Odd man out

[Mirrorshades]

As the title says, I'm likely a bit of an odd man out here. For starters, I'm not a bodybuilder, and I'm certainly not a steroid user -- I don't use any drugs, except over the counter and what few I'm prescribed by my physician.

That said, you might all be wondering: "Well, why are you here?"

Simple. I'm a geek with an interest in privacy.

I'm a geek who is:

* Disgusted with the trend over the last few years of stripping away what little privacy we have left, the name of increasingly dubious Wars on [fill in the blank] by both government and law enforcement.

* Enraged over the issue of warrantless wiretapping and invasive electronic surveillance.

* Interested in helping people maintain what privacy they still can in the face of an overweening surveillance state.

Mirrorshades

[shlders]

Something fishy here.

[Mirrorshades]

Originally Posted by shlders

if you are selling something we do not want any.
if i am wrong then forget my previos statement, and welcome.

No need to worry... I'm not selling anything. Frankly, I'd rather slit my throat than do sales. I'm just interested in helping people improve their online privacy, especially when it comes to email.

All of the stuff I use (and advise people to use) is free, and primarily open-source. I believe privacy is a right, and should not be restricted to only those who can afford it.

Mirrorshades

[Gman]

Hey CD just ban him!!! This guy smells like SHIT!

[shotgun]

Agreed G No gives a shit about your beliefs here or what your sick of. If you can't contribute to the forum then don't post. Feel free to hang out and read but don't Start preaching Bro your in the wrong place.

[Mirrorshades]

Originally Posted by Gman

Hey CD just ban him!!! This guy smells like SHIT!

No need for that. I know better than to stay where I'm not wanted.

Have a nice day.

Mirrorshades

[charmingttboy9999999]

bebyyyy

[Replicator]

.................................................. ...............................

[prime]

As a techie myself, his other responses were pretty enlightening.

[admin]

Welcome to the forum.
Guys relax a bit. We don't need to scare all new members away.
Unless he tries to sell or pry personal information from anyone, there's no reason he shouldn't be welcome here.

[doozied]

hello mirrorshade what suggetions would you make with helping the online privacy

[^mR.]

Welcome to the board buddy. Hope you can help us out god knows we all need it

[Mirrorshades]

Originally Posted by doozied

hello mirrorshade what suggetions would you make with helping the online privacy

I'd suggest two things:

1) Start using Tor; and

2) Learn how to use the open source version of PGP, called Gnu Privacy Guard (GPG).

What You Can Do Right Now

The first (and one of the best) things you can do is to download a copy of the Tor Browser Bundle. You can obtain a copy from:

https://www.torproject.org/download/...d-easy.html.en

Choose the Tor Browser Bundle that corresponds to your operating system version (i.e. Windows 32/64-bit, Mac OS X, Linux).

Save the downloaded file, and execute it. It will prompt you for a location to unpack the files to, e.g. a flash drive. Unpack these, and then run the Start Tor Browser executable.

You can see a video tutorial of the process at the following URL: Getting Started with Tor - YouTube

When you have Tor up and running, you can go to the following page to setup a TorMail account: http://jhiwjjlqpyawmpjx.onion/

If you look closely, you'll notice the .onion address. This is a special, pseudo-top level domain, that is accessible only through the Tor network (in other words Tor must be up and running for you to even be able to load this page.)

TorMail is an example of what is known as a Tor hidden service. As the name implies, hidden services are hidden, so no one can tell where the server(s) are located.

Once you have the Tor browser bundle installed, then navigate to the TorMail home page, and setup an account. It may take up to 5 minutes for your account to be established, before you are able to login.

N.B.: You will need to enable cookies to be able to login to TorMail. I would recommend downloading a cookie manager, (a good one is Cookie Monster) and allowing TorMail to set session cookies, at the very least.

If you go to the Tools, Addons in Aurora/Firefox, you can click on Get Addons and use the search field to get the addons you want.

I use the following:

Better Privacy 1.6.7 - This addon is used to control what are called Flash cookies, or LSOs (Locally Stored Objects). This is a special type of cookie, now used by a LOT of websites, because as users have become more sophisticated, they have started taking control of how their systems use cookies. Advertisers don't like this, so they came up with the idea of using locally-stored flash objects to get around normal cookie controls. Most people have flash cookies installed, and don't know it. Better privacy will allow you to see what flash cookies are stored on your system and lets you decide whether or not to get rid of them. (There should be none in Aurora, as you've just started using it, but it is a good idea to check periodically to see if sites you visit have set any.)

Cookie Monster 1.1.0. - is what I use to control regular cookies. It will place what looks like a smiley face in the bottom right-hand section of the toolbar in the Aurora/Firefox browser. If you click on it with your mouse, it will show what the cookie options are for the site/webpage that you're currently on. It will generally allow you to select the following options:

Since I'm on steroidworld.com, when I click on the icon, I get the following options:

* Allow cookies for steroidworld.com;

* Allow session cookies for steroidworld.com,

* Reject cookies for steroidworld.com,

When you go to TorMail.net, you'll want to allow cookies, or allow session cookies for Tormail.net, so you can login. If you don't allow cookies, it will keep asking for your username and password.

Login to the account using the Squirrelmail interface -- I know the TorMail admins recommend RoundCube, but I think it's a very good idea to avoid the use of Java/Javascript if at all possible.

TorMail Pros and Cons

Pros:

Because TorMail is a hidden service, no one knows who the operators are, or where they are located. Accordingly, there is no one and nowhere for the authorities to go to when they want information on a particular email account.

The TorMail operators cannot determine who you are (or your location), as Tor prevents them from determining your IP address, the same as it does for anyone else.

Cons:

Because TorMail is a hidden service, no one knows who the operators are, or where they are located. For all anyone knows, TorMail could be a gigantic honeypot, setup to collect information on people who would like to remain anonymous.

Like any other email provider, the admins could certainly read the email of any user they wish to. That's where PGP/GPG comes in -- if your email is encrypted, then there is no way for them to read it.

Recommendations:

You can have as many TorMail accounts as you'd like; setup your first TorMail account so it isn't linked to any other ID that you use -- you will want to avoid using the same ID that you use on here. You'll also want to avoid even similar IDs. Use something completely different -- people are creatures of habit, and the authorities know this. Pick something that people would never associate with you, for the name of your first TorMail account.

Remember to practice compartmentalization: until you have PGP/GPG up and running, don't put anything in a TorMail email message that you might later come to regret.

Remember, TorMail is anonymous; it is NOT private unless you use PGP/GPG.

After your Tormail account is setup, login to it, and start playing with it. You can experiment by sending yourself an email message -- if you examine the headers, you'll see that your real information appears nowhere within.

Mirrorshades

[powerman]

Originally Posted by Mirrorshades

I'd suggest two things:

1) Start using Tor; and

2) Learn how to use the open source version of PGP, called Gnu Privacy Guard (GPG).

What You Can Do Right Now

The first (and one of the best) things you can do is to download a copy of the Tor Browser Bundle. You can obtain a copy from:

https://www.torproject.org/download/...d-easy.html.en

Choose the Tor Browser Bundle that corresponds to your operating system version (i.e. Windows 32/64-bit, Mac OS X, Linux).

Save the downloaded file, and execute it. It will prompt you for a location to unpack the files to, e.g. a flash drive. Unpack these, and then run the Start Tor Browser executable.

You can see a video tutorial of the process at the following URL: Getting Started with Tor - YouTube

When you have Tor up and running, you can go to the following page to setup a TorMail account: http://jhiwjjlqpyawmpjx.onion/

If you look closely, you'll notice the .onion address. This is a special, pseudo-top level domain, that is accessible only through the Tor network (in other words Tor must be up and running for you to even be able to load this page.)

TorMail is an example of what is known as a Tor hidden service. As the name implies, hidden services are hidden, so no one can tell where the server(s) are located.

Once you have the Tor browser bundle installed, then navigate to the TorMail home page, and setup an account. It may take up to 5 minutes for your account to be established, before you are able to login.

N.B.: You will need to enable cookies to be able to login to TorMail. I would recommend downloading a cookie manager, (a good one is Cookie Monster) and allowing TorMail to set session cookies, at the very least.

If you go to the Tools, Addons in Aurora/Firefox, you can click on Get Addons and use the search field to get the addons you want.

I use the following:

Better Privacy 1.6.7 - This addon is used to control what are called Flash cookies, or LSOs (Locally Stored Objects). This is a special type of cookie, now used by a LOT of websites, because as users have become more sophisticated, they have started taking control of how their systems use cookies. Advertisers don't like this, so they came up with the idea of using locally-stored flash objects to get around normal cookie controls. Most people have flash cookies installed, and don't know it. Better privacy will allow you to see what flash cookies are stored on your system and lets you decide whether or not to get rid of them. (There should be none in Aurora, as you've just started using it, but it is a good idea to check periodically to see if sites you visit have set any.)

Cookie Monster 1.1.0. - is what I use to control regular cookies. It will place what looks like a smiley face in the bottom right-hand section of the toolbar in the Aurora/Firefox browser. If you click on it with your mouse, it will show what the cookie options are for the site/webpage that you're currently on. It will generally allow you to select the following options:

Since I'm on steroidworld.com, when I click on the icon, I get the following options:

* Allow cookies for steroidworld.com;

* Allow session cookies for steroidworld.com,

* Reject cookies for steroidworld.com,

When you go to TorMail.net, you'll want to allow cookies, or allow session cookies for Tormail.net, so you can login. If you don't allow cookies, it will keep asking for your username and password.

Login to the account using the Squirrelmail interface -- I know the TorMail admins recommend RoundCube, but I think it's a very good idea to avoid the use of Java/Javascript if at all possible.

TorMail Pros and Cons

Pros:

Because TorMail is a hidden service, no one knows who the operators are, or where they are located. Accordingly, there is no one and nowhere for the authorities to go to when they want information on a particular email account.

The TorMail operators cannot determine who you are (or your location), as Tor prevents them from determining your IP address, the same as it does for anyone else.

Cons:

Because TorMail is a hidden service, no one knows who the operators are, or where they are located. For all anyone knows, TorMail could be a gigantic honeypot, setup to collect information on people who would like to remain anonymous.

Like any other email provider, the admins could certainly read the email of any user they wish to. That's where PGP/GPG comes in -- if your email is encrypted, then there is no way for them to read it.

Recommendations:

You can have as many TorMail accounts as you'd like; setup your first TorMail account so it isn't linked to any other ID that you use -- you will want to avoid using the same ID that you use on here. You'll also want to avoid even similar IDs. Use something completely different -- people are creatures of habit, and the authorities know this. Pick something that people would never associate with you, for the name of your first TorMail account.

Remember to practice compartmentalization: until you have PGP/GPG up and running, don't put anything in a TorMail email message that you might later come to regret.

Remember, TorMail is anonymous; it is NOT private unless you use PGP/GPG.

After your Tormail account is setup, login to it, and start playing with it. You can experiment by sending yourself an email message -- if you examine the headers, you'll see that your real information appears nowhere within.

Mirrorshades

WTF i cant read all this but i will later

[Mirrorshades]

Originally Posted by powerman

WTF i cant read all this but i will later

For what it's worth, this is one of my shorter instructional posts. :-)

Take whatever time you need to read it, and if you have any questions, just ask.

Mirrorshades

[ApC]

Originally Posted by Mirrorshades

For what it's worth, this is one of my shorter instructional posts. :-)

Take whatever time you need to read it, and if you have any questions, just ask.

Mirrorshades

mirrorshades is a bad ass person, really good fella

[drob29]

ok my take on this:

Anyone (expecially brand new members.....I mean really?) who posts a downloadable security link, and says how great it is, be wary of them. IMO anyone who downloads this is a fool, and opens themselves up completely. How do you know whats in that link? Think about this. LE comes up with a tool like this, a downloadable link that will allow them 100% access to every key stroke you make. They creates a blog and youtube post saying "wow what a great way to be secure". They then enter sites like this and say "hey guys check out this secure site".

And its not like this guy is a respected member of the AAS community either.

This reminds me of the show "Cops" where they open a pawn shop to catch thieves.

Think about this: Whats this guys motivation? to help us out and keep us safe? And he "just happens to have" a long detailed script on how great this is, and how to download it? Really??? You have GOT TO BE FUCKIN KIDDING ME.

Hey I got a toll bridge in NJ for sale. PM me.

[2425]

Originally Posted by drob29

ok my take on this:

Anyone (expecially brand new members.....I mean really?) who posts a downloadable security link, and says how great it is, be wary of them. IMO anyone who downloads this is a fool, and opens themselves up completely. How do you know whats in that link? Think about this. LE comes up with a tool like this, a downloadable link that will allow them 100% access to every key stroke you make. They creates a blog and youtube post saying "wow what a great way to be secure". They then enter sites like this and say "hey guys check out this secure site".

And its not like this guy is a respected member of the AAS community either.

This reminds me of the show "Cops" where they open a pawn shop to catch thieves.

Think about this: Whats this guys motivation? to help us out and keep us safe? And he "just happens to have" a long detailed script on how great this is, and how to download it? Really??? You have GOT TO BE FUCKIN KIDDING ME.

Hey I got a toll bridge in NJ for sale. PM me.

I have been in the IT industry for about 17 years and I would say I have a vast amount of knowledge. That being said I would and do go a different route to hide my whereabouts. I did a "whois" on the domain and it was first created in 2006 and registered by someone in Massachusetts. Despite being in MA they used a registrar from germany to buy the domain. Maybe it doesnt mean anything but I am staying away. Also says on there site that it was originally designed for the military. All seems weird to me. This doesnt mean anything posted by mirrorshades was done with malice it just means I personally dont trust it. My .02

[drob29]

Originally Posted by 2425

I have been in the IT industry for about 17 years and I would say I have a vast amount of knowledge. That being said I would and do go a different route to hide my whereabouts. I did a "whois" on the domain and it was first created in 2006 and registered by someone in Massachusetts. Despite being in MA they used a registrar from germany to buy the domain. Maybe it doesnt mean anything but I am staying away. Also says on there site that it was originally designed for the military. All seems weird to me. This doesnt mean anything posted by mirrorshades was done with malice it just means I personally dont trust it. My .02

Good work 2425. IMO if it smells funny it probably has a funk. And again. what would be mirrorshades motivation for giving us such great security advice? Taking the time to join, log in and post?

Originally Posted by 2425

.......... Also says on there site that it was originally designed for the military. All seems weird to me. ........

Last time I checked the military was part of the government.

Need we say more here? Can a mod please ban mirrorshades and the IP addy he comes from? I will say it, I dont really care if he is offended. mirrorshades is LE or is somehow affiliated with LE.

I go back to the same question: why is he here??

[Mirrorshades]

Originally Posted by drob29

ok my take on this:

Anyone (expecially brand new members.....I mean really?) who posts a downloadable security link, and says how great it is, be wary of them. IMO anyone who downloads this is a fool, and opens themselves up completely. How do you know whats in that link? Think about this. LE comes up with a tool like this, a downloadable link that will allow them 100% access to every key stroke you make. They creates a blog and youtube post saying "wow what a great way to be secure". They then enter sites like this and say "hey guys check out this secure site".

A skeptic! Good on ya. You most certainly don't have to take my word for it... do your own research.

Originally Posted by drob29

And its not like this guy is a respected member of the AAS community either.

Fair enough. I can't say that I've seen you post elsewhere, like WCBB, at least not that I can recall. I do find it interesting that your post count (as of this writing) is 26 -- mine is 13. That would mean that we're both newbies (at least here).

Originally Posted by drob29

This reminds me of the show "Cops" where they open a pawn shop to catch thieves.

Think about this: Whats this guys motivation? to help us out and keep us safe? And he "just happens to have" a long detailed script on how great this is, and how to download it? Really??? You have GOT TO BE FUCKIN KIDDING ME.

As to my motivation, try this on for size -- I'm opposed to the war on drugs, and the nascent surveillance state.

As I said, do the research yourself. You'll find that Onion routers were first proposed about 10 years ago by the U.S. Navy's Naval Research Laboratory to secure their own communications. Tor has been recommended by organizations such as:

* The Electronic Frontier Foundation (EFF)

* Reporters Sans Frontieres (Reporters Without Borders)

* Amnesty International

* Human Rights Watch

For what it's worth, the EFF helped to fund the development of Tor -- I don't think they would have done this if Tor were a law enforcement honeypot. Maybe you know something they don't? Perhaps you should contact them and inform them of their grave error.

You might also wish to contact Reporters sans Frontieres (Reporters without Borders) and inform them of their egregious error in including references to Tor in the most recent edition of their publication: Handbook for Bloggers and Cyber-Dissidents

Finally, you might also wish to contact the IRS and inform them that the Tor Project is a police front -- they might then see fit to strip them of their 501(c)(3) charitable status.

But then I expect you'll be declaring all these organizations police fronts as well.

Mirrorshades

[Mirrorshades]

Originally Posted by drob29

Good work 2425. IMO if it smells funny it probably has a funk. And again. what would be mirrorshades motivation for giving us such great security advice? Taking the time to join, log in and post?

As I have stated previously, I am opposed to the war on drugs and the nascent surveillance state.

Originally Posted by drob29

Last time I checked the military was part of the government.

The last time I checked, the Internet was preceded by ARPANET, which was a project of the Defense Advanced Research Project Agency (DARPA). Also, the last time I checked, the Department of Defense was part of the government.

If you have such a virulent distrust of all things emanating from the government, perhaps you shouldn't be using the network they created in the first place?

Originally Posted by drob29

Need we say more here? Can a mod please ban mirrorshades and the IP addy he comes from?

Ban my IP address? How utterly unsophisticated. You'd think we were back in the day when everyone had a static IP.

Originally Posted by drob29

I will say it, I dont really care if he is offended. mirrorshades is LE or is somehow affiliated with LE.

I go back to the same question: why is he here??

I'm not offended. It would take considerably more than a few specious allegations to offend me. As the old saying goes, "Everyone is entitled to their own opinion -- they are not entitled to their own facts." Unlike you, I can document my assertions.

Mirrorshades

[chiselmeat]

The last time I checked, the Internet was preceded by ARPANET, which was a project of the Defense Advanced Research Project Agency (DARPA). Also, the last time I checked, the Department of Defense was part of the government.

Common we all know Al Gore invented the internet..................If you don't believe me just ask him.......

[chiselmeat]

In our defense you must understand, While you may be very legit and probably are, we rarely download from any links after all what we are doing might be illegal......

[2425]

Originally Posted by Mirrorshades

As I have stated previously, I am opposed to the war on drugs and the nascent surveillance state.



The last time I checked, the Internet was preceded by ARPANET, which was a project of the Defense Advanced Research Project Agency (DARPA). Also, the last time I checked, the Department of Defense was part of the government.

If you have such a virulent distrust of all things emanating from the government, perhaps you shouldn't be using the network they created in the first place?


Ban my IP address? How utterly unsophisticated. You'd think we were back in the day when everyone had a static IP.



I'm not offended. It would take considerably more than a few specious allegations to offend me. As the old saying goes, "Everyone is entitled to their own opinion -- they are not entitled to their own facts." Unlike you, I can document my assertions.

Mirrorshades

Relax my brother. Maybe you have got a few flames against you but how could you not expect it? People are just being careful and if you are who you say you are then you should understand that. As far stating that you proved something (documented) I dont see it that way. You have belief in it some people dont. Oh well. Thanks for your input.

Oh yeah as far someone saying ban your IP address dont insult them cause there not as technically savvy as you....besides we both know its fairly easy spoofing your ip address with vpn so why even mention static IP's if you are so intelligent?

[imajica]

Jesus christ, I was gonna stay out of this one, but fck it. Welcome mirrorshades don't know who you are and thanks for your concern and wanting to help all in learning about ways to stay private on the net. Tor is a great program and has worked well for me for many years, furkin slow though.
I think though that this site is probably not the best place to impart your knowledge, some peeps may really appriciate it, but most wiil probs be concerned and really these guys know what they are doing in their chosen lifestyle and help the newbies like myself as well. Personally I think that the guys who are weary of you and your motives are doing the right thing and following thier natural gut instincts, which have served them well and kept them and thier privacy safe. I'm not dissin you, just my two cents worth and you know that if the man want's you, he finds you. Anyhow, feel free to tell me to furk off as I'm only a newbie if you wish, but man your original post was strange reading.