News Feed
  • DrugHub has agreed to fully refund all users who lost money in the SuperMarket exit scam.  
  • Retro Market has gone offline. Circumstances of the closure unknown.  
  • SuperMarket has closed following an exit scam by one of the admins.  
  • The admin of Incognito Market, Pharoah, has been arrested by the FBI several months after exit scamming.  
  • Silk RoadTorhoo mini logo
  • darknet markets list
  • Popular P2P exchange LocalMonero has announced it is closing.  

Clarification about the messaging system : WhiteHouseMarket | Torhoo darknet markets

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

We will not disable enforced end to end encryption or add autoencrypt bullshit so please stop asking because it will never happen. We didn't do it when we were a new market and sure as hell we won't do it now. Sure thing we can't make everyone happy so guess what, we are not even trying, we are aware we may lose user base because of that but we are fine with it. So don't even bother with shit like "If you don't do that I will leave." Just leave.

Thank you for understanding.
-----BEGIN PGP SIGNATURE-----
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=AmiI
-----END PGP SIGNATURE-----

/u/luksy
30 points
4 years ago
I like the forced e2e. But it does have it's downsides.

Consider a vendor trying to tell the user their GPG isn't working, and then getting a bad review. Or a vendor having to decrypt elementary questions/comments from non-serious buyers all day. Personally it would be no problem, but for many people it takes quite a few clicks and copy pasting to decrypt.

Here's an idea: Include a drop down menu of common operating terms that can be used. Nothing freeform. For example:
  • Yes.
  • No.
  • Ok, thanks.
  • Where's my order?
  • Can I get an update?
  • Do you send samples?
  • Is this product authentic?
  • Can you do larger quantities?
  • Can you do smaller quantities?
  • Is there any chance you'd give me a discount?
  • I can't decrypt your message, please check your setup.
  • I'm sorry for late finalization, won't happen again.
  • Your order may be delayed for unforeseen circumstances, but it will still be shipped shortly.
  • You're the best.
  • I love you vendor.


That way, people wouldn't be able to put a lot of sensitive info in cleartext, while still being user friendly. You could bring your (commendable) high security practices to a wider audience.
/u/[deleted] 📢
14 points
4 years ago
Yes, that is something we are considering, a list of preset answers.
/u/CottageIndustry
6 points
4 years ago
[removed]
/u/PurityStandard
1 points
4 years ago
we write the preset answers ourselves.

Good idea.
/u/[deleted] 📢
1 points
4 years ago
FYI predefined messages have been implemented.
/u/CottageIndustry
1 points
4 years ago
[removed]
/u/[deleted] 📢
1 points
4 years ago
No credit, it's a cash business :)
/u/d1rectedStylus
1 points
4 years ago
You used to be able to just copy the public key to cliboard and paste into PGP keys of the tails pgp applet but tails BROKE SEAHORSE in version 4.0 and still haven't fixed it:
https://tails.boum.org/support/known_issues/import_broken_in_seahorse.inline/index.en.html
/u/vapeshopman
3 points
4 years ago
this would be ideal, also buyers really need to learn how to use PGP, crazy how many people cant encrypt a simple message correctly to you.
/u/publicactive
1 points
4 years ago
I could say the same about some vendors not matching or updating PGP between platforms and here.
/u/d1rectedStylus
1 points
4 years ago
My favourite was TheProfessionals from empire with an expired public key which they also use on their own bespoke onion market (integrated with google apis and all).
/u/BobArctor
2 points
4 years ago
This would be great. I am a very small time vendor but the huge amount of inane messages that some buyers have can be exhausting
/u/camofit
1 points
4 years ago
how do i get on the site
/u/UnionMarket
2 points
4 years ago
"Is there any chance you'd give me a discount?"
"No."
/u/TiaSID
1 points
4 years ago
This definitely seems like the way to go
/u/LiquidMagma
1 points
4 years ago*
Great suggestions.

@ /u/mr_white
Another great idea would be: next to vendor and user names in the messaging system, there should be a pgp key button that will pop up or drop down or whatever to display the vendor/user's pgp key when clicked without needing to load any new page.
/u/[deleted] 📢
5 points
4 years ago
Implemented.
/u/psychedelicsrock
1 points
4 years ago
what if you do something simalir to what cannahome did where their is a questions tab.
/u/jty934h43
1 points
4 years ago
I had this problem with an order placed a few days ago. I was using online PGP as I didn't know what the GUI was called until going on Dread later, and the vendor couldn't decrypt. Later switched to Kleopatra and made a new PGP key but I had no idea if the messages with the updated key were being received. Had to resort to attaching a txt file, putting the encrypted message in it and renaming it to something like "new-key-should-work.txt".

I understand that it was my fault but I'm sure there would be many people who would e.g. give a negative review, like you said, for something like this.
/u/dustydimes
1 points
4 years ago
check out the big brain on Brad! i like this idea
/u/d1rectedStylus
1 points
4 years ago
I actually think the amount of forethought and etrxa effort (though negligeable) to properly encrypt a message is a good deterent against inane inquiries.
/u/ukwhite
6 points
4 years ago
The only thing I don't like about the messaging system is that the messages aren't all kept on 1 page like a conversation. I can't see my PGP messages that I've sent. Its confusing and I have to keep second guessing what I wrote in the previous message to the customer. When you have 50 people contacting you it becomes impossible to keep track of what your reply was.
/u/xivxankar
1 points
4 years ago
A simple way to resolve this could be a sent mails folder. am sorry if its already there but i cant seem to find it. the problem of remembering what one has said in the previous exchange even with just 3-4 converastions isproving to be difficult.
/u/[deleted] 📢
1 points
4 years ago
We can't do it because messages are encrypted with receiver's key so you won't be able to read them anyway. That's why we ask users to keep the previous message in their reply but indeed some don't.
/u/jty934h43
1 points
4 years ago
Are messages linked to an order? Like when you reply to a message about an order being complete, does that show to the vendor as a message linked to that order or just a general message?

If not, maybe linking messages to orders would help vendors keep their messages organized?
/u/[deleted] 📢
1 points
4 years ago
Yes, indeed they are linked.
/u/HappyChems
1 points
4 years ago*
Why not allow the message to be encrypted with both the sender/receiver's key? This way both parties can decrypt a message that had been sent in the past.

If messages are linked to an order then it would already be possible to link a sender/receiver to a message associated with that order, if that is the reasoning behind it.
/u/[deleted] 📢
1 points
4 years ago
There are two main reasons for it:
1 - Vendors are (hopefully) more security aware than most buyers which may compromise their keys thus leaving the messages available for decryption.
2 - It would be too damn confusing for some. PGP is so fragmentated and many have issues when you tell them to encrypt with one key, imagine how difficult it would be to ask them to encrypt with multiple keys. That's why we ask users to leave the original messages in replies so the other party will know what it is about.
/u/ugu
5 points
4 years ago
I love everything about this post. People who do not want to use proper security practices should just go back to buying and selling on the streets. This is the kind of policy that the foundation of cryptography was made for.
/u/[deleted] 📢
3 points
4 years ago
Not only that but they can move on to other markets instead of making demands. There are plenty of other options, nobody is forced to be here.
/u/obito
1 points
4 years ago
i like your style dwight
/u/WhiteShark
2 points
4 years ago
/u/mr_white, good point and well said.
There is someone that is spreading unmotivated FUD for the top markets, and it is causing in people a lot of confusion and panic.
Kid's must stay at home and play at xbox, dont making fud on darknet.

Well job as always
WS
/u/MilkyOfficial
1 points
4 years ago
I legit hate it when Admins that are so bored on there own market they have to comment on other admins threads. Its just fucking tacky man and coat tail riding .
/u/WhiteShark
1 points
4 years ago
Well, honestly i don't give so much care about what you think.
I've been always in touch with /u/mr_white and, we are "friends" so, i feel my self legit to comment this thread.
Do you really not like me ,uh?
/u/MilkyOfficial
1 points
4 years ago
its tacky
/u/silverslip
2 points
4 years ago
Okay , i like that attitude, and i have been trying to put an order in for 72 hrs , now im a tweaker and have been up for 48 hours now trying to sort shit out on tails , electrum , kleopatra and other shit , but what is really driving me to start throwing lap tops to the ground is when kleopatra is saying pgp is verified and encrypted , basically all green lights and says something like all processes are successful, so i copy and paste the pgp key into WHM message box and it errors me saying it appears you message is not signed, can someone please give me couple minutes to explain what the hell im doing wrong, i have youtubed and googled as much info on the subject without success, really to me the pgp thing is a nightmare but i look forward to moving forward with it and i assume its top notch for security
/u/[deleted]
1 points
4 years ago
it errors me saying it appears you message is not signed

I never used Kleopatra but maybe try to sign it then...
/u/silverslip
1 points
4 years ago
Yeah kleopatra tells me its signed and all processes are successful, Ill try what AANVOER suggests
/u/silverslip
1 points
4 years ago
Maybe i should have explained the process in Kleopatra a bit better in my post , but Kleopatra tells me everything needed to be done is done , signing , encrypting and verifying but the WHM message box rejects the PGP signature when i paste it, and when it tells me my message is not signed then obvouisly i take it back to Kleopatra to sign it ,over and over again until i realize something is wrong
/u/DyslexicHobo5000
1 points
4 years ago
Sadly i am having this PGP issue on the ordering page of WHM, i'm trying to get to "goodgear" he is only selling there right now. I'm going to still trying, wish u the best of luck, i'm a tweaker too, loving those RC's, i ordered temporarily from /u/DCdutchconnectionUK using their telebot (that was a new experience, didn't know that shit existed). But got my gear today to tide me over. Really hope you manage to get your issue sorted mate.
/u/DyslexicHobo5000
1 points
4 years ago
Figured it all out now, happily using the market. (WHM)
/u/illwilliam
1 points
4 years ago
How did you figure this out? I have been stuck trying to make an order on WHM all day.
Hope you love our products just as much as our other customers and hope to see you back soon. Here is a 20% off voucher Expires 5th Sept,

Code: TGLOYAL20OFF

DCUK
/u/DyslexicHobo5000
1 points
4 years ago
I am LOVING your product, always. Messaged u already as i ordered again without seeing the discount code cos well... like the name says.
/u/OnAListNow
1 points
4 years ago
The one thing I can think of is on the Recipients tab in the Encrypt section - you have to uncheck "Encrypt for me:" and check "Encrypt for others:" and put the vendors certificate (name) there.
/u/silverslip
1 points
4 years ago
thanks for your reply , yes i have done that
/u/AANVOER
1 points
4 years ago*
you need to close cleopatra there is a bug in for years now
restart again and most important is to vink out encryp for yourself only encrypt for admin 1 and 2 or the user you wanna write

if it is done and you need to message a different user you need again close cleopatra ( becouse off the bug )

also everytime you choose the wrong captcha you need again paste the pgp message over and over again till you have the capcha good
/u/silverslip
1 points
4 years ago
Ok thank you very much AANVOER i was wondering if something was broken, cheers i will try your suggestion
/u/SmilinBob
1 points
4 years ago
Maybe try switching to gpg4usb instead for PGP and see if that makes a difference for you? I've personally never had any issues with it since the day I installed it and got rid of Kleocrapra the moment it first verified, although it's possible that you just made a mistake when copy-and-pasting the message to verify it in the first place...
/u/Dank4Dayz WHM Vendor
2 points
4 years ago
Hey Mr. White,

The forced e2e is awesome... Don't get why everyone tripping about it. Not sure if this is a great idea, but is it possible to disable captcha for every message on vendor manager system? Its so tiny and doing it for every message is a pain!
/u/[deleted] 📢
1 points
4 years ago
Interesting, I guess we could do it based on vendor's history at least.
/u/Dank4Dayz WHM Vendor
1 points
4 years ago
Agreed! Reaching a certain level which allow vendor to disable captcha on messaging. Itll definitely increase the response rate of vendors, gets frustrating if you mess up captcha than have to retype message
/u/Dank4Dayz WHM Vendor
1 points
4 years ago
Also can I have vendor flair? :D
/u/JimmyFallon16
2 points
4 years ago
It takes 10-30 seconds for me to decrypt/encrypt messages using the Tails 4.12. People who dont want to use this security method shouldnt be buying from the DM.
/u/[deleted]
1 points
4 years ago
Yessuh keep it that way
/u/[deleted]
1 points
4 years ago*
Upvoted, OPsec shouldn't be optional in any way, appreciating to see that you value the privacy.
Hope you will keep it this way on long term.
/u/EmpBomb
1 points
4 years ago
Keeping it straightforward is a sign of good administrative! your market is going big in short time that's for sure. wish you the best.
/u/BradyBobs
1 points
4 years ago
I have my issues with it but im not going to demand shit. I do have an idea about it though.

How about you're allowed to send like 4-6 words.. 10-30 characters unencrypted and if you go over that it is all enforced encrypted like you do now. That'd basically allow vendors to send replies like 'Thank you' 'Yes that is ok' and shit like that which is the biggest issue now

Idk if its posisble at all but perhaps some to think about. Like you said development never stops.
/u/[deleted] 📢
4 points
4 years ago
The problem is you can put lots of sensitive stuff in 4-6 words and people will mess up. We'd rather go with /u/luksy 's idea.
/u/skinnypete WHM Vendor
1 points
4 years ago
Kudos for keeping it real Mr_white, always security first. if i did not liked much about you, but this one i always admired, safety first.
/u/gurkin
1 points
4 years ago
Totally behind this. End to End encryption is there for a reason. Go watch youtube videos on PGP, asynchronous encryption and become a Ninja coder.
/u/AANVOER
1 points
4 years ago*
[removed]
/u/luksy
2 points
4 years ago*
It's not about vendors handing over their PGP keys. Well, a good vendor shouldn't be keeping all the encrypted messages around anyways, but that's beside the point.

The real purpose is that if WHM is ever hacked or seized, all the transactions will be totally obscured.

They could post their database online tomorrow and there would be very little to learn. No customer addresses or tracking numbers or anything.

Building a case and finding a single vendor down takes tons of work and effort.

As far as privnote, it's basically like snapchat. There's no guarantees anything they claim is true or false. It's built on trust, PGP is built on guarantees.
/u/AANVOER
1 points
4 years ago
cooperate = log in to WHM and just to log in they have your pgp code becouse
2fa is enable . hd cams film everything . ok you can now back to your cel mister .

I dont say it is bad pgp becouse it is not but i just wanna say all this effort for something that is so easy to crack . spycam and they have the code also if they realy want .
but anyway it is wat it is .
/u/strace
1 points
4 years ago
spycam? Like hacking a user's private or phone cam?
/u/badbauk WHM Vendor
1 points
4 years ago
Mr White don't bend too the people demanding you lower the bar, every time we have had a perceived problem regarding PGP or XMR on WHM - we have been able to attribute it to buyer stupidity, it's as simple as that.

If they are making mistakes when they get far enough down the road to place an order - how many have they made before?

Like everything people need to learn the in's and out's, sometimes we move around WHM to quickly and it tells us to slow down, so yes...... it can be circumnavigated quickly.

Our only real frustration is people using names on the keys that don't correspond to their account, but this is a wider problem that's been raised before.

Stay safe
/u/dumbsing
1 points
4 years ago
This is absolutely the right attitude. I LOVE that WH is so security focused. I hate it when vendors respond to my encrypted questions in cleartext. That can't happen on WH. Thank God. WH is a simple market. If you can't figure it out, you don't belong on the DN. OpSec is critical people. Sending messages in cleartext sounds great - until the FBI raids the servers and gets hold of the market.
/u/[deleted]
1 points
4 years ago
Lets see how the new API manager update will work. Currently its missing a lot of information and is useless if we cant see the shipping option!

Its a cool system and great to help to skip endless PGP key import/encryption etc but needs a lot more features added to compensate the annoying PGP obligation.
/u/[deleted] 📢
1 points
4 years ago
Now you can see the entire order data, that was the main issue addressed.
/u/[deleted]
1 points
4 years ago
Can you make a change that processing orders can be marked shipped directly without having to accept them first? Saves a lot of time.
/u/[deleted]
1 points
4 years ago
Is the update already out? We still cant see the shipping option through API manager.
/u/[deleted] 📢
1 points
4 years ago
You need to go to your account - vendor tools and get the new version (v3). It does not update automatically you need to get it and verify the new signatures yourself.
/u/rubyracks
1 points
4 years ago
YASSS. Tell em off WHM!!!!
/u/DyslexicHobo5000
1 points
4 years ago
I respect your rules, your market, your way. I still haven't figured out how to order with the PGP but if i can't that's my issue for being under educated not yours. Hope to be an active member of your market soon, it looks fantastic. Great work.
/u/jarettscapo
1 points
4 years ago
Just tell em "this ain't a fucking airport, noone needs or wants any departure announcement from you!"
/u/Linker
1 points
4 years ago
White House Market public key is the only key that has failed to be added to my OpenKeychain. I attempted to import the public key but it has always been unsuccessful on my android phone. Please help me !
/u/casswick
1 points
4 years ago
I cant even message the admins. It keeps giving: Message/attachment does not seem to be PGP encrypted

Even as the message is encrypted with the Admin key.
/u/[deleted] 📢
1 points
4 years ago
Obviously it's not.
/u/j123
1 points
4 years ago
How do make pgk key on android phone for whm thanks
/u/[deleted] 📢
1 points
4 years ago
OpenKeychain
/u/j123
1 points
4 years ago
Is that in whm market or something else cause in whm it only gave me computer option to make pgk I am on Android phone thanks
/u/King_Snarky
1 points
4 years ago
Spot on, guys!

Whoever isn't capable or willing to use end to end encryption or wants a autoencrypt function because they are to stupid or lazy to learn a few things about pgp encryption (this takes 1 hour to learn, tops ffs) should use these markets anyway.

If WHM isn't overrun by retards or noobs, it might have a chance to be there for the long run
/u/fries12
0 points
4 years ago*
I too like the market and stand with implementations it has, all but the auto finalize clock releasing without buyer present to confirm if packages are with us.

Vendors take advantage of this, when the customer does not realize he has to or that the window had been missed to extended clock. Then once the intended item has not arrived. The ball is in the vendors court, like the market loads, but have yet to come across a vendor that stands by the market they represent, one that will see to rectifying problems arisen from using WHM platform to buy from their shop.

If they do reply its with a "hope you do end up getting it" or a no reply which is more common.
Not naming names but if a mod wants to find out these two vendors I havent had a smooth sail with then they are more then welcome.
There should be more incentives to find slacking vendors too
Even this electronic shipping labels being created does not mean that a package is being sent, think vendors are using this to play into their hand, my tracking has updated once in a month, also it does not show it leaving the originating country (CANADA)(which <Think this is grounds for a refund/reship/vendor admitting hes a fuckabout>
Know this is more of a submit request but if your request has not been outlined properly you will be hit back with a generic message saying how the admin would like the request message formatted, do not really have time to not get an order let alone to go back and forth , having to explain everything. It would help if there ws a template to submit a request

Regards
/u/Bowers
2 points
4 years ago*
PAY ATTENTION TO YOUR OWN FUCKING PACKS RETARD. THE TIMER IS SET BY THE VENDOR MOST VENDORS ARE HONEST BUT IF FOR SOME REASON THEY SET IT AT THE MIN (5 DAYS) YOU CAN ALWAYS EXTEND ESCROW. IF YOUR TOO STUPID TO LOG IN AND CHECK YOUR ORDER TIMERS THEN YOUR MORE THEN LIKELY TOO STUPID TO LOG BACK IN TO FINALIZE IN A TIMELY MANNER.

IF YOU WANT A 14 DAY TRIAL PERIOD WITH YOUR DRUGS THE HIT UP EBAY FOR YOUR DRUGS NEXT TIME.
/u/fries12
1 points
4 years ago
U have a window of 24hr to extended your order. for domestic orders this may be more achievable
Now when it comes to international orders you thick fuck it is not as easy to put your finger on it. Dont come at me mate
LOL I dont finalize in a timely manner? Mate your assumptions means fuck all. Cheers
/u/Horsemen
0 points
4 years ago
Mr . White I have to fulfill more then 20 orders per day Hence more the 40 messages for Queries this PGP system in messages is really slow down the process can you do something like automaticall encypt like we used to Have on Empire when we used to place order . Please sort this out because its very time taken . Regards Horsemen .
/u/terriblehumanbeing
1 points
4 years ago
People should really think about ordering from you if that is your take in security
/u/Horsemen
1 points
4 years ago
I delete everything everyday once working hours are overs . If you guys want to be this pussy better stay at amazon instead of DNM .
/u/terriblehumanbeing
1 points
4 years ago
So your system isn't encrypted either?
/u/Horsemen
1 points
4 years ago
Only for sensitive Information . I am just talking common sense here imagine copying more then 40 pgp of different clients for chit chat only that delay the process
/u/fries12
2 points
4 years ago
Think the markets trying to promote that everythings sensitive. Maybe note in the listing that things stated in the listing wont be replied to. If they do end up messaging after its put dont reply, build suspense and if they want it they will pull the trigger too order. If your getting that many orders you should just wait till the time wasters wade themselves out from the actual buyers.
Also would be nice where a question on the listing could be asked publicly, and a vendor could gicce a answer
/u/Horsemen
1 points
4 years ago
Great Idea . I hope someone implements it .
/u/abomba2
-5 points
4 years ago
Pushing your XMR and forced PGP go fuck yourself u commie.

You think any1 gonna learn how to use XMR just to use your market.

Fking piss me off.
/u/[deleted] 📢
6 points
4 years ago
Yes you fit in the "Just leave" bunch.
/u/Antdog115
1 points
4 years ago
"learn how to use xmr"?? Literally laughed out loud. You are probably the type of guy that spends all day looking for $10 deals then asks 800 questions and if you do ever order ask if it's been shipped every 7mins. Then dispute and scream scam if it hasn't arrived in 3 days.!!! Sry for the rant just bored.... And I love whm setup as well so....
/u/username8851023
1 points
4 years ago
Piss off

People like you are the reason why LE can and will continue to keep compromising businesses and etc.

Im glad Mr white and his team run things this way, keeps the idiots out ;)
/u/gurkin
1 points
4 years ago
No one is forcing anything. It's a platform requirement, just like using the TOR browser to visit onion sites. No one is forcing you. Leave and never come back.
/u/trumpsta420
1 points
4 years ago
Take that shit back to Reddit and stay there.
/u/silverslip
1 points
4 years ago
ok learn to use XMR ?? am i missing something , its like the same as any other cyrpto you buy and exchange and send , whats the hard part, and i am pc fucking useless, but to me the pgp thing is another story, but i dont think it deserves the abuse to another that is simply creating privacy and protection
/u/4444
1 points
4 years ago
XMR is easy to use and you don't ever need to tumble your coins. So it is actually easier than bitcoin.