Pirate Bay Moves to The Cloud, Becomes Raid-Proof
torrentfreak.com
torrentfreak.com
and even in the event they [cloud providers] found out
it would be impossible for them to gather data on the users.
The host could potentially sniff the traffic during live operation by sniffing the memory of the vm.
But when the vm's communication is cut, the whole disk is encrypted. I expect this encryption to be done using some sort of public/private key encryption scheme, such that without the private key, you can't actually unencrypt the disk. THis is what is meant by gathering data on the user i suspect.
This means that while the system is running, the key can be read by the host. It doesn't matter is the key is later purged. Changing the key requires re-encrypting the entire disk which is a slow operation.
Achieving fault tolerance using a few cloud providers is nice (and expensive) but they're still far from raid proof (all it takes is some coordination from police in multiple countries).
There are still technical measures that could be taken with-in one country. Eg. automated null-routing of A records for thepiratebase.se (and then do it N-times a second).
When the IP addresses of the 'loadbalancers' are known then it takes any cloud-provider the better part of 5 minutes to determine which of their instances are exchanging how much traffic with those IP addresses.
However, if a country really wants to go ballistic on TPB then it'd be much easier to just knock their public-facing IPs out at the IX-level[1]. A fairly low-cost operation (if your legislation enables it) and the only circumvention is then to proxy through a different country - a significant barrier for most users.
[1] http://en.wikipedia.org/wiki/List_of_Internet_exchange_point...
That doesn't solve the problem of the IP address itself changing, but then you need some system of distributing the updated IP addresses whenever they change. Which would require inventing a distributed lookup system....hmm... this is starting to sound familiar....!
- emule like dht.
- keep a cache of 1000 of ips that had trustworthy content in different ip neighbourhoods.
- provide a pub-sub of new content + hot/top files.
- seed one-to-download one file. Host encrypted content, freenet style to have faster speeds on other files. Never allowing a file to go seedless.
- the software could be provided as a chrome+firefox sandboxed addon or something like that.
Go hackers go.
Do they use TrueCrypt volumes ? What are the alternatives ?
(b) You have to raid 2 cloud providers
(c) what if they have 4 backup cloud installs ready to go live? You take out the 2 there, and then 2 more in a different, unknown hosting company go live.
As far as data, cloud providers usually have functions to administrate guest VMs, which would allow a law enforcement agency to peer into the box as well, nullifying any benefit of data encryption while the box was online.
(or at least that's how I understood it)
Provided they spread it out even a little, nothing about that traffic should appear out of the ordinary.
As for the second point, yes, much like youtube's approach, they can give law enforcement agency access to all VMs but again, they must know what cloud provider is hosting the site at any given moment.
It won't matter that TPB is distributed, clouded, encrypted, PTP, or whatever. When the governments are successful in getting SOPA, ACTA or whatever through congress, the ISP's and companies like Google and Apple are going to be made responsible for cooking into their devices preventions for unauthorized copying and unauthorized distribution of 3d schematics for weapons that pass through their ISP's or their hardware. As elite as TPB thinks they are, a few elite hackers can't fight an army of mediocre hackers.
An important factor in TPB living forever is preserving its image in the hearts and minds of ALL hackers everywhere, worldwide, collectively we can outsmart those who wish to catch us, a small group of us will eventually be defeated, as all robin hoods must be. We have to have the hackers on the ground floor who wish TPB to live forever inside Google, Comcast, Apple, HP, MPAA, RIAA, and everywhere else. The battle for control what you can think, what you can do inside the comfort of your own mind is under attack. The battle begins here, with the ownership of what can take place in your computer. Soon these computers will be our minds, and the governments will rule over the thoughts that take place inside them. We will wake up as directive following slaves on the land our fathers conquered. We have to have a 10 and a 50 year plan.
No, really, it's not. For the most part it is encouraging people to consume something for free they should have paid for.
I really don't get the love for TPB and copyright infringement in general on HN when most are dreaming of starting businesses where you need people to hand over money.
So, the Robin Hood analogy works perfectly then.
The movie and music companies aren't suffering, artists aren't suffering (in fact, in can be argued that artists embracing the new media world are flourishing), software companies and developers aren't suffering. There is more music, movies and software than ever before.
The whole piracy issue is overblown.
In the US, the copyright exists To promote the Progress of Science and useful Arts (2). It essentially is allowed to exist with the hopes that on average it will further the common good, but it is limited because even at the time, there was a good deal of skepticism about that monopoly power. With regards to music and the visual and performing artists, I think many might actually argue that they are expressly uninterested in meeting the definition of "useful": "Art is art and everything is everything else." (3). But even if we offend them, it must surely be useful to lower the cost music in the air. It must surely be in the public good to reduce the cost of happiness.
I would be interested in hearing why you think right is what you think it is, your understanding of the history of where copyright came from.
(1) http://randomfoo.net/oscon/2002/lessig/free.html
(2) US Constitution, Article 1, section 8, clause 8
The whole piracy issue is overblown."
In real world economics, you argument actually supports the exact opposite. When supply increases and demand decreases, the ability for an artist to sell enough music to live on gets exponentially harder.
When a few people buy the music, then spread it by piracy means its not just the artist and music companies who are losing money. It's the producers, the mixers and dozens of other technical people not making a million dollars when Jay-Z's new album sells 10K copies in the first week.
The piracy issue is overblown only to those who have never experienced it first hand. It's not just the artist and the big music companies you're hurting, there's a ton of lower level people who work in the industry who are suffering because of piracy.
The argument seems to be that file-sharing is bad because "potential" jobs are destroyed. This doesn't seem like an argument formed in principle because the internet has destroyed many "potential" jobs (see blockbuster, b&n). Innovation kills jobs (and creates them) and I'm okay with this. But I'm not okay with killing innovation by means of legislation.
For that argument to make sense, you have to assume that an artist has a right to make a living selling music. If you believe that then the status quo ante was failing miserably (because almost all artists were never signed by a label with the marketing power to make them economically viable).
On a more generic level, the fight between governments and media corporations and the Pirate Bay are interesting from a technological and ideological standpoint; How does a service stay operational against a large and well financed fight that wants to shut it down?
While "Piracy" is the very visible fight, this question is likewise relevant to activists and protesters as well as free speech in repressive governments. It is also relevant to providers that are attacked by malcontents, black hat organizations, and less-than-egalitarian governments that are attempting to disrupt their services.
Whatever you think of TPB, you have to give them credit for being both nimble and technologically savvy in solving a problem of service disruption against what many would see as long odds. They give us an interesting case study of how to deal with service disruption and how it can be dealt with. All the companies that pass through HN have to deal with the problems of Uptime, especially in the case of adversarial situations that are beyond our control.
This particular case is interesting because the service is dealing with a well organized and deliberate attack against it as well as it's users. Downtime due to malicious hackers and automated attacks is a thorny problem. It becomes trickier when we want to protect sensitive customer data.
While I don't expect a detailed technical breakdown of their systems, I would love to read their whitepaper.
You act as though people's consumption of media is this black hole, this void that feeds but produces nothing of value. It can't be further from the truth. People actively market the things they listen to and enjoy. They remix and create new content. They integrate it into their culture and social networks (both the virtual and meatspace ones).
This is value creation at its finest, and yet no dollar amount is placed on it (yet).
As to TPB specificly it's think anime fan subs for nitch shows that are never going to be released in the US.
Games, movies, TV Shows, Desktop Software and Market apps; everything that is available for pirating, will be pirated. Sure, some part of it is due to the fact that they cannot buy-watch-use this material either due to them being delay for years or because they require Credit Cards while most Indians have a Debit Card but that is a very small percentage of the entire sales loss.
Therefore, Indians do not buy digital content as often as their US counterparts who are able to legally and easily.
You believe that this is some part of it. I believe that this is ALL of it. If media companies made it easier for people to get access to media easily and for a reasonable price, piracy will all but disappear.
I don't care if some artist or some coder somewhere doesn't get paid for some work well done. The future of our species is at stake here and we are trying to paint a bright future for your great grandchildren.
A future where your children rule over the machine, not where the machine rules over you. In my machine, I may break the law if I choose to do so. the machine under my desk shall not be made into an iron fist of the government. I will fight this to the death. we have your best interests in mind. the internet is going to become a mind, and we need to protect this baby. It is still an infant.
the government has no idea how to raise it, it only knows how to bleed it and tax it. I give this baby a voice.
I didn't know being able to watch Game of Thrones 30 minutes after it airs on HBO via your computer without paying was such a dire thing.
Heh, reminds me of the Hacker's Manifesto..
Yes, I am a criminal. My crime is that of curiosity. My crime is that of judging people by what they say and think, not what they look like. My crime is that of outsmarting you, something that you will never forgive me for.
I am a hacker, and this is my manifesto. You may stop this individual, but you can't stop us all... after all, we're all alike.
The reason I don't like TPB is not because of pirating, but rather they are making money from others' work while pretending its about freedom.
It especially annoys me to see fellow programmers getting extremely upset when a software authors work is copied or used in violation with their chosen license. Yet musicians are not allowed to speak up when their work is copied or else they're labeled as greedy and out of touch.
How so? A lot of the stuff on TPB would be too expensive for the lowest class of working Americans and much more so for most of the rest of the world. It's true that the TPB are profiting out of it (though they are offering a service and covering a market in their own right) but you make it seem like the users are getting nothing out of it. That's blatantly false. A significant part of the 3rd world's technological infrastructure is built on pirated software.
Current events prove otherwise.