Saturday, September 24, 2005

More Internet Gossip

New Breed of Corrupt Torrent Infiltrates BitTorrent
September 24, 2005
Thomas Mennecke


myBittorrent is a popular BitTorrent listing site used by tens of thousands of individuals each day. It also has become the focus of an individual or group of individuals looking to undermine the integrity of the BitTorrent community. Although false and corrupt files have been a part of the BitTorrent community since its beginning, a new kind is emerging that aims for maximum exposure.

"I think they are doing this to give BitTorrent a bad name,” Rex, the administrator of myBittorrent told Slyck.com.

Of course the proverbial "they" is the real question. According to Rex, about 50 new torrents have been released from what he calls "fake" trackers (~31 in total.) These trackers are seemingly part of an elaborate plot to infiltrate the BitTorrent community with intentionally corrupt files. These movie and film titles are specifically designed to report false information to trackers, thereby gaining artificially inflated popularity.

“In a very short period of time, these false torrents have become most of my top downloads,” Rex told Slyck.com. “I’ve never seen anything else before like it.”

Those who download these torrents are unable to complete a full download, as the file transfer stops at approximately 97%-98%.

Here’s how this clever plot works.

These trackers have published about 50 variant torrents of only three titles, "The Wedding Crashers", "Charlie and the Chocolate Factory", and the first three episodes of "The O.C." Some titles are published as "DVD-rips" while others are pushed as "XviDs". Others are presented as an English or French releases.

This is done to disguise the origin of the torrent, and also to present a diverse array of choices. For example, if all were DVD-rips, their exposure would be limited to those only with enough bandwidth to download such large films. Having DVD-rips and XviDs exposes the torrent to a wider market.

According to Rex, the torrent originating from false trackers are intentionally reporting false information. For example, a corrupt torrent will report 400 seeds with 3000 leeches. Since the more individuals having a file are indicative of the file’s download speed, it becomes a highly downloaded torrent and aids in its popularity.

The ruse is additionally disguised by spreading the torrent release from over 31 different trackers. Interestingly enough, although the identified trackers have different sub domains, they all originate from the same IP address.

It appears myBittorrent has borne the brunt of this attack; however these types of corrupt torrents have begun to appear on Mininova as well. Since the threat has been identified, the administration of myBittorrent has begun eliminating any torrent files originating from the identified trackers. At this time, the origins of the attack are unknown. But their initial goal of gaining maximum exposure certainly did work, if only for a short while.


The myBittorrent.com Staff has identified the following trackers as BAD TRACKERS:

http://distan.servecounterstrike.com/announce
http://freevideo.no-ip.info/announce
http://zorba.zapto.org/announce
http://fuf.zapto.org/announce
http://tzar.servecounterstrike.com/announce
http://whypay.servebeer.com/announce
http://m0vies.servep2p.com/announce
http://matha.sytes.net/announce
http://tracker.workisboring.com/announce
http://freemovies.serveftp.com/announce
http://chech.servequake.com/announce
http://kur.servegame.com/announce
http://nia.servehttp.com/announce
http://torrentsource.servemp3.com/announce
http://mpaa.servehttp.com/announce
http://nopay.no-ip.info/announce
http://prince2.bounceme.net/announce
http://startracker.geekgalaxy.com/announce
http://cash.servequake.com/announce
http://gleneagle.damnserver.com/announce
http://zesty.no-ip.info/announce
http://206.81.133.67/announce
http://coolserver.servecounterstrike.com/announce
http://mpaa.servehttp.com/announce
http://tracker101.no-ip.info/announce
http://q1.sytes.net/announce
http://matha.sytes.net/announce
http://mishmish.servemp3.com/announce
http://waikiki.net-freaks.com/announce
http://only-guiness.servebeer.com/announce
http://gruzia.zapto.org/announce

Didn't I tell you people to stop downloading movies?

Technorati tags: , ,

Blogger Chris shat out the following...

Thanks for the bittorent warnings. Where do you get your information from?

September 26, 2005 5:38 AM  
Blogger Indeterminacy shat out the following...

This was interesting and useful. I haven't downloaded films for a while, only tv shows. I'm using Shareaza. Is that effected?

September 27, 2005 1:22 AM  
Blogger Tickles_Tapeworm shat out the following...

chris - I get my info from some fairly active bittorrent communitites, and from IRC.

indie - I don't think there's much being done to those who download TV shows. You can videotape and TiVo and whatever a TV show. They don't lose money on TV shows being traded (maybe the advertisers do, but waaah). If they're looking at any kind of TV shows, it's going to be something from pay TV, like The Sopranos, or whatever else is on cable these days.

Every letter than I've seen people get from their ISP is concerning the sharing of a Hollywood movie. Actually, I saw someone get a fucking letter about sharing fucking STARCRAFT on KaZaa. That's just bottom of the barrel if you ask me.

September 27, 2005 4:01 AM  

Post a Comment

<< Home

eXTReMe Tracker