Silk Road Lawyers Poke Holes In FBI's Story
wiredog points out an article from Brian Krebs about the court proceedings against Ross Ulbricht for his involvement in Silk Road, the online drug marketplace that was shut down (at least temporarily) by law enforcement last year. Ulbricht's lawyers have demanded information from the FBI in the course of discovery, and the documents provided by the government don't seem to confirm the FBI's story.
For starters, the defense asked the government for the name of the software that FBI agents used to record evidence of the CAPTCHA traffic that allegedly leaked from the Silk Road servers. The government essentially responded (PDF) that it could not comply with that request because the FBI maintained no records of its own access, meaning that the only record of their activity is in the logs of the seized Silk Road servers. ... The FBI claims that it found the Silk Road server by examining plain text Internet traffic to and from the Silk Road CAPTCHA, and that it visited the address using a regular browser and received the CAPTCHA page. But Weaver says the traffic logs from the Silk Road server (PDF) that also were released by the government this week tell a different story. ... “What happened is they contacted that IP directly and got a PHPMyAdmin configuration page.” See this PDF file for a look at that PHPMyAdmin page. Here is the PHPMyAdmin server configuration.
So does this mean they go to jail for perjury?
So you're saying the FBI made shit up? That's... that's... inconceivable!
parallel construction wasn't done properly this time.
http://en.wikipedia.org/wiki/Parallel_construction
I'm confused.
I had no idea that PDF could do that.
Of course the FBI made up a shitty story; that's how they get to use NSA-collected domestic wiretap data without entering that data into evidence in a court room. (Captcha: travesty)
I'm feeling like this might turn into a case of parallel construction using data the government shouldn't have had on this guy.
If I recall correctly, wasn't this guy intercepted by Canadian customs when leaving Canada? It is absolutely not standard procedure to talk to Canadian customs when leaving the country.
Since we now know the "captcha gave me the server's IP" story is bullshit it's clear that they had some other way of tracking down the server. Of course, it's trivial to find anyone on tor using metadata, all you have to do is fire off your packet to the first router, then watch for the correct sized packet leaving the first hop a few ms later to the second router, where a few ms later it leaves for a third router. Eventually you see a response packet come back, and you verify that you're watching the right packet when the response pops out on your tor client. Easy-peasy. Even tor's authors admit that it has no defenses against this level of ability.
Silk Road had their servers configured so that the PHPMyAdmin pages were accessible from the internet at large? Sheesh. No wonder they got brought down.
OK, so they used a low-bid contractor for the parallel construction and the walls didn't come out quite straight. I'm sure the structure is still sound, right? Right?
Maybe someone working at the Iceland data center discovered the SR server and tipped off the FBI? It doesn't have to be the NSA ya know. Occam's razor.
Silk Road said they blocked requests. But their attempt to do so was incorrect, it allows any php request through. Think about how secure that server was...
FBI: We got the evidence through illict methods, so here is a nice little story we made up that is designed to be difficult to argue against.
Great link: http://www.alexaobrien.com/sec...
NSA programs PINWALE, MARINA, NUCLEON are now used to share their collected data (that isn't actually "collected" under new legal redefinition.) with DOD and who knows how many other agencies.
"Parallel Construction" is used to hide sources.
This is what happens when checks and balances decay in a system that has no honor or respect for what once made it great.
Would you please SHUT UP KOCHSUCKING FAGGOTS as this isn't even about TAXES, goddam!
What if DPR offered a $10 million bounty for someone at the NSA to leak proof of illegal collection / parallel construction -- the proceeds coming from the return of his money.
------------
If you had access to this proof would you take the offer?
-- I was raised on the command line, bitch
“You simply would not have been able to get the CAPTCHA that way, because the server would refuse all requests.”
And they didn't record their access, because that would involve recording things that DIDN'T ACTUALLY HAPPEN THE WAY THEY JUST SAID IT DID. Fuckers.
Parallel construct some honesty and replace the FBI, this sabu shit is out of hand.
So-called "parallel construction" isn't illegal or unconstitutional, and even IF -- and that's a very big if -- the initial tip came from "NSA", keep in mind that there has been a decades-old exemption for things like international terrorism and international narcotics trafficking when discovered during the course of legitimate foreign signals intelligence collection.
So, while you may not like it, nothing that is illegal or unconstitutional occurred here, and it is not the result of post-9/11 laws, or "new ways of interpreting the law", or anything else.
The simple fact is that legitimate foreign intelligence targets, to include terrorists and US adversaries who are mostly non-US Persons physically outside the US, share and use the same systems, networks, services, devices, software, tools, operating systems, encryption standards, and so on, as Americans and much of the rest of the world.
This is a simple, undeniable truth, and the only thing differentiating such traffic in the digital world is the status of the person(s) in communication -- i.e., whether they are or are not a US Person. That's it.
And guess what? The communications of US Persons WILL be encountered, and always have been, and we have a legal construct for how to deal with that, and that legal construct factually includes exemptions, again, for things like international terrorism and international narcotics trafficking.
And all of this is even IF it was "NSA" that tipped off anyone; it still could just be FBI somewhat clumsily protecting its own sources and methods...it doesn't have to be "spooks". In a free society governed by the rule of law, it is the LAW, not the capability, that is paramount.
And speaking of the law, the only person doing anything illegal here -- under our system and body of law, whether anyone agrees with it or not -- was Ulbricht.
Looks like someone forgot to put <tard></tard> tags around his post
Comment removed based on user account deletion
Comment removed based on user account deletion
Mod parent up. It hits the nail squarely on the head. The comment deserves it's own special link
You must be new here.
Its pretty simple, the FBI got its evidence by warrantless illegally spying. On the other hand if I can go to silk road and buy drugs why wouldn't the FBI be able too?????
Jack of all trades,master of none
[sigh]
The first fatal casualty in The War on Drugs (TM) was an honest justice system, with someone in the back screaming 'She's got a gun!' while bursting through the front door of a knock and announce.
Comment removed based on user account deletion
My guess is the FBI is covering up that they somehow got VPN access into the Silk Road's internal server network. The same VPN access Ulbricht used to administer the servers from his local coffee shop.
They had already been tipped off about Ulbricht when he tried to order fake IDs from Canada. Then they figured out he was spending a good amount of time using the local coffee shop's wifi. They then sniffed his wifi traffic directly or just ordered the coffee shop / ISP to allow them to do the same. They couldn't decrypt his VPN session but they could see the destination IP which either lead to his server host provider or a 3rd party VPN service. Either way they just pressured the company that runs the service to give them the keys. Now that they have access to the server network they could collect what ever information they needed to build a case.
The key to my theory is the PDF of the PHPMyAdmin access. Notice it's an internal IP address. No way they were accessing that from anywhere but the server network.
I cannot open the first link in this story, to the FBI documents. I've tried pinging the site. Timed out. I've tried to open it in Firefox and in IE. No joy. I've re-booted and tried again. No joy. I tried just linking to krebsonsecurity.com, without the rest of the URL. Nothing. Anybody have any ideas what's going on?
Same here, I haven't checked the reddit forums yet, but something is definitely up with http://krebsonsecurity.com/
Either the government has to declare you to be the bad guy, or CNN does. https://www.google.com/search?...
This was one issue in the OJ Simpson case. It is not the fruit of the poisonous tree but the entire tree that is discredited. If the FBI has lied or hidden evidence then all utterances from the FBI lack credibility and the entire case should be thrown out. Not only will the TRUTH set us free it will also cause liars to be beaten and tossed in a ditch.
http://www.downforeveryoneorjustme.com/krebsonsecurity.com
Says it's up for everyone, just down for me. Still can't get a connection.
Brian has tweeted noting the outage, looks like the site was completely slashdotted today https://twitter.com/briankrebs/status/518055187895029761
Eventually it should be back up...
Often, I see TV shows that dramatize the hindrance of proper procedure to convict a "bad guy". But what threat does Silk Road represent versus government agencies that use illegal data collection and secret information to convict people? More people die from legal prescriptions than illegal -- but regardless of what anyone believes about Silk Road's activities, they bypass laws that are designed to protect people (whether they do or not). While the justice system is bypassing it's own rules, or eroding legal protections.
Look at it this way; if all data is collected, and there are so many RULES we can break - then with enough data mining, all people at some point are breaking a RULE even if it does no harm to anyone else. Everyone is guilty. Enforcement then becomes merely a process of picking and choosing where you bother to enforce the law.
Silk Road isn't the "little guy", nor the big bad guy -- but I don't like the idea of secret information in any court case. It's the end of free expression because anyone who offends the system is already guilty. The trial is merely a formality.
>>"ad space available -- low rates!!!"
It's up right now for me.
The FBI probably got surveillance data from the NSA, but cannot admit that, so they concocted another explanation, and the concocted explanation is falling apart.
I bet you didn't know that? That the FBI is primarily ran by Mormons for Mormons.
Pro Tip of the day.
Oh look, my tax dollars at work, coming to arrest me.
I see nobody has mentioned that if they for some reason suspected/knew that server was the SR server (how? that is another question) then getting access to PHPmyadmin might have been almost as good as getting root access to the box.. http://www.cvedetails.com/vuln... The screenshot in the article does not indicate exactly what version of PHPmyadmin was used, so we do now know if they used a known security hole or not to get at it. And we can only guess how they knew that they should visit that IP in the first place. It could of course be that someone (NSA?) scanning the internets for /phpmyadmin/ found that it was exploitable and looked at what was there and noticed it was the SR. Who knows.
One thing we can know for sure is that anyone who has a public-facing webserver can grep for /phpmyadmin/ in their log (regardless of what is actually there) and see dozens and dozens of access attempts daily.
9/11: Never forget it was a false-flag operation
Comment removed based on user account deletion
Sounds like they are using parallel construction