Category Archives: cryptology

05/1/13

Tor – Unix Commands

gAtO hAs- been in linux onion-land for too long but I found these unix commands to help me out with my work, so I wanted to share them. – well at least it helps the gAtO.

Command Description
• apropos whatis Show commands pertinent to string. See also threadsafe
• man -t ascii | ps2pdf – > ascii.pdf make a pdf of a manual page
  which command Show full path name of command
  time command See how long a command takes
• time cat Start stopwatch. Ctrl-d to stop. See also sw
dir navigation
• cd - Go to previous directory
• cd Go to $HOME directory
  (cd dir && command) Go to dir, execute command and return to current dir
• pushd . Put current dir on stack so you can popd back to it
file searching
• alias l=’ls -l –color=auto’ quick dir listing
• ls -lrt List files by date. See also newest and find_mm_yyyy
• ls /usr/bin | pr -T9 -W$COLUMNS Print in 9 columns to width of terminal
  find -name ‘*.[ch]‘ | xargs grep -E ‘expr’ Search ‘expr’ in this dir and below. See also findrepo
  find -type f -print0 | xargs -r0 grep -F ‘example’ Search all regular files for ‘example’ in this dir and below
  find -maxdepth 1 -type f | xargs grep -F ‘example’ Search all regular files for ‘example’ in this dir
  find -maxdepth 1 -type d | while read dir; do echo $dir; echo cmd2; done Process each item with multiple commands (in while loop)
• find -type f ! -perm -444 Find files not readable by all (useful for web site)
• find -type d ! -perm -111 Find dirs not accessible by all (useful for web site)
• locate -r ‘file[^/]*\.txt’ Search cached index for names. This re is like glob *file*.txt
• look reference Quickly search (sorted) dictionary for prefix
• grep –color reference /usr/share/dict/words Highlight occurances of regular expression in dictionary
archives and compression
  gpg -c file Encrypt file
  gpg file.gpg Decrypt file
  tar -c dir/ | bzip2 > dir.tar.bz2 Make compressed archive of dir/
  bzip2 -dc dir.tar.bz2 | tar -x Extract archive (use gzip instead of bzip2 for tar.gz files)
  tar -c dir/ | gzip | gpg -c | ssh user@remote ‘dd of=dir.tar.gz.gpg’ Make encrypted archive of dir/ on remote machine
  find dir/ -name ‘*.txt’ | tar -c –files-from=- | bzip2 > dir_txt.tar.bz2 Make archive of subset of dir/ and below
  find dir/ -name ‘*.txt’ | xargs cp -a –target-directory=dir_txt/ –parents Make copy of subset of dir/ and below
  ( tar -c /dir/to/copy ) | ( cd /where/to/ && tar -x -p ) Copy (with permissions) copy/ dir to /where/to/ dir
  ( cd /dir/to/copy && tar -c . ) | ( cd /where/to/ && tar -x -p ) Copy (with permissions) contents of copy/ dir to /where/to/
  ( tar -c /dir/to/copy ) | ssh -C user@remote ‘cd /where/to/ && tar -x -p’ Copy (with permissions) copy/ dir to remote:/where/to/ dir
  dd bs=1M if=/dev/sda | gzip | ssh user@remote ‘dd of=sda.gz’ Backup harddisk to remote machine
rsync (Network efficient file copier: Use the –dry-run option for testing)
  rsync -P rsync://rsync.server.com/path/to/file file Only get diffs. Do multiple times for troublesome downloads
  rsync –bwlimit=1000 fromfile tofile Locally copy with rate limit. It’s like nice for I/O
  rsync -az -e ssh –delete ~/public_html/ remote.com:’~/public_html’ Mirror web site (using compression and encryption)
  rsync -auz -e ssh remote:/dir/ . && rsync -auz -e ssh . remote:/dir/ Synchronize current directory with remote one
ssh (Secure SHell)
  ssh $USER@$HOST command Run command on $HOST as $USER (default command=shell)
• ssh -f -Y $USER@$HOSTNAME xeyes Run GUI command on $HOSTNAME as $USER
  scp -p -r $USER@$HOST: file dir/ Copy with permissions to $USER’s home directory on $HOST
  scp -c arcfour $USER@$LANHOST: bigfile Use faster crypto for local LAN. This might saturate GigE
  ssh -g -L 8080:localhost:80 root@$HOST Forward connections to $HOSTNAME:8080 out to $HOST:80
  ssh -R 1434:imap:143 root@$HOST Forward connections from $HOST:1434 in to imap:143
  ssh-copy-id $USER@$HOST Install public key for $USER@$HOST for password-less log in
wget (multi purpose download tool)
• (cd dir/ && wget -nd -pHEKk http://www.pixelbeat.org/cmdline.html) Store local browsable version of a page to the current dir
  wget -c http://www.example.com/large.file Continue downloading a partially downloaded file
  wget -r -nd -np -l1 -A ‘*.jpg’ http://www.example.com/dir/ Download a set of files to the current directory
  wget ftp://remote/file[1-9].iso/ FTP supports globbing directly
• wget -q -O- http://www.pixelbeat.org/timeline.html | grep ‘a href’ | head Process output directly
  echo ‘wget url’ | at 01:00 Download url at 1AM to current dir
  wget –limit-rate=20k url Do a low priority download (limit to 20KB/s in this case)
  wget -nv –spider –force-html -i bookmarks.html Check links in a file
  wget –mirror http://www.example.com/ Efficiently update a local copy of a site (handy from cron)
networking (Note ifconfig, route, mii-tool, nslookup commands are obsolete)
  ethtool eth0 Show status of ethernet interface eth0
  ethtool –change eth0 autoneg off speed 100 duplex full Manually set ethernet interface speed
  iwconfig eth1 Show status of wireless interface eth1
  iwconfig eth1 rate 1Mb/s fixed Manually set wireless interface speed
• iwlist scan List wireless networks in range
• ip link show List network interfaces
  ip link set dev eth0 name wan Rename interface eth0 to wan
  ip link set dev eth0 up Bring interface eth0 up (or down)
• ip addr show List addresses for interfaces
  ip addr add 1.2.3.4/24 brd + dev eth0 Add (or del) ip and mask (255.255.255.0)
• ip route show List routing table
  ip route add default via 1.2.3.254 Set default gateway to 1.2.3.254
• host pixelbeat.org Lookup DNS ip address for name or vice versa
• hostname -i Lookup local ip address (equivalent to host `hostname`)
• whois pixelbeat.org Lookup whois info for hostname or ip address
• netstat -tupl List internet services on a system
• netstat -tup List active connections to/from system
windows networking (Note samba is the package that provides all this windows specific networking support)
• smbtree Find windows machines. See also findsmb
  nmblookup -A 1.2.3.4 Find the windows (netbios) name associated with ip address
  smbclient -L windows_box List shares on windows machine or samba server
  mount -t smbfs -o fmask=666,guest //windows_box/share /mnt/share Mount a windows share
  echo ‘message’ | smbclient -M windows_box Send popup to windows machine (off by default in XP sp2)
text manipulation (Note sed uses stdin and stdout. Newer versions support inplace editing with the -i option)
  sed ‘s/string1/string2/g’ Replace string1 with string2
  sed ‘s/\(.*\)1/\12/g’ Modify anystring1 to anystring2
  sed ‘/^ *#/d; /^ *$/d’ Remove comments and blank lines
  sed ‘:a; /\\$/N; s/\\\n//; ta’ Concatenate lines with trailing \
  sed ‘s/[ \t]*$//’ Remove trailing spaces from lines
  sed ‘s/\([`"$\]\)/\\\1/g’ Escape shell metacharacters active within double quotes
• seq 10 | sed “s/^/      /; s/ *\(.\{7,\}\)/\1/” Right align numbers
• seq 10 | sed p | paste – - Duplicate a column
  sed -n ’1000{p;q}’ Print 1000th line
  sed -n ’10,20p;20q’ Print lines 10 to 20
  sed -n ‘s/.*<title>\(.*\)<\/title>.*/\1/ip;T;q’ Extract title from HTML web page
  sed -i 42d ~/.ssh/known_hosts Delete a particular line
  sort -t. -k1,1n -k2,2n -k3,3n -k4,4n Sort IPV4 ip addresses
• echo ‘Test’ | tr ‘[:lower:]‘ ‘[:upper:]‘ Case conversion
• tr -dc ‘[:print:]‘ < /dev/urandom Filter non printable characters
• tr -s ‘[:blank:]‘ ‘\t’ </proc/diskstats | cut -f4 cut fields separated by blanks
• history | wc -l Count lines
set operations (Note you can export LANG=C for speed. Also these assume no duplicate lines within a file)
  sort file1 file2 | uniq Union of unsorted files
  sort file1 file2 | uniq -d Intersection of unsorted files
  sort file1 file1 file2 | uniq -u Difference of unsorted files
  sort file1 file2 | uniq -u Symmetric Difference of unsorted files
  join -t’\0′ -a1 -a2 file1 file2 Union of sorted files
  join -t’\0′ file1 file2 Intersection of sorted files
  join -t’\0′ -v2 file1 file2 Difference of sorted files
  join -t’\0′ -v1 -v2 file1 file2 Symmetric Difference of sorted files
math
• echo ‘(1 + sqrt(5))/2′ | bc -l Quick math (Calculate ?). See also bc
• seq -f ’4/%g’ 1 2 99999 | paste -sd-+ | bc -l Calculate ? the unix way
• echo ‘pad=20; min=64; (100*10^6)/((pad+min)*8)’ | bc More complex (int) e.g. This shows max FastE packet rate
• echo ‘pad=20; min=64; print (100E6)/((pad+min)*8)’ | python Python handles scientific notation
• echo ‘pad=20; plot [64:1518] (100*10**6)/((pad+x)*8)’ | gnuplot -persist Plot FastE packet rate vs packet size
• echo ‘obase=16; ibase=10; 64206′ | bc Base conversion (decimal to hexadecimal)
• echo $((0x2dec)) Base conversion (hex to dec) ((shell arithmetic expansion))
• units -t ’100m/9.58s‘ ‘miles/hour’ Unit conversion (metric to imperial)
• units -t ’500GB’ ‘GiB’ Unit conversion (SI to IEC prefixes)
• units -t ’1 googol’ Definition lookup
• seq 100 | (tr ‘\n’ +; echo 0) | bc Add a column of numbers. See also add and funcpy
calendar
• cal -3 Display a calendar
• cal 9 1752 Display a calendar for a particular month year
• date -d fri What date is it this friday. See also day
• [ $(date -d '12:00 +1 day' +%d) = '01' ] || exit exit a script unless it’s the last day of the month
• date –date=’25 Dec’ +%A What day does xmas fall on, this year
• date –date=’@2147483647′ Convert seconds since the epoch (1970-01-01 UTC) to date
• TZ=’America/Los_Angeles’ date What time is it on west coast of US (use tzselect to find TZ)
• date –date=’TZ=”America/Los_Angeles” 09:00 next Fri’ What’s the local time for 9AM next Friday on west coast US
locales
• printf “%’d\n” 1234 Print number with thousands grouping appropriate to locale
• BLOCK_SIZE=\’1 ls -l Use locale thousands grouping in ls. See also l
• echo “I live in `locale territory`” Extract info from locale database
• LANG=en_IE.utf8 locale int_prefix Lookup locale info for specific country. See also ccodes
• locale -kc $(locale | sed -n ‘s/\(LC_.\{4,\}\)=.*/\1/p’) | less List fields available in locale database
recode (Obsoletes iconv, dos2unix, unix2dos)
• recode -l | less Show available conversions (aliases on each line)
  recode windows-1252.. file_to_change.txt Windows “ansi” to local charset (auto does CRLF conversion)
  recode utf-8/CRLF.. file_to_change.txt Windows utf8 to local charset
  recode iso-8859-15..utf8 file_to_change.txt Latin9 (western europe) to utf8
  recode ../b64 < file.txt > file.b64 Base64 encode
  recode /qp.. < file.qp > file.txt Quoted printable decode
  recode ..HTML < file.txt > file.html Text to HTML
• recode -lf windows-1252 | grep euro Lookup table of characters
• echo -n 0×80 | recode latin-9/x1..dump Show what a code represents in latin-9 charmap
• echo -n 0x20AC | recode ucs-2/x2..latin-9/x Show latin-9 encoding
• echo -n 0x20AC | recode ucs-2/x2..utf-8/x Show utf-8 encoding
CDs
  gzip < /dev/cdrom > cdrom.iso.gz Save copy of data cdrom
  mkisofs -V LABEL -r dir | gzip > cdrom.iso.gz Create cdrom image from contents of dir
  mount -o loop cdrom.iso /mnt/dir Mount the cdrom image at /mnt/dir (read only)
  cdrecord -v dev=/dev/cdrom blank=fast Clear a CDRW
  gzip -dc cdrom.iso.gz | cdrecord -v dev=/dev/cdrom - Burn cdrom image (use dev=ATAPI -scanbus to confirm dev)
  cdparanoia -B Rip audio tracks from CD to wav files in current dir
  cdrecord -v dev=/dev/cdrom -audio -pad *.wav Make audio CD from all wavs in current dir (see also cdrdao)
  oggenc –tracknum=$track track.cdda.wav -o track.ogg Make ogg file from wav file
disk space (See also FSlint)
• ls -lSr Show files by size, biggest last
• du -s * | sort -k1,1rn | head Show top disk users in current dir. See also dutop
• du -hs /home/* | sort -k1,1h Sort paths by easy to interpret disk usage
• df -h Show free space on mounted filesystems
• df -i Show free inodes on mounted filesystems
• fdisk -l Show disks partitions sizes and types (run as root)
• rpm -q -a –qf ‘%10{SIZE}\t%{NAME}\n’ | sort -k1,1n List all packages by installed size (Bytes) on rpm distros
• dpkg-query -W -f=’${Installed-Size;10}\t${Package}\n’ | sort -k1,1n List all packages by installed size (KBytes) on deb distros
• dd bs=1 seek=2TB if=/dev/null of=ext3.test Create a large test file (taking no space). See also truncate
• > file truncate data of file or create an empty file
monitoring/debugging
• tail -f /var/log/messages Monitor messages in a log file
• strace -c ls >/dev/null Summarise/profile system calls made by command
• strace -f -e open ls >/dev/null List system calls made by command
• strace -f -e trace=write -e write=1,2 ls >/dev/null Monitor what’s written to stdout and stderr
• ltrace -f -e getenv ls >/dev/null List library calls made by command
• lsof -p $$ List paths that process id has open
• lsof ~ List processes that have specified path open
• tcpdump not port 22 Show network traffic except ssh. See also tcpdump_not_me
• ps -e -o pid,args –forest List processes in a hierarchy
• ps -e -o pcpu,cpu,nice,state,cputime,args –sort pcpu | sed ‘/^ 0.0 /d’ List processes by % cpu usage
• ps -e -orss=,args= | sort -b -k1,1n | pr -TW$COLUMNS List processes by mem (KB) usage. See also ps_mem.py
• ps -C firefox-bin -L -o pid,tid,pcpu,state List all threads for a particular process
• ps -p 1,$$ -o etime= List elapsed wall time for particular process IDs
• last reboot Show system reboot history
• free -m Show amount of (remaining) RAM (-m displays in MB)
• watch -n.1 ‘cat /proc/interrupts’ Watch changeable data continuously
• udevadm monitor Monitor udev events to help configure rules
system information (see also sysinfo) (‘#’ means root access is required)
• uname -a Show kernel version and system architecture
• head -n1 /etc/issue Show name and version of distribution
• cat /proc/partitions Show all partitions registered on the system
• grep MemTotal /proc/meminfo Show RAM total seen by the system
• grep “model name” /proc/cpuinfo Show CPU(s) info
• lspci -tv Show PCI info
• lsusb -tv Show USB info
• mount | column -t List mounted filesystems on the system (and align output)
• grep -F capacity: /proc/acpi/battery/BAT0/info Show state of cells in laptop battery
# dmidecode -q | less Display SMBIOS/DMI information
# smartctl -A /dev/sda | grep Power_On_Hours How long has this disk (system) been powered on in total
# hdparm -i /dev/sda Show info about disk sda
# hdparm -tT /dev/sda Do a read speed test on disk sda
# badblocks -s /dev/sda Test for unreadable blocks on disk sda
interactive (see also linux keyboard shortcuts)
• readline Line editor used by bash, python, bc, gnuplot, …
• screen Virtual terminals with detach capability, …
• mc Powerful file manager that can browse rpm, tar, ftp, ssh, …
• gnuplot Interactive/scriptable graphing
• links Web browser
• xdg-open . open a file or url with the registered desktop application

 

 

Share on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit
03/24/13

Tor is NOT the ONLY Anonymous Network

gAtO fOuNd – this very interesting and wanted to share -

Tor does some things good, but other anonymous networks do other things better. Only when used together do they work best. And of course you want to already know how to use them should something happen to Tor and you are forced to move to another network.fin_07

Try them! You may even find something interesting you cannot find on Tor!

Anonymous networks

These are well known and widely deployed anonymous networks that offer strong anonymity and high security. They are all open source, in active development, have been online for many years and resisted attack attempts. They run on multiple operating systems and are safe to use with default settings. All are well regarded.

  • Tor – Fast anonymous internet access, hidden websites, most well known.
  • I2P – Hidden websites, anonymous bittorrent, mail, out-proxy to internet, other services.
  • Freenet – Static website hosting, distributed file storage for large files, decentralized forums.

Less well known

Also anonymous networks, but less used and possibly more limited in functionality.

  • GnuNet – Anonymous distributed file storage.
  • OneSwarm – Bittorrent, has a non-anonymous mode, requires friends for anonymity.
  • RetroShare – File-sharing, chat, forums, mail. Requires friends, and not anonymous to those friends, only the rest of the network.
  • Omemo – Distributed social storage platform. Uncertain to what extent it is anonymous.

Non-free networks

These are anonymous networks, but are not open source. Therefore their security and anonymity properties is hard to impossible to verify, and though the applications are legit, they may have serious weaknesses. Do not rely on them for strong anonymity.

  • Osiris – Serverless portal system, does not claim to provide any real anonymity.

In development

  • Phantom – Hidden Services, native IPv6 transport.
  • GlobaLeaks – Open Source Whistleblowing Framework.
  • FreedomBox – Project to create personal servers for distributed social networking, email and audio/video communications.
  • Telex – A new way to circumvent Internet censorship.
  • Project Byzantium – Bootable live distribution of Linux to set up wireless mesh nodes with commonly available hardware.
  • Hyperboria A distributed meshnet built on cjdns.

Routing Platforms

These are internets overlaid on the internet. They provide security via encryption, but only provides weak to none anonymity on their own. Only standard tools such as OpenVPN and Quagga are required to connect. Responsibility for a sufficiently anonymous setup is placed on the user and their advertised routes. More suited for private groups as things out in the open can be firewalled by other participants. Can be layered above or below other anonymity nets for more security and fun.

  • Anonet – AnoNet2, a more open replacement for AnoNet1.
  • dn42 – Another highly technical routing community.
  • CJDNS, an IPV6 overlay network that provides end to end encryption. It is not anonymous by itself.

Alternative Internet

  • Netsukuku – A project that aims to build a global P2P online network completely independent from the Internet by using Wi-Fi. The software is still in active development, although the site is no longer updated. A new site is in progress of being built.
  • Many other wireless communities building mesh networks as an alternative to the Internet, e.g. Freifunk, http://guifi.net and many more around the globe. see also

Alternative domain name systems

  • Namecoin – Cryptocurrency with the added ability to support a decentralised domain name system currently as a .bit.
  • OpenNIC – A user controlled Network Information Center offering a democratic, non-national, alternative to the traditional Top-Level Domain registries.
  • Dot-P2P – Another decentralized DNS service without centralized registry operators (at July 18, 2012 page is not accessible and has not known anything about the status of project from February 2011).

See Also

Share on TumblrSubmit to StumbleUponhttp://uscyberlabs.com/blog/wp-content/uploads/2012/03/fin_07.tiffDigg ThisSubmit to reddit
01/12/13

MtGox scam attempt

gAtO FoUnD a – Cyber Crooks – a user with the nick ‘torstatusnet’ dropped by today posting false claims that the MtGox is now on the .onion network.

Finally MtGox network Tor! Dear friends MtGox site has finally an anonymous site on Tor network Now it is possible to make anonymous transactions in the world’s largest portfolio of bitcoins. I thought they would never join the Tor network, but announced on her website that the new site is in http://6xjgdqlmvesefnkp.onion/. It seems that the MtGox guarantee confidentiality, and I think that will become the major tool for exchanging bitcoins … Pass by there and check …

So here’s the thing (It’s clearly a scam), took 2 minutes to figure it out.
First of all there’s NO official info from MtGox that they have a onion url.
Second is the error message that shows when you enter any random data into the login.
It routes you to this error:

http://6xjgdqlmvesefnkp.onion.bd.to/login.php

The system has an error. Sorry for the inconvenience, we will try to fix it as soon as possible. Thank you.
If you look closely at the onion url it routes a clearnet domain.

The system has an error. Sorry for the inconvenience, we will try to fix it as soon as possible. Thank you.

<!-- Hosting24 Analytics Code -->
<script type="text/javascript" src="http://stats.hosting24.com/count.php"></script>
<!-- End Of Analytics Code -->

Also the clearnet domain contains the following:

http://6xjgdqlmvesefnkp.onion.bd.to/

Your website is up and running!

Share on TumblrSubmit to StumbleUponhttp://www.000webhost.com/images/index/php.gifDigg ThisSubmit to reddit
01/7/13

Happy Birthday Bitcoin -Book Release Jan 9

Happy Birthday Bitcoin – Available NOW-eBook -http://www.amazon.com/dp/B00AYA4SVS

bitcoin_cover_cut_02

Jan 9 new Book release -Digital Virtual Currency and Bitcoins -The Dark Web Financial Markets – Exchanges & Secrets

On this day Bitcoin turns 4 years old. As any 4 year old will tell you this has been a wild ride. From a little know digital currency to today’s acceptance into the legal banks and marketplace this little currency that could has shocked world leaders, stunned banking officials all over the world trading and is today in the $13.5-USD range.

Pierluigi and I (gAtO) first came across this when we were covering Wikileak problems and writing our first book – The Deep Dark Web – the cyber underweb we’re finding this new currency and using it because it was working and had no government ties. Bitcoin has been vilified by most governments but the US -UK and it’s ties to currency transaction systems like Visa, Mastercard, PayPal and others (IMF and SEPA, SWIFT to name a few)  became the shot heard around the cyber world.

On the one hand you have Anonymous and other hacktivist using it to show how it cannot be controlled and the other side is the European Central Bank (ECB) published a report in Nov-2012 about finding a solution to Bitcoins place in (FRB) Fractional Reserve Banking, the cornerstone piece of all banks to create money out of thin air.

Thomas Jefferson said: “I sincerely believe that banking institutions are more dangerous to our liberties than standing armies. The issuing power should be taken from the banks and restores to the people to whom it properly belongs”

Digital virtual communities have exploded in recent years – this phenomenon is enabled by social media and the changing world we live in. In some cases some communities have created their own currency for exchange of goods and services but it has expanded to outside their own circles to provide a new medium of exchange, creating new digital virtual currencies that are changing the world.  Bitcoin-Central is now the first Bitcoin exchange to become a bank with guarantee funds insured up to EU$100,000.

When the ECB published that report it was the white flag of surrender but also assurance that the bankers can still control some of it’s power. Let’s face it FRB is the biggest scam by bankers – as they explain this system it is done to expand the economy by freeing up capital that can be loaned out to other parties. WoW that sound so nice of them to do this favor for us in reality it set’s up the cornerstone or their financial profits from nothing.

FRB is were someone deposits 100 dollars in a bank they are required by FRB laws to keep 10% in the vault but now they can loan out 90% of that deposit because they got the governments (us the tax payers) to insure that $100 deposit in case they make bad loans or to make sure they get their bonus checks. So if you came back to the bank to get your money out and they squandered your money on bad loans or just shoddy business practice -oh well no problems – the government will pay you back with our own tax dollars. In other words they take my tax dollars and pay me back with it and then they increase my taxes so that the bankers can keep doing the same thing over and over again. No responsibility and to think that bankers are look up to by business and in persons to be highly respected and good citizens- right!

This is the biggest scam in history they have no responsibility, no reason to be wise and make good investments because they have politicians in their pockets. You know those people that we voted for that are supposed to represent us the people, no they represent these scum’s the bankers. The funny thing that they have no control of Bitcoins like fiat currency. They cannot just print more money up; Bitcoins are created in a way that revolves around MATH – Yeah most people hate math but this time it works so good that these bankers have tried everything in their power to control Bitcoin and other digital currencies and they cannot; they failed.

I will be the one to first tell you that Bitcoins as they are today will NOT be the answer only 21 million total Bitcoins will ever be created and the world needs a bigger unit to scale this for a worldwide monetary solution. Other digital currencies will still be created because of the Bitcoin experiment; and as the world becomes more digitalized we will see that government or corporate control currency solutions will not be trusted by the world community.

Look at Canada’s attempt at Digital currency MintChip at first it was hailed as a winner the first digital currency backed by a world leader like Canada. But somehow after much fanfare and lots of money spent they awarded the team with a the best solution and hid it from everyone – it went to the back room in the filing cabinet never to be heard again. In the 2 or so years that the Canadian took to develop this system it was convinced (by the global bankers) that this would not work. Canafa caved in to the pressure and MintChip is dead – DOA

Maybe the bankers told them to shelf it, it would setup the premise that other governments could do the same and if they can bypass the current system like SEPA or SWIFT or IMF or the World Bank you see they control the financial system and if they don’t like you or you pissed them off they will not allow your country to function in it. Control of the financial network is how the “evil global bankers” control the toy box.

We hope that our new book will open up doors and minds to the possibilities of digital virtual currency and Bitcoin worldwide.

This book explores the new digital currencies and how they are changing the world. When we were researching -The Deep Dark Web book we saw that some of the criminal elements were using this new currency Bitcoin but we also saw that legit business were also adapting to this new currency. We hope to help you learn what is happening with this new currency we cover -Who uses this currency -What are the financial aspects – Governments, Business, Merchants and Criminals. In all we hope to guide you with some of the questions you have.

This book will be an invaluable resource for cyber security professionals, financial policy-makers, business experts, lawyers, merchants, scholars, and researchers, this book provides a comprehensive research from a International cyber security  perspective, technical, and financial implications of the new digital virtual currencies.

 

keywords- digital currency, bitcoins, bitcoin, buying bitcoin, alternative currency, decentralized currency, e-currency,  cryptoxchange, online currency, money, bit coin, cryptocurrency, crypto-currency, bitcointalk, bitcoin talk, exchange, usd, euro, market, bitcoins, transaction, transfer, credit card, bit coin mining, gpu,  virtual currency, cryptopunk, Digital virtual currency,

Share on TumblrSubmit to StumbleUponhttp://uscyberlabs.com/blog/wp-content/uploads/2013/01/bitcoin_cover_cut_02.jpgDigg ThisSubmit to reddit
12/18/12

Legality of Bitcoins-Digital Currency?

gAtO gOt -Questions -Virtual Currency Real or Not- Reward Point, or bonus dollars and other forms of digital virtual currencies are normal for credit cards, online game sites, social networks and other specialty merchants and websites it all about true and branding. This new revenue stream is something that merchants are becoming aware of without knowing or understanding the legal aspects of this new digital currency world.

How does digital currency work in governments or does it – is it tax free, can I take campaign contributions with Bitcoins?

There are federal laws about digital currencies (gift cards) that impose inactivity fees, refunds and unused currency to states or regulatory statue in different states, now apply this to the global online stage. Then throw in the 2009 Credit Card Accountability Responsibility and Disclosure Act and the state and federal gift certificate taxes and were do Bitcoins and others fit in. This could be a big financial mistake for budget starve cities, states and countries it’s a worldwide problems. mobile_transaction_01

So how does a merchant handle Digital currency if they decide to accept it for legal goods and service. For example My Book is for sale on my website using Mt.Gox BTC-Bitcoins – So how do I report my Bitcoins Sales 1.8 BTC so how does the Tax man handle the BTC-Bitcoin transaction?? If they accept Bitcoins then they are legal tender as long as I show sales and pay my Tax they now become legal tender by the State, and federal governments??? Right or is Bitcoin just like a Cash sales??? – These are the questions that need answers today, not tomorrow. I would think that governments may be losing revenue if they don’t think about how to handle virtual currencies transactions and incorporate them into the grand scheme of things (also known as red tape).

As smartphones and mobile pad devices increases worldwide more and more global customers are jumping on board. In the Asian gaming world it’s unstoppable people cannot not stop the online addiction and at a such a cheap price people in far away places are getting connected and this new market is a gem for corporations worldwide and e-currencies of any kind will be the new norm. This Jump in mobil devices and games alone will give digital currencies a gigantic boost. These new inexpensive mobile devices are taking farmers in remote villages and bringing them to our modern society very quickly. merchant_Cards

Mobile devices are going worldwide today reaching the remotes corners of civilization and connecting everyone. And they want to spend $$$$$- money- $$$$$

This new mobile computer platform is changing the social and financial aspect of the worldwide landscape. All digital currencies that users accept in and believe in will be accepted. Merchants cry —I don’t care how you pay me as long as you pay me. The privacy aspect of this new currency is another thing that makes this very attractive. When anyone (governments/hackers) can pull your bank records and see every transaction you made.

They know everything every transaction? do they ? -did you know that with Bitcoins all transactions are visible – so we all know someone paid 1.2 BTC and transferred it to wallet_X. You can create a new -alias-wallet for every transaction and this way nobody will ever see your real wallet number. We can hide the wallets, encrypt it, back it up in paper, we can have many wallets and change them so keeping your transactions private is free it comes with the Bitcoin protocol. This is why governments say that terrorist use Bitcoins and other digital currencies to do their evil business,-NAW- well a suitcase full of CASH does the same thing and without and exchange rate to transfer it to my fiat currency… so that fear tactic does not work.. next

Consumers and merchants demand and acceptance of new digital currency has begun and the “jeane is out of the bottle”. These new digital virtual currencies can have very positive aspects in terms of financial innovation and the provision of additional payment alternatives for consumers and that is real competition.

Japans Moba-coins are a fine example: “While popular gambling-style kompu gatcha titles — in which users pay for coins to win prizes — are being eradicated from Japan, DeNA notes that its Moba-coin virtual currency was nonetheless used in a record $689 million worth of transactions in the country”. this revenue stream is only from 40-50 million users imagine when we all hop on this bandwagon.

money009There are many examples of others developing virtual currencies for gaming: NHN Japan offers a global gaming virtual currency called Line Coins; KakaoTalk in Korea offer virtual currencies called Chocos; and Tencent’s Q-Bi in China is firmly entrenched as a virtual currency. All of these are driven by mobile internet gaming services and the real killer will be when the major payments processors get into the virtual payments space.

The legality of Bitcoins have been debated all year long around the world -France, UK, Brazil, United Sates, California, New Hamshire, New York City, Germany, Finland, Italy and even Franklin, TN, USA.

As the price of Bitcoins hovers around $13-14-USD from a low of $4.5-USD this summer. It has attracted the interest of Forex and other players. With the European Central Bank (they control the EURO) report on Bitcoins to be a real thing are getting serious. Then a month later Bitcoin-Central ( French company, Paymium ) becomes the first Bitcoin Bank to carry out functions of payment service provider like PayPal and Dwolla unit of currency. Remember Bitcoin was built to operate completely outside the influence of governments and financial institutions but now Bitcoin is a financial institution.

Whether Bitcoin takes off or not is not the question, some virtual currencies is going to explode thanks to merchants, consumers, in-app gaming via social media and things that have not been created so far. You may disagree, but the aggregation of large amounts of small payments is effectively building a virtual currency system. go to https://blockchain.info and watch the transactions live, check out the “Bitcoin Top100 Recent Transaction”, I seen 124k, 150k 100 times in 1 hour-/ of course trying to track the wallets down to and IP is kinda impossible but mistakes can happen. https://blockchain.info/largest-recent-transactions   network

As we are seeing in New Hampshire allowance to take Bitcoin for campaign contributions put’s Bitcoins directly in the U.S bulls-eye. After this latest presidential election cycle here in American we saw that money is the language of politics and Bitcoins will play a role in our next presidential race 4 years away. Oh did I mention that Bitcoin is only 4 years old on Jan 9. 2013 imagine what the virtual digital currency and Bitcoins will look like in 2016. So are Bitcoins sales like a cash type transactions for governments and are they legal. I think that it’s still in debate but governments running deficits should allow any currency that brings in taxes to the coffers. Are Bitcoins Legal – stay tuned -gAtO OuT

Bitcoinica Rise and Fall from grace:

http://www.bbc.co.uk/news/technology-19244210

Superior Court of California, County of San Francisco

Case Number: CGC-12-522983

Title: BRIAN CARTMELL et al VS. BITCOINICA LP, ALSO KNOWN AS BITCOINICA et al

Cause of Action: CONTRACT/WARRANTY

Generated: Dec-18-2012 6:32 pm PST

http://webaccess.sftc.org/Scripts/Magic94/mgrqispi94.dll?APPNAME=IJS&PRGNAME=ROA22&ARGUMENTS=-ACGC12522983

 

Share on TumblrSubmit to StumbleUponhttp://uscyberlabs.com/blog/wp-content/uploads/2012/12/mobile_transaction_01.pngDigg ThisSubmit to reddit
12/11/12

Tor Bot-Net – OLD news

gAtO bEeN- writing about Tor and the Bot-nets for a long time. I first saw this on the Tor Hacker boards in Mar of 2012. Some of the boys were asking about IRC Bots in Tor a natural fit. But come on a Zeus Bot-Net is easy as pie to setup in a hidden service. The fun thing is you don’t even need to run Tor on the zombie machine with a simple tor2web and we don’t need any stinking Tor Software to communicate with my C&C. https://otwxbdvje5ttplpv.tor2web.blutmagie.de check out my Tor site  “USCyberLabs.com in Tor” from a Tor2web service like http://torstatus.blutmagie.de

https://https://otwxbdvje5ttplpv.onion USCyberlabs in Tor -onion site

It’s such a big surprise but not really to anyone that plays in Tor like Pierluigi (http://securityaffairs.co/wordpress/  ) and myself but as cyber security people we understand that any technology like Tor will be used by bad actors. The issue I have is why don’t we White Hats use Tor in the same way.

If I have a critical DB for my customers why not send them to Tor to get the information. Why can’t regular business use Tor to do as the bad guys. Shield others from going after my BIG DATA. Store it in Tor and have people get it from Tor -// use Tor2Web // so no excuse that I have to run the Tor software on the client. Come on Business People think TOR and Cyber Security – It’s not that complicated and it’s proven crypto network technology — hide-scada-in-the-tor-network-hiding-in-plain-site

Now if you want to make it even more secure – A Secret Hidden Service in Tor – would make it impossible for anyone but my clients from even having access to my Website – You see with out the Secret Token – You can’t even see my Tor Server….

BitCoin Miners Bot-Nets are real HOT in Tor Land and why not–// I can run my Bitcoin Miner Server on my Tor Box so once again you have no way to find my Server and I can do all my Mining Free and anonymous  in Tor.

BitCoin Miners can even be done when you land on a web Page – YES I can have a Web Page on my site that when you go to it- You are Mining Bitcoins for me – No loading of Software to your computer and as long as you stay on my webPage your Mining for me. I can keep the miner hidden or I can tell you about it. It can be sued  like a Charity- a Bitcoin miner that mines Bitcoins for a cause –/can be setup. But criminals will use anything even Tor to make money.

gAtO will be setting up a WebPage on my site but I will let the users know that they are mining for me while they stay on that page and when they leave they are clean -// no Anti-Virus crap —// So I hope that you keep looking at Tor and solve Real world problems like business BIG DATA in Tor hidden service WebSite –safe and secure — what a concept -Safe and FREE and private legal business in Tor— gAtO OuT

Share on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit
12/3/12

Bitcoin and Policy Makers

gATO ReAd- that holiday madness spending increased by 35% by smart mobile devices – like phones and Pad devices these new devices are also the target of digital currencies everywhere. Companies see the need to integrate digital currencies no matter what into their revenue stream. Here are a few attempts:

American Express is the first financial giant to enter the Digital Virtual Currency game, it has payed 30-mill for Sometrics – a game money processor gamecoins.com so AE has taken the first steps into Virtual Digital Currency it see’s a future in this new revenue stream and their rewards packages so it’s a fit made in gamer heaven and American Express customer base.

American Express Gamer Digital Virtual Currency

Facebook is also on the fast track to makes it’s Payment business grow it’s Facebook Credits. The requirements for money transmitter licenses vary from state to state but in the global scale Facebook is ready to get it’s digital virtual currency into the Facebook arena.  From FaceBook filings -Payments. We provide an online payments infrastructure that enables Platform developers to receive payments from our users in an easy-to-use, secure, and trusted environment.

Google Bucks stopped short of launching – Google still made the code available- “bitcoinJ” still stand tall in googles codebase  — http://code.google.com/p/bitcoinj/  — .

Moba-coin In Japan DeNA available to players in the Mobage Digital gaming reports second quarter earnings – bringing in 700 million in Japan alone. Moba-coin rose outside Japan to about 30 Million. DeNa reports a 45% year to year 627 million up 38 percent over operational profits. Digital currencies are popping up everywhere local, regional to worldwide. Mastercard is also on the gray area of a deal in Bitcoin with BitInstant.com they are one of the gatekeepers of the Digital Virtual Currency marketplace and into Bitcoins -BTC -BitStamp, -DWolla or Mt.Gox and many more like a simple MoneyPak from Walmart and your in the Bitcoin business it’s that simple..

Bitinstant is one of the leaders in Cash to anything:

MoneyPak From:—  MoneyGram – CVS – Jewel/Osco – Duane Reade – Stater Bros. – Albersons – Walmart -

A Bitcoin WALLET is simple as apple pie – all Bitcoin are numbers/letters you want to send me some Bitcoins – HERE – 1DhBiBeYD4JNZvim4EefnEoFV2WMFc7e5d -  send it to my wallet. Were is my wallet well Online- you can have a wallet on your computer and of course have a paper backup of your primary key. Or you can us a service to keep your wallet but you have it encrypted  and you can have a backup of your wallet to your computer and once again on paper. Since the wallet is only needed to connect to the p2p Bitcoin network well you can get you money anywhere you have a connection and at least your paper key backup. https://blockchain.info/wallet is a good Wallet service and one they have lots of Bitcoin information to boot and yes gAtO stores his wallet here. I trust them but I have a backup.

How a bit coin Transaction Works:

http://occupycorporatism.com/wp-content/uploads/2012/11/06Bitcoin-1338412974774.jpg

Then we hear about Iran and Bitcoins:

Hyperinflation has made Iraian money dollar-less so now they are turning to (DC) Digital Currency Bitcoins. The advantage is that they can be swapped for US currency and kept outside the country. Iran is not the only one – As we see in Syria there Internet closure not only does it stop communication but it’s slowed down money escaping the country into cyberspace. This is another way for a government to stop the Digital Currency from expanding but these are drastic ways that cannot be kept up for long. The Internet will come back and so will the new digital dollars like Bitcoins.

So Iranians are poking holes by using Bitcoins with VPN’s and Tor :No I been checking TorStatus and Yes Syria has no Tor OR at all and Iran has 3-4 open ToR and a few Bad ones. So Tor is not a connection but a new outlet is the Internet in a suitcase used by the U.S during the Arab Spring is the same pokes and peeks that the dissidents are using to get to the outside world. But the fact is that they can get around and register offshore accounts that are protected from the Iranian government or economy. If Iranian keep using Bitcoins when they come out of sanctions and restrictions they are a major Oil country and Bitcoins may be intrenched into their economy. What happens to this currency???

Bitcoin has come out on top of most attempts to stop it but on it’s 4th birthday Jan 9 2013 this 4 year old is ready to pounce the worlds financial markets. Now Belgium-based Society Worldwide International Financial Transfer (SWIFT) is one of the gate-keepers that must be challenged. They serve as an International Financial Law interpreters like it blocks any Iranian bank blacklisted by the EU Union from using it’s International payment system. Do you think SWIFT wants a competition like Bitcoins with just about 0% transaction fees- that cuts to much into it’s base income model. The velocity of transfer is being deleted more and more by new digital currencies Bitcoin is just one of the first to survive.

Yeah I’a a Bitcoin supporter now but it’s still beta ware people, 21 million Bitcoins we need Bitcoin 2.0 for a world market economy maybe google BitcoinJ is the model??? - gAtO oUt 

—

Virtual Currency

 

System-D

Google Bucks

http://code.google.com/p/bitcoinj/

FaceBook Credits

http://www.americanbanker.com/issues/177_35/facebook-credits-money-transmitter-license-bank-regulation-1046825-1.html

American Express

Sometrics – Game Dollars

http://techcrunch.com/2011/09/20/american-express-buys-virtual-currency-monetization-platform-sometrics-for-30m/

High retail sales expected to drive revenue growth

Canada’s MintChip

BitCoin

Mastercard/Bitcoin

http://www.forbes.com/sites/abegarver/2012/08/24/bitcoin-mastercard-everywhere-you-shouldnt-be/

 

Share on TumblrSubmit to StumbleUponhttp://uscyberlabs.com/blog/wp-content/uploads/2012/12/DC_0202.tiffDigg ThisSubmit to reddit
11/29/12

Bitcoin and Forex Trading

gAtO lEaRn-that FOREX means the foreign exchange market or currency exchange where one type of currency is traded for another type. —/ USD to CAN – United States to Canada currency. So Bitcoin is just another currency why can’t we get this running right. //and/or do we want real Forex in this phase of the development and adoption of digital virtual currencies??? So who is playing the game with BTC=(Bitcoin) and getting it right. Well let’s just say it is developing and the players are starting to get it right, “I think so Cisco”

Forex Trader

Bitcoinica is one of the first attempt to jump on a new technology and do everything wrong. clue: Any business in cyberspace and especially one that deals with money, make sure you have good security. How about make sure your password for your e-wallet is a good one (@#$%^&g(*rre#$%^1076#$%^) my favorite password free here use this you stand a better chance. If you want to read more about it see Ref: below but they are still around but the reputation was really damaged. They are a legend on the Bitcoin Forum on how NOT to do it.

But really let’s take a look at FNIB – and Bit4X -

FNIB has gone through fire and rain and have proven themselves to be real as anything in the virtual world is real. They have made great YouTube Video in a bunch of languages to attract the global and lucrative  Forex market with Bitcoin and Swiftcoin. What is Swiftcoin well they FNIB have taken the Bitcoin open source and tweaked it a bit and now they have their own digital currency, with their own miners they control everything. FNIB have down some excellent work and built great video on Youtube. They have stood against peers – Bitcoin Forum and survived but this morning -Nov, 29 0748 EST – I could not get to the website – It was working last night —/ problems /- we will have to see – if I was using their system and I could not get to the website or my trading platform and I have money in this account – I would be worried.

Bit4X – the  new kid on the block -https://bitcointalk.org/index.php?topic=114818.0  – Once again I have to go to the forum to see what the players are saying because they are always on top of everything Bitcoins and gAtO is only a beginner.  Nov, 29 0748 EST their site loads up quick – 3-4 page only – Yeah and they use an standard MetaTrader4 Forex platform so are they legit – this is only a few months old so time will tell if they flush out.

Mapping out the BitCOin

Mt.Gox is a Japanese company that is building trust and reliability in the Bitcoin community :Mt.Gox K.K. offers a unique service, facilitating the exchange of Bitcoins between users globally in the currency of their choice. Multiple currency markets allow users to purchase and resell their Bitcoins in up to 16 different currencies, along with the ability to securely store Bitcoins in a virtual “vault” for safe keeping. :

Once again I am not the best gAtO to talk about trading I only day traded in 2007-2008 and we all know how good that venture went but Bitcoin and Forex is a one to one relationship if you want to check out the Bitcoin charts  – check it out -http://bitcoincharts.com/markets/  - gAtO OuT 

—Digital Virtual Currency That are used in the- Currency Exchange’s

Liberty Reserves – WebMoney-WMZ – LiqPay – QIWI – PayPal – OKPay – Payza/AlertPay – Yandex – UKash vouchers – SEPA bank transfer – USD,EUR,GBP (Credit & Debit cards via Skrill/Moneybookers) – CAD (cash deposit at Royal Bank, Bank of Montreal or ScotiaBank) – USD (Redeemable code from Mt. Gox) – USD (Dwolla) – USD (OKPay) – EUR/DKK (SEPA and wire transfer) – USD, EUR, GBP, DKK, SEK, NOK (Cash or check in the mail) -

AED, DZD, EGP, IQD, ILS, JOD, KWD, LGP, LYD, MRO, MYR, NGN, OMR, PKR, QAR, SAR, TRL, TZS, TND, YER (CashU card) -

MXN, EYU, BOB, BRL, COP, SYP, MAD, GHC, ZAR, CNY, CAD, and more (UKash voucher) -  SLL (Second Life)Linden-Dollar – GoldMoney – Pecunix

USD: United States Dollar – EUR: Euro – GBP: Great Britain Pound  – AUD: Australian Dollar – CAD: Canadian Dollar – RUB: Russian Ruble  – PLN: Polish Z?oty

- SLL: Second Life Linden Dollar – GAU: Gold gram (Pecunix) – JPY: Japanese Yen – CHF: Swiss Franc – SEK: Swedish Krona – DKK: Danish Krone – NOK: Norwegian Krone – NZD: New Zealand Dollar

-Trust but Verify- is gAtO mOtTo.

Ref:

Bitcoinica – http://arstechnica.com/tech-policy/2012/08/bitcoinica-users-sue-for-460k-in-lost-bitcoins/

FNBI – http://www.firstnationalib.com

FNIB – Video – http://www.youtube.com/user/wwwFNIBco

Bit4X – http://www.bit4x.com/

  • Fixed Rate Exchange & Other Information
    • The following exchanges are either exchanges using a fixed rate based on other markets or are exchanges that enable you to redeem smaller amounts of bitcoins at reasonable rates:
      • AutoMtGox Convert your bitcoins to US Dollars automatically.
      • Bahtcoin Trade BTC for Thai Baht, cash, LR, Webmoney, or Thai mobile and gaming prepaid cards.
      • BTC China – Market for exchanging bitcoins to and from CNY, withdraw CNY (Tencent, Alipay) and USD (Liberty Reserve).
      • Bitcoil Exchange BTC for ILS with bank transfers in Israel
      • Bitcoin Argentina Trades BTC for ARS. Cash and bank transfer. No exchange fees.
      • Bitcoin Brasil Cash exchange that redeems bitcoins for BRL, USD.
      • Bitcoin Nordic Sell bitcoins with withdrawal to PayPal or bank transfer.
      • Bitcoinica Leveraged BTC/USD contract-for-difference (CFD) trading.
      • Bitcoiny.cz Trade your BTCs for CZK. No-escrow, direct person-to-person trading.
      • bitcoin-otc IRC trading marketplace will usually have people willing to deal for small and larger amounts using various payment methods, including PayPal, Dwolla, Linden Dollars, etc.
      • Bitcoin.com.es Trade your BTCs for EUR (Bank transfer).
      • bitcoin.de Trade your BTCs for EUR (bank wire, SEPA bank transfer, Liberty Reserve, Money Bookers), person to person, eWallet
      • bitcoin.local arranges for exchanging currencies in person with someone nearby
      • Bitcoins In Berlin Trade your BTC for cash-in-the-mail (EUR), in-person trande, Western Union, Moneygram, bank transfer or SEPA.
      • Bitcopia.com Sell bitcoins for (USD) cash in mail, check, money order, cash deposit, bank transfer, or dwolla. Buy bitcoins with cash deposit. Instant, live quotes based on Mt. Gox prices.
      • BitMarket.eu Trade your BTCs for EUR (SEPA bank transfer), GBP, USD, PLN, AUD, CAD, ZAR, ILS, CHF, and RUB as OTC with BTC Escrow.
      • BitMarket.co Trade your BTCs for Colombian Peso (COP) as OTC with BTC Escrow.
      • BitPiggy Trade your BTCs for AUD (Bank transfer).
      • BTCinstant.com Trade bitcoins for Virtual Credit Card (VCC, and specifically Virtual Mastercard brand) sent through e-mail.
      • BlockChain.info Convert bitcoins to MoneyPak straight from your Blockchain wallet (serviced from BTCPak).
      • BTC Buy Simple interface to trade your BTCs for Amazon, Barnes & Noble, NewEgg, ThinkGeek and Sears gift cards
      • BTCJoe.com Trade bitcoins for Amazon gift codes and iTunes (USD).
      • BTCPak EXCHANGE YOUR BITCOINS FOR MONEYPAK: SECURE, ANONYMOUS AND EASY!
      • btcx.se / Btcx Sweden || 0% above 80 btc || SEK || Bank transfers to most Swedish banks within 4-12 hours.
      • Canadian Bitcoins Buy/Sell Bitcoins in CAD and receive Cash, Cheque, Bank Transfer (TD Person Pay) or Interac.
      • Cartão BitCoin Convert your bitcoins to reload your debit card (offered to Brazilians, accepted at 10,000 locations in Brazil)
      • Coin2Pal Sell your Bitcoins and receive PayPal funds immediately.
      • Coinabul Trade your BTCs for Gold/Silver
      • Coinbase Sell bitcoins with proceeds delivered as a bank transfer (U.S.). Instant verification available for new accounts.
      • ECurrencyZone Cash out bitcoins to INR, BDT, MYR, SGD via bank transfer or cash deposited to your bank account. Also to Western Union, Moneygram, Citibank global funds transfer, Paypal, Skrill/Moneybookers, Payza/AlertPay, OKPay. Convert to digital currencies Liberty Reserve, C-Gold, Perfect Money, WebMoney and EGOPay.
      • FastCash4Bitcoins Sell your BTC and receive cash today. Over 100,000 BTC bought. Payments issued using your choice of PayPal, Dwolla, ACH (Direct Deposit), Bank Wire, Company Check, Cashier’s Check, or MoneyPak.
      • Mang Sweeney Use bitcoins to send remittance payments to the Philippines, in-person cash out in metro Manilla or from various remittance centers. Languages: English, Filipino.
      • Lilion Transfer Exchanges bitcoins for Liberty Reserve, Pecunix, AlertPay, Skrill/Moneybookers, PayPal, and more.
      • Nanaimo Gold Redeem bitcoins for Liberty Reserve (automated) or for money transfer, money order or direct deposit within Canada.
      • Spend Bitcoins Sell bitcoins for AUD (Australia). Redeem for bank transfer, AustPost reloadable VISA, bill payment and other various methods.
      • WM-Center Buy/Sell BTCs with withdrawal to International bank wire (USD, GBP, EUR/IBAN, RUB, AUD), Western Union, Moneygram, Liberty Reserve USD/EUR, Perfect Money USD/EUR, Pecunix, Paxum, c-gold, Hoopay, Anelik, Xoom, Skrill/Moneybookers, Neteller, cash, etc. 24/7/365 support in english, spanish and russian.
      • LocalBitcoins.com Location-based bitcoin to cash exchange.

 

Share on TumblrSubmit to StumbleUponhttp://uscyberlabs.com/blog/wp-content/uploads/2012/09/hax_01.jpgDigg ThisSubmit to reddit
11/13/12

Protocol-Level Hidden Server Discovery -WRONG

sOrRy – AROGANT gAtO - Open letter to:zhenling - jluo -wkui - xinwenfu – at seu.edu.cn cs.uvic.ca cs.uml.edu  - I wrote to you and gave you a chace to reply so her it goes for everyone to see that you rigged your lab in real life it does not work like you claim – gATO OuT – may be wrong mAyBe Si -nO 

zhenling@seu.edu.cn
jluo@seu.edu.cn
wkui@cs.uvic.ca
xinwenfu@cs.uml.edu

Protocol-Level Hidden Server Discovery

Since entry onion router is the only node that may know the real IP address of the hidden service— -note [3] The assumption was made in virtually all attacks towards the Tor network. This is reasonable because onion networks routers are set up by volunteers.

WRONG folks — So criminals work in these sterile structured surrounding – following rules and making assumptions that I’m stupid enough to not know how to control ENTRY and EXIT nodes into my Tor Website— COme on Dudes this is not school it’s the real world… otwxbdvje5ttplpv.onion here is my site now find my IP —

WHo am I – Richard Amores – @gAtOmAlO2 – I run http://uscyberlabs.com – I just finished a boot -“ The Deep Dark Web” Amazon New eBook -The Deep Dark Web – http://www.amazon.com/dp/B009VN40DU   Print Book – http://www.amazon.com/The-Deep-Dark-Web-hidden/dp/1480177598 :- I do a we bit of real life research and I disagree — I go thru a proxie and a VPN in EU… before I go into Tor so the chances that you will find my IP just went up a notch or too. But I’m a legit – Security Researcher – imagine if I run Silk Road — making a bunch of Bitcoins a DAY— how many layers do they have—

how about a basic BRIDGE RELAY — and there it goes – u can’t touch this — how about a simple modification of the torrc file with these
HiddenServiceAuthorizeClient AND – HidServAuth
with these few modification the Tor site is hidden unless you have the key (HiddenServiceAuthorizeClient) in your browser/- that was generated to match the HidServAuth)-of the server– I think that your chances of finding my mean ass hidden service ip address —are ZERO…

I like what you’ll did cool analyst and you explained it great – but this puts fear into people – dissidents will maybe not use Tor because of what you guy’s say and maybe they may get caught and killed… It’s not only CRIMINALS — I know that gets grants money — but Tor is used to communicate and it allows – Freedom of Speech in Cyberspace- I’m gonna write something about this and I want to be nice so please explain why — you can say from an educational place of knowledge and allow this – “in the box” thinking that is being hacked everyday because they say— we did everything they told us to do— this is wrong and not true —

If you could get the IP of Silk Road — or better yet – PEDO BEAR the largest PEDO directory in TOR — tell me the IP and I will take it down myself— but don’t come at me saying we are right and every hacker is wrong  — learn please our world is depending on your great minds —

later,
RickA- @gAtOmAlO2 http://uscyberlabs.com

Here is the original paper —http://www.cs.uml.edu/~xinwenfu/paper/HiddenServer.pdf
A recent paper entitled Protocol Level Hidden Server Discovery, by Zhen Ling, Kui Wu, Xinwen Fu and Junzhou Luo.  Paper is starting to be discussed in the Tor community.  From my perspective, it is a nice attack to reveal the IP address of a hidden service.  It would require resources to actually implement effectively, but for Law enforcement trying to shutdown and arrest owners of illegal websites selling drugs, weapons, or child pornography and are hiding behind Tor, it is an option.  Of course that also means the capability to find anyone that might be doing something a government or large entity does not agree with. The paper is here.
This stuff reminds me of a statement a professor said to a class I was in once:  “Guns are not good or bad.  It depends on who is holding the gun and which end is pointed at you.”

Share on TumblrSubmit to StumbleUponSave on DeliciousDigg ThisSubmit to reddit