The Ultimate Security Thread

[twmas52712]

I want to dedicate this thread to finding an answer to the most complicated but important aspects of cloaking and security.

From my perspective, these are the three questions when it comes to BH traffic.

Q1) How do I hide the (BH) source of my traffic from networks that do not accept BH traffic?

Q2) How do I hide my IP when I am using automated solutions to scour a website?

Q3) How do I hide where the money is going? If somebody gets mad at me and is trying to trace where the money is going, how do I hide my personal identity from being linked to my affiliate links?

The answer to Q1 is easy. Do a DMR or use a site like referer.us to ensure that your referring traffic is blanked. If your AM asks you about the source, there are dozens of creative excuses, like "I cloak my traffic so that networks can't look at my site and copy my success"

Q2: The obvious answer is to use proxies, but TOR and public proxies are slow as f***. On the other hand, when you buy private proxies, your name is still attached to the private proxies. Therefore, if a company subpeona's the proxy company, they'd hand over your info, and then you're Fed. What do you think the best solution is? Is there a way to buy proxies from a fake alias that can never be traced back to you?

Q3: This is by far, the hardest problem to solve. Let's say you do "direct marketing" via email. Authorities catch wind, and say "O, let's see where this link goes to.....O, it goes to this neat offer page. What affiliate network hosts this offer?....O, nev3rblu3? Hey, nev3rblu3 who's affiliate link is this? O thanks, so this is his address?"...you get the drift. I have no idea how to answer this one.

Most people are going to give curt answers like "just set up a fake identity in a fake bank account setup off shore". Yes, this would solve it, but if possible, try to give more detailed answers. HOW would YOU go about doing this?

 

[emthree]

Q1: You answered.

Q2: Purchase proxies from foreign suppliers or middle men. There are providers around the board that already notify the datacenters of what the proxies will be used for and come upon an agreement to not give up personal data. You can use paypal/epass etc to assist in hiding your identity.

Q3: I cannot really answer that too well, but just make sure you separate your personal assets from your business operations. Get an LLC, get a business bank account and register it to a po-box.

 

[twmas52712]

The concept of a middle man is interesting. Are you saying that you pay the middle man to pay the datacenter for the proxy? Therefore, when the datacenter receives a subpoena, they ask the middle man who says he received money from an anonymous source to buy the proxies for them. If this is the case, do you know where we can find said service?

When using paypal/epass you have to load the money from somewhere to begin with. If that bank account that's linked to you, then it's still traceable, right?

An LLC only provides limited liability though. As far as I know, when your LLC is sued, your personal assets are also on the line. So, what good does that do?

 

[jayzee]

buy an LLC, if you really want to be safe send the cash outside the country

 

[twmas52712]

OK. After talking to some fellow members on BHW's IRC channel (which you should all join), here's the "full-proof" solution we came up with. If you can poke holes in this, please do.

Q1) What I said

Q2) Buy a preloaded VCC from someone off shore (we should be able to find some being sold on BHW?). Use that VCC to pay for the proxies through a middle man like Packetflip. With this method, somebody chasing your IP's would first go to the datacenter, then the middle man who isn't supposed to hand over your information easily, then go offshore to the VCC supplier who isn't bound by US laws, and then to you.

Q3) Set up a Panama Corporation. These are secure and private. Get the money from affiliate networks wired to your panama corporation. When the money clears, wire it to a Swiss Bank Account. Then, you can use that money without it being traced to your questionable activity.

 

[moneyandhotgayguys]

2. This is easy, just purchase your proxies using fake information, tunnel multiple VCCs through each other, using different public proxies for each, or maybe this is a bad idea due to security risks???

3. Again tunneling! Tunnel your money through at least one private LLC, I would use at least three or four if we are it was something EXTREMELY blackhat.

 

[twmas52712]

What do you mean by tunneling VCC's through each other. By one VCC with your personal info. Use that VCC to buy another VCC, so on and so forth, and eventually use a VCC to buy the private proxies?

If you tunnel LLC's, what happens when your outer-most LLC gets sued?

 

[jayzee]

What do you mean by tunneling VCC's through each other. By one VCC with your personal info. Use that VCC to buy another VCC, so on and so forth, and eventually use a VCC to buy the private proxies?

If you tunnel LLC's, what happens when your outer-most LLC gets sued?

start runing

 

[gfawkes]

I would think setting up an overseas company would be the way to solve Q3.