About
Community
Bad Ideas
Drugs
Ego
Erotica
Fringe
Society
Technology
register | bbs | search | rss | faq | about
meet up | add to del.icio.us | digg it
Go Back   Community > Technology > Network (in)Security
Register FAQ Members List Calendar Today's Posts

Network (in)Security Interesting hacks and cracks. Info on firewalls, TCP/IP, encryption, networks, and security. The ins and outs of the phone system, caller services, how things work, what's illegal and what's not, cellular phones, beepers, telephony legislation, the PUC, ISDN, taps, who's listening, and switches. Talking about phones, hacking systems, technical advice, and such is completely LEGAL in the United States -- it's covered by the First Amendment. What's illegal is conspiracy to commit a crime. So if you say something like "Meet me at 2am so we can crack a can" or "I changed my cell phone's number myself" you are criminally liable. Stating "You can crack a can by doing thus-and-so" or "If you wanted to change a cell phone's number, you could do it like so" is perfectly OK. Posting passwords, calling card numbers, or credit card numbers is forbidden on this network. Posting such info will get you booted off the net.

 
 
Thread Tools Display Modes
  #1   Add midnightrider384 to your ignore list  
Old 2008-12-31, 20:39
midnightrider384 midnightrider384 is offline
Regular
 
West Minneapolis
Default I got the ESA a-knockin on my door from a torrent

How could this have happened? They had me tracked down to the specific port I use with uTorrent.

Was it a stinger torrent designed to track the people who download it? Was it a person that I leeched it from?

Does anyone know how these kinds of things work?

Oh, and:

http://www.theesa.com/

is what hit me
Reply With Quote
  #2   Add Mutant Funk Drink to your ignore list  
Old 2008-12-31, 20:50
Mutant Funk Drink Mutant Funk Drink is offline
Regular
 
Shining Time Station
Default Re: I got the ESA a-knockin on my door from a torrent

Well I think its something like 1/3 (probably more at this point) of torrents are being connected to by anti-p2p organizations. I'm not sure how they work, but chances are they connected to you enough times that they decided to pwn your ass.

Lesson: use rapidshit and download torrents from school.
Reply With Quote
  #3   Add Expl0itz to your ignore list  
Old 2008-12-31, 22:06
Expl0itz Expl0itz is offline
Moderator
 
The fiber optic lines
Talking Re: I got the ESA a-knockin on my door from a torrent

Were you using the newest version of uTorrent?
__________________
0|1|0
0|0|1 jamato@email.itt-tech.edu
1|1|1
Reply With Quote
  #4   Add midnightrider384 to your ignore list  
Old 2008-12-31, 22:30
midnightrider384 midnightrider384 is offline
Regular
 
West Minneapolis
Default Re: I got the ESA a-knockin on my door from a torrent

No, it was an older version.
Reply With Quote
  #5   Add Prometheum to your ignore list  
Old 2008-12-31, 22:48
Prometheum Prometheum is offline
Regular
 
01 Send a message via AIM to Prometheum Send a message via MSN to Prometheum
Default Re: I got the ESA a-knockin on my door from a torrent

Contact the EFF right away and if you feel comfortable, put the letter on Chilling Effects.

Always use blocklists, and never assume any torrent to be safe.
Reply With Quote
  #6   Add oddballz194 to your ignore list  
Old 2008-12-31, 23:19
oddballz194 oddballz194 is offline
Super Moderator
 
In a nuclear crater
Angry Re: I got the ESA a-knockin on my door from a torrent

Quote:
Originally Posted by Prometheum View Post
Always use blocklists, and never assume any torrent to be safe.
I disagree with this statement. The torrents from the following sites are almost guaranteed not to land you in legal trouble:

Debian (http:../../www.debian.org/cd/torrent-cd/default.htm)
Ubuntu (http://www.ubuntu.com/getubuntu/downloadmirrors#bt)
Fedora (http:../../torrent.fedoraproject.org/default.htm)
GotBSD (http:../../www.gotbsd.net/default.htm)

And there are many, many more along those lines.
__________________
oddballz194@gmail.com <-- my email
Reply With Quote
 #7 
Old 2008-12-31, 23:40
Regular
 
01
Default Re: I got the ESA a-knockin on my door from a torrent

I disagree with this statement. The torrents from the following sites are almost guaranteed not to land you in legal trouble:

Debian (http://www.debian.org/CD/torrent-cd/)
Ubuntu (http://www.ubuntu.com/getubuntu/downloadmirrors#bt)
Fedora (http://torrent.fedoraproject.org/)
GotBSD (http://www.gotbsd.net/)

And there are many, many more along those lines. :p

Those torrents might not be safe either. You should still use blocklists to make sure that the MAFIAA can't steal software from those fine companies.

:)
 #8 
Old 2009-01-01, 00:48
sirholkms sirholkms is offline
Regular
 
Default Re: I got the ESA a-knockin on my door from a torrent

We are living in one of the most fucked up times on record but because it is "normal" to us none of us question our freedom. Fuck you all.
 #9 
Old 2009-01-01, 09:36
redjoker redjoker is offline
Regular
 
Default Re: I got the ESA a-knockin on my door from a torrent

Quote:
Originally Posted by sirholkms
We are living in one of the most fucked up times on record but because it is "normal" to us none of us question our freedom. Fuck you all.


QFT. Fuck the ESA. Don't go down without a fight.
 #10 
Old 2009-01-01, 18:12
TLV TLV is offline
Regular
 
Default Re: I got the ESA a-knockin on my door from a torrent

out of curiosity what were you downloading? movies? music? games? software?

if you want to jump through the loop out of it find out EXACTLY what they have you down as "stealing" and go buy it right now. if you own a program/cd/movie etc you can download it as much as you want


but if they have you down for like $1000 worth of stuff its probably not worth it





and this exact thing is why i NEVER use torrents. i always use rapidshre, megauplaod and the likes for my music/movies/games/software
 #11 
Old 2009-01-01, 18:20
redjoker redjoker is offline
Regular
 
Default Re: I got the ESA a-knockin on my door from a torrent

Get a friend you don't see often but trust to pay cash for it. Then scratch it and say you thought they probably wouldn't do returns and didn't feel like wasting your time trying to find out. Using a credit card to buy the copy will bite you in the ass.
 #12 
Old 2009-01-01, 20:10
Regular
 
01
Default Re: I got the ESA a-knockin on my door from a torrent

and this exact thing is why i NEVER use torrents. i always use rapidshre, megauplaod and the likes for my music/movies/games/software

Great, so when rapidshare, megaupload and the likes get DMCA notices for the files you've downloaded, they'll fork over your IP and personal information in a heartbeat. You'll make a much easier target than any BitTorrent user. Thank you very much.
 #13 
Old 2009-01-01, 20:44
Moderator
 
The fiber optic lines
Default Re: I got the ESA a-knockin on my door from a torrent

Linux/GNU could have saved him....
 #14 
Old 2009-01-01, 23:35
Regular
 
01
Default Re: I got the ESA a-knockin on my door from a torrent

Quote:
Originally Posted by Expl0itz
Linux/GNU could have saved him....


How exactly? I mean, if he got busted by a rootkit similar to the Sony Rootkit, then yeah, it could have, but assuming he got busted by a bad peer, I don't see why you're saying this.
 #15 
Old 2009-01-02, 02:15
Regular
 
Default Re: I got the ESA a-knockin on my door from a torrent

Were you running PeerGuardian or any other kind of blocklist software?
 #16 
Old 2009-01-02, 04:49
theHacker theHacker is offline
Regular
 
Default Re: I got the ESA a-knockin on my door from a torrent

my neighbour got the same problem.

he downloaded couple of movies using torrent.... he got call from ISP and his internet service is discontinued.... I think this is against out freedom.. Time to Protest.....
 #17 
Old 2009-01-02, 05:08
Chupacabre Chupacabre is offline
Regular
 
Default Re: I got the ESA a-knockin on my door from a torrent

Quote:
Originally Posted by enkrypt0r
Were you running PeerGuardian or any other kind of blocklist software?

yeh at the very least use peerguardian. never had a problem meself.
 #18 
Old 2009-01-02, 23:40
Xafine Xafine is offline
Regular
 
Default Re: I got the ESA a-knockin on my door from a torrent

Okay, it seems that no one really answered the OP's questions, so I will. I'll also explain why PeerGuardian may not save you. This information is taken by a study conducted by the University of Washington (Why My Printer Received a DMCA Takedown Notice (http://dmca.cs.washington.edu/uwcse_dmca_tr.pdf)); and is obviously explained in more detail within their study, if anyone is interested.

Okay - you do not need any software installed on your computer to be found downloading illegal content from Bit Torrent; nor do you have to download a particularly designed torrent. Infact, you don't even have to leech from someone to get caught downloading the content. How it works is like this: the torrent file you download has the address of several servers (known as trackers) contained within it. These trackers are responsible for maintaining a list of peers (their IP address and port) for any torrent which they host, and providing this list to all of the connected peers. When your Bit Torrent client (in this case, uTorrent) receives the list, they connect to a few of these peers, and begin downloading the files from them. Other peers also connect to you, and begin download from you.

Software such as PeerGuardian acts as a firewall, and prevents you from connecting to peers who have known affiliations with law enforcement, DMCA people, etc. They do this by maintaining a list of blacklisted IP addresses, which your computer is blocked from accessing. This stops you from downloading from these organisations, as well as uploading to them, but it does not stop them from getting your IP address and port from the tracker. Since it would take monitoring organisations a very large amount of bandwidth to confirm that you were actually sharing the file (they would have to download and verify that it was the offending content for every connected peer), they often simply assume that you were.

Knowing that you were connected to the tracker for a particular torrent, the organisation (or whoever hired them) sends a complaint letter to your ISP. Your ISP then forwards the complaint to you. Here's one I received:

ISP have received a Notice of Claimed Infringement relating to the IP
address of your ISP ADSL account. In forwarding you this notice ISP
are not alleging that you are infringing any copyright but are advising you
that some other party has alleged that you have and has particularised that
allegation within the following notice.

...

If ISP receive another notice that alleges you are infringing copyright
we will ask you to show cause why we should not ask you to move your ADSL
service to another ADSL provider.

Note that nowhere do they actually mention whether or not I was sharing the particular file. The fact that they received the allegation was enough to send me a warning, because they have an obligation to ensure that they are not promoting the sharing of illegal content. In that instance, I may have been sharing the file in question - or I might have just been connected to the tracker for fun, without downloading a single byte of data from any of the peers. If this had gone to caught, the complainant would have needed evidence to prove that I did actually download the file,which is why a lot of these cases are not pursued.

For anyone who is interested in the subject, I suggest reading the paper that I linked to at the start of my post.

Xafine
 #19 
Old 2009-01-03, 00:33
TLV TLV is offline
Regular
 
Default Re: I got the ESA a-knockin on my door from a torrent

Great, so when rapidshare, megaupload and the likes get DMCA notices for the files you've downloaded, they'll fork over your IP and personal information in a heartbeat. You'll make a much easier target than any BitTorrent user. Thank you very much.


you obviously have no idea how those sites work



straight from megauploads site


"Which files are allowed to be uploaded?

All files that do not violate our terms of service or the laws of concerned countries. This means that files violating copyrights, or containing pornography, are forbidden and will be removed as soon as we notice. If you see such files on Megaupload, we would be glad if you notified us: Simply file an abuse report on our front page. "





they dont "knowingly" host copyrighted material, and as soon as someone reports it they delete it.


plus, how many people have you heard of getting busted because of a torrent? ok. now how many people have you heard of being busted because MU, RS or a similar site turned in their IP? exactly.
 #20 
Old 2009-01-03, 01:14
Regular
 
01
Default Re: I got the ESA a-knockin on my door from a torrent

you obviously have no idea how those sites work
straight from megauploads site
"Which files are allowed to be uploaded?

All files that do not violate our terms of service or the laws of concerned countries. This means that files violating copyrights, or containing pornography, are forbidden and will be removed as soon as we notice. If you see such files on Megaupload, we would be glad if you notified us: Simply file an abuse report on our front page. "

they dont "knowingly" host copyrighted material, and as soon as someone reports it they delete it.

plus, how many people have you heard of getting busted because of a torrent? ok. now how many people have you heard of being busted because MU, RS or a similar site turned in their IP? exactly.

Yes, they don't "knowingly" host copyrighted material illicitly. When it is reported, they will remove it and they will likely fork over a list of IP's who downloaded it and the IP that uploaded it if asked. There is a single point of litigation here and that means that it is extremely easy to get information from them.

I've heard of a few people getting "busted" from bittorrent. I've heard of people getting arrested because file hosting sites turned in their personal information.

You do not get any protection by hiding in a smaller crowd. You do not get any protection from hiding behind a single proxy. You are worsening your security.
 #21 
Old 2009-01-03, 04:50
TLV TLV is offline
Regular
 
Default Re: I got the ESA a-knockin on my door from a torrent

Yes, they don't "knowingly" host copyrighted material illicitly. When it is reported, they will remove it and they will likely fork over a list of IP's who downloaded it and the IP that uploaded it if asked. There is a single point of litigation here and that means that it is extremely easy to get information from them.

I've heard of a few people getting "busted" from bittorrent. I've heard of people getting arrested because file hosting sites turned in their personal information.

You do not get any protection by hiding in a smaller crowd. You do not get any protection from hiding behind a single proxy. You are worsening your security.

well i dont exact details but i know of a few albums that i download from rapidshare. a week later i got a "ceast and desist" order from the record company saying that i uploaded the CDs(taken from my account on the site that DID upload it and has my email) i told em i didnt upload shit and to fuck off

so apperently they couldnt get too much from rapidshare cause the site reuploaded the links a day or 2 later and the guy who i know uploaded it got in no trouble
 #22 
Old 2009-01-03, 05:25
Regular
 
&#9827;&#9827;&#9827;&#9827;
Default Re: I got the ESA a-knockin on my door from a torrent

If you were to go to court, plead guilty, install a TOR server and modify your OS logs to make it appear that it's been there for a few years. Then you can make the claim that somebody was using your proxy server to download torrents. Remember, the TOR servers don't keep logs ;).
 #23 
Old 2009-01-03, 07:57
Regular
 
01
Default Re: I got the ESA a-knockin on my door from a torrent

Quote:
Originally Posted by Clover
If you were to go to court, plead guilty, install a TOR server and modify your OS logs to make it appear that it's been there for a few years. Then you can make the claim that somebody was using your proxy server to download torrents. Remember, the TOR servers don't keep logs ;).


Yes, but the Tor router list is accessible and is probably cached somewhere, and you can be shown to not be on it.
 #24 
Old 2009-01-03, 20:23
Regular
 
&#9827;&#9827;&#9827;&#9827;
Default Re: I got the ESA a-knockin on my door from a torrent

Yes, but the Tor router list is accessible and is probably cached somewhere, and you can be shown to not be on it.
I'm almost positive that all of TORs records are completely destroyed.
 #25 
Old 2009-01-03, 20:43
Regular
 
Default Re: I got the ESA a-knockin on my door from a torrent

I think Clover's right on this one... Unless something's changed since I last read up on it, I think the cache is destroyed rather quickly, if it exists as anything more than information tossed around in RAM at all.
 #26 
Old 2009-01-03, 22:53
Regular
 
01
Default Re: I got the ESA a-knockin on my door from a torrent

Quote:
Originally Posted by enkrypt0r
I think Clover's right on this one... Unless something's changed since I last read up on it, I think the cache is destroyed rather quickly, if it exists as anything more than information tossed around in RAM at all.


You're right and you're wrong.

See, every time a Tor node joins the network, it queries the directory servers for a list of all known Tor routers, which it needs to build circuits. This is probably destroyed, or whatever, sure. Tor needs to know all the other routers in any event.

The thing is, anyone can download this. I'm sure someone is storing it, and that could be used to prove who was a Tor router at any given time.
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Forum Jump

 
To the best of our knowledge, the text on this page may be freely reproduced and distributed.
 

totse.com certificate signatures
 
 
About | Community | Bad Ideas | Drugs | Ego | Erotica | Fringe | Society | Technology
Hot Topics