Hacker News Reader

Hacker News

Comment by svnpenn | Hacker News Reader

Full thread

svnpenn

Someone have a mirror? Seems the actual files are here:

https://t.me/exconfidential/590

Edit: files are here

https://mega.nz/folder/CV91XLBZ#CPSDW-8EWetV7hGhgGd8GQ

magnet:?xt=urn:btih:38f947ceadf06e6d3ffc2b37b807d7ef80b57f21

View on HN

The countries of origin of the peers downloading that torrent is pretty cool to see. A fairly broad cross-section of the world.

Not reliable. Most people torrenting this are hopefully using a vpn.

Why?

Because until this thing gets diffused and dissected by everyone and their mothers, the law is likely to view it as publication of confidential trade secrets, and people who can be confirmed to be spreading such things can get federal time, e.g. [1] for example. Using a VPN is the barest of mechanisms to try to obscure your identity to avoid this sort of punishment.

[1] https://www.wsj.com/articles/SB10001424052970204409004577158...

Right but if you just download without seeding, no crime is being committed, yes?

So seems like the barest you can do is "disable seeding", not "use a VPN".

IANAL and you should probably contact yours about such things but a straightforward reading suggests that because you knew you were downloading something likely illegally gotten, you are in fact on the hook for downloading it.

    “Misappropriation” means: 

      (i) acquisition of a trade secret of another by a person who knows or has
        reason to know that the trade secret was acquired by improper means; or
      (ii) disclosure or use of a trade secret of another without express or
        implied consent by a person who 
        (A) used improper means to acquire knowledge of the trade secret; or 
        (B) at the time of disclosure or use knew or had reason to know that
          his knowledge of the trade secret was 
          (I) derived from or through a person who has utilized improper means 
            to acquire it; 
          (II) acquired under circumstances giving rise to a duty to maintain
            its secrecy or limit its use; or 
          (III) derived from or through a person who owed a duty to the person
            seeking relief to maintain its secrecy or limit its use; or 
        (C) before a material change of his position, knew or had reason to
          know that it was a trade secret and that knowledge of it had been
          acquired by accident or mistake.

Depends heavily on the jurisdiction, I am afraid. This exact case was used as a precedent where I'm from (Czech Republic) that no, merely downloading over BitTorrent still constitutes "sharing copyrighted material".

Presumably that was because BitTorrent sends data even before receiving 100% of it? But I assume that downloading these files would not be allowed in this case anyway as per Zákon č. 121/2000 Sb. §29 (2) since this is not a published work.

Ahem. Not seeding is a crime.

The only place I know where that would be the case is Switzerland, there downloading copyrighted material isn't illegal (and companies aren't allowed to track IPs of people downloading files via torrent), but sharing is. But in the context of a data leak of confidential trade secrets, that's likely to be a completely different situation.

I think there's a big difference between selling chemical secrets to a hostile government and this torrent. Namely, that no one is selling this information, it's available to anyone who can grab a magnet file.

Here is the real thing: are you confident enough in your statement to argue that way when confronted by your government (or whatever is the concerned body here)? If yes, then feel free to do whatever you want with your free time and bandwidth, but otherwise you're better to stay as far as possible from these data.

Torrent is not the most private way of downloading things, because if you share your already downloaded binary you are posting your ip in a tracker as a leecher or seeder. You actually can see live what torrents (at least the most popular) are you downloading[1], the site is only tracking the most popular hashes, but is easy to some entity track this intel hash specifically

[1] https://iknowwhatyoudownload.com/en/peer/

Or a SeedBox.

so.. I shouldn't have clicked that link on my office network?

All good, just make sure to restart your computer at the next available opportunity

How would that help?

Often a boot cycle gives the rootkit a chance to hook boot code to bootstrap into hypervisor.

The t.me page is a Telegram comment containing a mega.co.nz download link

I think the tg:// link is just the site trying to open up in the Telegram app.

I'd assume spreading this is not legal?

I’d assume it isn’t and just not talk about it loudly.

spreading this is copyright infringement. Intel has to sue you for copyright infringement in court.

I think we will see new "Edward Snowden" soon !... Cool

"Invalid magnet URI" from rtorrent

Works fine in Transmission

utorrent works.

You can't download from mega.nz unless you have their "downloader" app or an account, or if you have Firefox or Safari. It's useless.

The torrent works.

> firefox works

> it's useless

does not compute

A web app that only works in non-Chromium browsers isn't useless.

Golly, it doesn't work in Chrome? What's the technical limitation here? Or did they just choose not to support it?

Asking because as someone who uses FF as their daily driver and is surprised something is supported in it that isn't in Chrome...

I've downloaded stuff from MEGA in the last week on a Chromium based browser, so I'm not sure what the problem is supposed to be here.

I think johnklos meant it only works in Chrome and not in Firefox or Safari. You can download the whole archive as zip with Chrome - no problem. Firefox, on the other hand, doesn't allow you to store that much data locally in the browser, so it doesn't work out of the box. You can download the two top level directories separately though and this works even in Firefox.

I thought Mega didn't work in Safari, because it wouldn't have enough cache or whatever in-memory thing it does?

JDownloader 2 works fine and goes around their limitations to boot.

Or if you have OpenSSL and curl...

(At least the last time I had to download from MEGA, I RE'd what it does and it was somewhat clever - AES128 in counter mode, key is in the hash part of the URL.)

It's the other way around re ff/chrome

Reply on news.ycombinator.com