a road trip out of it.

Man I don't even know what I just wrote.

[CBB loves Japan]

Im not sure why you're getting so defensive?

You're likely smarter at computers than i am, i don't know much about them actually, but i do know how to secure oneself, and no i don't know half of the things you were talking about.

But like i say i've had a few good comp sci and progamming guys advise on things. Im not talking about magic IP locators. Go to the website i mentioned there are programs, free, and better one's for sale that show where you're from. You don't think LE has even better programs than this?

You suggesting your advice is no good if LE is watching you already kinda defeats the purpose of your posts because isn't that what we're concerned about.

We're concerned with anyone of us potentially being watched, investigated for any reason, and being able to maitain our privacy.

Driving around the block simply aint gonna cut it.

Again i don't know much about computers in general but i know the foxyproxy add on, vidalia TOR and privoxy make you appear to not be on proxy and prevents leakage of info.

Im always willing to learn more.

[BAM]

Purchase yourself a network card for your laptop and use the new NIC only for your risky business, when at home use the built in network interface and stash the secondary NIC.

[gsxr750]

Sorry for the abrasive response. Kind of a rough night ;)

I would be careful with that too BAM. Most ISPs bind/DHCP assign your IP based on your MAC address you're correct. So by changing your MAC your IP will change. But again your ISP will be able to tell LE where those two IPS were leased by just checking what cable modem they were assigned to.

In theory your idea would work for the wireless. Wireless NIC for shady stuff, onboard ethernet for home use but careful..

I've captured a few cheating wives even when they were doing what you mention specifically. The problem is BIND ( DHCP server ) also logs your operating system hostname. So if you check the bind dhcp.leases file it'd go like:

hostname. myhomepc:0:23.154.15.96 [01-00-5e-00-00-16]
hostname. myhomepc:0:23.154.15.14 [02-03-3c-50-00-12]

So right there, IP's / mac changed but forgot to adjust reverse/ hostname.

Not to mention, any programs you have automatically connecting to the internet in the background will remain connecting to the internet wherever you are, giving LE another way to tie your two connections together. ( Used that before too, say your MSN auto connects at home, and then you go boot up at some cafe and it signs in on that and you close it and do your business. Can tie your MSN accounts connectivity history.. game over )

To be 100% sure get a separate beater laptop with an e-mail client and a browser, new wireless ethernet, and use that :)

My apologies again CBB Loves Japan.

[BAM]

gsxr..

To clarify.. I meant use the purchased secondary wireless nic from another location like a coffee shop etc or to associate it with an unprotected AP in your area, not your own home wireless.

You make some good points.

[MassNutrition]

All I can say is... Wow.

Whoever said bodybuilders were meat heads are dead wrong. We have some pretty smart (and sneaky!) mother****ers here...

[The Terminator]

All I can say is... Wow.

Whoever said bodybuilders were meat heads are dead wrong. We have some pretty smart (and sneaky!) mother****ers here...

You've got that right. :D


gsxr..

To clarify.. I meant use the purchased secondary wireless nic from another location like a coffee shop etc or to associate it with an unprotected AP in your area, not your own home wireless.

You make some good points.

Only one issue with that. Since you're still registering a MAC address with a router in the coffee shop or other unsecured wireless, the LE can still track from there. Most likely they would get a warrant for the router logs if they suspected everything, and since that MAC is still tied to your machine, they would be able to either monitor the router live, or pull the logs and determine a trend to wait it out the next time you show.

;)

The best bet is a foreign pay proxy that has a highly rated privacy policy. Sure, LE could still track it back, but they'd have to go through a hell of a lot more effort, and international channels to do so.

Matt

[gsxr750]

I would not recommend doing anything on a connection that is tied to a physical access.

You can add that extra layer of security Matt recommended and sleep pretty well at night. Once you're on a wireless connection, go through the proxy too.

The LE would have to subpoena records from the Forgein company, that would lead them eventually to the host IP of the wireless router you connected to. By the time they get all that info, ( this will take at least a week ) you'll be on another wireless hotspot. You'll always be a few steps ahead. And think about it, unless LE is already watching you and know who you are... they could be monitoring a wireless hotspot because they know someone is doing some shady stuff from there. But you could be sitting in the parking lot staring at them and they can't do anything, you're inside your car, and there's no way to tell who's computer is that MAC without arresting every person in the parking lot.

My worry about just using a proxy is that your traffic is still routing to some physical address, where they can do an investigation of who was there. Wireless, they have no idea who was within 100 metre radius of that router for the past week.. well they could, but it's 100x more research to be done and even then all they'd get is your MAC address of your wireless NIC. Nothing else.. assuming you take my advice and use that laptop for no other kind of use.

[gsxr750]

And as I write that, I notice that Safe-Mail's security certificate just got revoked. I will see if I can find out the real reason for you guys. But that's usually not a good sign. It takes alot to mess up a security certificate once it's in place.. so either it's been modified improperly ( LE ) or removed by the SA administrator..

[The Terminator]

And as I write that, I notice that Safe-Mail's security certificate just got revoked. I will see if I can find out the real reason for you guys. But that's usually not a good sign. It takes alot to mess up a security certificate once it's in place.. so either it's been modified improperly ( LE ) or removed by the SA administrator..

Yup, it's down. I'll maybe do some digging and see what I can find.

Matt

[The Terminator]

Well, main site is down, other area's of the site are still up. No news online about it.

I'm guessing it's a mis-configured certificate, LE would not normally take a site down, just get a warrant for individual addresses.

However, it's something to watch.

Matt