"reboot into a deadlock if not used for 8 hours"
Sounds like a bug to me!
The Pirate Bay in the cloud
31–40 of 72 posts
Re: The Pirate Bay in the cloud
#32Step 1 - What if their domain is shut down through registry? This will cut short most of the users who do not remeber IP by heart. Step 2 - go after static IP and shut it down through ISP. This will cut the remaining users who remeber old IP by heart. If executed simultaneously...
Hundreds of proxys already exist - for people in countries where the domain is blocked (UK, NL...)
Re: The Pirate Bay in the cloud
#33Earlier quoted context omitted.
Also, the UK Pirate Party has a "cloud" mirror of TPB: https://tpb.pirateparty.org.uk/ And there is a Tor hidden service for it as well, which can not be taken down unless Tor it's self is taken down: http://jntlesnev5o7zysa.onion/ And for those who want to use Tor hidden services, but don't have Tor installed: https://jntlesnev5o7zysa.tor2web.org/
A note to those using Tor, though. Getting your .torrent files and magnet links over Tor is fine, but please don't route your P2P traffic over Tor. Bittorrent wasn't designed for anonymity, so you'll be sending all sorts of data that makes it possible to identify you anyway, but, more importantly, it makes the Tor network slow as hell.
To add some detail to your claim: Some clients use UDP and write the IP address into the body of the message.
https://blog.torproject.org/blog/bittorrent-over-tor-isnt-go...
Re: The Pirate Bay in the cloud
#34Earlier quoted context omitted.
A note to those using Tor, though. Getting your .torrent files and magnet links over Tor is fine, but please don't route your P2P traffic over Tor. Bittorrent wasn't designed for anonymity, so you'll be sending all sorts of data that makes it possible to identify you anyway, but, more importantly, it makes the Tor network slow as hell.
To add some detail to your claim: Some clients use UDP and write the IP address into the body of the message. https://blog.torproject.org/blog/bittorrent-over-tor-isnt-go...
Yeah, if you're going to use Bittorrent over Tor, you have to assume that the Bittorrent client will leak everything it knows about you, and therefore work to make sure it knows nothing about you.
If you're using a Linux box, you can use iptables to force all TCP traffic through Tor, dropping everything else. Then make sure the box doesn't know it's "public" IP address, only it's NAT'ed one. Even if it does a call out to something like http://whatismyip.com/ in order to determine it's external IP address, it wont get the real one because that traffic will have been forced out through Tor.
See: https://trac.torproject.org/projects/tor/wiki/doc/Transparen...
Speed wise, Tor appears to be slow, but that is just latency. For throughput it's fine. Especially if you're connecting to lots of different hosts over lots of different Tor circuits, as happens with Bittorrent.
But yes, the Tor Project doesn't want you to be using Bittorrent over Tor.
Re: The Pirate Bay in the cloud
#35Too bad their search feature is absolutely horrendous. Searching for a simple term like "The Matrix" doesn't return any results at all.
Re: The Pirate Bay in the cloud
#36I'm sorry, am I the only one that isn't impressed by this? I'm actually quite stunned that they are treating this like some new discovery. Pop onto HN any day and see thousands of people talking about cloud. Hell, some local IT staffing agency in my area has a billboard about cloud servers. Cloud is mainstream now, why did it take TPB so long to catch up? //Sorry if it sounds like trolling
You missed the interesting bit. It's not that they're hosting on a cloud service that is interesting, it's how they've set up a completely transient hosting solution. Non of their cloud hosts know what they're hosting. There is no traceable connection between the IP number of www.thepiratebay.se and the cloud host. Any single cloud hosting service can kick them off their servers without it affecting the web site. If the connection between cloud host and load balancer is lost the cloud image encrypts itself and becomes useless.
Sure nothing they're doing is particularly novel, but if you're the sort of person who wants to host in the cloud, but needs to keep a website responding even when cloud hoster goes down (or decides to ban you), you should find something interesting about their setup.
Re: The Pirate Bay in the cloud
#37Earlier quoted context omitted.
Or you could just look at the network traffic that the load balancers are generating to see where the majority of it is going. I wouldn't bother just taking the load balancers down. I'd go upstream of them to see where the traffic is going, and then take down those hosts at the same time as the load balancers.
First you would need to find the load balancer, which means you would first need to go after their router, then get the cooperation of a second country. Then you would need the cooperation of two more countries to get at the cloud providers... ... only for The Pirate Bay to spin up more instances elsewhere and point a domain or two at it.
I was just pointing out a method that would be considerably more simple to pull off than a timing attack. I recognise that there are still numerous steps that would need to be taken to pull it off.
Re: The Pirate Bay in the cloud
#38In practice this probably means several replicas of the site dormant in different cloud providers. The providers won't have a clue until they go live. In effect, they are replacing their current legal protections with a game of cat and mouse as they switch between clouds.
i wonder if this would becomes some sort of internet nuclear arms race which can only end poorly.
Re: The Pirate Bay in the cloud
#39I'm sorry, am I the only one that isn't impressed by this? I'm actually quite stunned that they are treating this like some new discovery. Pop onto HN any day and see thousands of people talking about cloud. Hell, some local IT staffing agency in my area has a billboard about cloud servers. Cloud is mainstream now, why did it take TPB so long to catch up? //Sorry if it sounds like trolling
We see lots of stories about people running on EC2 and similar services, but the big players are all pretty straight-laced; witness the speed with which Amazon kicked off Wikileaks [1] - within about three days. I don't know how many cloud hosing providers there are - to judge from the way people talk here there's only EC2 and maybe Linode. You'd need a lot of providers if you need a new one every 3 days! [1] http://…
But then if the traffic between the loadbalancer and the actual server is vpn'ed, you can just sign up using another credit card with another person, and the host will be none-the-wiser again. That is, until they get another C&D letter. The game then repeats.
I think eventually, something has to give tho, but hopefully, it will be a while before that happens.
Re: The Pirate Bay in the cloud
#40I would have preferred fully distributed solution. This one is easy to take down. Also memory snapshots can be take from servers, so disk encryption doesn't help. Not best possible solution afaik.