Live data from Hacker News

Pirate site not impressed by Global DNS blocking order

torrentfreak.com

11–20 of 151 posts

Re: Pirate site not impressed by Global DNS blocking order

#11

This is feels like the Barbara Streisand Effect in action. I had never heard about this Canna Power piracy website before. Probably a lot of other people haven’t either. But now, when Sony and their friends made this DNS block happen, media coverage has made more of us hear about the Canna Power piracy website.

I heard of it ages ago, but it was a terrible experience (constantly opened new browser windows with ads etc) compared to torrents and by the time I actually got interested in music the industry had come up with convenient legal means to buy it. Didn't know that site is still alive though.

Re: Pirate site not impressed by Global DNS blocking order

#12

This is feels like the Barbara Streisand Effect in action. I had never heard about this Canna Power piracy website before. Probably a lot of other people haven’t either. But now, when Sony and their friends made this DNS block happen, media coverage has made more of us hear about the Canna Power piracy website.

I have been sailing the dark waters for everything - movies, tv shows, books, games, music, etc - since before the new millennium and I can tell you I've never heard of Canna Power until today. I usually get my content successfully off of the larger public torrent sites, so I guess there's no need, but it's good to have another bookmark in my arsenal! Definitely the Streisand Effect here.

It seems to primarily cater to a German speaking audience. That's probably why it isn't more well known. I'd never heard of it either.

Re: Pirate site not impressed by Global DNS blocking order

#13

This is feels like the Barbara Streisand Effect in action. I had never heard about this Canna Power piracy website before. Probably a lot of other people haven’t either. But now, when Sony and their friends made this DNS block happen, media coverage has made more of us hear about the Canna Power piracy website.

Exactly my thoughts.

Re: Pirate site not impressed by Global DNS blocking order

#14
post #6

Question: why are torrent sites not generally run as a Tor hidden-site backend (that can therefore be accessed through any existing Tor public-web gateway, rather than needing to set up its own proxies) plus an IPFS-hosted SPA frontend (that can therefore rely on any IPFS web gateway, and can then point as many arbitrary human-readable DNSLink names at that IPFS CID as it wishes)? Is it just because the web piracy co…

Because it was veeeeeeeeery slow to me. As someone in East Asia, you are lucky if you can load a hidden service under 10 seconds.

First we should briefly talk about how hidden services work. You have a very long address encoding the portions of a HS public key, which is stored in a special directory (HSDir), and due to the P2P nature of Tor, that basically becomes a DHT/Torrent Tracker which draws parallel to a DNS service.

Then you initiate a rendezvous request in HSDir to request a contact with the hidden service.

The hidden service noticed the HSDir updated, then arranges a Tor circuit (of arbitrary length) and then write back to HSDir to tell the requesters to contact via that new circuit which this information will ultimately be signed with the hidden service's private key as a proof of identity so MITM is impossible (like bootleg TLS, or a mock PKI actually)

As you noticed there would be at least three user circuits involved: the hidden service to Tor itself, the Tor end user, and the hidden service relay circuits (I would like to call that a transit tunnel, the middleman).

The more the circuits and relays in between, the more likely your data will fly around the world, and too many circuits is the intrinsic reason why hidden services are very slow.

Recall that each circuit is a linked list and to decrypt the data cells you have to wait for the "pipe" to flow back and forth serially. A to B to C, and C to B to A on back. Due to this recursive relation, no relay preemption is allowed.

Keep in mind the real torspec is very complicated (that took me a few days) and I tried to make a gist for you, and in reality this may not be accurate up to date.

Adding insults to injury, the vast majority of Tor relays are dominantly located in US and EU, and there are barely any Asian Tor operators like me, let alone exit node operators. This caused a serious "geofragmentation"/"geopartition" where one group of people have degraded services over the others.

Fortunately, if your sites are mostly static or deterministic without any serverside dynamic and fancy UI (cough cough PHP and Ruby), given enough patient I would still got what I want. Just that it would have took it for me to be longer than others.

That is why I think SPA and PWA, both client-side oriented application on such a low rate network like Tor hidden service, and abstracting server interaction as low overhead APIs such as gRPC and ttrpc, would be very useful as I was experimenting it before, but most people uses Tor Browser, they would likely be disabling JS with NoScript for...security reasons. They are really afraid there will be 0days in the JS engine that would pop them a dropper. There are couple of heap spraying 0days in V8 but so far Greasemonkey is fine...

Re: Pirate site not impressed by Global DNS blocking order

#15
post #5

Firefox should natively support OpenNIC and other alternative DNS providers: https://en.wikipedia.org/wiki/Alternative_DNS_root This will help Mozilla gain marketshare by being the goto browser for anyone wanting to access non-mainstream sites. But I admit, that also makes firefox hostile to corporate environments. If only firefox obeyed windows system/gpo/registry settings like chrome. I have never seen a non-tech c…

>But I admit, that also makes firefox hostile to corporate environments. If only firefox obeyed windows system/gpo/registry settings like chrome. I have never seen a non-tech company even permit firefox in their IT policy for these and other reasons anyways.

Perhaps I'm missing your point, but Firefox does (and I use it in my own AD forest) provide Group Policy[0] management support.

[0] https://support.mozilla.org/en-US/kb/customizing-firefox-usi...

Re: Pirate site not impressed by Global DNS blocking order

#16

This is feels like the Barbara Streisand Effect in action. I had never heard about this Canna Power piracy website before. Probably a lot of other people haven’t either. But now, when Sony and their friends made this DNS block happen, media coverage has made more of us hear about the Canna Power piracy website.

You and me both, nice one Sony.

Re: Pirate site not impressed by Global DNS blocking order

#17

Earlier quoted context omitted.

I'm pretty sure sure pirate-bay is an onion site exposed via a cloudflare gateway. You can use the onion service directly (and presumably through whichever gateway you want).

Cloudflare can work over TOR? I'm only familiar with the services they offer opening a tunnel across regular internet.

Yes it can, they have support for terminating TOR so you don't go over the public internet.

Re: Pirate site not impressed by Global DNS blocking order

#18
post #6

Question: why are torrent sites not generally run as a Tor hidden-site backend (that can therefore be accessed through any existing Tor public-web gateway, rather than needing to set up its own proxies) plus an IPFS-hosted SPA frontend (that can therefore rely on any IPFS web gateway, and can then point as many arbitrary human-readable DNSLink names at that IPFS CID as it wishes)? Is it just because the web piracy co…

Because it was veeeeeeeeery slow to me. As someone in East Asia, you are lucky if you can load a hidden service under 10 seconds. First we should briefly talk about how hidden services work. You have a very long address encoding the portions of a HS public key, which is stored in a special directory (HSDir), and due to the P2P nature of Tor, that basically becomes a DHT/Torrent Tracker which draws parallel to a DNS s…

>Then you initiate a rendezvous request in HSDir to request a contact with the hidden service. >The hidden service noticed the HSDir updated, then arranges a Tor circuit (of arbitrary length) and then write back to HSDir to tell the requesters to contact via that new circuit which this information will ultimately be signed with the hidden service's private key as a proof of identity so MITM is impossible (like bootleg TLS, or a mock PKI actually)

this sounds wrong. As far as I know the HS picks some nodes as introduction points and builds long losting circuits to them abd publishes them in ita descriptor.

when a client wants to connect it fetches the list of IPs, it picks a random node as rendezvous and, via the IP, tells the HS about it which connects to it to allow communication (basically you -> rendezvous <- HS (+ a bunch of other nodes that blindly carry traffic for anonimization as is customs with tor))

Re: Pirate site not impressed by Global DNS blocking order

#20
When I think of the historical development of the internet, events like this and the early recognition of "net neutrality" makes me grateful for the bullets we did dodge.

It's clear that we need to do some things better re: DNS, but this could have gone sideways so much earlier.

Post reply on HN