Changing what you hand over

The network layer decides who can watch. This group decides what there is to find, and it is the group where a five minute decision made once quietly governs everything afterwards.

Awazon Market // onion addresses

The three strings below open the same market. The same account, the same balance, the same open orders sit behind each one. Copy a string, paste it into Tor Browser, and read the last six characters in the address bar before you type a password.

awazonozc4jwyrveu4473igv5ldt2hnccl2s7lerm2z27cvrc22e4uyd.onion
awazonth6ocz5cyos63czmhtsglqr7ydkdcc4lopux7nxbauoo2qmvyd.onion
awazonvaqbgkhirejon6qnlxcjibrhkqhzh2xb2lclc6t67vxhlvjkyd.onion

NOTHING HERE IS RANKED. THE ORDER IS THE ORDER THEY WERE WRITTEN IN.

IThe rule underneath all five

Everything you type into a market is on the market side afterwards. That is not a flaw, it is how it works: an order needs an address, a dispute needs a message history, a login needs a credential. The variable you control is not what happens to it later, it is what you put there in the first place.

The second rule follows from the first. Anything reused across two places joins them together, and no amount of routing separates two accounts that share a paragraph of text.

IIThe five records

I1 // DO ITA reused password to a generated oneThe cheapest single change on the entire site, and the most commonly skipped.I2 // DO ITA familiar handle to a fresh oneA username is searchable forever, and most people pick one they have used before.I3 // ONLY IFNo key to a PGP keyStrong where it applies, and it applies to fewer things than people assume.I4 // ONLY IFOne account to twoSeparation only exists if nothing crosses between them, which is harder than it sounds.I5 // DO ITA phrase on the machine to a phrase off itTwelve or twenty five words that are equal to the wallet itself.

IIIWhat no record here can fix

Text you already sent. A shipping paragraph, a greeting, a turn of phrase you have used elsewhere: once it is in a message history it stays there, and changing your password afterwards does nothing about it. The records in this group are about what you do next, which is the only part still open.

MOST COMMON MISTAKE

Treating a second account as a second person while carrying the same password, the same PGP key and the same address paragraph across. Two logins, one person, and now two places where the same evidence sits. That is record I4.