DreamTeamDownloads1, FTP Help, Movies, Bollywood, Applications, etc. & Mature Sex Forum, Rapidshare, Filefactory, Freakshare, Rapidgator, Turbobit, & More MULTI Filehosts - Anti-Piracy Blocklists Don’t Keep BitTorrent Spies Out

Anti-Piracy Blocklists Don’t Keep BitTorrent Spies Out
by Ernesto

Anti-piracy groups are monitoring millions of BitTorrent users every year. Whether their end-game is to warn, threaten or sue, all public BitTorrent trackers are populated with companies that harvest IP-addresses. A new paper published on these monitoring activities describes the variety of techniques being employed, and shows that P2P-blocklists offer little protection.

When people use BitTorrent to download copyrighted material, there’s a good chance that their IP-addresses are being logged by an anti-piracy groups. Just last week we showed that two of these companies were snooping on thousands of torrents.

Many privacy-conscious BitTorrent users are well-aware of this kind of monitoring activity and take measures to remain anonymous. The preferred way for many is to use a VPN or proxy which conceals their ISP IP-address.

Another group of BitTorrent users prefer a free option in the form of a blocklist. These blocklists prevent a BitTorrent client from connecting to IP-addresses that presumably belong to anti-piracy outfits.

While these blocklists do provide some “security” they are not foolproof. Some anti-piracy groups are not recognized by the blocklist and therefore not blocked. This means that users who rely on them as their only means of protection are at risk of being logged.

In a new paper titled “The Unbearable Lightness of Monitoring: Direct Monitoring in BitTorrent,” researchers from the University of Birmingham try quantify this problem.

The researchers developed a methodology to detect which “peers” in a swarm are likely to be anti-piracy monitors. The research looked at 60 public torrent files and over a period of time they found 856 peers (on 5 subnets) that showed strong characteristics of monitoring agencies.

This data allowed them to compare their findings to the IP-addresses that are blocked by the popular i-Blocklist blocklist, to see how effective it is at keeping BitTorrent spies out.

Perhaps not surprisingly the blocklists doesn’t offer complete security. 69% of the IP-addresses of monitoring companies were blocked, but the other 31% were not. In other words, nearly one in three logging attempts bypassed the blocklist.

“Our direct monitoring analysis produced 593 peers (out of 856) that appear in subnets listed in the Anti-Infringement list. In addition, our analysis identifies 263 peers that, albeit displaying the same behaviour as monitoring peers do not currently appear in blocklists,” the researchers write.

“BitTorrent users should therefore not rely solely on such speculative blocklists to protect their privacy,” they add, suggesting that these BitTorrent users should add blocklists based on empirical research.

In addition to examining the effectiveness of i-Blocklist, the researchers also identified the prevalence of indirect versus direct detection methods.

In the past, indirect methods – where monitoring companies obtain lists of IP-addresses without connecting to the downloaders – have been heavily criticized. The main problem is that these lead to a high number of false accusations. For example, research has shown that due to shoddy techniques even a network printer can be accused of sharing copyrighted files on BitTorrent.

In the paper the researchers found that direct methods – where the anti-piracy group confirms that downloaders are actually sharing – are also widely used now. Their paper is first to provide evidence of direct monitoring, suggesting that monitoring companies are upping their accuracy.

For U.S. Internet subscribers the topic is relevant as the six-strikes anti-piracy scheme will be rolled out later this year. The Center for Copyright Information has yet to announce the names of the companies that will do the “spying” for the six-strikes system, and when they do it will be interesting to see what data gathering methods they use.

But whatever the answer, a blocklist alone is not going to prevent BitTorrent users from running into trouble.

http://i.imgur.com/7HuQq.gif

Think about that.

Despite some running IP blockers and others with torrent clients running them, still ⅓ of the IP snoopers are getting through. This is the major reason why I left torrents.

Now I used to be a believer in block lists. For a long time I run Peer Guardian and then switched to Protowall which reacted faster. But none of that makes a great deal of sense when ping tracers hit at multiples of a second. Most of these IP hunters are just as aware of IP blockers as the people that use them. So they have dynamic hosts that change the IP frequently. They also have accounts that are rarely used to answer the more determined and secured users.

What it is showing, is that public trackers aren't for you if you consider torrenting a must. They are no secure and your data is up for grabs. None of these IP hunters are people, it's all software. Notably, software can not distinguish between fair use and infringement. You have only to look at the latest event for the Hugo Awards this past weekend to see that lack in action. The Hugo Awards are to Science Fiction writers what the Oscars are to Tinsel Town. An annual award ceremony, with the top performers dressed to the nines to recognize the stars of their profession. This year it was to be streamed live on the internet for a greater audience. Despite all the care to preapprove the clips used to show the author's work being spread to film, it was flagged as infringing and the feed cut. While Ustream apologized profusely and removed the bot from service, the owner of the bot and feeder of the data, WorldCon refused to back down that a mistake was made and no one got to view the Hugo Awards live.

Code:

http://io9.com/5940036/how-copyright-enforcement-robots-killed-the-hugo-awards

It shows a distinct lack in responsibility from those supplying the software and database. In the past, the University of Washington ran a check on the IP collectors to see how well they were following up on IPs. They spoofed the IP for the client to a printer and a wifi hotspot. They recieved hundreds of C&D notices of infringement for the printer. As a result they printed up this poster with their report.

http://i.imgur.com/BbYAT.jpg

Code:

http://torrentfreak.com/study-reveals-reckless-anti-piracy-antics-080605/

It means that no one is watching the results. Even when the software is proven to be a mistake, no one owns up to it and they have made the process one in which the accusation is equivalent to guilt with the accused having to prove a negative (I didn't do it) which is immensely difficult.