Tor: Darknet OpSec By a Veteran Darknet Vendor & the Hackers Mentality (Defcon 30)

[@Sam_Bent]

00:00 Defcon 30 00:07 Introduction 00:58 whoami 01:37 Dark Credentials/ My objective 02:11 Hacking Subculture vs Darknet Subculture 03:02 Education DNV vs Hacker 04:28 Know Thy Enemy 05:35 Postal Countermeasures for beginners 06:32 Drug Traffickers Moral Dilemma 08:17 I heart USPS 10:15 Drug sniffing dogs are misunderstood 10:50 Love Letters from feds 11:52 CDs - Controlled Deliveries 13:34 Branding on the Darknet 15:26 Past, Present, Future of intelligence gathering 16:49 Darknet busts = Law enforcement getting lucky 17:28 Hugbunter codes, I administer 18:24 Threat modeling 19:32 OpSec Mistakes you cannot afford 22:29 Building physical firewalls 23:17 Vulnerability Analysis 24:07 Illusion of security 26:12 Pulling the trigger 27:29 Ingress, Egress, Regress 28:51 Working for a Darknet Market 29:23 Bitcoin Tumblers are trash Use XMR 30:22 Post Exploitation 31:17 Operation Dark Gold 32:26 When the feds break the law, Franks Hearings 33:32 Censored image of my cousins statement against me 33:57 Incarceration in federal prison as a hacker 35:20 Fighting the system with it's own code - law 35:49 Shout out to Haxme.org and Reporting 37:08 Don't be a Darknet vendor 38:37 Q&A where I cannot hear anything

[@AllHackingCons]

Thank you for this!

[@Dread_Pirate_Roberts_2013]

My favorite Defcon presentation ever!

[@charleshendrickson72]

I think your the first vendor to be free and able to tell his story. Any others that are free got their tail between their legs from taking others down with them! The fact your conscious is clear shows you did your time without taking others down!!! Respect!!👊

[@Sam_Bent]

That, and my paperwork on Pacer! :) Yes, it seems most become truck drivers, or construction workers (not that their is anything wrong with those things, my fat ass is not doing either though). I never understood that. When I was a darknet vendor it always bummed me out that none had taught what they learned, that all of the ones had just become silent.

[@Mannypacquia0]

​@@Sam_BentMuch respect sharing your story and opsec advice, I find great value in it, just curious when your cousin didn't follow your protocol and made a statement with police etc how did you react to that? What was your reaction?

[@syx8op]

One of the best talks I have ever watched period. From this video I started watching your channel daily. Keep up all the great content your doing great work for the people.

[@Sam_Bent]

Thank you! Will do! And it's great to have you!

[@Jakob.Hamburg]

👏👏👏 Thank you for sharing your experiences and advice. I won't use it for these purposes but this is information we rarely get.

[@headlights-go-up]

The moment Sam said he needed a db of people he didn't care about screwing over...I knew he was going to pull up the NSOPW lol. Cheers, Mr. Bent.

[@Sam_Bent]

Hahaha thank you !

[@johnmiller9931]

Hey, I just wanted to let you know this talk went up on the DEFCON channel within the past few days, if you'd like to see it there too. Thanks for putting it up here for us early. I enjoyed listening to your perspective!

[@mysticmae12]

I just listened to Jack’s podcast. I was hooked the entire time! I had to go see what you had going on. I’m happy to see that you’re making content. You’re a very intelligent dude!

[@Sam_Bent]

Real recognize real. It's great to have you here Mystic Mae!

[@killowatraibikio2855]

All the way from South Africa Thank you Darknet Diaries. This is so interesting.

[@jimdiroffii]

Downloaded! May all talks live forever. Damn the censors.

[@R41D]

old DNM mod here. loved the talk, time to dig deep into ur channel XD -DTH

[@nidmight]

Glad it's back up! Came back to rewatch it and I saw it was gone and was upset

[@mikeheffins8025]

Seeing this back up brought a smile to my face. ❤️🏆

[@InoceramusGigas]

bro introduced himself

[@nicho_last9]

I was like wtf how did he do that?!? 😂

[@ifofcourse]

So im a complete stranger to the Darknet and its culture, but this was super fun and interesting. Great job!

[@theREALchriszito]

Amazing talk dude I just got recommended your page and I am so glad. There is a good chance we interacted. I was a mod on r/dnm at the very end until we got banned. I love the shoutout to GG! When I ordered from him it didnt come from NL lol.... I wont say where, but it just goes to show his opsec level was pretty sophisticated.

[@spacet1me]

Great talk, watched it all the way thru and wasn't planning on it. I've been to 3 DEF CONs in a row, woohoo!

[@codymustafa5034]

you deserve the following that posers who have only read about things and maybe went on dread once like mental outlaw have. you're knowledgeable and solid, much respect.

[@Sam_Bent]

Thank you! I appreciate the kind words (as well as you taking your time to let me know how you feel!).

[@cmorche]

Thank you for speaking and for uploading this again! 😀 Easily one of the best talks I've seen from DEFCON. Stay safe my friend!

[@GranMastaB]

Let me preface my question by letting u know I stumbled across ur video eval of Archetyp (awesome btw & def would love more of such content) which lead me to ur channel. Its understatement to say the info u share there & specifically w/ this presentation is lifesaving knowledge. Thank You for being one of the few who is paying it forward..... but outta curiousity, in ur case re the warrantless package inspection, what even was their grounds for inspection? & how did they connect that package to u during its transit? Also, re Op Dark Gold, did u personally use that individual to cash out ur bitcoin? On a regular basis? Why? Is using a proxy personal ID w/ legit SSN/ DL/ etc too much & bring on there own vulnerabilities? Or if done in a very sanitized way, such an alternate persona can be useful in that situation & possibly others? **any info shared here is strictly for entertainment & being used simply as conversational debates in possible future social media posts/interactions.

[@Sam_Bent]

"what even was their grounds for inspection? " They had none, or none was stated. If I had to guess, it would be that she (my cousin) had brought it 10 or so packages and ever 3rd one had a different return address. "how did they connect that package to u during its transit? " They didn't. The opened it, found drugs, and then used the footage of my cousin in the post office to ask around about her. They got her plate number and ended up following her back to my house (were she had a room). "Op Dark Gold, did u personally use that individual to cash out ur bitcoin?" Yes. After converting the BTC -> XMR then back to BTC. "On a regular basis?" No, but rather about 4x. It's were each one of my 'money laundering' charges came from. Even though, they couldn't prove that I had gotten he crypto from an illegal act. " Why?" Buying and selling of crypto isn't illegal, and there were no DEXs around back then. The only other options for direct cash out would have been KYC exchanges, like coinbase, were are your absolutely WORST way to cash out. " Is using a proxy personal ID w/ legit SSN/ DL/ etc too much & bring on there own vulnerabilities? " OpSec is about controlling your information. If you're giving it away to a third party, you're jeopardising your operation in a big way. "Or if done in a very sanitized way, such an alternate persona can be useful in that situation & possibly others? " You would have to invent a person with a tax history, SSN etc to do this. For me the exposure in doing so alone was to much, never mind the risk of ID fraud. "**any info shared here is strictly for entertainment & being used simply as conversational debates in possible future social media posts/interactions." It's also historical information. It's about as dangerous as me telling you how they loaded cannons in the revolutionary war.

[@bawlout9367]

I creep on your videos but this is the one that made me sub, using the kid piddlers addy as a return is epic lmao

[@licklack159]

Let's go! Glad to see this back up

[@septim8312]

Hell yeah!! And it's back up! Glad to see free speech winning against threats :D

[@MichaelOfRohan]

Threats is all someone has when their collective evidence is insufficient to mark you. Never, ever believe a threat or a promise from anyone.

[@KeiranR]

Love your talk mate ... Thanks for the re upload...

[@bobbyrandomguy1489]

Glad you got it put back up. Weird I cant see any comments.

[@Sam_Bent]

I think it's an issue with YT. I had the same issue! I had to organize the comments by "newest first" instead of "top comments" and they showed up.

[@band0x1337]

Glad you got it back up man!

[@blackthebanner]

Glad to see this was reposted and by YOU at that stay strong brother

[@halfbakedblake]

Wow. I mean wow.

[@PHALANX5]

I've yet to learn the Basics of the Matrix, but have no one to go to for guidance on this stuff. Whats some good sources to check out?

[@kngnothingGT]

Also super awesome that you got it back

[@tobimoody7292]

And we're back

[@kuukeli]

thank you for re upload

[@kngnothingGT]

Did you have issues getting this back up? I’m downloading it just in case

[@Sam_Bent]

So, I censored the part were it showed my PSI and my cousins statements against me. Now that I am not showing a confidential document there is no issue with it being up.

[@Thedude897]

@@Sam_Bent lol confidential? Can't it be found through a clerk of court or a FOIA request? Safe to keep the feds happy though if that's all they requested. They know you have the power to get some people out of prison and since that's all they requested it's best to play safe.

[@user-vv7js7iz8v]

It’s back up!!

[@mathewbeats2658]

Thanks bro!

[@Kakerate2]

intro song?

[@Sam_Bent]

No clue, sorry. :(

[@skreminpanda7006]

Really interesting

[@sergiol.3755]

Its back

[@grumps5940]

I wonder who the informant is..

[@Sam_Bent]

Well you totally cannot google "Sam Bent" and see articles about me - and my only co-defendant and make the connection that way - totally impossible! :)

[@ilikeapple8551]

yay we got the video back up xDD

[@MichaelOfRohan]

BACK UP?!?! SHWEEET!!!

[@randomlegend631]

🎉

[@bemek01]

you the guy!

[@trik9464]

Wooo

[@kyoko703]

Woohoo! It's back!!!!!!!!!!!!!!! :)

[@BALDNHAPPY]

back up!

[@msonnayn]

13:48 20:42

[@baconblaster6422]

lol i know half of this information just by reading through dread and entire darknet bible. Wonder if Fed Time contributed to most of those

[@Sam_Bent]

DN Bible has been around for a while, and slowly over time been added to. I never personally added to it. It was the other half (the half you said was missing) that I was aiming to disclose. :)

[@baconblaster6422]

@@Sam_Bent yes thanks I enjoyed your talk very much.

[@baconblaster6422]

@@Sam_Bent one thing that stuck out to me though, hypothetically if we had to pick a return address and you chose those offenders mentioned in the talk, I would think they already had flagged addresses that would bring more attention To you in the first place ? Not saying there’s a better option for return address patsy (random business address ?) , but I would of though S offenders already have flagged addresses which would have you burned too quickly. Thanks again

[@Fatvod]

So you put your illegal activities onto your neighbor? Not cool dude.

[@Sam_Bent]

I use their internet connection. There's a pretty massive difference between this and what you describe.

[@Fatvod]

@@Sam_Bent you literally describe the feds raiding their house as your warning sign. You know exactly what you were doing. You are making your activities someone else's problem to deal with.

[@miguelhxrnandez]

@@Fatvod being a criminal while also being morally ethical is in of itself impossible to do. civiliians will get caught in harms way, stop bitch8ng about it and move on.

[@victorygarden556]

I noticed that too but I assume he put it on something like Starbucks wifi or something where nobody really cares because it’s not personally them and it’s low risk because police don’t kick Starbucks doors guns up. Idk tho