MediaDefender Emails Leaked, Have You Heard About this yet? |
Welcome Guest ( Log In | Register )
Welcome to ThoughtVent, a free community where you can talk to your peers about whatever you want. Using the site is easy and fun. Once registered, simply click on the category that fits your topic and click on the New Topic button to start talking with our other members. Registration is fast, simple and absolutely free.
Click here to Register!
![]() ![]() |
MediaDefender Emails Leaked, Have You Heard About this yet? |
Sep 20 2007, 02:34 PM
Post
#1
|
|
![]() Venter ![]() ![]() Group: Members Posts: 39 Joined: 5-September 07 From: The City of Saint Francis, By The Western Sea Member No.: 41 |
This has been out for at least a week now, but I thought that I'd share it with anyone here who hadn't heard about it yet.
MediaDefender, a company contracted by the MPAA and RIAA to help curb online piracy, has suffered a humiliating breach of information security. It seems that an employee forwarded all of his company e-mails to a gMail account, which was then accessed by a group called the MediaDefender-Defenders. So, now there is a 700MB file containing hundreds of sensitive internal e-mails floating around the internet, especially on BitTorrent, one of the very networks the MediaDefender was regularly attacking. Here's an excellent article from Ars Technica that goes over the basics of wheat MediaDefender is, and highlights some of the juiciest parts of the info. You can also download the whole archive from most any BT tracker. -------------------- Allegedly Amusing AnecdotesYou Got A Problem With That, Buddy? |
|
|
|
Sep 20 2007, 03:06 PM
Post
#2
|
|
![]() Advanced Venter ![]() ![]() ![]() Group: Members Posts: 234 Joined: 17-August 07 From: NYC, USA Member No.: 34 |
Wow that is a tremendous step backwards for the fight against internet piracy. I wonder if that employee kept his job...
-------------------- |
|
|
|
Sep 20 2007, 06:45 PM
Post
#3
|
|
![]() Venter ![]() ![]() Group: Members Posts: 39 Joined: 5-September 07 From: The City of Saint Francis, By The Western Sea Member No.: 41 |
I wonder if that employee kept his job... Magic 8-Ball Sez: QUOTE All Indicators point to no.
-------------------- Allegedly Amusing AnecdotesYou Got A Problem With That, Buddy? |
|
|
|
Sep 20 2007, 07:08 PM
Post
#4
|
|
![]() Who's your Daddy? ![]() ![]() ![]() ![]() ![]() ![]() Group: Moderator Posts: 2,155 Joined: 13-August 07 From: Tampa Bay Area, Florida, USA Member No.: 11 |
Ah, the Magic 8-ball knows all.
-------------------- |
|
|
|
Sep 21 2007, 12:45 AM
Post
#5
|
|
![]() Venter ![]() ![]() Group: Members Posts: 39 Joined: 5-September 07 From: The City of Saint Francis, By The Western Sea Member No.: 41 |
All hail Magic 8-Ball!
-------------------- Allegedly Amusing AnecdotesYou Got A Problem With That, Buddy? |
|
|
|
Sep 21 2007, 05:42 AM
Post
#6
|
|
![]() Venter ![]() ![]() Group: Members Posts: 63 Joined: 5-September 07 Member No.: 39 |
Don't forget the second leak! In some ways it is even more nasty. It consists of a bunch of recorded phone conversations. Here are a couple of highlights from a conversation between Ben Grodsky of Media Defender and the New York State General Attorney's Office courtesy of Bruce Schneier:
QUOTE Ben Grodsky: "Yeah it seems...I mean, from our telephone call yesterday it seems that uhm... we all pretty much came to the conclusion that probably was ehm... caught in the email transmission because the attacker, I guess what you call, the Swedish IP, the attacker uhm... knew the login and the IP address and port uhm... but they weren't able to get in because we had changed the password on our end, you know, following our normal security protocols uhm... when we are making secure transactions like these on the first login we'll change the password so, obviously, well not obviously but, it seems that, most likely scenario is that, at some point that email was ehm... intercepted. The guy has absolutely no idea what he is talking about.
You know just because it is,.. probably it was going through the public Internet and there wasn't any sort of encryption key used to ehm... protect the data in that email." Ben Grodsky: "...if you guys are comfortable just communicating with us by phone, anything that is really really sensitive we can just communicate in this fashion..." Ben Grodsky: "OK [confused, taking notes]. So, you are gonna disable password authentication and enable public key?" Ben Grodsky: "...that part has... has not been compromised in any way. I mean, the communications between our offices in Santa Monica and our data centers have not been compromised in any way and all those communications to NY, to your offices, are secured. The only part that was compromised was...was the email communications about these things." Ben Grodsky: "...All we can say for sure Media Defender's mail server has not been hacked or compromised..." [Answering to the question "What kind of IDS you guys are running?"] Ben Grodsky: "Ehm...I don't know. Let me look into that." |
|
|
|
Sep 21 2007, 06:35 AM
Post
#7
|
|
![]() Venter ![]() ![]() Group: Members Posts: 39 Joined: 5-September 07 From: The City of Saint Francis, By The Western Sea Member No.: 41 |
You can visit http://www.mediadefender-defenders.com/ to see all the leaks in convenient HTML format
-------------------- Allegedly Amusing AnecdotesYou Got A Problem With That, Buddy? |
|
|
|
Sep 21 2007, 11:17 AM
Post
#8
|
|
![]() Venter ![]() ![]() Group: Members Posts: 63 Joined: 5-September 07 Member No.: 39 |
Strrike three, you're out!
MDD has now leaked the complete uncompiled source code for MediaDefender's anti-piracy toolkit. Linky |
|
|
|
Sep 22 2007, 11:33 AM
Post
#9
|
|
![]() Advanced Venter ![]() ![]() ![]() Group: Members Posts: 234 Joined: 17-August 07 From: NYC, USA Member No.: 34 |
Goodbye fight against internet piracy! And goodbye MediaDefender. I bet...uhm..that guy obviously, well not obviously, probably...uhm...lost his job.
-------------------- |
|
|
|
Sep 22 2007, 12:15 PM
Post
#10
|
|
![]() Venting Addict ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 612 Joined: 21-September 07 From: 1AU from a G2V Star Member No.: 81 |
-------------------- "Not everything that counts can be counted, and not everything that can be counted counts." "Whoever fights monsters should see to it that in the process he does not become a monster" ![]() ![]() ![]() |
|
|
|
Sep 23 2007, 11:09 AM
Post
#11
|
|
|
Advanced Venter ![]() ![]() ![]() Group: Banned Posts: 328 Joined: 14-August 07 From: Troy, NH Member No.: 18 |
From perusing some of the pirate sites - that all seem to link to each other - and from the rampant paranoia and "conspiracy" accusations being made, I see nothing but a bunch of criminals trying to justify their criminal behavior.
-------------------- Lib. Free or Die
|
|
|
|
Sep 23 2007, 11:37 PM
Post
#12
|
|
![]() Venting Addict ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 612 Joined: 21-September 07 From: 1AU from a G2V Star Member No.: 81 |
I've never used warez or even a P2P app ,which in them selfs I don't see any problems , but are easily abused. For me I think the question is , Is it ok to break the law to enforce it ?
-------------------- "Not everything that counts can be counted, and not everything that can be counted counts." "Whoever fights monsters should see to it that in the process he does not become a monster" ![]() ![]() ![]() |
|
|
|
Sep 25 2007, 10:22 PM
Post
#13
|
|
![]() Advanced Venter ![]() ![]() ![]() Group: Members Posts: 234 Joined: 17-August 07 From: NYC, USA Member No.: 34 |
I've never used warez or even a P2P app ,which in them selfs I don't see any problems , but are easily abused. For me I think the question is , Is it ok to break the law to enforce it ? That's an oxymoron. If that's the case, they would go by which is less wrong and/or whats for the "greater good" but who determines what that "greater good" is? Regards, TheYoda -------------------- |
|
|
|
Sep 26 2007, 12:13 AM
Post
#14
|
|
![]() Venting Addict ![]() ![]() ![]() ![]() ![]() Group: Members Posts: 612 Joined: 21-September 07 From: 1AU from a G2V Star Member No.: 81 |
I've never used warez or even a P2P app ,which in them selfs I don't see any problems , but are easily abused. For me I think the question is , Is it ok to break the law to enforce it ? the P2P that is, not the warez That's an oxymoron. If that's the case, they would go by which is less wrong and/or whats for the "greater good" but who determines what that "greater good" is? Regards, TheYoda Aye, There's the rub... -------------------- "Not everything that counts can be counted, and not everything that can be counted counts." "Whoever fights monsters should see to it that in the process he does not become a monster" ![]() ![]() ![]() |
|
|
|
Sep 26 2007, 09:16 PM
Post
#15
|
|
![]() Advanced Venter ![]() ![]() ![]() Group: Members Posts: 154 Joined: 13-August 07 From: NEO Member No.: 14 |
I am all for respecting copyrights. However, I think the main reason TPB and MDD do what they continue to do is to prove the point that copyright laws are overprotective and unfitting for the Internet. The DMCA needs revised and so does several other foreign and International Laws. If you watch the movie Good Copy Bad Copy (which is mostly about copyright) and StealThisFilm. There main point in StealThisFilm is that with the booming of the Internet the major coproations have to invent a way to keep customers not sue there existing ones.
The same genre (teenagers-25) that download music and movies is also coincidentally the same generation that buys the most movies and CDs (or Internet music). I believe if you could buy any movie and any song; irregardless of how old it is. For a reasonable price ($.50 to $1.25) for a song and no more than ($4.99) so you can copy it do a DVD and watch it in a DVD-player or watch it unlimited times on your computer. I think that would be fair. I would be more than happy to purchase media in this form. However, like most people will say; this will allow the pirates to create more copies. Well let's put this into perspective. If you can offer a legal approach to the source at reasonable price then more will come flocking. Look at batteries. You can buy cheap ones (heck, sometimes you can get them for free with combo deals) or you could forged over a little more for a rechargeable battery. You'll never have to buy a new one (unless you loose it; or delete the media). If you have the flexibility of a rechargeable battery, would you be more prone to buy it over the cheap battery? Also as for copyright laws, I think they show remove the "lifetime of author + 100 year" control on it. That's ridiculous. After the author dies, who is to collect the royalty? the family? by that time, whatever was the "creation" of the author, will most likely be unheard of. I think it should be reduced to the practical 30 years. One generation. After that, turn it over to the public domain. Most items in the public domain now, aren't in as high of a demand as what isn't in the public domain. Mostly because nothing "cool" or "hip" is in the public domain. Which with current trends, after 30 years most songs become forgotten. Look at the Beatles, they were around in the 60s, and do you see there music sales soaring? No, almost everyone has a copy by now (whether legal or not) and listens to that. Anyways, that's all I got right now. btw: I'm happy those e-mails got leaked. Serves both parties right, TPB is legally operational in Sweden; and using USA courts to fight a foreign company is like taking Osama Bin Laden to court in Pittsburgh, PA. As for the copyright holders, they should either give customers an easier way to purchase games through them. Heck if a company for once would release a game as a torrent and you buy access to the tracker; they would be rich. You couldn't connect to the tracker to obtain the file from anyone unless you paid let's say $29.99 for the game. Disable DHT and Peer Exchange, as for someone leaking it to another torrent you could set it up as a private torrent. As for protecting the content, create a three tiered encryption...* * - you buy a serial number enter it into the game; go to the company's website; they will generate a new key for you to submit to the game. You enter both the First Number and the Second Number into the game; then you call up the company Hotline to get the third number. Which the third number will have no mathematical reference to either the first number or the second number. The software would then connect to the Internet to verify that all three numbers match; or call the company to verify it. ============ Another idea to thwart pirates would be to allow pirates to purchase the illegal content from the providers (without receiving the data) for the same price as it would cost in the store<== only for American Pirates. This would allow a customer to prove he purchased said material. As for preventing it to be spread on the Internet, allow them to spread it. Because it would in turn make the new pirates (in America) come back to purchase it. Therefore, if they are ever caught up in a legal battle where there computer is taken away (in a CSI, murder, civil lawsuit etc.. not always the RIAA/MPAA) one could prove they own the material. This post has been edited by yano: Sep 26 2007, 09:34 PM -------------------- |
|
|
|
![]() ![]() |
| Lo-Fi Version | Time is now: 1st December 2008 - 04:53 PM |