Slashdot Mirror

Quit using Kazaa or you'll get busted! The Mpa is living on that network. Try Imesh or ES5 !

Check these links.
Article about Anonymous Filesharing.

Some more program links

Mute program

Gnu filesharing

EarthStation5

Stop the Mpaa ! We have a right to checkout software before we buy.

Actually, such an app does exist.

EarthStation5 is an excellent application that uses SSL proxies to connect to the P2P network. It is also gIFT compatible too.

http://www.es5.com

I don't condone all of what they advocate on their website, but the product works well enough I guess. They even publish proxy lists in the forum that users can use to stay hidden.

Personally i've been using earth station 5 available at www.es5.com. While it doesn't yield as many results as the k++ engine does it is much harder for it to be blocked and it encrypts the transmission of files to make it harder for idiots like the local cable company to complain about dmca violations that with some other ways preventing monitoring (or at least slowing it down) is a nice little alternative if you're being bugged by your local ISP.

Good point about the garbage files now ubiquitous on the P2P networks.The production companies and record labels are behind this . The problem is that the software programmers are hard to get a hold of . All you really need to do is allow people to sample the video/audio and vote on it. Kind of like moderation here.

My question is was this a Kazaa P2P app ? If it was then whats all this talk from Kazaa about protecting peoples IP numbers. Doesn't sound like its working.

Maybe its time for earthstation5 filesharing program

Or how about freenet ? No. It's still too slow and only has one developer. maybe someday.

The P2P filesharing programs seem to be behind the curve in protecting identies.

At protecting your identity ? Autonomous filesharing.

earthstation5

Slashdot article on Kazaalite

Yahoo filesharing directory. list of p2p clients

freenetproject

Rant - I hope freenet gets faster. But probably never will because of its design. And java is difficult to run on my pII 266 32 meg comp.

New filesharing programs may be needed . Keep an eye out.

Don't start a mp3 filesharing website.

Does earthstation5 do a good job of hiding your i.p. address ?

Really rather a horrid response by this administrator; it was a little more than necessary to post his full name, home address, etc. and later implicitly threaten his family's life. Hm.

The forums can be accessed at http://formus.es5.com. It requires a username/password; I set up an account with u/p slashdot/slashdot, and that should work.

The quote in question is from the user "SharePro" in the thread "Danger do not use ES5, ES5 too easy to hack"; at present, it's on page 36 of the thread and it's the fourth post from the top. I can't find the home address of Random_nut (the person being berated by this fellow SharePro, a person who has 2666 posts on the EarthStation5 boards and is in "Group: Admin"); but one user has the address in his/her .sig - search for "Shaun AND Aberdeen" to see what I mean.

For context, here is the whole message (I have emboldened the part quoted by AC):

QUOTE (spinkmonkey @ Oct 3 2003, 06:58 PM)
If he had told you about the vulnerability you would have denied it and (like you have now) secretly modified the installer, I think that much is perfectly obvious to anyone. What he's done isn't about being good for ES5, in fact your right its completely the opposite, its good for the ES5 USERS because no one will trust this program anymore. Posting his details is the lowest of the low, quite frankly you are scum

You obviously dont know me very well if you think I am the type to deny shit. I have answered much more harder questions.

Obviously (and you can quote me), if I know about a breach in security, then its not an issue of denying it, its an issue of fixing it. Since now that Filehoover obviously got a message before I did, and its fixed, there is nothing to deny. I was not here today, and everybody on this board knows that I am here everyday, so if I wasnt here, then I WASNT HERE!

Should I just let the breach sit there and say "Hey everybody, here is a breach in security"? C'mon, you do have brains. So you really dont make sense. Filehoover may have re-compiled without that specific code, and not changed the build number. So what? What is your point? A cover up? What cover up?

I wasnt here today, and Filehoover isnt here now. It appears that he found out about it, and fixed it and now cased closed. ES5 is still the most securist P2P program.

Kazaa had an exploit not so long ago and it was also fixed that left their entire network vulnerable to be turned down. There is a difference between somebody hacking and something that was left over accidentily. Random Nut didnt hack ES5, all he did was see some extra code.

According to the build numbers he posted, he has spent months on this program and that is the most he can find? Code that is not in use and that was accidently left over? I would have expected more.

I agree and can be quoted as saying that it should not have been there. I WILL EVEN SCREAM THAT IT SHOULD NOT HAVE BEEN THERE. Deny? Wtf should I deny?

I think its pretty fucking pathetic that he made a crack instead of a patch, so like I said, if I were him, I'd look behind my back. You attack me or my users, and yes, I will send people to your front door. I dont fuck around because the responsibility that I have to my users does not allow me to fuck around. Rules changed, and he probably doesnt know how to play them. My identity is sealed, so again, he doesnt know who his enemy is. He is not anonymous nor is his family.

I have known who Random Nut is for a while. Did you know that Kazaa wants his address to sue the fuck out of him for manipulating their code and making a derivative out of it? I wouldnt give it to them because why should I? I'm not Random Slut, I dont fuck people simply to fuck them.

Did you know that the RIAA / MPAA wants his address to sue him? The list goes on including various law orgnizations. I wouldnt give it to the RIAA either because I hate the RIAA. I handle my own problems. But in reality, now that I am printing it, you can bet that it will appear everywhere by various people. I will also be printing pictures of him and

Random Nut, AKA Shaun Garriok, (http://www.zeropaid.com/news/articles/auto...o/04 282002c.php) the Author of Kazaalite, has been a vocal critic of Eathstation5 because of a continual online insult war between himself and some roudy Earthstation5 fans. This has motivated him to be extremely critical of Earthstation5.

We at Earthstation5 desire and request criticism at any time in fact we demand it as we believe that is the only way to make software truly superior.

We at Earthstation5 are not perfect, but we acknowledge that Shaun Garriok might be and thank him for helping us root out bugs.

The problem with the Earthstation5 software that Shaun Garriok found truly exists, however the sordid motives he attributes to Earthstation5 are incorrect. The following functions were put into Earthtation5 to allow automatic, remote upgrade of the Earthstation5 software.

These functions are:

1) Reload Earthstation5
2) Shutdown Earthstation5
3) Delete a File

All of these functions are necessary to perform when upgrading software.

We have long been admirers of Shaun Garriok's ability to superbly investigate even a fully compiled program. We believe that he is capable of finding ANY sort of trojan, worm, or bug inside a compiled program. We are relieved that all he could find was these remote upgrade functions. He didn't find any bugs that send user data anywhere, no spyware, no adware, nothing in fact that gives away any personal information about the user using Earthstation5.

It is also a fortunate fact that since Earthstation5 protects you from the RIAA lawsuits and hackers by hiding your ip address, the exploit program he wrote can only be used against your own computer which he states in his exploit. If you want to delete files from your own computer, we feel you have the right to do that.

We are glad he found this bug and pointed it out. We completely removed the automatic software upgrade code because as it turns out automatic upgrade is no longer popular as it once was because it gives people an uneasy feeling and rightly so.

Since Shaun Garriok seems to be concerned about everyone's security, and is not on a personal quest for revenge, we would be grateful if he would download the latest Earthstation5, version 1.1.31 (http://download.es5.com/es5setup.exe) and verify that we have truly removed the remote update function which his exploit program accessed. We think his dedication to the good of all concerned would motivate him to do this. Anyone else who is concerned can do the same, download the latest Earthstation5 and test the exploit code against it.

Filehoover, Lead Programmer of ES5

all that will happen is people will start to use more secure filesharing apps like EarthStation 5.

Actually, ES5 has so many security features the setup can be overwhelming to the average joe. So I wrote up a journal spelling out the important stuff.

also waste (excellent for closed circle, between friends & etc, for every type of files) and es5(with somewhat clumsy interface but creative ideas, and choosable levels of secrecy, but you might end up in using proxies you don't know to be trusted, though i haven't really looked into it worth shit tho).

anyways, the basic idea for such a network that is feasibly(enough) mangled to offer good enough fog is so simple that there will be other programs too, and it makes the whole fighting of uncrypted p2p kinda pointless as well.

My html skills are so 31337 that I can't do a link correctly. Let me try again. ES5's Forums. I was even smart enough to do a preview this time around.

When I clicked on ES5 and EarthStation 5, I was told that I could not connect because the servers do not exist.

Their company page (http://www.es5.com/company.html) says:

"Our group is made up of many people, Jordanians, Palestinians, Indians, Americans, Russians and Israelis. Some of us are Jewish, some Christians, some Hindus and other of us are Muslim.

Believe it or not, we all love and respect each other.

We all work and play together. Our families on many occasions eat at the same dinner table. We trust each other and are very close friends with each other. As a group, the most important thing in our life is our children, our families and love ones and of course our friends. "

Its simply not efficient. I want to download music, new releases, and movies -- I don't need encryption. I don't need to store unknown files in an encrypted cache. I don't need the rediculously slow speed Freenet offers.

Enter China. They have TriangleBoy. An array of proxies available not behind the Great Firewall. Chinese dissidents can use these anonymous proxies to do publish and consume information. Freenet only inhibits this. Freenet's lack of performance is a major flaw. US proxies are fast, even when trans-Atlantic. Its tried and true tested technology; innovation is welcome, but Freenet is nothing.

Many P2P programs have been developed in shorter timeframes than since all the hype about Freenet began to now. EarthStation5. Piolet. Blubster. RockItNet. Heck, even Kazaa K++'s modifications to Kazaa. Although many of these are not totally anonymous, ES5 is. Check out the ES5 forums (warning: registration required), you'll find a list of tons of anonymous and transparent proxies to use with ES5.

AIM can use proxies too. So can ICQ. SOCKS5, HTTP. Even FTP, HTTP, Internet Explorer, etc. Many proxies also support SSL. For chatting dissident, one can do SSL over IRC.

Freenet is dead.

Click here for the american version