Over the time it got a little risky to travel abroad to juicy heaven. Roid business evolved over years and now one can order just what he wants on Internet at his home. From underground labs, from someone distributing roids from inside the country, or safest way, overseas pharmacies.
But it is safe to do so? Don’t we leave tracks on Internet? Especially content of emails, that can be tracked and saved on your email provider servers. Emails for payment instructions, emails for payment confirmation’s, order tracking emails, shipping details emails.. Often the only way to communicate with someone over the sea, for example. Is mailing safe or can get us in troubles? Are there any solutions for protection of of our emails content ?
Yes, there is solution. Encryption of emails, provided by HUSHMAIL, Canadian longtime provider of encrypted web-based email, advertising themselves by claiming that “not even a Hushmail employee with access to our servers can read your encrypted e-mail, since each message is uniquely encoded before it leaves your computer.” It was written on their page. I know a lot of people using their email, because it is secure, and only sender and recipient know the email content. If someone hacked server with messages, they could not read it, because of encryption.
How can that be done? In simple words it goes like that. When user logs into his account for first time, browser downloads client-side Java applet , which converts your email text into unreadable mess:). Next, you need public key, created by same tool. Public key is something like very long password. This password must be sent to recipient of your emails, so that his tool for encryption can decrypt unreadable mess created from your email message, and show it to recipient in its original form.
But, unfortunately, installing Java and loading and running the Java applet can be annoying. So, Hushmail started to offer web based encryption in 2006. User connects to server and the server encrypts the message instead of Java applet on your computer. It was believed that this is enough for secure emailing.
But then in September the document(.pdf) from a federal prosecution of alleged steroid dealers showed, that Hushmail turned over 12 CDs full of emails from three accounts following a court order obtained through a mutual assistance treaty between the U.S. and Canada. The charging document alleges that many Chinese wholesale steroid chemical providers, underground laboratories and steroid retailers do business over Hushmail.
How, if server or java applet encrypts emails in way, that they cannot be read? As mentioned before, the Hushmail started to offer server based encryption. The problem occures when connecting to server, the passphrase (password for your public key) needs to be sent to server, so the server can encrypt and decrypt your messages. And in that very moment when you sends passphrase, Hushmail can copy your passphrase and save it. Once one has access to that passphrase, one can decrypt all messages and read them. That was the case with those steroid dealers. Hushmail has saved their passphrases following the court order issued by the British Columbia Supreme Court.
As things getting more and more tighten by USA government concerning steroids, anyone ordering over Internet should aware that doing this can get risky in near future.
The question here is, how to protect our emails when ordering or paying with some roid supplier. There is simple answer to that question.. Don’t have any emails at all. Overseas and other Internet sources should provide users option of seeing all the vital data when logging into their user accounts. In that way there would be no emails in your email client post box. I hope that all Internet steroid suppliers will take this option into account.
