Pirate Bay moves to the cloud to confound copyright cops The Pirate Bay went down for about five minutes on Tuesday night as the group retired almost all of its servers and shifted onto the cloud. "So, first we ditched the trackers. Then we got rid of the torrents. Now? Now we've gotten rid of the servers. Slowly and steadily we are getting rid of our earthly form and ascending into …
"The feds won't be able to DDOS their site as it may affect something else."
And how will that even slow them down? They've done it before, it's their standard practice.
There was one case some months back where they put a "This site has been blocked because it's run by criminals" notice on *every* customer of a provider who had one single bad client.
Taking what they have done a little further, what if they added a viral capability so that it seeks out cloud services and replicates itself automatically?
If the system made itself money and could open its own bank accounts, what would stop it from buying cloud space for itself and continually moving itself around?
It really could be unstoppable.
This post has been deleted by its author
This post has been deleted by its author
I've never quite understood what's so hard about tracking them down. My computer knows "where" their server is as it quite easily gets data from their website. So why can't you just 'follow the packets' and end up at the server?
I assume they are located somewhere not-so-easy to walk in and bust, or they are located in so many places that it's impractical.
On the management side several people must be looking after the site, "unpaid", full time. What's in it for them .. except great risk?
You can't help but admire their tenacity. I don't think they'll ever be 'busted' out of existence, but I can see them claiming their mission is complete at some point and just gracefully turning everything off.
p.s. TPB, please can I have some of your servers you no longer need? :)
It's difficult to track them down because their physical equipment is nothing but a middle-man now. You are talking indirectly to the servers.
Now what makes this special is the fact that in addition to indirect communication, the physical machines running the service are running encrypted content on a virtual machine. So whoever does own the physical machines has no idea what they're serving. In addition, those virtual machines don't talk to the users, they talk to the middle-man routers - so they don't know what they're serving or who they're serving to.
Basically, the only way to shut down the pirate bay permanently is to have every country in the world on standby, and within hours (maybe less) lead succesive raids on the physical router and balancer to find the physical locations the cloud servers the balancer has been speaking with. Then, they would need to collect evidence from those machines before getting locked out in the time remaining.
If they fail to find any of the cloud servers, they would have 0 evidence, just standard equipment with some encrypted addresses. By the time they would decrypt that info - if they could - the cloud servers would have already changed and the network could easily be reinstated.
And just for a kick in the nuts, they only have 8 hours to find the cloud-servers if they wanted any evidence of what those servers were serving.
Cloud VM services may be encrypted... but are you going to store your pins, passwords, bank details, medical history on them? The encryption may, for all intents and purposes, be un-crackable but that will not stop the far more probable scenario of the keys being obtained through hackery, mislaid or stolen. Like it's never happened before...
Just marketing for Hosted Services on real servers somewhere. It's no different at all to having servers of their own at a number of different data centres.
Whether or not their site(s) run on a virtual server or not isn't relevant either.
Virtual Servers and so called Clouds use real servers in real buildings in real countries.
I'm 100% opposed to pursuing downloaders or blocking people's internet to ANY server (doomed to failure) or cutting of people from the Internet.
But these people are no latter day Robin Hoods. They are at best parasites and at worst criminals. Just because the Media Industry is nuts and charges too much and doesn't recompense the artists and production crew enough doesn't give them the right to distribute.
I admire people that create, I admire people that pay to support that. I despise parasites and criminals dressing up their actions as somehow beneficial.
I don't think you have any idea what yo are talking about. Of course its different. A real server can be seized by the police because it exists in a real, fixed location, is the property of the criminal, or of someone knowingly hosting the illegal content. With a cloud service the criminal does not know where the server is actually located, and its location can change. Further more the provider does not know what activity is going on on the server. Both parties have actual deniability. Plus, a virtual server can not be seized, even if it could somehow be tracked down (within 8 hours). If the authorities could track it down only the disk image can be seized but it is encrypted. And good luck getting a warrant (again, within 8 hours) if the disk image happens to be stored somewhere that isn't in the USA's pocket.
And more importantly - even if the police did get their act together and impound a router in Estonia talking to a load balancer in Korea and so find and shutdown the VM in the Netherlands.
Then 10 secs later another VM copy paid for by a Mr J Smith's disposable credit card spins up in Canada.
@Mage,
If you do not understand something, just don't talk about.
To put it simply:
- the data is stored somewhere in some country in encrypted form. -- getting those yields you nothing, unless you have the decryption keys
- there is another bunch or servers that just redirect to those machines and decrypt dynamically - getting those is a step but if the encrypted storage 'realizes' it has lost its "proxies" it wipes itself out, you have 8 hours to seize, understand what it does, how it does i (and where)t and issue warrant in another country (which might not be cooperative at all)
i.e. good luck.
I understand perfectly that TBP doesn't store the copies themselves and is using encryption and routers etc.
But at the end of the day they are the wrong peolple to cheer, they are not doing a single iota of good nor advancing any cause. They are egotistical parasitical scum that get far too much publicity. Their "information" to enable people to download do live on real servers somewhere. The "Cloud" is purely a marketing concept, Routing, load sharing, virtual machines etc practically pre-date the internet and certainly pre-date websites.
I'm baffled as to why the smart people here would cheer on these idiots.
I don't think the smart people are cheering on anything here, except some clever use of existing technology to solve a niggling distribution problem.
The fact that it is PB doing the clever use is secondary, in my book. It was only a matter of time before someone reasoned a bullet-proof way around the ham-fisted, freedom-robbing techniques devised by some fat-cat studio owners during a coke-fuelled sex orgy . Perhaps the moguls should learn a little more about how the tech works, or in their case, doesn't work.
Once again, the Net (and the ingenuity of the people using it) shows why it is not so easy for any one entity or pressure group to take control. DARPA was probably the best investment of the US taxpayer's dollar ever.
To the MPAA and your other freedom-loving appendages: looks like you will need to re-think your ridiculous strategy for world domination and oppression. Good luck
And go, go Neo....
I have to say, leaving aside any kind of morals about what they actually do, clearly they are a gifted bunch and I have to tip my hat from a technical standpoint. Just imagine what these guys could do if they ran a legitimate business.
However, I do have to say, I hope the home secretary is paying attention. With the snoopers charter this kind of thing is going to become more and more prevalent for the criminal element. By chasing this group down they have been forced to build a fortress. and made catching them costly/time consuming and probably 9 times out of 10 fruitless. While this group help people get a crappy copy of a film doesn't keep me awake at night I do worry what the more serious criminals will do using this kind of set-up. Maybe its an inevitable step in technological evolution that would have happened anyway, but then maybe we've bought it on ourselves. And I for one, blame the music and film industry!
"The move may also throw a bit of a wrench in plans by AT&T and other US network operators to implement a "six strikes and you're out" policy on piracy, which is due to take effect by the end of the year. Tracking IP addresses of Pirate Bay users is going to be key to the RIAA and MPAA's enforcement efforts, and that task looks to have become significantly harder with the latest Brahman bootstrapping."
It won't make the blindest bit of difference. The MPAA/RIAA don't rely on physical access to the server to track people on a torrent. All you have to do is start to download it yourself, and ta-da, you have a nice list of IP addresses of people giving you bits of the torrent.
Automating this process is already widely used in the anti-piracy circles.
And the real pirates/freetards/illegal redistributors use [enter your favourite method of IP obfuscation here] so the best they can get is the low-hanging fruit who either download to see whether or not something is worth buying, or using a torrent because you simply cannot order said item/program/file *even if you wanted to* due to geographic lockouts imposed against all forms of common reason other than blind greed by the industry sustaining these agencies, who strangely enough seem to claim global jurisdiction "because of the internet" while at the same time enforcing said geographical restrictions.
Curioser and curioser, as Alice said.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
