The fascinating security model of dark web marketplaces (boehs.org)
from Joker@sh.itjust.works to cybersecurity@infosec.pub on 02 Dec 22:01
https://sh.itjust.works/post/28934825

#cybersecurity

threaded - newest

stinky@redlemmy.com on 03 Dec 04:23 next collapse

Assuming this always traces back to the same key, you can know that the link you’re clicking is legit.

Can someone explain what this line in the article means?

baldingpudenda@lemmy.world on 03 Dec 05:31 next collapse

You can “sign” a message with PGP so that whoever receives the link you sent knows it’s from you and only you. This ensures scammers can’t fake your identity.

stinky@redlemmy.com on 03 Dec 14:35 collapse

That’s right, you can.

But my question was about specifically which message the author was talking about, not the general technology being used. That’s why I said “which message”.

Techranger@infosec.pub on 03 Dec 15:32 collapse

My guess from context clues:

Prospective buyer: “One drugs pls to this shipping address.” Seller: “0,05 ETH please at this wallet address” Prospective buyer: “Test amount sent, pls verify” Seller: “I see your test amount. Shipment will be sent once full amount clears” Prospective buyer: “Thx for verifying. Remainder on its way.” Seller: “I see it, thank you for your business. Shipment of one drugs will arrive in two to three weeks. Enjoy!”

I imagine these sorts of messages between buyers and sellers which are hosted on the platform would be the PGP encrypted messages in question.

stinky@redlemmy.com on 03 Dec 18:04 collapse

I think you’re giving the author too much credit here, they weren’t clear about what they meant. If they were trying to describe message encryption in general they should have used general terms, instead they chose to describe a specific message and then failed to identify which one. It muddles the conversation instead of adding clarity. I appreciate you trying to help me but I wasn’t really looking for an answer, I’m pointing out the bad quality of the article

stinky@redlemmy.com on 03 Dec 04:25 collapse

When you create an account, you upload a public key that it uses to encrypt messages. You then decrypt the message with your private key:

Which message is the author talking about in the second sentence?

This feels like it was written by AI or something. There’s so much meaning obscured by generalities it’s an impossible read.

baldingpudenda@lemmy.world on 03 Dec 05:27 next collapse

They’re talking about PGP encryption. It’s creates a private key for you and a public key you share with every one. Whoever want to send you a message encrypts it with your public key. The only way to decrypt it is your private key. pgp vid

stinky@redlemmy.com on 03 Dec 14:35 collapse

Correct.

But my question was which message, not which technology.

mnmalst@lemmy.zip on 03 Dec 08:53 collapse

Did you just stop reading after that sentence? The very next sentence says:

The market uses PGP to encrypt communications

I read the article on hackernews the other day and it’s fine, sounds more like a lack of understanding on your side.

stinky@redlemmy.com on 03 Dec 14:34 collapse

Author:

You then decrypt the message

Me:

Which message … ?

You:

The very next sentence says … the market uses PGP to encrypt communications

meaning that the very next sentence does NOT specify which message the author was talking about. You should contact your educational facility and tell them to fund their English department, as it is passing students who fail basic literacy. Have a day.

mnmalst@lemmy.zip on 03 Dec 17:02 collapse

What ever mate, if that makes you feel better. Strange other people understand it.