6 ms·

theory: silkroad dpr, as sloppy as his opsec was, was parallel construction

p1necone 6y ago
This is absolutely plausible
ltbarcly3 6y ago
I think the known construction only required access to his public writings posted to silkroad, google, and patience. He posted uncommon unique phrases to both the silkroad as well as public websites using accounts linked to his real identity. If anything I think it shows quite a bit of incompetence that it took so long to figure out his real identity.
bawolff 6y ago
His opsec was so poor, even if parallel construction was a possibility, im not sure why they would bother.
stef25 6y ago
Not so sure. Don't remember the exact details but it involved a post on the shroomery website and another one on Stack Overflow and he was using the same handle on various sites. It seemed much easier to unravel than exploiting the Tor network, it was almost surprising it took them that long.
soulofmischief 6y ago
DPR advertised for / discussed Silk Road using public accounts with email associations and usernames which led to his public persona. It was just bad opsec.
- 0xy 6y ago
  That's the public explanation. It doesn't preclude parallel construction nor does it mean that's how they caught him.
  - soulofmischief 6y ago
    Why would you need to create parallel construction when the process of finding out Ulbricht's identity was painstakingly simple after basic utilizing basic OSINT? He posted stupid things in very public and monitored places and it only took a little research in the right places to put the pieces together. The economics of the parallel construction theory are simply untenable. Anyone can search for keywords on Shroomery and other forums. It's grunt work and loads easier than actual hacking.
    - 0xy 6y ago
      If it's "painstakingly simple", why did it take 2.5 years for them to find him?
      - soulofmischief 6y ago
        OSINT is a simple process, it just takes time. In hindsight the red flags were obvious but you don't just immediately know where to look when investigating or what to look for. Your argument doesn't hold water because if parallel construction is so much easier then why did it take them 2.5 years?
        0xy 6y ago
        I don't think it was easy to find him at all. Parallel construction is also not easy, they have to figure out how to unmask the server through whatever 0day they choose, then they have to issue NSL or, more likely, get diplomatic assistance to clone the server's hard drives. Do you know how long it takes to get another country to cooperate with an investigation, even if you're buddy-buddy with the country?
        soulofmischief 6y ago
        All I can say is that the information surrounding the investigation, the case, the court proceedings, all of the evidence, is largely publicly available and instead of making guesses as to the legitimacy of the ostensible reasons for Ulbricht's capture, you can do what I've done and read up on all of it. There's nothing I can say or do to convince you if your attitude is such, and only direct knowledge of the case will satisfy you.

This is absolutely plausible

I think the known construction only required access to his public writings posted to silkroad, google, and patience. He posted uncommon unique phrases to both the silkroad as well as public websites using accounts linked to his real identity. If anything I think it shows quite a bit of incompetence that it took so long to figure out his real identity.

bawolff 6y ago

His opsec was so poor, even if parallel construction was a possibility, im not sure why they would bother.

stef25 6y ago

Not so sure. Don't remember the exact details but it involved a post on the shroomery website and another one on Stack Overflow and he was using the same handle on various sites. It seemed much easier to unravel than exploiting the Tor network, it was almost surprising it took them that long.

soulofmischief 6y ago

DPR advertised for / discussed Silk Road using public accounts with email associations and usernames which led to his public persona. It was just bad opsec.

0xy 6y ago
That's the public explanation. It doesn't preclude parallel construction nor does it mean that's how they caught him.
- soulofmischief 6y ago
  Why would you need to create parallel construction when the process of finding out Ulbricht's identity was painstakingly simple after basic utilizing basic OSINT? He posted stupid things in very public and monitored places and it only took a little research in the right places to put the pieces together. The economics of the parallel construction theory are simply untenable. Anyone can search for keywords on Shroomery and other forums. It's grunt work and loads easier than actual hacking.
  - 0xy 6y ago
    If it's "painstakingly simple", why did it take 2.5 years for them to find him?
    - soulofmischief 6y ago
      OSINT is a simple process, it just takes time. In hindsight the red flags were obvious but you don't just immediately know where to look when investigating or what to look for. Your argument doesn't hold water because if parallel construction is so much easier then why did it take them 2.5 years?
      - 0xy 6y ago
        I don't think it was easy to find him at all. Parallel construction is also not easy, they have to figure out how to unmask the server through whatever 0day they choose, then they have to issue NSL or, more likely, get diplomatic assistance to clone the server's hard drives. Do you know how long it takes to get another country to cooperate with an investigation, even if you're buddy-buddy with the country?
        soulofmischief 6y ago
        All I can say is that the information surrounding the investigation, the case, the court proceedings, all of the evidence, is largely publicly available and instead of making guesses as to the legitimacy of the ostensible reasons for Ulbricht's capture, you can do what I've done and read up on all of it. There's nothing I can say or do to convince you if your attitude is such, and only direct knowledge of the case will satisfy you.