Internet growers security - Security & Legal Issues - International Cannagraphic Magazine Forums

08-09-2005, 06:50 AM

I'll try and keep this simple

With the Emery and Italy bust what can us do as growers who post grow threads and pictures of our babys on the internet do to protect ourselves, not just at this site but other MJ message boards as well?

Is it true that you can only be found if LEO gets your IP addy?

How can they get your addy without getting the server?

Infilterate the Moderators section??

What can we do to hide our IP addy?

Just how safe is it these days to show off our grows? I've done it here and at another site and never worried about it to much, should I be??

If I can hide my IP addy now, what about all my old pics and post, can I be found from that IP addy?

Ok way more questions then I planned on, hopfully there are lots of answers to go with them.

Thanks in advance

70s

MrChronic · 08-09-2005, 06:59 AM

It would be nice if icmag was using https:, it is a bit more secure. I know how to use a few exploits, which are very basic basic exploits. The gov't has agents who sit and train ALL DAY LONG, on how to backdoor their own systems, when they bust people, they hire them. If they want to find you.. THEY CAN, on the internet anyways.

For example, if the server overgrow is on, keeps a history of IP's that access the server, even a few days worth of history. If the server got confiscated they would have alot to go on, as far as tracking people down. Your IP is like a finger print.

Not like i have ever heard of many cases of online forums busting people. but they will catch on sooner or later, and with the new laws in the US, they can basically do what they want

On another note, just posting won't get you caught, if you post pics of things that can help them find you, that is your fault. The cops would have to go to extreme measures to get ahold of our IP's.

KRS Juan · 08-09-2005, 08:59 AM

First download and install Tor: https://tor.eff.org
It's been explained on this forum a couple times and suffice to say it's very very safe and does a perfect job of hiding any personal info.
It's free, open source, and available for every major operating system.

Step 2. Remove all EXIF info from any digital photo's before posting them to the web. There are many scripts and applications for doing this, or simply copy the image in your favorite image editing app and paste it into a new document. EXIF can often contain your camera's serial number and that's a bloody glove if you get busted.

-KRS Juan-

left hemi · 08-09-2005, 09:04 AM

I second mr. chronic's thoughts. this is one of my favorite rants. to turn a dynamic ip into a human name and address assumes that a couple of bureaucracies keep very extensive, very accurate records and that the govt is willing to put the resources in to gather and collate them. there are at least 2 clauses in that statement I find reassurance in. keep in mind that nominally drug enforcement is a function of local leo not bush's gestapo (if you're not marc emery, or angel raich you prolly don't have to worry about torture-boy gonzales) and local leo has even fewer resources to take on such a task.

left hemi · 08-09-2005, 09:09 AM

it is not necessarily true that they would have to get the server and the server would have to be recording ips. a sniffer (ie carnivore) at the right place could easily capture all ips destined for IC, but it's still a major job to turn that ip into a name and address.

KRS Juan · 08-09-2005, 09:17 AM

And with an encrypted proxy app like Tor, carnivore (which isnt even used anymore)would get lost after just a few steps of that major job.

-KRS Juan-

08-09-2005, 09:32 AM

Quote:

Originally Posted by KRS Juan

Step 2. Remove all EXIF info from any digital photo's before posting them to the web. There are many scripts and applications for doing this, or simply copy the image in your favorite image editing app and paste it into a new document. EXIF can often contain your camera's serial number and that's a bloody glove if you get busted.

-KRS Juan-

Sorry to sound like a dumb ass here but KRS, is it possible that just the act of resizing and re-saving the pic does this also?
eg: removing that EXIF info>?

penguins · 08-09-2005, 10:38 AM

wow, great link KRS, thanks!

thanks for the EXIF info as well. along the same lines as Leeroy, i've noticed that the galleries here seem to automatically resize really big images, would that be destroying the EXIF info in the process?

KRS Juan · 08-09-2005, 10:50 AM

Most applications keep the EXIF info when resizing because it also keeps information like exposure and aperture settings. I have no idea if the server does any EXIF stuff automatically, but a quick msg to GL will clear things up for ya on that.

-KRS Juan-

m.steelers · 08-09-2005, 07:29 PM

KRS - are you also using the Privoxy application? I guess what I am asking is that is also needed or if I can run TOR solo? I also use NAT on my router, but it would still disply the public facing IP of my modem, not the actual CPU.
M.S

08-09-2005, 06:50 AM	#1
70s_PotHead Guest Posts: n/a	Internet growers security I'll try and keep this simple With the Emery and Italy bust what can us do as growers who post grow threads and pictures of our babys on the internet do to protect ourselves, not just at this site but other MJ message boards as well? Is it true that you can only be found if LEO gets your IP addy? How can they get your addy without getting the server? Infilterate the Moderators section?? What can we do to hide our IP addy? Just how safe is it these days to show off our grows? I've done it here and at another site and never worried about it to much, should I be?? If I can hide my IP addy now, what about all my old pics and post, can I be found from that IP addy? Ok way more questions then I planned on, hopfully there are lots of answers to go with them. Thanks in advance 70s
	Quote

08-09-2005, 08:59 AM	#3
KRS Juan Smarmy Fuck Jr. Join Date: Mar 2004 Location: SoCal Posts: 795	First download and install Tor: https://tor.eff.org It's been explained on this forum a couple times and suffice to say it's very very safe and does a perfect job of hiding any personal info. It's free, open source, and available for every major operating system. Step 2. Remove all EXIF info from any digital photo's before posting them to the web. There are many scripts and applications for doing this, or simply copy the image in your favorite image editing app and paste it into a new document. EXIF can often contain your camera's serial number and that's a bloody glove if you get busted. -KRS Juan- __________________ Self appointed "King of Kush"
	Quote

08-09-2005, 09:04 AM	#4
left hemi Member Join Date: Jan 2004 Location: Maine, usa Posts: 188	I second mr. chronic's thoughts. this is one of my favorite rants. to turn a dynamic ip into a human name and address assumes that a couple of bureaucracies keep very extensive, very accurate records and that the govt is willing to put the resources in to gather and collate them. there are at least 2 clauses in that statement I find reassurance in. keep in mind that nominally drug enforcement is a function of local leo not bush's gestapo (if you're not marc emery, or angel raich you prolly don't have to worry about torture-boy gonzales) and local leo has even fewer resources to take on such a task. __________________ data rich, soil based organic scrog 1000w hortilux, flowering fluoro, 400w mh veg/germ/clone mother nbog lifesaver,bogglegum, sour bubble, blue moon rocks listen to my living room at: https://jonesnose.com:8128 (shoutcast 128kbps stream)
	Quote

08-09-2005, 09:09 AM	#5
left hemi Member Join Date: Jan 2004 Location: Maine, usa Posts: 188	it is not necessarily true that they would have to get the server and the server would have to be recording ips. a sniffer (ie carnivore) at the right place could easily capture all ips destined for IC, but it's still a major job to turn that ip into a name and address. __________________ data rich, soil based organic scrog 1000w hortilux, flowering fluoro, 400w mh veg/germ/clone mother nbog lifesaver,bogglegum, sour bubble, blue moon rocks listen to my living room at: https://jonesnose.com:8128 (shoutcast 128kbps stream)
	Quote

08-09-2005, 09:17 AM	#6
KRS Juan Smarmy Fuck Jr. Join Date: Mar 2004 Location: SoCal Posts: 795	And with an encrypted proxy app like Tor, carnivore (which isnt even used anymore)would get lost after just a few steps of that major job. -KRS Juan- __________________ Self appointed "King of Kush"
	Quote

08-09-2005, 06:59 AM	#2
MrChronic Banned Join Date: May 2005 Posts: 51	It would be nice if icmag was using https:, it is a bit more secure. I know how to use a few exploits, which are very basic basic exploits. The gov't has agents who sit and train ALL DAY LONG, on how to backdoor their own systems, when they bust people, they hire them. If they want to find you.. THEY CAN, on the internet anyways. For example, if the server overgrow is on, keeps a history of IP's that access the server, even a few days worth of history. If the server got confiscated they would have alot to go on, as far as tracking people down. Your IP is like a finger print. Not like i have ever heard of many cases of online forums busting people. but they will catch on sooner or later, and with the new laws in the US, they can basically do what they want On another note, just posting won't get you caught, if you post pics of things that can help them find you, that is your fault. The cops would have to go to extreme measures to get ahold of our IP's.
	Quote

08-09-2005, 10:38 AM	#8
penguins Member Join Date: Jun 2005 Posts: 32	wow, great link KRS, thanks! thanks for the EXIF info as well. along the same lines as Leeroy, i've noticed that the galleries here seem to automatically resize really big images, would that be destroying the EXIF info in the process?
	Quote

08-09-2005, 10:50 AM	#9
KRS Juan Smarmy Fuck Jr. Join Date: Mar 2004 Location: SoCal Posts: 795	Most applications keep the EXIF info when resizing because it also keeps information like exposure and aperture settings. I have no idea if the server does any EXIF stuff automatically, but a quick msg to GL will clear things up for ya on that. -KRS Juan- __________________ Self appointed "King of Kush"
	Quote

08-09-2005, 07:29 PM	#10
m.steelers Enlightened Join Date: Dec 2004 Posts: 1,434	KRS - are you also using the Privoxy application? I guess what I am asking is that is also needed or if I can run TOR solo? I also use NAT on my router, but it would still disply the public facing IP of my modem, not the actual CPU. M.S __________________ Quite an experience to live in fear, isn't it? That's what it is to be a slave.
	Quote