рынок Silk Road: конец истории, взят его директор Dread Pirate Roberts

Oct 02, 2013 23:31

Работа крупнейшего крытого рынка, на котором происходил сбыт наркотиков за bitcoin, остановлена. Завсегдатаи судорожно ищут альтернативные ларьки.

I know many of you are freaking out. If this turns out to be true this is the end of the road as we know it.

Most likely customers have nothing to worry about. We have to have faith that all incriminating evidence is kept highly encrypted. However, regardless, you wont be busted for your small amounts of stuff. I hope you used pgp as everyone has been telling you.

Vendors. Time to clean house. Delete anything incriminating you may have now. We trusted you with our information, now make sure it's gone.

Yes. The party is over. However, the only consequences for 99.9 percent of us will be having to look harder for stuff.

Stay safe.

Реакция честных бизнесменов на всю эту возню:


Немного о том, каким образом автор такого зашифрованного андеграундного ресурса сам себя слил:

• Агент, вовлечённый в расследование, обнаружил несколько ранних упоминаний SilkRoad от некоего пользователя "altoid", который пытался раскручивать сервис на раннем этапе его работы в январе 2011 года.
• В октябре того же года пользователь с тем же ником "altoid" создал тред на крупном форуме Bitcoin Talk с говорящим названием "a venture backed Bitcoin startup company", которая направляла заинтересованных персон на мыло rossulbricht at gmail dot com.
• как вы понимаете, именно из-за этого упоминания почтового ящика храбрый пират-директор и слился.
• Профиля Ульбрихта в Google+ и Youtube содержали множество ссылок на сайт Mises Institute. Подпись в постах директора на форуме также содержала ссылку на этот сайт.
• DPR цитировал Австрийскую экономическую теорию наряду с работами Ludwig von Mises и Murray Rothbard, которые напрямую связаны с Mises Institute
• Логи сервера показывают, что кто-то Сан Франциско логинился в административную панель SilkRoad в то время, когда Ульбрихт находился в Сан Франциско.
• Федеральная погранично-таможенная служба США (U.S. Customs & Border Patrol) перехватила множество поддельных удостоверений личности, которые шли просто почтой на адрес проживания Ульбрихта. Все эти документы содержали его фотографии с различными именами и паспортными данными. Всё это происходило на фоне того, что он от лица DPR хвастался на форуме SilkRoad, что заказад несколько поддельных документов для покупки нового серверного оборудования.
• Когда Министерство Национальной Безопасности допросило его насчёт фальшивых удостоверений личности, он отказался отвечать на вопросы, съехав на то, что кто угодно мог купить [на его адрес] подобные вещи, используя SilkRoad и TOR.
• Жильё, которое снимал Ульбрихт, оплачивалось за наличные, а его соседи знали его под одним из имён с фальшивых удостоверений.
• Он оставлял сообщения на StackOverflow под своим настоящим именем, пытаясь узнать, как при помощи curl/PHP вытягивать данные с ресурсов в сети TOR. Спохватившись, он сменил имя на frosty с фейковым мылом frosty@frosty.com, но было уже поздняк метаться.

Текст возбуждения уголовного дела (mirror):
Ulbricht_Criminal_Complaint.pdf

а вот комментарий, который сорвал на reddit 321 очко апвойтов, в нём про обороты компании, заказные убийства и прочие дела:

I'm currently reading through the criminal complaint, which covers a lot of things worth noting with regard to how and why DPR got caught.

• This has been a joint operation run the cybercrime squad within the FBI's New York field office. It involved the FBI, DEA, IRS and Homeland Security's investigative unit.

• It's unstated from when the investigation started, but they received a complete copy of the Silk Road web server on the 23rd of July 2013. This was all done under the Mutual Legal Assistance Treaty, which implies that they had access to current site information up until the point they shut the site down.
• This included user account and transaction information. It's unclear whether or not this covers addresses and other sensitive transaction information.
• **This also apparently covers at least 60 days worth of messages from the period where the site was copied.
• From February 6, 2011 to July 23 2013, 9 519 664 BTC was generated in sales, 614 305 BTC going directly to DPR in the way of "commissions" ($61 430 000 по курсу октября 2013 года). This comes to a total of 1 229 465 transactions.
• Based on the copy of the site which the FBI received, they believe DPR to have been the sole operator and owner of SR, handling all aspects of the site himself and delegating only user affairs to appointed moderators.

• In March of this year, a SR user/vendor called "FriendlyChemist" attempted to extort DPR via SR's private message system, providing proof that he had the names/addresses of thousands of vendors/users after having allegedly hacked a bigger vendor. He demanded $500,000USD, saying that he needed the money to pay off his supplier. DPR then stated that he wished to speak to FriendlyChemist's supplier.
• A user called "redandwhite" then proceeded to contact DPR, stating that he was FriendlyChemist's supplier and also the owner of his debt. DPR then solicited redandwhite to "execute" FriendlyChemist, supplying redandwhite his full name and address. After having agreed on terms, DPR sent redandwhite approximately $150 000 USD (1 670 BTC) to have FriendlyChemist killed. redandwhite later provided photographic proof of the alleged murder.
• Investigators could not find any record of somebody in that region being killed around that date or matching that description. This possibly implies that DPR was duped/scammed, but, DPR is also quoted as having told redandwhite the following: "Not long ago, I had a clean hit done for 80k."

• DPR has been identified as Ross William Ulbricht.
• > "He is 29 years old, graduated from the University of Texas with a Bachelor of Science degree in Physics in 2006. From 2006 to 2010, he attended graduate school at the University of Pennsylvania School of Materials Science and Engineering."
• His LinkedIn profile is at: http://www.linkedin.com/in/rossulbricht


• An agent involved in the investigation ("Agent-1"), found the first few references to SR on the internet from somebody only identified as "altoid", attempting to promote the site in its beginning days, in January of 2011.
• In October of the same year, a user also going by the name of "altoid" made a posting on Bitcoin Talk titled "a venture backed Bitcoin startup company", which directed interested users to "rossulbricht at gmail dot com".
• That email address is what led to DPR's downfall.
• After identifying "altoid", they started connecting the "DPR" identity to Ulbricht pretty quickly.
• Ulbricht's Google+ page and YouTube profile both make multiple references to the a website dubbed the "Mises Institute". DPR's signature on the SR forums contained a link to the Mises Institute.
• DPR cited the "Austrian Economic theory" along with the works of Ludwig von Mises and Murray Rothbard, all of which are closesly associated with the Mises Institute.
• Server logs show that someone logged onto the SR administration panel from San Fransisco around the same time that Ulbricht was staying in San Fransisco.
• Multiple fake IDs were intercepted by U.S. Customs & Border Patrol while on their way to an address which Ulbricht was living at the time. These IDs all carried photos of Ulbricht but had false names and details. This was around the same time that DPR stated in a message that he was acquiring some fake IDs to buy new servers.
• When questioned by Homeland Security about the fake IDs, he refused to answer any questions but then stated that anyone could purchase such things using "Silk Road" and "Tor".
• The address which Ulbricht was staying at was being rented in cash and he was living with housemates who knew him under a name which corresponded with one of the fake IDs.
• He posted on StackOverflow using his real name, inquiring about how to use curl/PHP to grab things off Tor, before quickly changing the name to "frosty" (with a fake email: frosty@frosty.com)

Miscellaneous notes

• His Facebook URL is at: https://www.facebook.com/rossulbricht/
• His YouTube URL is at: http://www.youtube.com/user/ohyeaross
• There's a pretty lengthy "interview" with him and a friend, discussing their lives available here: https://www.youtube.com/watch?v=Olib3jnvSmw (doesn't reference SR at all)

обновления тут: http://www.reddit.com/r/SilkRoad/comments/1nl7p9/sr_shutdown_fallout_discussion/

security, bitcoin, digital generation

Previous post Next post
Up