Tuesday, October 23, 2007

Seed complete - fake detection: failed

As you can see in the following picture, the seed has been completed. Peers can now continue distribution without me serving.



To summarize the experiment. Fake detection failed. Over 3.5 terabytes of nonsense could be distributed using a tiny uplink of 55 Kb/s within three days and some social engineering. The latter included identifying the most wanted piece of software at the time (not hard) and then making people believe in my upload's authenticity despite its dodgy encryption.

While the community work seemed promising at identifying fakes, the technical infrastructure failed miserably. Especially the torrent's automatic and unchecked redistribution has caused much harm. While sites like The Pirate Bay can't do much about the latter, it's up to the users to pay much more attention wether their favorite torrent sources are hosting first-hand or crawled content.

While it took about an hour for The Pirate Bay to remove the torrent after a link to this site appeared in their forum, it took an eternity for TorrentBox comments for a torrentbox moderator statement, and other pages are still serving it. The Pirate Bay also failed to harm distribution by not taking the torrent's tracker offline after removing it from their webpage. Distribution could have continued anyway through DHT, but this way it was even more efficient. Users, who didn't visit TPB regularly, could furthermore get the impression that everything was still fine.

The Pirate Bay could improve its service by enforcing a zero tolerance policy for cloaked content. Bittorrent allows inspection of a package's files long before a download's completion. Any irregularities wether encryption or obscure compression schemes should be banned instantly.

At the bottom line, the project has been much more insightful and extensive than I would have expected in the beginning. Read up on the whole story in the following interesting snippets:

10 comments:

Dima said...

Sorry, but it's not completed, still 99,9 because 2mb part is missing.

Dima said...

finished now

Anonymous said...

Password wrong

wasteofbits said...

Yes, I had to supply a wrong password. Else people would have noticed the emptiness of the dmg pretty quick. I just put some random keystrokes into the input field, which I haven't kept since.

edkis said...

please we need a real passphrase !

Anonymous said...

I realized this right after I looked the password..
the last work seems like fuck..
so,I knew it's fake then..

wasteofbits said...

I can't tell. The dmg contains very intimate photos of me going out with Scarlett Johansson during the 90's.

But I trust into the strength of AES crypto to keep them buried until long after I'll be buried.

;)

Anonymous said...

Ouch, we got it off TorrentBox quite late indeed (I myself deleted it actually), not our style usually. We get dozens of fakes a day and it's quite a hard job to deal with them all, yours just slipped through I guess. ;)

A TorrentBox Moderator

e.v.o said...

really great! i love you!!!
one of the best things i saw in the last time. around 1200 leechers @demonoid :p

simply just amazing work :)

Anonymous said...

seems to me like the protocol worked good.
sure it was fake,

lets make believe and say that it was real,
the guy calling it out as a fake could be Steve Jobs for all we know, they don't care if its fake or not, it is in their best interest to call it a fake.

so the file got removed from one tracker, and its still being propagated, heaven forbid a police raid causes a tracker to go down, or the moderators believed Steve because his reality distortion field now works over the internet with leopard..

since the file is nothing but crap, it will eventually disappear when all participants have decided the file is in fact crap.

all you have really managed to prove is you are an ass, who pollutes the internet.