Bitcoin Forum

Other => Meta => Topic started by: tyz on July 13, 2020, 05:37:59 PM



Title: What sensitive user data does Bitcointalk store?
Post by: tyz on July 13, 2020, 05:37:59 PM
I recently watched a documentary about Ross Ulbricht and Silk Road. One scene explains that this Bitcointalk post (https://bitcointalk.org/index.php?topic=47811.0) has finally put the FBI on Ross' trail. This raised the question for me whether Bitcointalk stores personal data (e.g. IP, User-Agent Fingerprint, Email etc) of its users and if it would pass this data on to investigating authorities in case of inquiries?

Does Bitcointalk store sensitive user data and if so how long?


Title: Re: What sensitive user data does Bitcointalk store?
Post by: DdmrDdmr on July 13, 2020, 05:41:01 PM
<...>
Most of it is detailed here: https://bitcointalk.org/privacy.php

Besides that, with regards specifically to the content related elements detailed in the referenced link, there are always content-based archive sites (TheWayBackMachine, Archieve Today, etc.), which probably have a potential saying in gathering proof of some sort. Although these sites have way less information, and the snapshots they store are irregular with regards to timeframes, they are open to the general public.


Title: Re: What sensitive user data does Bitcointalk store?
Post by: Upgrade00 on July 13, 2020, 06:02:38 PM
and if it would pass this data on to investigating authorities in case of inquiries?
Current policy is to release IPs only in response to a court order or a reasonable police request. (I don't guarantee that I won't release IPs in other cases, though.)
I however don't know if this includes any other information besides IP addresses.


Title: Re: What sensitive user data does Bitcointalk store?
Post by: hilariousandco on July 13, 2020, 06:09:49 PM
I've been storing user's penis-sizes on a spreadsheet, but it's only from publicly available data once someone has either publicly claimed to have an x-sized penis or sent me their size via PM (a user once threatened to rape me with his ten inch penis. I believe his threat to have been exaggerated but I can only take his word for it).  

I recently watched a documentary about Ross Ulbricht and Silk Road. One scene explains that this Bitcointalk post (https://bitcointalk.org/index.php?topic=47811.0) has finally put the FBI on Ross' trail. This raised the question for me whether Bitcointalk stores personal data (e.g. IP, User-Agent Fingerprint, Email etc) of its users and if it would pass this data on to investigating authorities in case of inquiries?

Does Bitcointalk store sensitive user data and if so how long?


Just think, if Ross hadn't of made such a rookie error he still might be a free man today.


Title: Re: What sensitive user data does Bitcointalk store?
Post by: PrimeNumber7 on July 13, 2020, 07:08:13 PM
and if it would pass this data on to investigating authorities in case of inquiries?
Current policy is to release IPs only in response to a court order or a reasonable police request. (I don't guarantee that I won't release IPs in other cases, though.)
I however don't know if this includes any other information besides IP addresses.
The OP of that thread says it is outdated. I would suggest referring to the privacy page linked in the post above yours.


Title: Re: What sensitive user data does Bitcointalk store?
Post by: o_e_l_e_o on July 13, 2020, 07:23:32 PM
There was another thread about this just a couple of weeks ago: bitcointalk IP log (https://bitcointalk.org/index.php?topic=5257943.0)

I'll quote what I said in that other thread below. There are other parties you have to take in to consideration (not just bitcointalk.org), and even if you fully trust all parties involved (you shouldn't), things can still go wrong. If you are concerned about your privacy, you should take steps to improve or protect it yourself.

Even if Bitcointalk plan to delete your data or limit its retention as described on the "About privacy" page (linked to by actmyname above), you have no way of confirming that is happening, and are relying solely on trust. Data can be hacked, can leak, can be copied or backed up (intentionally or accidentally), and so on. Third party services such as Cloudflare and Captcha providers will also almost certainly be recording more information and data than Bitcointalk does.

If you are concerned about your IP being tracked or linked to your real identity or your data being collected, then you should be using a brand new email address, a brand new alias, brand new bitcoin addresses, and so on, all done over Tor. Don't trust other people to look after your privacy for you.


Title: Re: What sensitive user data does Bitcointalk store?
Post by: suchmoon on July 13, 2020, 07:48:05 PM
It seems safe to assume that everything you submitted or otherwise presented (all the fingerprinting stuff) to this site - or any other site for that matter - is stored somewhere and probably backed up somewhere else and also intercepted by a bunch of other entities, from Cloudflare to NSA to LoyceV.

~

There are also sites like imgur that you need to be able to post pictures and many of those don't work with Tor.

penis-sizes

Sexist.


Title: Re: What sensitive user data does Bitcointalk store?
Post by: LoyceV on July 13, 2020, 08:01:28 PM
from Cloudflare to NSA to LoyceV
This would make a very good custom title, but I'll settle for replacing my "Thick-Skinned Gang Leader".


Title: Re: What sensitive user data does Bitcointalk store?
Post by: Upgrade00 on July 13, 2020, 08:04:06 PM
The OP of that thread says it is outdated. I would suggest referring to the privacy page linked in the post above yours.
The reply I quoted was made after the edition of the OP, so it's likely still relevant.
A quote from the privacy page suggests that the forum admins acts voluntarily when it comes to release of sensitive data, so I'll guess there's no strict rule on that;
Quote
At our sole discretion, we may voluntarily assist law enforcement worldwide. Generally we do this only when we perceive that the target user has probably committed a serious and non-victimless crime.