[melville_X]

The point is that hunting people down protected by TOR and privacy laws in the postal mail system, one of the few practical privacy laws left, is still technically possible, yes...but it is expensive, time consuming and requires sophisticated police work.

The drug war is already failing without these huge roadblocks. It will always still be possible to exploit endpoint security. Given the resource limitations of law enforcement, maybe we should focus those resources hunting down important crimes such as creators of child porn or people engaged in violence crime?

[stcredzero]

The point is, hunting people down protected by TOR and privacy laws in the postal mail system (one of the few practical privacy laws left) is technically possible...but is extremely expensive, requires sophisticated police work, and is time consuming.

Good old-fashioned police work involving the postal system was how some Silk Road vendors were nabbed. It won't matter how secure your market is, if the authorities want you bad enough and you don't know how to do secure mail drops.

[melville_X]

They cherrypicked a few out of thousands and Silk Road was a tiny tiny percentage of the drug market. What will happen when they are 10x the size? Will that type of law enforcement scale?

[stcredzero]

Since the legwork was done on a local level, yes, it could scale at first. You'd just need a Federal level agency to forward information to the right locals. You don't have to nab all the perps, you just have to nab enough of them to change the expected cost-benefit equation.

Also, adding levels of indirection only increases enforcement work linearly.

What you'd end up with are just a few organizations with the resources and expertise to outcompete other operators in terms of opsec and secure fulfillment, while wannabes and new operators serve as fodder for enforcement. Somewhat like today's situation.

Also, since enforcement depends on local enforcement, local corruption will increase.

[melville_X]

Great point. They federal level infrastructure is pretty far from having that capability at the moment. As long as systems like one linked in the article are coming, the only natural response by the state is to establish an large-scale NSA-style hacking and network forensic agency working domestically.

There is no way they'll let digital black markets exist without creating a super-expensive heavy handed machine to attempt to stop it. Whether it is practical or not.

[erikb]

If any government is willing to get you specifically your odds are always quite low, no matter if you understand IT security or not. It suddenly becomes a whole life matter. And not even terrorists with money and armies can hide completely and forever from a bigger government like the US.

The problem is that at some point you must and want to interact with other people and each time you do that you increase the chances to leave a trace or do a mistake.