1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Need to prevent the police from viewing certain information on a website (brainstorm)

Discussion in 'BlackHat Lounge' started by Donnie Darko, Nov 11, 2009.

  1. Donnie Darko

    Donnie Darko Regular Member

    Joined:
    Aug 22, 2007
    Messages:
    229
    Likes Received:
    356
    Location:
    USA
    I'm trying to come up with a way to do this. The website won't have anything illegal on it at all. The only reason I need to restrict access to the police is to make the users more comfortable with the website, to clarify.

    I thought about blocking certain IP ranges etc. but that won't really be an efficient solution as the cops could always use their personal computers etc.

    I would like to hear your ideas.
     
  2. oxonbeef

    oxonbeef BANNED BANNED

    Joined:
    Jan 4, 2009
    Messages:
    2,242
    Likes Received:
    7,872
    Impossible. Bar creating a verified membership site and even then if they wanted to look
    that wouldn't stop them.
     
  3. CMS2009

    CMS2009 BANNED BANNED Premium Member

    Joined:
    Feb 21, 2009
    Messages:
    240
    Likes Received:
    167
    im truly intrigued as to what the content is lol!

    you could go for a disclaimer stating that anyone who logs on isnt law enforcement, and if they are they wont take any interest in your userbase?
     
  4. Theodore

    Theodore Power Member

    Joined:
    Oct 13, 2009
    Messages:
    679
    Likes Received:
    266
    theres no way round it at all just try and make sure your website doesnt come back to you. But personally i wouldnt go through all that if you've got nothing illegal on it. just lie and save you have lol and back it up with some fake pictures or reviews :)
     
  5. Sanitarium

    Sanitarium Regular Member

    Joined:
    Sep 27, 2008
    Messages:
    312
    Likes Received:
    648
    Occupation:
    I guess making love to your eyes since you're read
    Location:
    In your mind.
    I'm guessing midget abuse.
    You should be ashamed OP.
     
  6. Donnie Darko

    Donnie Darko Regular Member

    Joined:
    Aug 22, 2007
    Messages:
    229
    Likes Received:
    356
    Location:
    USA
    Like I said, the content is nothing illegal or even adult. It's just that the concept of the website requires that I restrict access to the police. Not the whole website, just parts of it..
     
  7. MachTurtle

    MachTurtle Newbie

    Joined:
    Sep 12, 2009
    Messages:
    41
    Likes Received:
    24
    I'm rather curious myself as to why you'd need to restrict access from the police if there is nothing illegal going on.

    The only real protection you have in such cases is plausible deniability. Add a splash page on the website asking if the user is 18 years of age, and state that the contents of the website are strictly for entertainment purposes only. Throw in a bit about how you aren't held responsible for what happens in regards to whatever it is you are trying to hide from the police.

    Honestly though man, if you are trying to keep the popo out, you might wanna go back and check to make sure what you are doing is in fact not illegal, otherwise why are you spooked about it? Unless of course you are running a dating site for lonely police wives to find a fling.

    In which case, take that "the man"!
     
  8. spaceinvader

    spaceinvader Regular Member

    Joined:
    Jan 28, 2009
    Messages:
    234
    Likes Received:
    245
    Occupation:
    Slave to money
    Location:
    in Sin
    you can block known police ips, peer guardian does it (there is even an entry for my local police force here in Liverpool UK). but like you say the police are smarter than that. Paid membership is the best filter for the casual grass.. but you wont get rid of determined law enforcement. Set it up on an off shore server.

    there is also software that lets you talk to other people anonymous and untraceable, loads of people the government call terrorists use it. mostly just political activists who fear a kicked down door and people living in dictatorships (like America & UK :D), if you really want the name ill try to find it. Or there are .onion sites you can access with TOR but thats full of pedobears and people who want to fuck their mothers.
     
    Last edited: Nov 12, 2009
  9. angelas111

    angelas111 Jr. VIP Jr. VIP Premium Member

    Joined:
    Jan 4, 2009
    Messages:
    1,569
    Likes Received:
    1,016
    Location:
    ohio
    .onion? what is that?
     
  10. spaceinvader

    spaceinvader Regular Member

    Joined:
    Jan 28, 2009
    Messages:
    234
    Likes Received:
    245
    Occupation:
    Slave to money
    Location:
    in Sin
    you dont want to know, trust me. :rolleyes:
    .onion sites you can only access through TOR, its %5 political talk 95% spot the PEDO BEAR!!!

    pedobear.jpg

    [​IMG]
     
    • Thanks Thanks x 1
  11. SSL9000J

    SSL9000J Regular Member

    Joined:
    Oct 20, 2009
    Messages:
    295
    Likes Received:
    179
    Occupation:
    Audio Visual Technician, Audio Engineer, Graphic D
    Location:
    Atlanta, GA, USA
    What the hell kind of website are we talking about here? Free advertising for drug dealers? "Bank robber seeks getaway driver. Will provide van. Must have own ski mask."
     
  12. angelas111

    angelas111 Jr. VIP Jr. VIP Premium Member

    Joined:
    Jan 4, 2009
    Messages:
    1,569
    Likes Received:
    1,016
    Location:
    ohio
    ok. i get it now. i had to look up pedobear on wikipedia.
     
  13. Sanitarium

    Sanitarium Regular Member

    Joined:
    Sep 27, 2008
    Messages:
    312
    Likes Received:
    648
    Occupation:
    I guess making love to your eyes since you're read
    Location:
    In your mind.
    You made my day, so my input is have an entry page with two options 'enter here or click here to exit to dunkin donuts' you know where the cops gonna click.

    F**K THE POLEESE - YEA YEA E!
     
    Last edited: Nov 12, 2009
  14. mosoi148

    mosoi148 Regular Member

    Joined:
    Apr 10, 2009
    Messages:
    357
    Likes Received:
    205
    Occupation:
    Black Hatter In Training
    Location:
    In My Head
    Thats Craigslist.
     
  15. loveBHseo

    loveBHseo Registered Member

    Joined:
    Oct 31, 2009
    Messages:
    67
    Likes Received:
    21
    If you are looking for a solution or at least some realistic options you really have to clarify some parameters, otherwise it will just be all fun and lounge-like. :prof01:

    You mention that you want to make users more comfortable with the website.
    Some ideas on what this can mean:
    -the users will know that whatever data they store on the site will not be accessible by court order or traditional methods of legal acquisition.
    -the users traffic will be secure to and from the site from prying eyes.
    -the contents will never be stored, logged, copied, or retained for any period of time, and will expire instantly.
    -the origin and final destination of all data will be passed around as a token with random changes to leave no traces backwards to content or geo location to origin.
    -data will simply be anonymous.
    As you can tell with these simple examples each scenario can take a vastly different method of obfuscation.

    As far as your other statement concerning restricting some legal entity:
    This is impossible.
    The issue is really a moot one, and quite trivial in discussion.
    To begin with, there are so many levels of authority, but to refine things a bit. The physical governing bodies need to be examined as well as the psychological aspect.

    Psychological-every person has a different level of understanding within the gray areas of society. Gray areas=the actions that humans take that are either not defined ad-naseum for every scenario or that the law has not caught up to yet--such as technology. For some it is the letter of the law, and for others that line can sway depending on the moment. Say, for example, someone just had a bad day emotionally, financially, or whatever and he was a user of your site. There is no way possible to restrict that person from "turning" on everything that they know specifically regarding the happening of your site.

    Physical
    -The legal systems and governing bodies are vast and insanely overlapping. There are guidelines for who would handle the surveillance operations of your site and you can try to restrict those specific one, but you can never count the politics of who might fight for this case if it ever comes to light. But, you must remember, that is only after someone has alerted them to it. If they sense that they would have difficulty obtaining what they want then they would turn to techies such as the N*S*A or local F*B*I, in the USA, and just as we all use proxies and mask/cloaks they can too. You can never, be able to restrict these types of things.

    But, what you can do is engineer your site to not matter if the overseers are looking. But, since you have not really clarified what you are letting the users do on your site you have restricted our ability to help you.

    Control what you can, and engineer your site to not matter if there are prying eyes. This type of invisibility-in-plain site will be the way to convince your users they are safe. See some of the above ideas for this anonymity plan.

    As a last note,
    Any of these issues are highly advanced, and not really effective on a practical sense. You information will not live in a bubble and must pass through areas that you do not even remotely control.

    Can you comfortably say that your isp is not matching your traffic against algorithms? (think of torrent matching via frequency algorithms), can you really say that each and every node between you and your clients are not infected with a rootkit? (it is discussed often that many are monitored by certain three letter agencies and other agencies without names who don't even have oversight from congress) To bring it closer to home-can you even create a true Hamiltonian link structure for blog-farming? (only theoretically, but if you want the link-juice you need to link your main domains).

    Hope you enjoyed my procrastinating diatribe. Off to build backlinks and unique content to the wee hours of the a.m.
    :worm3:

    Oh yeah, you can just tell them that you did x,y,& z to protect them, and let them deal with their own consequences--if things not being illegal are true.


     
    • Thanks Thanks x 1
  16. Donnie Darko

    Donnie Darko Regular Member

    Joined:
    Aug 22, 2007
    Messages:
    229
    Likes Received:
    356
    Location:
    USA
    Haha guys you crack me up. I was expecting this kinda stuff anyway :) No but really, I need to figure out a way to at least make the users feel comfortable. Not CP or anything of that sort, again, it's nothing illegal. I would tell you guys what the concept of the website was but since it's still just a project, I don't wanna give away my idea.

    Thank you for your input by the way, loveBHseo. I appreciate you taking time to write such a long response and will definitely take your suggestions in consideration.
     
  17. cruzer

    cruzer Junior Member

    Joined:
    May 6, 2009
    Messages:
    100
    Likes Received:
    75
    Maybe you could get away with putting this on your site:

    If you are affiliated with any government, law enforcement, anti-piracy group or any other related group, or were formally a worker of one you CANNOT enter this web site, cannot access any of its files and you cannot view any of the HTML files. If you enter this site you are not agreeing to these terms and you are violating code 431.322.12 of the Internet Privacy Act signed by Bill Clinton in 1995 and that means that you CANNOT threaten our ISP(s) or any person(s) or company storing these files, and cannot prosecute any person(s) affiliated with this page which includes family, friends or individuals who run or enter this web site.
     
  18. IcedCube

    IcedCube Junior Member

    Joined:
    Mar 2, 2009
    Messages:
    184
    Likes Received:
    131
    You don't ever discuss onion sites. EVER.
     
  19. Donnie Darko

    Donnie Darko Regular Member

    Joined:
    Aug 22, 2007
    Messages:
    229
    Likes Received:
    356
    Location:
    USA
    That's actually the kind of thing I need. What's the source of this?
     
  20. MachTurtle

    MachTurtle Newbie

    Joined:
    Sep 12, 2009
    Messages:
    41
    Likes Received:
    24
    rofl classic.