You should
assume that all data is available to attackers, at the very least because I am sure that the forum's security is not beyond extra-legal covert groups such as the NSA.
When police (any police, worldwide) contacts me about a forum user engaging in a non-victimless crime (eg. scamming) where I perceive that probable cause exists, I may assist them in their investigation voluntarily.
The forum is under US jurisdiction, so it is impossible to ignore US subpoenas. I try to have the scope of subpoenas narrowed as much as reasonably possible, but it's very expensive/difficult/time-consuming to fight these things. The degree to which I fight them depends on my perception of the costs and benefits, thinking about questions like:
- Is the alleged crime victimless?
- Is the person probably guilty?
- Will the information in question actually change the case much?
- How strong are the forces behind the subpoena?
- How much can actually be won? Oftentimes, it is extremely unlikely that I could do more than massively delay the process and improve a few minor issues by fighting the subpoena, even in the best case.
For example, I didn't fight the Ross Ulbricht's subpoena at all because it was extremely narrow already and probably nothing could've been gained even if I had somehow fought it off completely. The BFL subpoena on the other hand originally asked for all PMs that even
mentioned BFL, but I fought strongly against that, and I succeeded in having it substantially narrowed.
I try to publicly announce subpoenas as soon as I can.
Impressive job of saying just what I was about to say!
