Comments on: Stymie RIAA / MPAA spider bots

By: Reader's Write

Reader's Write — Fri, 20 Jan 2006 09:37:46 +0000

So counter-sue them for the income you could have lost. take your most product day ever, multiply it by the number of days they took your server, tack on reassembly costs, and there’s your claim.

By: Reader's Write

Reader's Write — Sun, 18 Dec 2005 19:15:25 +0000

Yeah, I get that but your busines may have allready been ruined until you get your day in court! How can you pay for lawyer if your source of income (servers) have been confiscated as evidence? You would definetly win, but for what price?

By: Reader's Write

Reader's Write — Sat, 17 Dec 2005 14:15:46 +0000

Beauty!

This would have the added bonus of both pissing off the big businesses AND improving the availability of content on the BitTorrent network.

But wait, why stop at one network? Why not include protocols for Gnutella, G2, and ED2K networks as well? Have the worm share every audio and video file on the infected computer. Maybe even add sharing of zips, too?

Enrich the networks, piss off the big businesses, what more could you ask for?

By: Reader's Write

Reader's Write — Fri, 16 Dec 2005 21:12:44 +0000

Please Call/write/communicate with your congressperson’s office and ask them to support H.R. 1201, the Digital Media Consumers’s Rights Act of 2005 that was introduced on 3/9/2005. The full text of the bill is located at http://www.pocosin.com/documents/DMCRA.pdf. This proposed law hopes to amend the fair use provisions under the DCMA.

Visit the EFF Page to e-mail your congressperson! TODAY!

By: Reader's Write

Reader's Write — Fri, 16 Dec 2005 18:52:55 +0000

What not just share large garbage files, like a 8 mb photo of someone giving the camera the bird. encrypt it with a simple password like “SueMe”, and give the same name as a popular song then share it. just a thought.

By: Reader's Write

Reader's Write — Fri, 16 Dec 2005 05:24:43 +0000

Generate a bunch of static pages once a week. If you want to get cute about it, add a random item to each generated page once in a while (~every 8 hours?).

If _I_ was writing the bot, I’d have it ignore files of improbable lengths, then read a small chunk, use file(1) on that to check that it really was multimedia, and finally copy the rest for use as evidence.

To defeat that, all we need is one person to record a video of themselves (preferably dressed up as a Disney character) saying “You suck!”, then rendering that out to various video and audio formats.

It would be easy enough to do this several times (in several costumes, with different backgrounds) and then automatically add different scrollies with educational messages (”Treat your customers like criminals and that’s what you’ll get”, for example) kicking in at different times and/or mix-n-match audio to that effect in order to get enough permutations to make automatic detection of the decoys much harder.

The idea is that the website generates random files starting with a valid multimedia stream so that the bot sees valid MM in various realistic-looking lengths, and downloads a copy for posterior. Any human viewing the results is going to get the message… again and again and again.

If you make the files long enough and the link slow enough (or use shaping), you can have the webserver trigger a response, either an automated scan when (say) the third consecutive file is downloaded or notify a human to come and have a look.

What you do next depends upon what you learn about the origin of the traffic, but I’d put tarpitting high on my list of things to do, and if I had a large network I’d run a check DNS, so that a “hit” added the calling IP to it, perhaps with a timeout an hour, and every host in the network would tarpit connections coming from that IP _and_ refresh the DNS when they did.

Cheers; Leon

By: Reader's Write

Reader's Write — Fri, 16 Dec 2005 02:31:29 +0000

I don’t believe it’s possible to force the client’s socket to remain open without simultaneously maintaining an open socket connection on the server.

By: Reader's Write

Reader's Write — Thu, 15 Dec 2005 23:45:08 +0000

I’ve added a link at the bottom of the DirIndexFaker homepage, so that you can donate via paypal if you’d like.

By: Reader's Write

Reader's Write — Thu, 15 Dec 2005 23:12:44 +0000

Oh that would be great. I would use my extra file server to to do this at home and run it on the server at work. It would be worth it to me, anything to cause those window lickers some pain.

By: Reader's Write

Reader's Write — Thu, 15 Dec 2005 18:46:04 +0000

HAHA
“Donate your processing and badwidth to the cause!
Help FU** Riaa/Mpaa you too!”

By: Reader's Write

Reader's Write — Thu, 15 Dec 2005 18:43:15 +0000

use Seti@home solution to mess up with **aa.

By: Reader's Write

Reader's Write — Thu, 15 Dec 2005 18:19:30 +0000

Well, dont know that much about this area but how about adding to it in such a way that you get the ip the bot is sending to and after you have sent the big files you add it to the host file so it cant get anymore info out

By: Reader's Write

Reader's Write — Thu, 15 Dec 2005 18:08:08 +0000

A big minus is that reloading the page actually gives different results. All a bot would have to do is to load the page twice and check whether the results are different.

However, this is easy to fix. By changing the random-seed to take just the date as a seed, an not the time in microseconds, you can make sure that generated content remains the same for one (or maybe several) days.

By: Reader's Write

Reader's Write — Thu, 15 Dec 2005 16:54:13 +0000

Hi, I’m the author of this script.

This just may the idea I was looking for. Hotlinking from hell.

By: Reader's Write

Reader's Write — Thu, 15 Dec 2005 16:52:27 +0000

Hi. I’m the author of this script. Saw you comment, and its a nice idea. I’ve already thought of this though, and dismissed it.

I don’t want to produce any adverse effects on the machines of people running this thing, and although sleep does not use CPU cycles the apache thread will continue to use ram. Plus Apache can only handle so many simultaeous connections, so by leaving one open for a long time, you are reducing the number of legitimate users that can use your site.

This is why I’m having such a hard time figuring out a solution to this.

Any other ideas? Cuz’ I’m about stumped.

By: Reader's Write

Reader's Write — Thu, 15 Dec 2005 16:48:10 +0000

Not even the RIAA is stupid enough to try to litigate this one. If they were to try you could sue THEM. Hell, even a public defender could get you off on this one.

You see, the content of the fake files the script generates are actually the source code for the script over and over again. So to prove to anyone that you are not a ‘copyright criminal’ all you would have to do is open the alleged file in notepad.

By: Reader's Write

Reader's Write — Thu, 15 Dec 2005 15:57:50 +0000

One thing I decided to change in the index.php file was the bottom message on the directory, to match the rest of the folders on my site, so that the bots wouldn’t be able to easily exclude anything with the default

tag. By default it is:

Apache/2.0.50 (FreeBSD) mod_ssl/2.0.50 OpenSSL/0.9.7d PHP/4.3.8 Server at 127.0.0.1 Port 80

By: Reader's Write

Reader's Write — Thu, 15 Dec 2005 15:27:41 +0000

Very nice. It even allows one to download a file which is between 2 and 3 MB in size that ends with .gz, that can not be opened. Every time you refresh the index it creates a new listing that looks to be random, with file extensions that are also randomly mp3, mpg, and zip.

I have installed it without any alterations here:
http://www.p2pjihad.org/media/

By: Reader's Write

Reader's Write — Thu, 15 Dec 2005 14:15:06 +0000

A worm that automatically begins downloading and then seeding random torrents via DHT. This would give us the plausable deniability we need to have these bullshit lawsuits thrown out of court.

By: Reader's Write

Reader's Write — Thu, 15 Dec 2005 11:51:56 +0000

OMG! Tarpits actually exist. Hell yeah, we should trap those bastard spiders in the strongest tarpit that can get coded.