July 27, 2007

Online Privacy, Jurisdiction, & Hired Guns

I am pleased to be able to release the following information. In the last 6 years, none of our anonymity network management's clients have been arrested or killed despite hundreds of investigations and inquiries. And provably, with documentation, in the last 12 months despite over 50 subpoenas, investigations, raids, etc. not a single client has been compromised.

You should stop and ask yourself, "Why don't any of the other 'anonymity' services provide statistics about their customer protection? Do they even offer a guarantee of protection?" Actually, they don't. Not one other. You may be surprised to hear that when you use them, you only have privacy until someone inquires about you or wants to do a fishing expedition; that you have no customer protection at all... especially if that company is in the US. It is hard for me to take any US or UK anonymity firm seriously, as they have good hopes of making lots of money, but no hope to protect their victims customers.

Do you wonder if you've been sold out, or would be? Why don't you have any assurity? That reminds me of one of my favorite quotations from Ronin : "Whenever there is any doubt, there is no doubt."

Some have tried to make extremely flimsy and ambiguous claims, but the facts are they are 100% subject to the increasingly popular "National Security Letters." Consider another fact: we operate out of high-privacy jurisdictions like Germany, and we get lots of trouble from police and government. For their claim to be true, you would have to believe that in 12 years they've never been inquired about by any law agency. Alternatively, if they were served with NSLs, they would be under gag order and you would get some claim like that.

Another startling fact is that by default their software doesn't even encrypt user traffic, you have to manually set it to be encrypted! It is all available for any eavesdropper to observe. They've probably compromised their whole user-base, or either are operating with the secret understanding that they never protected them at all in order to justify such a delusion.

I'm trying to not write too malevolently, but a false sense of security is worse that an accurate sense that you have no security at all. What is being done by some of these 'services' and 'software providers' is nothing short of perfidy.

5 comments:

Wahsse Fühdehr said...

What happened to all commitments you talk about Torpark?

Steve Topletz said...

Torpark is called xB Browser now. Still as free and open-source as ever.

http://xerobank.com/torrify.html

Wahsse Fühdehr said...

It doesn't work so well as torpark did, it's my opinion.

Steve Topletz said...

It is more advanced than ever. The problem is the ratio of Tor users to Tor resources. Since xB Browser came out it has over 4 million users for just a thousand or so Tor nodes. This results in people complaining "It is slow, what can you do?" so we created the private high-speed xerobank anonymity network. It costs to get access to it, but is totally uncluttered and the fastest anonymity network out there. Our resource consumption is typically <1% at any time, while Tor is constantly overloaded or unable to satisfy requests.

Anonymous said...

Just an interesting statistic, since you have talked about U.S. - Alexa says that your domain (xerobank.com) have:

http://www.alexa.com/data/details/traffic_details?url=www.xerobank.com

Xerobank.com users come from these countries:

United States - 14.1%
Brazil - 8.6%
Germany - 7.6%
United Kingdom - 4.5%
Poland - 4.5%

Xerobank.com traffic rank in other countries:

Brazil - 43,905
Poland - 61,849
Germany - 70,492
United Kingdom - 92,864
United States - 132,704

Those are not precise numbers, but they show that most of your visitors came from US and Germany, and Brazil (my country \o/ )which may be too far from being on the consumers rank from your services, but is interested in taking some measures to assure more privacy and freedom of expression (last week I was reeding that Brazil it's the #1 country ranked in the world which has the most sued journalists). And these are old news: http://yro.slashdot.org/article.pl?sid=06/08/23/1329220

Google has already given up to the brazilian authorities and is now cooperating with them to disclose informations required. And even the Department of Justice may delete every profile/community they want on Orkut (they have full clearance to do that), which is the most visited site here, but unfortunately, it's the worst, common boards like Wilders are much better.

I was talking about US (and now Brazil, Germany) since fishing expeditions, not allowed under T.O.S. from XeroBank, are very common these days. They may elaborate some excuse to just disclose informations from people who have not commited any crimes, like pedophiles and thieves. And they may say that everyone who doesn't agree to disclose informations and destroy everyone's privacy is obstructing justice *.

* http://en.wikipedia.org/wiki/Perverting_the_course_of_justice

Sad times.