so i hear kept private is the best email system

[tbolking]

actually slick from old BBing site's that said this. he says that keptprivate is superoir to all other email services.

discuss

[Big A]

Isn't kepprivate owned by Millard, the owner of Meso-rx?

Nothing seems to be safer than using any type of email system and then using PGP to encrypt the info.

I know that hush, cyberrights, keptprivate, etc all use automatic pgp, but I personally like to do things myself, as I feel safer knowing I did it.

[allbeef]

All of my remialers and myself have used securenym for years. They do not log activity, they allow encryption. They have never compromised any of us and we have had open discussions about bodybuilding supplements and they could give a phuck. They also encrypt everything from the keyboard so whether it is work or jail it can not be read by anyone. There system is consistent and I cannot remember over the last few years when there has been a problem with the site going down. The servers are off shore and they cannot identify you if you use a money order to subscribe to the service.

Sorry i am still tied up, but will be actively involved the minute my project and training is done.


Allbeef

[slicwilly2000]

Why is securenym.net superior to keptprivate? If anyone can show me any reasons whatsoever I will gladly change my security faq.

Comparing securenym to keptprivate, the only difference is that keptprivate doesn't use PGP although it does use a blowfish algorithm which you can encrypt all your emails with. This was the selling point for me, since I do PGP manually then I use the blowfish algorithm thus doubly encrypting all my emails. So even if LE was to figure out my blowfish pswd they'd then have to figure out my PGP public key. I know securenym claims to have their servers offshore but when I checked on this it showed their servers were in Texas. So, can someone enlighten me? Also everything I've read on other sites concerning this says the same.

Allbeef, when you say "They also encrypt everything from the keyboard so whether it is work or jail it can not be read by anyone." Can you elaborate on this a bit. I don't understand this statement. How do they encrypt everything? I read all they docs on their site and I don't understand what your saying.

Big A, keptprivate is owned by Steve Ritacco not Millard. I just double checked that info too.

Slic.

[allbeef]

I just have always advocated Securenym.net for everyone I deal with in the business. It goes back to STK and me. We jsut trusted the technology and I would argue that I am more comfortable with a service I pay for than one that is free. Becuase of the resources they have the system I don't think has been down for years.

Also over the years we have communicated with the owners directly on issues related to our supplement business and we know that they are not unsupportive of the community on a personal level.

It's a personal preference and until I have a reason to change I am advocating it whereever. I still use hush for record keeping and I suspect your kept private is everything you believe it to be.

I have always described it as keyboard to server encryption, but maybe tunneling is a better description. They tell me that the only way anybody will ever know what you comunicate to the server is with either a camera on the keyboard or keyboard stroke software.

They also keep no logs and with anonymous payment could never identify you if they wanted to. Do I think they can and do identify terrorists and child pornagraphers from the content of the emails? Yes, there is no one who can afford to not be looking for those types of activies.

But someones little supplement business is under the radar.

Again, it is a bias thats all and I insist on it if I am going to work with someone just like I insist they use EE and know PGP and use a VPN.

So far in 6 years nobody has ever been let down by any of those products that I know of.

Nice to hear from you bro.

Allbeef

[tbolking]

good mature discussion here..

thanks guy's

[slicwilly2000]

Allbeef,

Tunneling is a better description. I use ssh2 proxies whenever I connect anywhere so I'm not at a disadvantage on that issue. I'm sure you do as well with your VPN. You've been around for a while and are very well versed in your info. I respect you very much. I'm going to take our discussion to pm's, as I would prefer very much if this subforum was invite only.

Slic.

[tbolking]

I'm going to take our discussion to pm's, as I would prefer very much if this subforum was invite only.

Slic.


shit im all for that notion!!

i edited the opening post leaving out some things

[anonymous]

let me say 1st i love this forum. not enough bb sites utilize this type forum. its more important to me then the source forum. i source under another name on a few boards. let me say KP has saved my ass on 1 occasion. the owner emailed me stating investigators contacted him stating " i used a stolen credit card and they need my info to catch me".. well the owner told them he doesnt keep info and gave me the heads up. turns out it was a shot in the dark by le hoping i signed up using my real debit card. i used a simon mall gift card so there was no info. my kp account msgs were all encrypted the owner said and he deleted the account for me. lets just say he is aware of what we use it for. i am very happy KP myself. i have looked into securenym and i may try them out shortly also.

[anonymous]

anyone know how many characters max you can use for securenym password. one thing i do like about hushmail is it allows for a 100+ character passphrase upper and lower case, numbers and symbols. kp doesnt allow symbols or more than like 25 characters.

[slicwilly2000]

anyone know how many characters max you can use for securenym password. one thing i do like about hushmail is it allows for a 100+ character passphrase upper and lower case, numbers and symbols. kp doesnt allow symbols or more than like 25 characters.

They do allow for more than 25 characters for a pswd. I'm sure of this as my pswd is over 30 characters. I will double check this info later for you.

Slic.

[anonymous]

securenym is 15 characters max. i know for sure kp wont take 100 character passphrase like hushmail.

[Realize]

the owner emailed me stating investigators contacted him

Now thats looking out.

[anonymous]

your telling me.. i am sure they try that for every source and maybe 1 slips here or there by using a traceable card.

[allbeef]

We need more source involvement.


Allbeef

[-Z-]

I hope I'm not stepping on any toes but I see no reason at all to trust securenym. First of all, there is only one "hop" meaning, if securenym is compromised, all anonymity is lost.

Secondly, the information on their website is misleading. They state at http://www.securenym.net/about.htm:

"SecureNym is a closely held offshore corporation, with multi-national ownership and no ties to any government, either U.S. or otherwise"

However, a whois showed the owner to be in Texas:

SecureNym, Inc. (SECURENYM2-DOM)
5757 Westheimer #3-184
Houston, TX 77057
US

Hardly an off shore company, closely held or otherwise. Regardless of who owns it -- no mention, by the way, could be found on the website -- the server is in the US and therefore subject to legal attack.

I imagine a court order would do away with all protection the website would offer. All access could be monitored, SSL or no, if the authorities gain access to the web server. Even if you use PGP they will be able to find out who you are, and use the same court order trick to get your information.

When confronted with this information in the newsgroup alt.privacy.anon-server this was the owner's response...

"The company itself is not registered in Texas. I didn't do the web pages
so I don't recall exactly what's said in them. If there is a misleading error
it will be corrected. Securenym's servers are in the US, and if the web page
says differently it will be changed."

How can anyone who lies to you up front be trusted to provide a secure service when it's their word alone they're peddling?

My recommendation is to learn how to use the remailer networks (Mixmaster & Cypherpunk) along with PGP because it's offers your best chance at anonymity and privacy. Anonymity is inherent to this system by design so there is no need to take someone's word that they don't keep logs. The same can be said about Tor and onion routing.

I do not trust people who claim they don't keep logs simply because they said so. Also if some of these providers have no physical control over their machines, how can they know what's logged and what isn't? So in other words "no logs" means that if the government approaches them with a subpoena they can just tell them "sorry, we don't have logs" and they'll say "oh, ok, so sorry to bother you" and be on their way. No, instead they'll say "Ok, here is a subpoena and a gag order, we are seizing control of the servers and will be monitoring all traffic through them until we get who we are after". So instead of protecting you, or anyone else, now every user is under surveillance (except in the US where I would imagine indiscriminate monitoring of internet traffic is unconstitutional). How do we know this? Because it's what they've done countless times...shadowcrew, pharmacy stings, carder stings, DDoS sting, JAP, italy remailer (though here they just did it without the owner even knowing), etc, etc.

The fact of the matter is that any serivce with a real time traffic stream claiming it can GUARANTEE anonymity is claiming the impossible. This is evenmore true when only one person or company owns all the servers involved. You can encryption wrap, you can toss it back and forth between servers, you can route it layer 3 only, it doesn't matter. If the traffic is anywhere close to a real time stream then you can perform traffic analysis. If you can perform traffic analysis then the service cannot possibly guarantee anonymity. If they cannot do that, then they should not be claiming that they can.

[tbolking]

wow- Z -that's what i call research, thanks for highlighting the important detail's. maybe its a masking theme they use to front? they after all have to get payment's domestic. i dont think there's much to worrry about unless your doing terrorist type shit


good digging tho