• Members of the previous forum can retrieve their temporary password here, (login and check your PM).

Secure DMT-Nexus?

Migrated topic.

5th Dimensional

Rising Star
Joined
Apr 9, 2012
Messages
87
Merits
42
I just noticed for the first time that there is a secure 'lock' on the address bar next to www.dmt-nexus. What does this mean? What is the site secure from?

I often wondered if someone could just trace one's isp address to find if they are doing anything mischievous at home, after posting un-legal activity or from ordering un-legal supplies.

"Just because you are paranoid does not mean that they are not after you." -Kobain

Paranoia!

-Peace
 
From what i understand of tcp/ip packets, the data contained within the packet is encrypted using https connections. End to end from server to requester (you). In tcp/ip theres two parts to each packet, the data and the header. IDK about the header, which contains routing data as to who is requesting the info (your ip), and the server's ip. If thats not encrypted then it would be easy as pie for a middle man to see who is requesting the data from whom (ip addresses), assuming https does not encrypt that data.

If your worried about a man in the middle seeing those ip addresses, which i am fairly sure is not encrypted in https, you may want to consider a VPN. It will route your requests to another IP address through a secure encrypted tunnel that only shows up as random data to anyone watching, and the header data containing ip's is encrypted (i think, but if not it will just be showing your ip and the vpn's ip). The VPN server will send a request to the website in question, and then route the reply back to you, and the header from the VPN server will be their IP and not yours & v/v.

If you trust your VPN provider to not keep records of ip's, then using a VPN is a fairly safe way to ensure your IP is not linked to the requests/responses from the server hosting the website in question. But many ISP's log this data, required to do so by law, but not in all countries. 😉 There's still some bastions of privacy and democracy in europe.

Really though, if they want to know who a particular person attempting to hide their IP is, there is no security gaurd's that will help. There's always ways around these precautions, and at most its makes it more of a hassle, but never impossible for whoever is doing the investigating. And theres always laws (in the us at least), that forces ISP's to cooperate with authorities without warrants in many cases.

Privacy on the internet exists to the extent of the skill/intelligence/power of who is trying to take your right to privacy away, and who is trying to retain their privacy/anonymity. And with high level GOV agencies, they will just use their "brains" to hack/illicitly gain access to data that reveals the identity of who they are searching for. If they really want to find out the face/identity behind whoever they want to, they will.

Take precautions, but always assume that theres no security, because there isn't depending on who's looking. Privacy/Anonymity on the internet is a cat and mouse game, and you have to be proactive if you want to be one step ahead.

If your really paranoid, aircrack/use free wifi access points, a truecrypted netbook with no personal data on it, and a spoofed mac address using a vpn provider you can trust. But once again, thats not foolproof, though its good enough unless you are actively being sought after by people with real power and skills, if thats the case the internet is not for you. Most people don't fall into that category though.

I recommend doing some reading into the tech behind the internet, and the protocols that do all the work for users. Its alot of work, and hard to understand at first, but you can get a rough idea from doing some researching into the subject.


And on a side note, always use randomly generated 15+ character passwords, at a minimum, for anything you need a reasonable degree of security for.
 
Very informative post Day Tripper. It may be worth pointing out that these levels of anonymity (VPN, hacked wifi, encrypted OS with no personal data etc) are almost certainly not necessary for posting on the nexus, the level of security provided here (HTTPS, IP addresses encrypted off-site, identifying info like email address encrypted off-site) should be high enough to stop it from being worthwhile for any adversary to waste the time and resources required to get around these measures. For it to be worthwhile for them to break these protections they would need to be attempting to catch a wholesale producer/distributor, and since we are all small fry who just like to extract for our own fun, and in fact even hinting at desire to produce wholesale will get you in trouble here, it is highly unlikely anyone would waste their time just to hit a couple of hippies with misdemeanor drug charges.

A more obvious step to take if you are worried about anonymity here but not worried enough to go the full disk encryption and VPN route is to use Tor. Also another little bit of advice is that in general Linux systems are far more secure than Windows systems. Using Linux and Tor is more than enough for visiting this site (assuming you don't live in North Korea or somewhere else with that level of intrusion).

I don't use anything for visiting this site, I just come to it directly. I am confident that for where I live there would just be no motivation for any agency to expend the resources to find out who I am... there is nothing in it for them.
 
And for anyone who would want to come after us, that would be a complete injustice and a hindrance to the evolution of humanity.
 
just wondering if some things or sections on this site that can be hidden from google search. so we might talk about things we wish not to let everyone and their cyber dog know about!! ?
 
Electric Kool-Aid said:
just wondering if some things or sections on this site that can be hidden from google search. so we might talk about things we wish not to let everyone and their cyber dog know about!! ?
Currently the suppliers section is the only one that is not indexed for non-security reasons: Suppliers talk belongs in the suppliers section

And I wonder where you want to talk about that should not be indexed? And you do know that just making an account here makes those parts visible again and thus it is no security at all?


Kind regards,

The Traveler
 
The Day Tripper said:
If you trust your VPN provider to not keep records of ip's, then using a VPN is a fairly safe way to ensure your IP is not linked to the requests/responses from the server hosting the website in question.

And on a side note, always use randomly generated 15+ character passwords, at a minimum, for anything you need a reasonable degree of security for.

Trusting an unknown organization with my personal safety, seems quite a step. Personally, I wouldn't go there.

As for passwords, despite what girls say, length counts. Pick a sentence with lowercase, uppercase, number and a symbol. It definitely beats remembering AheFor4t5fDsi4S :p
 
basically the "secure" lock means exactly this:

somebody tracing your network (like your isp for example) can see that there is data coming from you going to dmt-nexus but they can't see what is actually being sent, just that there is traffic.

So basically they can still find you if they ever managed to get a court order to receive all the logfiles of dmt-nexus (if they log anything). But if you assume this to be an issue you are being overly paranoid and should not be searching anything about any kind of drugs on google or visit any drug related site at all.
 
Shaolin said:
The Day Tripper said:
If you trust your VPN provider to not keep records of ip's, then using a VPN is a fairly safe way to ensure your IP is not linked to the requests/responses from the server hosting the website in question.

And on a side note, always use randomly generated 15+ character passwords, at a minimum, for anything you need a reasonable degree of security for.

Trusting an unknown organization with my personal safety, seems quite a step. Personally, I wouldn't go there.

As for passwords, despite what girls say, length counts. Pick a sentence with lowercase, uppercase, number and a symbol. It definitely beats remembering AheFor4t5fDsi4S :p
Or even better. Don't remember your password but use a tool that manages your passwords like keepass

Apart for the password that i need to log in to my computer and the password required for keepass i do not know any of my passwords..
 
cosmickees said:
So basically they can still find you if they ever managed to get a court order to receive all the logfiles of dmt-nexus (if they log anything).
No internet server log files are kept for your visits to the DMT-Nexus.

Your IP address is stored with your initial registration and with every post that is made.

However, those IP addresses (and your e-mail address) are stored completely encrypted and the encryption is done via an offsite machanism that uses Rijndael with 256bit block size, a key that is 200 characters long, salted and multiple passes. Because the encryption is done offsite no decryption key is stored on the DMT-Nexus server, meaning that grabbing the server will not make those IP's/e-mail addresses visible.

I, of course, do not know that offsite key so I cannot ever provide that if I'm court ordered. Also the key is automatically erased from the offsite server with a killswitch that can be activited in several (automated) ways.


Kind regards,

The Traveler


p.s. This is an example of an encrypted e-mail address:
Code:
B1B/m6UrnGWBY6gpWJ5V5hIdDwGBx/1YhGEqRKHXEWIXF5q3AKMaje9/PAsc1yIn2duyH
pSvHG6INn27Y2J5sQGG7yUJRVQV2AFabhsnXC8yh4S0iic6G1A7HbIS/PTQ6zbPDf3M4T
bqeHemGdzO26qhQs22lAt2Kfgg/OhYynNBqKAgmXE8qoazDkgxV9nkJKqJmt0RS4YHCvV
3CUaVTPUrTH1hBC6t1kDgzgbl96h4tk0SfNB/BnXLCOkA0UPRjpW+wtvakg8UT8/a60Uv
jGV0LU20ViyqdD+HtfcL8qpTzBvLw0gWJp7lKVv0b5IbBayeeO7nPBCwTVqVv1YICL3Id
n3Rfo3uIo+UORi1B50Uou6oTk9r99S1IeYn+GA54mroTZ3wJsGvG9zawuQTMASWp4jOO/
rQ+GxG4C2GT6BkZuJJuhHM6BW/xLJOc4ltEwr8S2xK+HMDKwV3AocEVu+5R3Rp5uQdSWb
WPWDSCmN1Ukz2e6TXT2q5puhv+aRs4mrvntm1OeExZrQtBtP2BbALAUjekGzEfQ+mWIvi
b7wLoG+I2iRWn1LFoRt7IOhesWLs+OZh4KVdugT/w8oWn7QnMvsOpt8jSTs0EK+S+2A4u
L/0vrl9ZUuK7d8B6b3XBcTKj/sRCplC9sEuREZgWjKOxojDTsRKypGsYks774zZHGmNdb
LkaAqZW8r9hedadOaYD6OqSaK+2eBJeKFi5Obp7rK2yWsSch9hZOCK1ronlHrtE2W59T6
dMHop2AS4OJ5EYkxRGUQpsMBqZ82rNWnBnb/4oBNAQOLCdN6N1EM/By2dWgIrHWAxx9xf
gDREImvCBtCFdSx50Xsr4q1cFcbF8RVpxFMHAOJWfE3ZxF6PWRuWNb4xPLulVPo3Y02BF
6gWpJSldjrnmC5e6NDh9YMcvr5Cu03cF1PFFgi/2R23uo3Mr+sJG1uyyZqmlw6fOUu2oK
qd97/WsvqBR/IiLtBQGAfAX5jlagpoQOJrAg95PgvY5DW+xxx4Uryo2SgJUUJoBBGjd4R
/TKf6mytqFyIgEDb7/Po6DoSyrdYJv26YiLqWt21Mwv0vATMSnUdppO1jmqTq92yk4RjU
f+K5ZPdFZUtzf/LekvVPAPHzRf9PA1NXkNkvwoCi++YboXrKim2cA9gsDF/fYxyhkO3MQ
i7SIZpi4y2wPn4e1wvl38+ifXT+7BFBhAtoKgJfxtsJNsttAi2nN0lmtde0zrZAMNXDCN
sZhFyyoNDmUvegjhv+hrqNZh+686upTilXCnxeSU2ZhLO3641KRKJRkdLS59t7vaOVa4o
QUqkh3muM42bddDcZ81NNt0pzBiJK4nJsDXrpY39XKEknNgbEAm3yghnbqfmBhgfrx1cu
3drZR7IlKF/GEm58PrWUQ4mGqy9YBCmvvy96iGogi++TO5qFObn0Ojo0WzROQg+ZNYcy1
q0=
 
Back
Top Bottom