3 ms·
The investigators claimed they found it when the login page leaked its IP. It was one of the more contested facts of the case - some thought it was possible, ot
by at-fates-hands 11y ago
The investigators claimed they found it when the login page leaked its IP. It was one of the more contested facts of the case - some thought it was possible, other infosec people thought it wasn't.
There are stories that say Ulbricht was notified by someone in one of the chat rooms that the site was leaking IP addresses, but Ulbricht never fixed it, which allowed the FBI to find the real server in Iceland.
Wired did a great two part article on the story:
http://www.wired.com/2015/04/silk-road-1/ http://www.wired.com/2015/04/silk-road-1/
More articles on the leaky login page:
http://www.wired.com/2014/09/the-fbi-finally-says-how-it-legally-pinpointed-silk-roads-server/ http://www.wired.com/2014/09/the-fbi-finally-says-how-it-leg...
http://krebsonsecurity.com/2014/09/dread-pirate-sunk-by-leaky-captcha/ http://krebsonsecurity.com/2014/09/dread-pirate-sunk-by-leak...
http://www.theregister.co.uk/2014/09/08/leaky_captcha_behind_fbis_silk_road_rapture/ http://www.theregister.co.uk/2014/09/08/leaky_captcha_behind...
- NoMoreNicksLeft 11y agoThis conversation shouldn't happen without first talking about "parallel construction". https://en.wikipedia.org/wiki/Parallel_construction https://en.wikipedia.org/wiki/Parallel_construction We know they've tapped every fiber there is, in closets and undersea. It would be simple to use timing attacks at that point. Given that they had the means, and the lack of principles to use those means, why would we believe it was anything else? We don't have to invent absurd scenarios, nor should we believe anyone else's inventions.