site Search:


 
   
story category
Pirate Bay's VPN Service Goes Live
Hides user activity for seven dollars a month...
by Karl Bode Thursday 21-Jan-2010 tags: legal · Fileswapping
Early in 2009, popular Swedish BitTorrent website The Pirate Bay announced they'd soon be offering an unlogged VPN tunneling service called IPREDator. The service took aim at the new Swedish anti-piracy law IPRED (Intellectual Property Rights Enforcement Directive) which gave copyright holders in Sweden the ability to force ISPs in the country to hand over the names and addresses of users who transmit pirated material. According to Torrent Freak the service has gone live, and the website's promising to obscure your download habits from prying eyes for 5 Euro (about seven bucks) a month:

Much like many other comparable VPN services, Ipredator allows users to connect to the Internet while hiding their own IP-address. The interest in services like this is booming. In Sweden alone, an estimated 500,000 Internet subscribers are already hiding their identities online, and that number is expected to rapidly grow in the new year.

Aside from the Pirate Bay "brand" (the value of which is negligible since many of the site founders have moved on) the service doesn't really appear to offer anything that other VPN services don't offer already, though it's clearly marketed at users who want to download copyrighted material without getting ISP nastygrams, or in some countries, worse.

view: topics flat text 
Post a:
MightyPez

join:2002-05-01
Saint Paul, MN

Painfully slow when I tried it

I decided to give it a whirl last year and see how it performed. usually I was lucky to see download rates above 30kbytes/sec
brianiscool

join:2000-08-16
40303
kudos:1
I rather hop onto some Chinese proxy server's lol

cameronsfx

join:2009-01-08
Panama City, FL
Why is this news?

wvsparkey
Premium
join:2008-05-11
Proctorville, OH

Pirate bay unentionally scuttling the boat

Any type of revenues derived from this exercise in hiding will only lead to legal maneuvers by those who make their living pushing pieces of paper.

Xizer

join:2004-02-05
New York, NY
Reviews:
·Cox HSI
·AT&T U-Verse

Re: Pirate bay unentionally scuttling the boat

said by wvsparkey:

Any type of revenues derived from this exercise in hiding will only lead to legal maneuvers by those who make their living pushing pieces of paper.
Nothing about The Pirate Bay and rocking the boat is "unintentional"

wvsparkey
Premium
join:2008-05-11
Proctorville, OH

Re: Pirate bay unentionally scuttling the boat

just sayn'.... unwanted attention... I'l be in the »is.gd/7c9KM for now.... check it out, b'fore they get it
moes

join:2009-11-15
Indianapolis, IN

vpn

RIAA and MPAA are just internet bullies I tend to 100% ignore them. Also the vpn service sounds great, but I am already using a competeing product and maybe I will give there's a shot to test if its faster.

John McClane
yippee ki yay
Premium
join:2005-03-19

Re: vpn

feel free to give said competitor a harmless plug please
--
sbcglobal.net speedtest result 11/11/09 - 5256kbps

TamaraB
Question The Current Paradigm
Premium
join:2000-11-08
Brooklyn NYC
Reviews:
·Clearwire Wireless

Re: vpn

said by John McClane:

feel free to give said competitor a harmless plug please
I am looking at Comodo VPN. They are offering a 7 day free trial.

Bob
--
Would you ever go over to Czechoslovakia, and marry me daughter for me?"

Mr Owell

@ccra-adrc.gc.ca

approval from:
ThrowDemsOut See Profile

Big Brother's next move

I can see where this is headed already: widespread introduction of laws requiring all ISPs and operators of VPN services like IPREDator to maintain IP address logs containing enough detail to track users down. Such laws already exist in some countries. Sure, you'll have privacy alright--until your ISP and VPN service are legally forced to fork over their mandatory logs. Even in the absence of such laws, what assurances do users have that the VPN service isn't really keeping an IP address log? And if they really don't keep such logs, what legal liability do they expose themselves to in the event that customers use their services for illegal purposes?

See 10 replies to this post

anontoday10

@bellsouth.net

better off without it

These kind of magical things don't really protect people and are often eventually defeated legally and then all customers are on a neat and organized list kept around to save the arses of those that offer the service. Guess who really goes down with the ship when big money finally gets their way? heres a hint, it's not the site owners. The same thing happened with all those sat tv pirates in canada years ago lol it's only a matter of time. To pay money for this and have your name on a list held by a giant bullseye is really dumb.

Metatron2008
Premium
join:2008-09-02
Stockbridge, GA
Reviews:
·Charter
·Clearwire Wireless

Anybody can create a VPN.

With m0n0wall or smoothwall and a decent old athlon/p4.

It's funny that people complain about wall street, say that downloading illegal material is a right (not to mention saying 'copyright infrigement isn't theft'), and yet don't seem to know anything about the technical details.

See 14 replies to this post

David
I have a son- d3
Premium,VIP
join:2002-05-30
Granite City, IL
kudos:68

WHat about relakks.com?

Do they still own and operate it?

I kept thinking they still own/operate that one as well.
Network Guy
Premium
join:2000-08-25
New York
Reviews:
·Verizon Online DSL
·Optimum Online

Go ahead and sign up for this

.... fucking morons.

You can hide your browsing activities, sure. But since you're PAYING for tunneling capability, matter of time before a subpoena has them handing over those pay-per-use accounts to interested parties.

Unlogged access my asshole....

Noah Vail
Son made my Avatar
Premium
join:2004-12-10
Lorton, VA
kudos:1
Reviews:
·Bright House
·Sprint Mobile Br..

Re: Go ahead and sign up for this

said by Network Guy:

Unlogged access my asshole....
That's a rather peculiar service to be selling. Have you considered branching out into marital aids?

NV
--
In my perfect religion, a giant hole appears and sucks up all the lousy people.
I call it the Crapture.
Network Guy
Premium
join:2000-08-25
New York

Re: Go ahead and sign up for this

lolz

Corehhi

join:2002-01-28
Bluffton, SC

Just a thought

»www.torproject.org/

That's something for you all to play with.
Contents
Contents

join:2003-04-10
Circle Pines, MN
Reviews:
·Comcast

Re: Just a thought

TOR is slow and cannot handle a torrent. Its not even fun to browse websites with.

There was some new paid (TOR wannabe) network in beta. They were claiming the speeds would be much better, but I still do not believe it would handle a torrent.
--
www.EdgeGamers.org
stufried
Premium
join:2003-10-13

Get a New Name

As an attorney, I would tell my client to get a different VPN service. There is no way in H that I would want the jury to hear that my client was using a VPN service called iPredator. The jurors wouldn't be thinking about the Swiss privacy directive but online preying on little kids in chat rooms. I guarantee you in any suit or criminal prosecution, opposing counsel would be using that name all over the place and placing the most sinister spin they could.

I would much prefer a name like "Hotspot Defender."
k1ll3rdr4g0n

join:2005-03-19
Homer Glen, IL

There is something not right

root@rhea:~# whois ipredator.se
# Copyright (c) 1997- .SE (The Internet Infrastructure Foundation).
# All rights reserved.
 
# The information obtained through searches, or otherwise, is protected
# by the Swedish Copyright Act (1960:729) and international conventions.
# It is also subject to database protection according to the Swedish
# Copyright Act.
 
# Any use of this material to target advertising or
# similar activities is forbidden and will be prosecuted.
# If any of the information below is transferred to a third
# party, it must be done in its entirety. This server must
# not be used as a backend for a search engine.
 
# Result of search for registered domain names under
# the .SE top level domain.
 
# The data is in the UTF-8 character set and the result is
# printed with eight bits.
 
state:            active
domain:           ipredator.se
holder:           binkolm0907-001
admin-c:          -
tech-c:           -
billing-c:        -
created:          2008-11-27
modified:         2009-12-22
expires:          2010-11-27
transferred:      2009-03-07
nserver:          ns2.dnsn.se
nserver:          ns1.dnsn.se
dnssec:           unsigned delegation
status:           ok
registrar:        Binero AB
 

I smell a rat. I would have been somewhat suspicious if they used a proxy registrar, but not having ANY at all raises red flags. Although, I think because .se is a country domain it doesn't fall under the same rules as normal TLDs .com/.net ect...I still like to see SOMETHING there.

rchandra
Stargate Universe fan
Premium
join:2000-11-09
14225-2105

Re: There is something not right

I don't quite understand...well a couple of things. I'm not sure why you chose to post an image rather than just the text within pre and code tags of the whois results. I don't understand why this is ostensibly being run as a superuser (unless "root@" and the "#" do not mean what most people think they mean). It's just not a great practice to run anything as the superuser which does not need additional privileges, and I can't think of any reasons why whois needs additional rights of any kind.

That aside, I can't imagine .se registrations are significantly different fron any of the other hundreds of registries throughout the world. There is simply not enough staff at any registrar with going market rates for domain registration to verify the information entered when one registers a domain. I have to believe there are hundreds of domains registered every day. It's all automated and will very likely accept any garbage string a registrant chooses to put in there.

The whole idea of these folks is anonymity. It's no surprise to me that they're not entering any useful information for the contact information.
--
English is a difficult enough language to interpret correctly when its rules are followed, let alone when a writer chooses not to follow those rules.


Jeopardy! replies REALLY suck!
k1ll3rdr4g0n

join:2005-03-19
Homer Glen, IL

Re: There is something not right

said by rchandra:

I don't quite understand...well a couple of things. I'm not sure why you chose to post an image rather than just the text within pre and code tags of the whois results. I don't understand why this is ostensibly being run as a superuser (unless "root@" and the "#" do not mean what most people think they mean). It's just not a great practice to run anything as the superuser which does not need additional privileges, and I can't think of any reasons why whois needs additional rights of any kind.
...
Quote my post and you will see its text in a code tag. Or even try to select.
As far as your opinions are concerned - I was already logged in as root so I didn't bother to log out.
Please don't consul people on what you think is a good security practice - the majority of "security practices" either don't make sense or are a waste of time. If someone really wants to hack you, they will.
Everyone is entitled to their own opinion, it doesn't necessarily mean they are right. I'll leave it there.

A good article to read is: »www.codinghorror.com/blog/archiv···929.html

rchandra
Stargate Universe fan
Premium
join:2000-11-09
14225-2105

1 edit

Re: There is something not right

Sorry, I apologize. Grand stupidity on my part, it looked like a screen shot. I don't spend as much time on BBR as I used to, and I hadn't seen that feature before.

Also, so sorry that you're so displeased; but I'm going to ignore your advice not to counsel people on running computers more securely. We'll just have to disagree I guess on outlook; I don't have the defeatist attitude that no matter what, I'll be p0wned, and therefore you at least seem to be implying don't even try because it's hopeless.

Oh, and I was reading along on that page to which you linked. It's basically saying, in part, what I was advocating, albeit for a different environment: don't run as the superuser (which is close to being in the Administrators group in Windows, but not quite...you need the well-known SID for SYSTEM in your security token to be truly superuser on Windows).

As for the complaints about having to log in as admin anyway, yes, that should be done, PITA that it is. A good percentage of installers with which I have personal experience run great under sudowin or runas...the most notable exception for me being that MS updates will mysteriously fail, even if I run runas /user:someadmin iexplore. It's as the author states though: it's the stupidity of the software (in some cases, installer) authors. If at all possible, one should not patronize products whose installers are wonky like that, and moreover those which will not run properly without special privileges.

If you happen to have a thorough enough understanding, go mucking about with things like procmon, regedit, and setacl, and only make the bare minimum of files and registry entries more permissive. For me, it's been well worth the initial effort. I've had my %USERPROFILE% corrupted a couple of times by malware, but because the user under which I was running had very limited rights to anything else, that's all I had to do: recreate a few personal things but the rest of the system was fine.

Same thing goes when I'm running in a Linux environment: I've had some damage done in my home directory, but it was relatively easy to fix because of the limited rights I have around my systems, and for keeping a couple of backups around.
k1ll3rdr4g0n

join:2005-03-19
Homer Glen, IL

Re: There is something not right

said by rchandra:

Sorry, I apologize. Grand stupidity on my part, it looked like a screen shot. I don't spend as much time on BBR as I used to, and I hadn't seen that feature before.

Also, so sorry that you're so displeased; but I'm going to ignore your advice not to counsel people on running computers more securely. We'll just have to disagree I guess on outlook; I don't have the defeatist attitude that no matter what, I'll be p0wned, and therefore you at least seem to be implying don't even try because it's hopeless.

Oh, and I was reading along on that page to which you linked. It's basically saying, in part, what I was advocating, albeit for a different environment: don't run as the superuser (which is close to being in the Administrators group in Windows, but not quite...you need the well-known SID for SYSTEM in your security token to be truly superuser on Windows).

As for the complaints about having to log in as admin anyway, yes, that should be done, PITA that it is. A good percentage of installers with which I have personal experience run great under sudowin or runas...the most notable exception for me being that MS updates will mysteriously fail, even if I run runas /user:someadmin iexplore. It's as the author states though: it's the stupidity of the software (in some cases, installer) authors. If at all possible, one should not patronize products whose installers are wonky like that, and moreover those which will not run properly without special privileges.

If you happen to have a thorough enough understanding, go mucking about with things like procmon, regedit, and setacl, and only make the bare minimum of files and registry entries more permissive. For me, it's been well worth the initial effort. I've had my %USERPROFILE% corrupted a couple of times by malware, but because the user under which I was running had very limited rights to anything else, that's all I had to do: recreate a few personal things but the rest of the system was fine.

Same thing goes when I'm running in a Linux environment: I've had some damage done in my home directory, but it was relatively easy to fix because of the limited rights I have around my systems, and for keeping a couple of backups around.
Sorry if that sounded hostile, but from your first couple of sentences and the general atmosphere of DSLR, it made me feel uneasy.

I don't believe in no security, but there is a saying "There is security, then there is insanity." I have seen a many environments where the insanity was apparent. For example, I don't see the merit in making a MySQL user that can only access from a specific IP address...when the network is protected by 2 firewalls. The only thing I can see that you are protecting against is yourself.

If you are working with things that will potentially wreak havok on your system, then you should setup a sandbox....its defiantly a lot easier than being a perfectionist and tweaking the permission on everything.

I too have noticed that updates fail when using runas. It really is a shame that Microsoft hasn't adopted the mindset of Linux (when you need admin rights, prompt for your username/password). I should say in a sane way. Ubuntu doesn't prompt me when I want to change a simple setting, such as screensavers, but if I want to change usernames/passwords then it will prompt me.

»force.coresecurity.com/ is a program you may be interested in if you don't already know about it.

rchandra
Stargate Universe fan
Premium
join:2000-11-09
14225-2105

1 edit

Re: There is something not right

no, hadn't seen that before, thanks.

still was grand stupidity and arrogance on my part. I ought to know by now things aren't always as they look.

edit: forgot to say...I didn't want to give up on running as a very limited user, but at the same time, my choices for the program I had in mind, Avaya IVR Designer (AID), while writing that stuff about procmon etc. were, bend the system by "unholy" ACL additions, or go find work somewhere else . The latter seemed lots more difficult. I was an IVR programmer who was thus forced to use AID (and its bundled Borland database dependency). All I can think is, Avaya must have wrote it or contracted to have it written back in the Win98 days when there basically was no security.

For the sandbox, I like QEmu (usually Linux host with XP guest) in nonrecording mode, which I can always commit the changes back to the "real" disk image if things seem OK.

I've always found that IP address restriction faciliity in MySQL more trouble than what it's worth...much more worth it to work on application level security like TLS and strong passwords.

Saturday, 11-Feb 17:25:24 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 12.5 years online! © 1999-2012 dslreports.com.