04/5/13

Tor Tells It’s Secrets

gAtO pLaYiNg with words in Tor- We just simply counted the number of times a word appeared in our search engine by pages- this is something every search engine does but what it gave us was a picture of what Tor really is. It’s not all crime and ugly but information is number one in Tor. Exactly what it’s supposed to be. Tor was created to share information from the table below we see lot’s of stuff inside Tor.

Tor word data points: We put this report together to see what our word count occurrence was, in our crawled data so far. The chart below gives an interesting picture of the Tor data points that it generates.

We are finding that these are the best categories to put our websites into. The words by site occurrence speaks volumes to understand trends in Tor. For example it shows i2p network in Tor 2 notices above drugs in Tor. Because i2p is fast being intwined with Tor to get better anonymity.

These are real data point based on 3/27/2013-4/3/2013 – this is a live report from our crawls.
As we crawl and add more data our picture will change as to the landscape of Tor.
Bitcoins is the fourth most popular word – currency in the Dark Web is number 1

—

Word	Num. Occurrences
blog	1014
wiki	985
anonymous	966
bitcoin	837
sex	530
gun	492
market	458
I2P	400
software	372
drugs	365
child	353
pedo	321
hacking	314
weapon	221
politic	209
books	157
exploit	118
anarchism	105
porno	88
baby	87
CP	83
fraud	76
piracy	69

Bitcoins are above SEX tell us volumes in that bit coins are the normal exchange currency in Tor.
Fraud and piracy are the lowest were we would except it to be much higher, People trust more in Tor.

This map does tell us that crime is everywhere in Tor at a more alarming rate than we though.

We are doing the same in the e-mail we found in Tor. In the email table is a place where we can get a better picture of emails in the Tor network. Not all of them go to tormail.org as we thought. As mentioned more i2p and connections with other anonymous networks seems to be a trend, as the growth rate of Tor users increase so is the technical base and more sophisticated users will come on board.

Hope this gives you a better picture of Tor. -gAtO oUt

http://uscyberlabs.com/blog/wp-content/uploads/2012/07/output.jpg

03/24/13

Tor is NOT the ONLY Anonymous Network

gAtO fOuNd – this very interesting and wanted to share -

Tor does some things good, but other anonymous networks do other things better. Only when used together do they work best. And of course you want to already know how to use them should something happen to Tor and you are forced to move to another network.

Try them! You may even find something interesting you cannot find on Tor!

Anonymous networks

These are well known and widely deployed anonymous networks that offer strong anonymity and high security. They are all open source, in active development, have been online for many years and resisted attack attempts. They run on multiple operating systems and are safe to use with default settings. All are well regarded.

Tor – Fast anonymous internet access, hidden websites, most well known.
I2P – Hidden websites, anonymous bittorrent, mail, out-proxy to internet, other services.
Freenet – Static website hosting, distributed file storage for large files, decentralized forums.

Less well known

Also anonymous networks, but less used and possibly more limited in functionality.

GnuNet – Anonymous distributed file storage.
OneSwarm – Bittorrent, has a non-anonymous mode, requires friends for anonymity.
RetroShare – File-sharing, chat, forums, mail. Requires friends, and not anonymous to those friends, only the rest of the network.
Omemo – Distributed social storage platform. Uncertain to what extent it is anonymous.

Non-free networks

These are anonymous networks, but are not open source. Therefore their security and anonymity properties is hard to impossible to verify, and though the applications are legit, they may have serious weaknesses. Do not rely on them for strong anonymity.

Osiris – Serverless portal system, does not claim to provide any real anonymity.

In development

Phantom – Hidden Services, native IPv6 transport.
GlobaLeaks – Open Source Whistleblowing Framework.
FreedomBox – Project to create personal servers for distributed social networking, email and audio/video communications.
Telex – A new way to circumvent Internet censorship.
Project Byzantium – Bootable live distribution of Linux to set up wireless mesh nodes with commonly available hardware.
Hyperboria A distributed meshnet built on cjdns.

Routing Platforms

These are internets overlaid on the internet. They provide security via encryption, but only provides weak to none anonymity on their own. Only standard tools such as OpenVPN and Quagga are required to connect. Responsibility for a sufficiently anonymous setup is placed on the user and their advertised routes. More suited for private groups as things out in the open can be firewalled by other participants. Can be layered above or below other anonymity nets for more security and fun.

Anonet – AnoNet2, a more open replacement for AnoNet1.
dn42 – Another highly technical routing community.
CJDNS, an IPV6 overlay network that provides end to end encryption. It is not anonymous by itself.

Alternative Internet

Netsukuku – A project that aims to build a global P2P online network completely independent from the Internet by using Wi-Fi. The software is still in active development, although the site is no longer updated. A new site is in progress of being built.
Many other wireless communities building mesh networks as an alternative to the Internet, e.g. Freifunk, http://guifi.net and many more around the globe. see also

Alternative domain name systems

Namecoin – Cryptocurrency with the added ability to support a decentralised domain name system currently as a .bit.
OpenNIC – A user controlled Network Information Center offering a democratic, non-national, alternative to the traditional Top-Level Domain registries.
Dot-P2P – Another decentralized DNS service without centralized registry operators (at July 18, 2012 page is not accessible and has not known anything about the status of project from February 2011).

See Also

A Radical’s Introduction to Anonymity – Comparison of the different networks, by xcZlZQ
FreeHaven – Technical whitepapers covering the anon space. Excellent reading material.
Wikipedia’s anonymous networks
Wikipedia’s anonymous P2P

http://uscyberlabs.com/blog/wp-content/uploads/2012/03/fin_07.tiff

03/10/13

Finding the Bad Guy’s in Tor -triangulated irregular network

gAtO ThInKiNg - a car GPS works very simple, It takes the delay time from one geo-positioned satellite and compares is to another geo-positional satellite and estimates the position of the GPS in my CAR – I think they call it satellite triangulation or something cool, it’s been done with radios to guide pilots navigate ever since they developed radios. We do it with satellite and we can use networks too.

triangulated irregular network -So now apply this to the Tor bad guy’s websites- a hidden service!

With a simple command you can get the time it takes to crawl a website, so you have one server in the U.S one is South America, one in Europe and one in Asia and we run the same command getting the delays from each location. I bet with a little math and some basic network tools we could figure out the geo-location of any given website in Tor. One of my good mentors told me that in my crawls I was capturing timing information, we all see timing information with a simple ping command in the clear web but in Tor – UDP is unsupported so it does not work -//- we must take into account the Tor network thru-put and utilization bit that’s easy to get from a number of Tor tools.

Reverse triangulation of a network server should be easy to find with a little math, just take a good sample and the longer you wait the more data you collect and the better the chance you can find a geo-location of a website. We do this in the clear web all the time we can see bad areas of the world that are bad spammers, and other like mail from Africa Prince Scams offering you millions if you send them some money to cover the transfer, or Russian and Chinese phishing attacks. So we know geo-location and some IP are more prime to bad actors and we can draw a profile, a geo-location of a place and/or country or an ISP so not having the IP of a Tor server may not be neededto find them we could use network triangulation. “triangulated irregular network ” So the same thing can be done with networks and timing delays of data back and forth from a // client <–> Tor OR <–>server.

I got a crazy Idea that may or may-not work, but it sounds good—// so— Now if I can only find a government grant and a good math major to help out and we have a big business model to find the bad guy’s geo-location even in Tor - gAtO oUt…

http://uscyberlabs.com/blog/wp-content/uploads/2012/09/math_clouadTag.tiff

02/3/13

Offensive Cyber Capabilities

Companies Need Offensive Cyber Capabilities

gAtO hEaR - about banks seek U.S Help on Iran Cyberattack’s. We hear about cyber attacks in the financial sector, the oil and energy sectors, then Leon Panetta warned perpetrators to cease hacking the US while we have all kinds of sanctions against Iran -/ this is insanity. Your telling unknown hackers (we suspected Iran) to just stop, or what. What can we do to prevent them from launching cyber attacks against America.

So Iran has only 3 NAT-access points and 1 submarine cable (Al-Faw, Iraq submarine cable)

fe0-0.bbr1.bahar.kimianet.irIran (Karaj)
gi0-1.thr-001-core-1.ctel.ir Iran (Tehran)
router1.iust.ac.irIran (Tehran)

Then you have all these security people putting up defenses without building a firewall so bad-ass that they cannot do business. If we keep building these defenses it will get to a point where it defeats the purpose of the Internet. So what is the logical next move, offensive cyber weapons and capabilities. We can find these attacks and pinpoint the IP of where they are coming from then all we need is offensive tools to find them and do a seal-team 6 extraction of something like that and get the word out that we will find you and hunt you down.

One little hacker can keep a bank tied up for days in the middle of the desert. They could go after our traffic system, our rail system we know that SCADA is so messed up and in some cases open with defaults passwords. So we beat our chest like some mad gorilla and hope to scare these hackers.

My friends we must take initiative and find ways to counter these attacks no more just defense and I don’t mean a Ddos attack that can be circumvented. We need to plant Bot-nets on these people’s machines and monitor them and if we have to go physical and bring them to justice. Forget about Iran and let’s just talk about Chinese hacker attacks of our intellectual property. They just denied it and go about planning the next attack. We seen Skynet were thousands of computers were given a disk wipe and the blue screen of death. Why don’t we do the same to these hackers going after our infrastructure.

We must change our tactics and be a little more aggressive and become real cyber warriors not just defenders but attacking them and destroying their machines, their servers and routers. How about we just monitor the 1 submarine cable and 3 access points in Iran that should lead us to some of these people. The US monitors our own people then we stand by and allow other hostile countries to go and hack us. This is cyber insanity - gAtO OuT

http://www.alliancedatacom.com/images/cw-world-map-large.gif

01/19/13

Government Spying on everyone -Thanks Microsoft

gAtO lEaRn – On 01-01-213 we hear that Microsoft buys Skype and makes changes to allow Police surveillance. Then on 01-07-2013 we hear that a professor at the Warsaw University of Technology, Wojciech Mazurczyk, found a way to insert secret 70 bits of data and add secret information similar to steganography.

Lawful Intercept is what it’s called and we just heard punch – counter-punch from the government. I just posted about corporations and governments using offensive cyber weapons to fight crime, but this looks like just plain old spying on citizens like China, Iraq and Syria does. Skype is owned by Microsoft and we know that Word and other products have back doors for them to snoop and governments to use in criminal cases. I guess they do it the proper way and get a real FISA document to monitor us it’s citizens.

mEoW 12-30-2012 our re-elected President Obama signs FISA Warrantless Wiretapping Program. STOP – SAY WHAT. mEoW – Forget about gun control how about the privacy of citizens, are we becoming like China, Iraq and Syria the more I find out about this the crazier it becomes. I hate Skypes but now finding this out NO WAY DUDE-

I did a little digging and I found a document from the Straford hack from the LutzBoat crew and this has been on the play board for a long time. More and more governments that play nice with the America and Microsoft will have to live with the fact that they are spying on us, the people. I voted for Obama but I’m pretty sure any president would want to be able to justify this abuse of power to monitor it’s citizens, what get’s me is we scream and yell when other countries do it but here we are doing to ourselves and nobody is talking about this- Hay press wake up. I have nothing to hide but if you do you have been warned – enjoy your government spying on you behind your back - gAtO oUt

Lab Notes:

IT security continues to be the greatest challenge facing government CIOs worldwide. Most experts agree that governments require stronger partnerships between the public and private sectors for both better protection of government IT systems from intruders and for greater visibility into operators’ network traffic to fight crime. However, government systems and intelligence activities constitute a very sensitive information environment. Governments must proceed with caution when forming technology partnerships for hardening their IT network security. Melissa E. Hathaway, who in February 2009 was named to be the Obama Administration’s top cyber security official, points out how

Lawful Intercept

Challenge

Criminals, predators and hackers now use chats, blogs, webmail and Internet applications such as online gaming and file-sharing sites to hide their communications.

Solution

Qosmos provides law enforcement agencies with a powerful solution to identify a target using multiple virtual IDs and intercept all related IP- based communications. Any trigger, such as a “user login = target” initiates intercept of all IP traffic related to the “target.”

Example of recognized applications and protocols

VoIP Email (POP, SMTP)

Webmail (Gmail, Hotmail, Live Mail, SquirrelMail, Yahoo mail, etc.)

Instant Messaging (Aim, SNM, Skype, Yahoo, Google Talk, QQ, Maktoob, Paltalk, etc.)

Online games (World of Warcraft)

Online classified ads

Audio/Video (H.323, SIP, MGCP, RTP, RTCP, MMSE, RTSP, SHOUTcast, Yahoo Video,

MSN Video, SCCP, etc.)

Web applications (Dailymotion, Google, eBay, Google Earth, HTTP, MySpace, Wikipedia,

YouTube, etc.)

Example of information extracted

Caller, phone number, called party, duration of call

Webmail login, email address, sender, receiver, subject matter, attached documents

Instant messaging sender, receiver, contact lists and status

Forum login, IP address, MAC address, mobile ID (IMSI, IMEI)

Protocols identified even for unidirectional traffic (e.g. email by satellite).

http://www.huffingtonpost.com/2012/12/30/obama-fisa-warrantless-wiretapping_n_2385690.html

http://enterprise-call-recording.tmcnet.com/topics/enterprise-call-recording/articles/321789-sounds-silence-skype-hold-more-than-expected-thanks.htm

http://www.ronpaulforums.com/showthread.php?399961-Microsoft-Buys-Skype-Makes-Changes-to-Allow-Police-Surveillance

http://uscyberlabs.com/blog/wp-content/uploads/2013/01/spy-spy.jpg

12/18/12

Legality of Bitcoins-Digital Currency?

gAtO gOt -Questions -Virtual Currency Real or Not- Reward Point, or bonus dollars and other forms of digital virtual currencies are normal for credit cards, online game sites, social networks and other specialty merchants and websites it all about true and branding. This new revenue stream is something that merchants are becoming aware of without knowing or understanding the legal aspects of this new digital currency world.

How does digital currency work in governments or does it – is it tax free, can I take campaign contributions with Bitcoins?

There are federal laws about digital currencies (gift cards) that impose inactivity fees, refunds and unused currency to states or regulatory statue in different states, now apply this to the global online stage. Then throw in the 2009 Credit Card Accountability Responsibility and Disclosure Act and the state and federal gift certificate taxes and were do Bitcoins and others fit in. This could be a big financial mistake for budget starve cities, states and countries it’s a worldwide problems.

So how does a merchant handle Digital currency if they decide to accept it for legal goods and service. For example My Book is for sale on my website using Mt.Gox BTC-Bitcoins – So how do I report my Bitcoins Sales 1.8 BTC so how does the Tax man handle the BTC-Bitcoin transaction?? If they accept Bitcoins then they are legal tender as long as I show sales and pay my Tax they now become legal tender by the State, and federal governments??? Right or is Bitcoin just like a Cash sales??? – These are the questions that need answers today, not tomorrow. I would think that governments may be losing revenue if they don’t think about how to handle virtual currencies transactions and incorporate them into the grand scheme of things (also known as red tape).

As smartphones and mobile pad devices increases worldwide more and more global customers are jumping on board. In the Asian gaming world it’s unstoppable people cannot not stop the online addiction and at a such a cheap price people in far away places are getting connected and this new market is a gem for corporations worldwide and e-currencies of any kind will be the new norm. This Jump in mobil devices and games alone will give digital currencies a gigantic boost. These new inexpensive mobile devices are taking farmers in remote villages and bringing them to our modern society very quickly.

Mobile devices are going worldwide today reaching the remotes corners of civilization and connecting everyone. And they want to spend $$$$$- money- $$$$$

This new mobile computer platform is changing the social and financial aspect of the worldwide landscape. All digital currencies that users accept in and believe in will be accepted. Merchants cry —I don’t care how you pay me as long as you pay me. The privacy aspect of this new currency is another thing that makes this very attractive. When anyone (governments/hackers) can pull your bank records and see every transaction you made.

They know everything every transaction? do they ? -did you know that with Bitcoins all transactions are visible – so we all know someone paid 1.2 BTC and transferred it to wallet_X. You can create a new -alias-wallet for every transaction and this way nobody will ever see your real wallet number. We can hide the wallets, encrypt it, back it up in paper, we can have many wallets and change them so keeping your transactions private is free it comes with the Bitcoin protocol. This is why governments say that terrorist use Bitcoins and other digital currencies to do their evil business,-NAW- well a suitcase full of CASH does the same thing and without and exchange rate to transfer it to my fiat currency… so that fear tactic does not work.. next

Consumers and merchants demand and acceptance of new digital currency has begun and the “jeane is out of the bottle”. These new digital virtual currencies can have very positive aspects in terms of financial innovation and the provision of additional payment alternatives for consumers and that is real competition.

Japans Moba-coins are a fine example: “While popular gambling-style kompu gatcha titles — in which users pay for coins to win prizes — are being eradicated from Japan, DeNA notes that its Moba-coin virtual currency was nonetheless used in a record $689 million worth of transactions in the country”. this revenue stream is only from 40-50 million users imagine when we all hop on this bandwagon.

There are many examples of others developing virtual currencies for gaming: NHN Japan offers a global gaming virtual currency called Line Coins; KakaoTalk in Korea offer virtual currencies called Chocos; and Tencent’s Q-Bi in China is firmly entrenched as a virtual currency. All of these are driven by mobile internet gaming services and the real killer will be when the major payments processors get into the virtual payments space.

The legality of Bitcoins have been debated all year long around the world -France, UK, Brazil, United Sates, California, New Hamshire, New York City, Germany, Finland, Italy and even Franklin, TN, USA.

As the price of Bitcoins hovers around $13-14-USD from a low of $4.5-USD this summer. It has attracted the interest of Forex and other players. With the European Central Bank (they control the EURO) report on Bitcoins to be a real thing are getting serious. Then a month later Bitcoin-Central ( French company, Paymium ) becomes the first Bitcoin Bank to carry out functions of payment service provider like PayPal and Dwolla unit of currency. Remember Bitcoin was built to operate completely outside the influence of governments and financial institutions but now Bitcoin is a financial institution.

Whether Bitcoin takes off or not is not the question, some virtual currencies is going to explode thanks to merchants, consumers, in-app gaming via social media and things that have not been created so far. You may disagree, but the aggregation of large amounts of small payments is effectively building a virtual currency system. go to https://blockchain.info and watch the transactions live, check out the “Bitcoin Top100 Recent Transaction”, I seen 124k, 150k 100 times in 1 hour-/ of course trying to track the wallets down to and IP is kinda impossible but mistakes can happen. https://blockchain.info/largest-recent-transactions

As we are seeing in New Hampshire allowance to take Bitcoin for campaign contributions put’s Bitcoins directly in the U.S bulls-eye. After this latest presidential election cycle here in American we saw that money is the language of politics and Bitcoins will play a role in our next presidential race 4 years away. Oh did I mention that Bitcoin is only 4 years old on Jan 9. 2013 imagine what the virtual digital currency and Bitcoins will look like in 2016. So are Bitcoins sales like a cash type transactions for governments and are they legal. I think that it’s still in debate but governments running deficits should allow any currency that brings in taxes to the coffers. Are Bitcoins Legal – stay tuned -gAtO OuT

Bitcoinica Rise and Fall from grace:

http://www.bbc.co.uk/news/technology-19244210

Superior Court of California, County of San Francisco

Case Number: CGC-12-522983

Title: BRIAN CARTMELL et al VS. BITCOINICA LP, ALSO KNOWN AS BITCOINICA et al

Cause of Action: CONTRACT/WARRANTY

Generated: Dec-18-2012 6:32 pm PST

http://webaccess.sftc.org/Scripts/Magic94/mgrqispi94.dll?APPNAME=IJS&PRGNAME=ROA22&ARGUMENTS=-ACGC12522983

http://uscyberlabs.com/blog/wp-content/uploads/2012/12/mobile_transaction_01.png

12/9/12

Get a Free Bitcoin-Wallet and Make FREE-BitCoins 123

OG Bitcoin Miner circa 2011 old school

gAtO wAnTeD - to learn from the ground up how to set this up and how to make BTC Bitcoins easy as 123.

1.) Get a wallet! https://blockchain.info/wallet/ Your wallet will be kept online and your password encrypts it. So you can never loose your wallet and it can be transferred to another wallet like one you can install on your computer.

2.) Bitcoin Miner- – Easy Windows/OSX – Download GUIMiner: WINDOWS GUIMiner, or OSX GUIMiner once installed this is your gateway to Bitcoins – you have now two options -

a. Bitcoin Mine for a Mining Pool -I’ll give you info below about Mining Pools
b. Bitcoin mine as a SOLO miner – this is one way to do it and you can also get transaction fees this way too that as a miner for a pool you usually don’t get any credits for this in Pools.

3.)There are FREE bit coin games and scams for getting FREE Bitcoins – I played with a few but it’s not worth the time. Get some Free Bitcoins: There are lots of scams but one that pay’s out is- http://www.bitvisitor.com/ Now this one is easy you just watch an add for 5 minutes then you click next – and you will get your Bitcoins.

So there you have it 123 steps to making FREE Bitcoins. Now I left out so many details that I will include in my upcoming book – Digital Virtual Currencies and Bitcoins”- Release Jan 9, 2013, but it fun and pretty easy of you follow these simple steps. As to why and the how let me back up a bit — you can go play with your Bitcoin miner but here is a little background information.

Most Mac’s OSx computers can become a miner real easy and since it’s like on my Mac using the Video Radeon HD 4670 – I’m getting about 15Mhash/s. I checked my CPU, memory and general and I see very little slowdown on my system. I also installed smcFanControl on my system to keep my system cool. So I know at all times how hot my system is running and I can adjust the fans to keep it cool. I run about 98-100 normal on my workday and I seen about 106-108 the highest temperature so far. I see more temp change when I’m in a Flash centric environment. Ok I open up about a dozen apps at a time but I only use one at a time..

Mac- 3.06 Ghz Core 2 Duo ?4 gb 1067 Mhz – ATI Radeon HD 4670-256MB – osX Lion 10.7.5

On a PC Windows machine – my sons system I only get about 4.5 Mg-hash but I only run it once in a while when he’s at school but that baby uses up both GPU on the system to about 80% and I felt the heat but I had no easy way to monitor his system temperature.

Windows System 7- EVGA nForce 680i SLI Motherboard – T1 Version, NVIDIA nForce 680i SLI, Socket 775, ATX, Audio, PCI Express, SLI, Dual Gigabit LAN, S/PDIF, USB 2.0 & Firewire, Serial ATA, RAID

1DhBiBeYD4JNZvim4EefnEoFV2WMFc7e5d- my Bitcoin wallet if you want to send donations for testing. Anyway I hope this easy 123 guide will help you get into the Bitcoin currency. We have more informtion coming in January 9 so stay tuned - gAtO OuT

BTC-Bitcoin can be converted to – these and many more - Digital Virtual Currencies and Bitcoins”- Release Jan 9, 2013. you can pre-order – .. mEoW

US Dollars -

Thai Baht -

China CNY -

Israel ILS -

Argentina ARS -

Brazil BRL -

Czech Republic Koruna CZK -

Euro EUR -

SEPA bank transfer -

German Western Union, Moneygram,

ref -

BTC Canada – How 2 page – https://btccan.com/gettingstarted.php

—Bitcoin Miners and how it works – I am using BTC Guild but I want to lay with Slush and other since they are in the top Pools – But maybe a SOLO miner is my calling..ummm mEoW -mEoW

Name

Location

GH/s[1]

Merged Mining[2]

Reward Type

Transaction fees

PPS Fee

Reward Fee

Protocol

Launched

Difficulty[3]

Forum

Website

50BTC

Germany

5100

PPS[4]

kept by pool

getwork

2011-11-11

May 2013
M	T	W	T	F	S	S
« Apr
		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29	30	31