The reality is that anyone who has ever posted on RIU is just one subpoena away from having the IP address of their postings turned over to a law enforcement agency. Pick one. State, federal, whoever.
The real question to ask is - For how long does RIU store the logs of IP address from posts?
Has every post ever had its IP address logged? That would be bad.
Do they purge them from the postings after 24/48/72 hours?
I am not suggesting anything about the owners/moderators of RIU, I just do not know how able or willing they are to fight a subpoena from a Federal or State agency. Also it may not even involve RIU, law enforcement could just go around RIU and go to the hosting provider where the machines running this site are physically located. Not sure, but after a brief investigation it appears there may be a link between the hosting provider and this site. Its not entirely clear.
The scenario would be:
1) Subpoena is served on either RIU or to southeastweb.com (this appears to be where this site is hosted) asking for all records and logs pertaining to user "BigGiantDopeGrower". If served to SouthEastWeb, they show up with warrants and subpoena and physically take the box/drives RIU is hosted on and leave.
2) They look in the logs and find the IP address(es) associated with "BigGiantDopeGrower"
3) They determine who supplies that IP space. This is done online in a matter of minutes.
4) They contact that provider and with warrant and subpoena get the name/billing address/payment method for that account. This is done over the phone, again, in a matter of minutes.
5) They go to that physical address looking for "BigGiantDopeGrower", or check CC/bank records for the payment info of the card holder.
So, if you post pictures of a grow op that is in your house, from a computer that is in the same house.....you are most definitely putting yourself at risk and if desired, law enforcement could do steps 2-4 from their desk with a phone in about an hour, most certainly within 24 hours and determine where the address is that you are posting from.
Suggestion -
1) Do not post photos/grow journals of your grow op from a computer in the same location as your grow op. Ever. Put the photos on USB drive, go to a common usage internet cafe and post from there, preferably a very high traffic terminal where there are lots and lots of people using it every day that does not require any kind of identifying credentials to log in. And one without cameras there or photo ID required to use a machine. A lot of other issues with this admittedly, but you are not leaving the IP address of your grow op in every post. A second laptop that you take to an internet cafe and use their wifi and never connect to RIU at home with is another option. Anything where the IP of your posts is not coming from the place where you grow.
2) Just don't post photos or do a grow journal.
3) Only post if you are a legal provider and are very confident in your ability to defend your grow in court if it came down to it, and you are willing and able to do that financially and legally.
I worked for a major tier 1 internet service that provided services (hosting,email, etc) and we received multiple subpoenas daily. We had a dedicated fax machine for them and a person whose full time job it was to file the paperwork and then go retrieve the records that were being asked for by whatever agency was asking for them and it was all of them, local sherriffs from around the US, FBI, DEA, Homeland Security, we got them from all of them. Believe me, law enforcement even at the local level does this kind of stuff every single day, everywhere in the US. Its 2010, they know how to do this.
So the worst thing you could possible be doing on a risk scale is -
1) Be living in the US
2) Grow in a non-medical state or not be licensed to grow in a medical state
3) Grow at your billing address
3) Post photos and journals from a computer that is located at that same billing address
I agree that the likely hood of a small personal use grower EVER being tracked down this way is slim, the amount of effort (even though it is really simple) for someone growing 3-4 plants would be hardly worth it. But...if you have a 5000W grow room and are cranking out lbs a month....but then, if you do that, you already know this stuff and are being safe anyway.
Just some thoughts.