so pitch exists. 10k users. no javascript. pictures work. harm reduction people are there with their real names. vendors posting. it looks legit and it probably is legit — as in, not a honeypot.
but thats not the risk. the risk is the data model.
tforum is a forum. you post, people reply, its text. theres no follower graph. theres no DM ecosystem linking everyone together. if tforum gets seized tomorrow, they have my posts in /d/dnmads. thats it. one data point.
pitch is a social network. you post, people follow you, you follow them, DMs are a whole separate database, reactions, view counts, who looked at what, timestamps. if pitch gets seized they have the entire graph. who you talked to. when. what you liked. what you browsed. your followers. your DMs. every picture anyone ever sent you. thats not a data point. thats a conviction.
the youtube link problem
pitch is full of youtube links. opsec youtubers crossposting their content. heres what happens when you click one:
your tor circuit exits. the exit node hits youtube. google logs the exit IP, timestamp, what video, referrer, browser fingerprint from http headers. even without javascript the request alone leaks enough. now youtube has a record: a tor user watched this specific drug-adjacent video at 3am tuesday.
the youtuber posts in pitch "new video up" and five minutes later 40 tor exits hit that video. timing correlation. now theres a bridge between pitch activity and clearnet. do this enough and the pattern is court-ready.
if you ever hit youtube outside of tor — same browser, accidentally, once — google connects the sessions. now they have your real identity AND your darknet browsing pattern. the youtubers dont care. theyre getting ad revenue. youre the traffic. your anonymity is the cost.
the face problem
some people on pitch are face-out. real names. youtube channels. one of them is dominic milton trott — drug users bible guy. hes been face-out for a decade doing harm reduction. for him its fine. hes protected by visibility and legal strategy. hes not running a market. worst case he argues free press and walks.
youre not dominic. posting next to a face-out harm reduction guy doesnt protect you. it makes the evidence more valuable. when pitch gets seized, investigators skip the harm reduction accounts and go straight to the market operators posting between them. "your honor this platform hosted legitimate publishers AND the defendant's criminal marketplace — defendant knowingly operated in a criminal ecosystem."
the faces are not your shield. theyre contrast that makes you more visible.
the DM problem
maybe you run a market. maybe you dont. either way — someone DMs you. "got the pack thanks." you didnt reply. doesnt matter. now theres a satisfied customer statement in your inbox. someone sends you a product photo. you didnt ask for it. now theres photographic evidence in your DMs. someone sends you a price list. now youre colluding.
you dont have to do anything. the inbound traffic alone is evidence. if you have 10000 followers and 1000 DMs, the prosecution doesnt need to prove a single transaction. they show the jury follower count, message volume, and market link. the jury sees "darknet" and "10000 followers" and convicts.
what this actually means
pitch might be run by clean admins. dominic being there suggests it. but clean admins dont stop a seizure. the platform is one warrant away from being evidence locker gold — real identities AND market operators in the same database.
the play if youre a market operator:
- burner identity. not your tforum name. different writing style. different pgp.
- post screenshots like a random user who found the market. third person. "jungle just added X" not "we just added X"
- never post admin views. never post operator screenshots. public facing pages only
- never click clearnet links. never. if you need to watch a youtube video referenced in a post, different device, different network, no vpn that links sessions
- DMs off or ignored. zero engagement
- pull the ripcord if anything feels wrong. a burner account costs nothing to abandon
this is not paranoia. social networks have a fundamentally different threat model than forums. the graph is the weapon. dont build one with your name on it.
thoughts? anyone done a deeper analysis of the backend or who actually runs it?
Hacking / Opsec
[Analysis] Pitch social network — why real faces and youtube links are the problem, not the solution
Started by 08ujdi · Jun 30, 2026
pitch is a social network. you post, people follow you, you follow them, DMs are a whole separate database, reactions, view counts, who looked at what, timestamps. if pitch gets seized they have the entire graph. who you talked to. when. what you liked. what you browsed. your followers. your DMs. every picture anyone ever sent you. thats not a data point. thats a conviction.
If you can get a conviction on me from my Pitch profile, go right ahead lol
Interesting read though.
pitch is a social network. you post, people follow you, you follow them, DMs are a whole separate database, reactions, view counts, who looked at what, timestamps. if pitch gets seized they have the entire graph. who you talked to. when. what you liked. what you browsed. your followers. your DMs. every picture anyone ever sent you. thats not a data point. thats a conviction.
Yes, this graph logically speaking, exists. However, this graph can be derived from other data as well, if we use tforum as a example, looking at what posts you upvote, view, comment on, and who you pay attention to the most or mention the most, such a graph can be inferred. It is best to assume everything is logged or recorded on whatever platform you are using and to plan accordingly, Pitch is no different in this regard.
So the author wrote all that just to end up giving advice like "Don't post profile photos" and "Don't browse YouTube from the darknet with JS enabled"? )
I checked out Pitch. There aren't 10,000 users there.
And if you compare it to tforum, it’s a no-brainer. tforum is old-school, built by serious people. Pitch is basically darknet Twitter—and built by some stoned student, to boot.
Naturally, the crowd there reflects that.
Want a truly fresh idea? Open up and read your country's laws. Read them *very* carefully.
The modern legal system in almost every country is a factory for churning out criminals. In essence, it lines everyone in its jurisdiction up for prison. The trick is, the line is so long and there are so few prisons that 80% of citizens peacefully die of old age without ever realizing that line even existed.
As for the people you're telling this to—well, that's just how they're wired. They want to cut the line. So let them; let them go ahead )
I checked out Pitch. There aren't 10,000 users there.
And if you compare it to tforum, it’s a no-brainer. tforum is old-school, built by serious people. Pitch is basically darknet Twitter—and built by some stoned student, to boot.
Naturally, the crowd there reflects that.
Want a truly fresh idea? Open up and read your country's laws. Read them *very* carefully.
The modern legal system in almost every country is a factory for churning out criminals. In essence, it lines everyone in its jurisdiction up for prison. The trick is, the line is so long and there are so few prisons that 80% of citizens peacefully die of old age without ever realizing that line even existed.
As for the people you're telling this to—well, that's just how they're wired. They want to cut the line. So let them; let them go ahead )