1) I never used SR 1.0
2) I never used SR 2.0
3) I won't use SR 3.0 which has apparently just been launched. Same
model as the last one. Screams honeypot.

Domains can be seized. Services/markets based on tor hidden services /
onion addresses can be compromised. Is nobody learning this basic lesson?

I am, however, greatly enjoying playing with OpenBazaar (which is NOT
another SR), and I encourage you to go check it out. It's a
decentralized market and currency exchange (in progress, but the basic
elements of it work as of right now today). It uses bitcoin and
bitmessage, and as people probably have grown tired of hearing,
bitcoin isn't anonymous, but zerocash is coming (which is anonymous,
and treats bitcoin as a base coin) and will have a tx of less than
1kb, and that certainly will change the game.

OpenBazaar's devs clearly provide the customary warnings: It's in
beta. It's not anonymous. Don't use it for 'illegal' stuffs. Etc.

But the truth is not very many people are using OpenBazaar for
anything, and you should at the very least try it out and add your
node. It provides a real decentralized model.
Wave of the future, etc.

Here's a handy little guide to getting started with OpenBazaar
(subject to change, naturally):
Check out openbazaar.org for information
Note the standard "Warning, Under Construction!" type of advisories
issued by the dev team. They are honest about what OpenBazaar can and
cannot do!
Check build instructions on Github
https://github.com/OpenBazaar/OpenBazaar
For Linux / OSX, it's simple, from terminal - the following:

git clone https://github.com/OpenBazaar/OpenBazaar.git

cd OpenBazaar

./configure.sh

(If you have problems with that approach, just check out
https://github.com/OpenBazaar/OpenBazaar/wiki/Build-Instructions and
look at the Native Installation section.)

(You may find the initial install takes a while, but it finishes and
the whole thing works.)

Once done, it's easy to start, cd to OpenBazaar and then:

./run.sh

Wheeeeeeee! Away you go. :-)

(You may actually need to use to start it, the following:
./openbazaar start - but at this point you probably already have it
up and running anyway)

You'll find it will quickly get set up your keys without making you go
through any painful steps.
It has trustless escrow based on multisig transactions, which is nice.
It's pretty easy to get set up, it generates a bitcoin address and
it's simple to put in your bitmessage addy (there's a field for that).

You can update it fairly easily, too:
1) Stop openbazaar with this command: ./stop.sh
(or ./openbazaar stop)
And now (making sure you are at the openbazaar directory in terminal),
issue the following command:

git pull

(Simple.)


NOTES, advisories:

- - The following is pretty handy if you want to be able to view and use
OpenBazaar from a mobile device:
https://blog.openbazaar.org/guide-how-to-setuprun-an-openbazaar-node-on-a-vps/
With that little guidance, you can:
set up your node on a VPS, SSH to it on your mobile device (android,
other), and port forward to localhost, to access openbazaar via mobile.
(Just in case you are the kind of person who has to carry your
business in your pocket.)

- - OpenBazaar uses obelisk server(s), but these are used just as a
blockchain explorer. At the present, the DHT is used to connect and
find peers. That's the Distributed Hash Table. Note you can find out
more about what OpenDHT is, here:
http://www.eecs.harvard.edu/~mema/courses/cs264/cs264.html

- - It's possible that OpenBazaar for some users will ask you to do port
forwarding. If you are one of "those people," then this is the error
message you will probably see:
"Warning: UPnP was not setup correctly. Try doing a port forward on
12345 and start the node again with -j"
So in that case you would need to port forward 12345 on your router
(both TCP and UDP), and run with -j, for example:

./openbazaar start -j

(which then starts OpenBazaar without UPnP.)

I am using a very permissive ISP that has a logging policy is limited
to record only two weeks (mostly being maintenance logs), discarding
anything beyond the last two weeks. (Additional protection is
available through 'vpn services' that commit to no logging -
Cryptostorm is one I can recommend.) My ISP doesn't censor or filter
me content away, they don't throttle, they don't impose any limits or
caps, they don't implement three strikes or six strikes stuff, and my
ISP opposed CISPA and fights NSLs in court. (I like my ISP.) In my
case at least (because the OpenBazaar application functioned fine but
threw a notification at me while it was running about port forward
stuff), I have to go to my router's settings so that I could add a new
user-defined application and enter the needed application and ports.
You may have to do a similar thing.

Cheers,

- -o



Mike Gogulski:
> Later stories said that they had an undercover among the SR 2.0
> founding moderators group.
>
> On 11/06/2014 05:58 PM, Caleb James DeLisle wrote:
>> It wasn't a backdoor in TOR, not even once <trollface>
>>
>> Seriously though, the 51% attack on TOR is (AFAIK) basically
>> just getting enough relays to be at every place in the path, you
>> get infinite tries and you only have to get lucky once and the
>> way the FBI has historically used small armies of infiltrators, I
>> can't see how this kind of network should be considered safe
>> against a determined adversary.
>>
>>
>> On 11/06/2014 05:51 PM, Tim Patrick wrote:
>>> http://www.wired.com/2014/11/feds-seize-silk-road-2/
>>>
>>> I wonder how the FBI will explain how they were able to uncover
>>> the identity of this guy?
>>>
>>>
>>>
>>> _______________________________________________ unSYSTEM
>>> mailing list: http://unsystem.net
>>> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/unsystem
>>>
>>
>>>
_______________________________________________
>> unSYSTEM mailing list: http://unsystem.net
>> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/unsystem
>
>
>
>
> _______________________________________________ unSYSTEM mailing
> list: http://unsystem.net
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/unsystem
>

- --
http://abis.io ~
"a protocol concept to enable decentralization
and expansion of a giving economy, and a new social good"
https://keybase.io/odinn