Slashdot Mirror


MethLabs Shuts out PeerGuardian

Lost&Confused writes to tell us Slyck News is reporting that most of Methlabs.org administration and development staff have been forced out of their own website. For the time being PeerGuardian is being hosted on sourceforge. However, users are advised to stop using the Methlabs.org and Blocklist.org hosted blocklists in favor of the Bluetack list until they can sort things out.

129 of 186 comments (clear)

  1. How.... by thesnarky1 · · Score: 1

    Do they get forced out of their server? Couldn't they just fire the guy if he worked for them?

    1. Re:How.... by FrYGuY101 · · Score: 4, Insightful

      It's not a business.

      Basically, the guys who were in charge of administering the money and servers slowly took over. Now they're claiming ownership of everything.

      --
      "If we let things terrify us, life will not be worth living."

      - Seneca
    2. Re:How.... by Anonymous Coward · · Score: 1, Informative

      Because Apparently the rogue admin, had all the passwords. Now my guess is either he was the only one with them or he changed them and didn't tell anyone else what they were.

      As for fire the guy...they aren't a business or anything. Maybe you should read up a little more on the situation.

    3. Re:How.... by ScrewMaster · · Score: 1

      Possession is nine-tenths of the law. I presume he's already been "fired", as it were, but he still has control of the domain.

      Hard to get good help these days, I guess.

      --
      The higher the technology, the sharper that two-edged sword.
    4. Re:How.... by IIH · · Score: 1
      Basically, the guys who were in charge of administering the money and servers slowly took over. Now they're claiming ownership of everything.

      And without hearing from both sides, who's to say that they aren't correct?

      --
      Exigo spamos et dona ferentes
    5. Re:How.... by freewaybear · · Score: 3, Funny

      Hey, the cops came and forced me out of my meth lab once.

      --
      Registered Linux User #404114 [url=http://www.punkoiska.com][img]http://img406.imageshack.us/img406/4379/posbannercf5.g
    6. Re:How.... by Meagermanx · · Score: 1

      That phrase has always bothered me. If it were true, then robbery would be 9/10th legal, right? Or maybe robbery itself would be illegal, but once you possess something, it's yours no matter how you got it. What about copywrite infringement? Plagerism?
      "Well, that paper I copied is at least 9/10th mine. You better just give me a 90% on it."
      Either way, it's clearly a faulty phrase.

    7. Re:How.... by ScrewMaster · · Score: 1

      No, it's not faulty. What it means is that if you have possession of something, however wrongly, the other party has to fight if they want it back. And that is an expensive business. which many will hesitate to undertake. Furthermore, even if you do go to court in an attempt to retrieve your property, you may still lose. So, yes ... the person who has possession of something has a distinct advantage, even if he is a thief.

      --
      The higher the technology, the sharper that two-edged sword.
    8. Re:How.... by insidious777 · · Score: 2, Interesting

      After poking around the comments on the other site, I came across this one from eremini, one of the PG devs. I've included it verbatim below. This is the most believeable version of the story I've heard.

      (Background: cerberius, a.k.a. William Erwin, is the one who they claim "hijacked" methlabs.org. Cerberius, eremini, fox, and Gambit2011 were claimed to be on one side, with the rest of the devs, and the "owner", on the other. Gambit2011 posted to take himself off that list.)

      (reference URL: http://www.slyck.com/forums/viewtopic.php?t=14191& postdays=0&postorder=asc&start=25 )

      Actual Post:
      eremini here. I am gonna post exactly what happened, since there's no need to hide it now. As some of you know cerberius has always been the one that did technicall things on methlabs, set up the servers, updated server software, etc... So it only naturaly the servers were registered to him. Now about a week ago, Furi and Phrosty decided to kick cerb out, right now they are going around forums truying to say that they wanna be professional, but how do profesionals fire peope? They talk to them, explain the reasons, etc. Did they do that? No. Did they try to do that? No. Just one day all of a sudden, they changed the methlabs.org server root password, wiped all the data off it and hijacked a google adsence account, which was registered to cerb's social security number. Now about the domain. Yes, cerb did transfer the domain to him, a couple of months before that (Miles might call this keep all your balls in one sack), but he did not hijack anything, he transfered it with complience to all ICANN rules, which state that the preveious owner gets send an email, to which he gets to reply 60 days (!) if you want to reject the transfer, that didn't happen. So its transfered fair and square. Now about stealing money. What money? The google adsence money (which cerb got back with google being ready to press charges against hijackers for fraud) is still there, no money transfered. Same with paypal, the money, like always, will be used to pay hosting costs and other fees concerning methlabs. There thats the end of the store. Now you decide who to trust, but please don't trust them, just because they put their real names in some attemp to "be profesional"

    9. Re:How.... by Usquebaugh · · Score: 1

      Let me introduce messers Smith & Wesson.

  2. Now we know where Michael Sims is by Anonymous Coward · · Score: 2, Funny

    What a guy^h^h^h gal!

  3. One of those things about the open source crowd... by suitepotato · · Score: 5, Insightful

    ...they don't tend to be very big on the business accumen. Any enterprise where stuff like this can happen, needs to have contracts in force that head them off. The big business closed source world lives and dies by contracts and legally binding agreements. The licenses on the code produced should not be where the thoughts of legalities end. Internal legal matters are perhaps far more important.

    --
    If my grammar and spelling are off, I am [distracted/tired/careless] (take your pick)
  4. What an asshole! by Elite+Xizer · · Score: 2, Interesting

    What possible reason would Mr. Erwin want with methlabs.org? I can't believe he would pull this shit. He needs a good ass kicking for stepping out of line.

    1. Re:What an asshole! by Alizarin+Erythrosin · · Score: 1

      Perhaps he wants to set up a directory of local methamphetamine labs, a la Google Local Search?

      "Need a fix? Come to Methlabs.org and search out your local lab! We even offer a subscriber service to alert you when your preferred meth labs have been raided by the police!"

      --
      There are only 10 kinds of people in this world... those who understand binary and those who don't
    2. Re:What an asshole! by no_mayl · · Score: 2, Insightful

      The human factor is often the weakest link: he got bought by somebody who does not want privacy.
      (just being paranoid)

    3. Re:What an asshole! by PakProtector · · Score: 1

      Perhaps he wants to set up a directory of local methamphetamine labs, a la Google Local Search?

      "Need a fix? Come to Methlabs.org and search out your local lab! We even offer a subscriber service to alert you when your preferred meth labs have been raided by the police!"

      Dude, methlabs.google.com is so last week.

      --

      Edward@Tomato - /home/Edward/ man woman
      man: no entry for woman in the manual.
      "Qua!?"

    4. Re:What an asshole! by mikael · · Score: 5, Interesting

      He thought that methlabs.org had established such a good reputation that they could start charge customers money for the service?

      But didn't he realize that the developers would have backup copies of the site and just set up a new site elsewhere?

      I've seen this thing happen with small companies. They recruit a couple of software architects to get the core software written. Once they get the software developed they give the architects the boot, and hire cheap graduates to do any customisation.

      --
      Vintage computer adverts: http://www.vintageadbrowser.com/computers-and-software-ads
    5. Re:What an asshole! by ScrewMaster · · Score: 2, Insightful

      Can you say, "RIAA"? No? "MPAA"?

      --
      The higher the technology, the sharper that two-edged sword.
  5. Hijacked! by Anonymous Coward · · Score: 2, Funny

    Take this web site to....hmmmm....wait....

    1. Re:Hijacked! by empaler · · Score: 3, Funny

      ... Cuba!

  6. Hmm by Saiyaman · · Score: 4, Interesting

    I have gotton various things, at methlabs.org it says to ignore e-mails I get from anyone about PG unless it is from @methlabs.org. In an e-mail I got from someone else saying to go to the Sourceforge site. So for the time being, I probabaly will not download anything from either place since I don't know who to believe.

    1. Re:Hmm by Anonymous Coward · · Score: 1, Informative
      I RTFA'd:

      However, after speaking to the Methlabs team and various connected members of the community, P2Pnet, SuprNova and Slyck can all confirm that the original story that the domain has been hijacked is genuine.
    2. Re:Hmm by Xarius · · Score: 3, Interesting

      At the bottom of the article:

      UPDATE: William Erwin, now confirmed as the hijacker, has posted news on Methlabs.org, claiming the hijacking news is false and stems from a revolt by former team members.

      However, after speaking to the Methlabs team and various connected members of the community, P2Pnet, SuprNova and Slyck can all confirm that the original story that the domain has been hijacked is genuine.

      PeerGuardian users are advised to stop using the Methlabs.org and Blocklist.org hosted blocklists in favor of the Bluetack list.


      I'd probably believe all of this is true, if it's all lies then the person who is in control of methlabs.org would have already set a libel lawsuit rolling methinks.

      --
      C17H21NO4
    3. Re:Hmm by Anonymous Coward · · Score: 2, Informative

      Alternative blacklists from:
      http://bluetack.co.uk/config/sources.txt

      PG,http://www.bluetack.co.uk/config/ads-trackers-a nd-bad-pr0n.txt,Ad Trackers,0,Ads Ad-Trackers and Bad Porn
      PG,http://www.bluetack.co.uk/config/level1.txt,Lev el 1,0,Level 1 Basic Blocklist
      PG,http://www.bluetack.co.uk/config/level2.txt,Lev el 2 Corp,0,Level 2 Corporate Ranges
      PG,http://www.bluetack.co.uk/config/bogon.txt,Bogo n Ranges,0,Bogon Addresses List
      PG,http://www.bluetack.co.uk/config/dshield.txt,DS hield Recommended,0,DShield Blocklist - More info @ www.dshield.org
      PG,http://www.bluetack.co.uk/config/edu.txt,Edu Ranges,0,Educational Institution Ranges
      PG,http://www.bluetack.co.uk/config/hijacked.txt,H ijacked IP Blocks,0,Hijacked IP Ranges List
      PG,http://www.bluetack.co.uk/config/iana-multicast .txt,IANA Multicast,0,IANA Multicast Addresses
      PG,http://www.bluetack.co.uk/config/iana-private.t xt,IANA Private,0,IANA Private Addresses
      PG,http://www.bluetack.co.uk/config/iana-reserved. txt,IANA Reserved,0,IANA Reserved Addresses
      DONK,http://www.bluetack.co.uk/config/exclusions.t xt,Master Exclusions,0,Recommended Exclusions List
      PG,http://www.bluetack.co.uk/config/Microsoft.txt, Microsoft Related,0,Microsoft Associated Addresses List
      PG,http://www.bluetack.co.uk/config/fornonlancompu ters.txt,Non-LAN List,0,LAN Blacklist 0.* 10.* and 192.168.* Ranges
      PG,http://www.bluetack.co.uk/config/spider.txt,Spi ders List,0,Webspiders and Bots
      PG,http://www.bluetack.co.uk/config/spyware.txt,Sp yware List,0,Spyware and Malware
      PG,http://www.bluetack.co.uk/config/trojan.txt,Tro jan & Portscanners,0,The Trojan Port Hits and Scans List

  7. Dupe! by Bogtha · · Score: 5, Interesting

    Not really. But it sounds almost exactly the same as what Michael Sims, the Slashdot editor, did to the Censorware Project.

    Expecting a bitchslap in 5... 4... 3...

    --
    Bogtha Bogtha Bogtha
    1. Re:Dupe! by deadkittens · · Score: 1

      The ironic part about it is that I went to the anti-slash site and saw one post. http://science.slashdot.org/article.pl?sid=05/09/1 7/0430208 Dispite making a science joke, Zonk still posts an obviously fake article And this is actually a real article with real people and events. http://news.bbc.co.uk/2/hi/asia-pacific/4252692.st m

  8. Ironically... by bigtallmofo · · Score: 4, Funny

    This kind of thing happens all the time in real methamphetamine labs across the country.

    A group of like-minded people pool their resources within an abandoned house to create something and inevitably one of them puts a padlock on the formerly abandoned house to keep it all for himself.

    --
    I'm a big tall mofo.
    1. Re:Ironically... by fm6 · · Score: 1

      You're misinformed. The usual procedure involves not a padlock, but an Uzi.

    2. Re:Ironically... by tsotha · · Score: 1

      Yeah, but usually the other ones can't complain anymore since they're rotting in barrels in the basement.

  9. Product Explanation? by jgbishop · · Score: 1

    For the uninformed among us (myself included), what is PeerGuardian?

    --
    Go, and never darken my towels again! -- Rufus
    1. Re:Product Explanation? by ravenspear · · Score: 4, Informative

      http://en.wikipedia.org/wiki/PeerGuardian

      PeerGuardian and PeerGuardian 2 are free and open source software firewalls capable of blocking incoming and outgoing IP addresses. The application uses a blocklist of IP addresses to filter the computers of several organisations, including the RIAA and MPAA while using filesharing networks such as FastTrack and BitTorrent. The system is also capable of blocking advertising, spyware, government and educational ranges, depending upon user preferences.

    2. Re:Product Explanation? by MetalliQaZ · · Score: 1

      Since most of the P2P "snooping" that yields the lawsuits well all read about is done by 3rd party companies on behalf of the RIAA/MPAA, I don't see how this would help at all.

      I don't use PeerGuardian because I know it offers no _real_ security.

      -d

      --
      "Here Lies Philip J. Fry, named for his uncle, to carry on his spirit"
    3. Re:Product Explanation? by 91degrees · · Score: 2, Interesting

      But it lists most of the third party companies that snoop as well. If there is a whole, people are encouraged to report it.

      And besides - Isn't poor secuirity at least a little better than no security?

    4. Re:Product Explanation? by bad-badtz-maru · · Score: 1


      What is "real" security? Security is not a fixed state, it's a set of layers and processes. PG is one layer and it +is+ effective.

      The 3rd party companies have names and IP spaces...

    5. Re:Product Explanation? by Geoffreyerffoeg · · Score: 1

      And besides - Isn't poor secuirity at least a little better than no security?

      No security and no need for it is better than depending on poor security. I don't know about him, but one reason I avoid P2P is because it's too risky.

    6. Re:Product Explanation? by MstrFool · · Score: 2

      The RIAA, MPAA and malware folks everywhere thank you for your stance. A point you seem to have over looked is that it is not just for blocking in P2P situations, the lists are also simple to use to block bad sites for other applications. The though of 'I don't need protection because I am doing nothing wrong' is rather shortsighted and is the reason for so many compromised systems on the net today. Also, carry the thought over into other things and you can see how silly the idea is. I can pick a deadbolt lock nearly as fast as most people can use a key, yet I still use locks on my door. If you will only use something that is 100% perfect then I think you will have a hard time ever finding anything in the world that you can use.

      --
      Question reality.
    7. Re:Product Explanation? by Geoffreyerffoeg · · Score: 1

      The RIAA, MPAA and malware folks everywhere thank you for your stance.

      Malware I might accept, but why the comment about the RIAA or the MPAA? I have no problem with them. They have no need to snoop my computer, and I have no need to be interested in their products.

    8. Re:Product Explanation? by Cyno · · Score: 1

      I'm glad you got a kick out of that.

      I only run Windows to play games.

      Tell me, do you honestly need peerguardian? Do you and your mates download illegal content and need to be protected from the *IAA? If so maybe you should consider dedicating a few more % of your CPU to erasing your ISP's logs.

      Sneaker net works great for me.

  10. Does PeerGuardian really work? by antdude · · Score: 1

    Does it really cut down the number of connections by listed IP addresses? I heard it doesn't stop them.

    --
    Ant(Dude) @ Quality Foraged Links (AQFL.net) & The Ant Farm (antfarm.ma.cx / antfarm.home.dhs.org).
    1. Re:Does PeerGuardian really work? by PhrostyMcByte · · Score: 3, Informative

      We keep track of various organizations as best we can. I don't have a link on hand but I do remember a study folks at MIT did (couple years ago) that showed PeerGuardian caused a 75% reduction in fake/corrupt files on Kazaa.

    2. Re:Does PeerGuardian really work? by Arker · · Score: 2, Insightful

      Indeed, I loaded the safepeer plugin for azureus a few days ago (correct me if I'm wrong, but I believe it uses the peerguardian list) and the console is just FULL of blocked connections. I was a little shocked at the number.

      However, looking through the logs, I wonder if it's being overly aggressive. It seems like it's blocking, for instance, all government addresses, and lots of 'private customer' addresses at major ISPs. Perhaps I'm just misunderstanding the classification categories?

      I don't actually share anything that the *IAA types are likely to be looking for, which makes it even stranger that so many blocked addresses are trying to connect to me. Or, again, I may be just completely misunderstanding something...

      --
      =-=-=-=-=-=-=-=-=-=-=-=-=-=-
      Friends don't let friends enable ecmascript.
    3. Re:Does PeerGuardian really work? by PhrostyMcByte · · Score: 3, Informative

      The lists got a bit inaccurate over time. We had just got Blocklist.org setup so we could review all the blocked ranges, but then a month later this happens :(

      Oh well. We'll recover.

    4. Re:Does PeerGuardian really work? by Ugly+American · · Score: 1

      I would suspect that they're running bots on the various P2P networks to leech bandwidth, and that you'd see blocked connections regardless of what files you have shared.

      --
      For sale: one sig space, gently used. Inquire for details.
    5. Re:Does PeerGuardian really work? by Arker · · Score: 1

      I could see them opening a lot of more-or-less random connections on, say, edonkey. Because they would be getting file lists, doing source exchanges, looking for things... but on bittorrent they can't really do that, they have to start from a tracker, don't they?

      Or do you mean they're just aiming to reduce the usability of the network, without regard to whether the nodes they're 'jamming' are engaged in distributing legally redistributable files or not?

      --
      =-=-=-=-=-=-=-=-=-=-=-=-=-=-
      Friends don't let friends enable ecmascript.
    6. Re:Does PeerGuardian really work? by Ugly+American · · Score: 1

      According to a poster in this thread, EZTV was being attacked by parties unknown (possibly MediaSentry) who were soaking up bandwidth and trying to inject corrupt file segments. I also saw a comment on the emule board from someone who tossed some random non-infringing files into a shared folder and immediately started getting upload requests. That leads me to believe that they're just trying to soak up as much bandwidth as they can, with legit downloads being collateral damage.

      --
      For sale: one sig space, gently used. Inquire for details.
    7. Re:Does PeerGuardian really work? by Arker · · Score: 1

      I can't say that would really surprise me. That sounds like the kind of crap that would make sense to the *IAA.

      Still suspect this block list is a bit overly aggressive though, I think I'm filtering around 75% of the address-space.

      --
      =-=-=-=-=-=-=-=-=-=-=-=-=-=-
      Friends don't let friends enable ecmascript.
  11. Re:One of those things about the open source crowd by PhrostyMcByte · · Score: 5, Interesting

    Indeed. We (Methlabs) had an admittedly stupid setup and were working to change it. Obviously, we worked too slow. It's a shame that small groups of friends even have to think of legalities but I guess that's reality.

    Anyone have advice on keeping this from happening again, to us or other OSS groups?

  12. A question... by darkitecture · · Score: 2, Interesting


    I'm reluctant to update my lists using either source at the moment until it's cleared up. The plan for me is to keep the status quo until told otherwise from a reputable source.

    I have a problem though; I have two main computers I use regularly and one of them was last updated on the 11th of September, the other on the 14th of September. The $64,000 question is:

    Which of my computers, if any, are using reputable blocklists?

    I don't know when this coup was started and thus I don't know at what stage we were supposed to stop trusting the auto-updating. I've already turned off my auto-updating for PG2 on both computers but I'd like some info on whether my current lists have been 'tainted.' By the sounds of it, this was a bit of a 'slow mutiny' so I'm somewhat paranoid that the lists may have been compromised far earlier than say, a week ago and thus this is all null and void. Needless to say, we just don't know at the moment.

    Any info from some reputable PG2 personnel (I've seen you guys post here before, PS - love your work! I donate!) would go a very, very long way.

    1. Re:A question... by PhrostyMcByte · · Score: 4, Informative

      The last safe backup we have was taken on September 9th, pretty much right before all hell broke loose.

      Bluetack may go a bit overkill on who they block on their lists, but they are generally trusted by the community. We'd rather users setup PeerGuardian to use our competitors lists than use possibly unsafe lists from a compromised server.

      We setup instructions to switch to the Bluetack lists if anyone is interested.

    2. Re:A question... by tangles · · Score: 1

      I was extremely interested in these instructions. Thank you.

    3. Re:A question... by whoever57 · · Score: 2, Interesting
      Netcraft shows that the hosting changed between September 8 and September 10

      Are you 100% certain that a September 09 backup is safe?

      --
      The real "Libtards" are the Libertarians!
  13. Update on the Methlabs.org site by Rac3r5 · · Score: 5, Informative
    I visited the Methlabs.org site and I found this. Seems like the complete opposite of what I read on the other site, like some conspiracy.

    http://www.slyck.com/news.php?story=913

    Methlabs Update

    September 16th, 2005 by Administrator

    "Dear Methlabs and P2P Community,

    Recently, we had several former staff members revolt against the entire P2P community as a whole. They tried to sabatoge Methlabs and attempted to wipe the Methlabs server of all its data.

    Unfortunately, they gained access to site backups. In doing so, your passwords may have been compromised, although they are MD5 encrypted. We would like to you login to the Methlabs forums (http://methlabs.org/forums/) and change your password. We sincerely apologize for this issue. As of right now, the Methlabs site is back online, although forum posts from the past month have been lost.

    Since all the data was stolen by former staff members, YOU MAY RECIEVE FAKE EMAILS that look like they are from Methlabs. If they do not come from the Methlabs.org domain and from our email servers, DO NOT BELIEVE THEM.

    We assure you that Methlabs development will continue, and ALL OFFICIAL PROGRAMS MUST be downloaded directly from Methlabs.org . Assume that all other sites contain spyware or malicious code which may not be directly trusted.

    To update everyone on the current situation, there has been some news going around the Internet of a revolt which happened in Methlabs. This is hearsay. The current real news is that PeerGuardian development and Blocklist development is on schedule, and Blocklist should be out of Beta within the next week or so.

    Please spread the word that Methlabs.org is ALIVE and DO NOT believe or TRUST any emails that do not come directly from Methlabs.org and our mail servers. These emails are from disgruntled staff members trying to hurt the P2P community as a whole.

    We apoligize for the current situation. Please visit http://methlabs.org/ for OFFICIAL updates, and help us spread the word!

    - The Methlabs Team"

    1. Re:Update on the Methlabs.org site by Henry+V+.009 · · Score: 4, Insightful

      "we had several former staff members revolt against the entire P2P community as a whole"

      Yeah, that's a really believable line. The site has obviously been hijacked.

    2. Re:Update on the Methlabs.org site by Johnny+Doughnuts · · Score: 5, Interesting

      I know Ken (d3f) personally, and most of the ml.org staff. Ken would shoot someone for putting up a message like that.

    3. Re:Update on the Methlabs.org site by gbjbaanb · · Score: 4, Funny

      YOU MAY RECIEVE FAKE EMAILS that look like they are from Methlabs

      Really? Hey guys, I think I got one, but I'm not sure this one isn't for real:

      Dear Sir:

                      I have been requested by the Methlabs and P2P Company to contact you for assistance in resolving a matter. The Methlabs and P2P Company has recently concluded a revolution where several high ranking members of the Company attempted to wipe the company servers of data and abscond with funds totalling $400 gazillion dollars. It is of uptmost concern to us that these funds not find their way into the hands of revolutionaries and so we ask your assistance.

                      You assistance is requested as a non-Methlabs member to assist the Methlabs and P2P Company, and also the Peerguardian Community, in moving these funds out of Methlabs. If the funds can be transferred to your name, in your United States account, then you can forward the funds as directed by the Methlabs and P2P Company. In exchange for your accomodating services, the Methlabs and P2P Company would agree to allow you to retain 10%, or US$4 million of this amount.

                      However, to be a legitimate transferee of these moneys according to ICANN law, you must presently be a depositor of at least US$100,000 in a Nigerian bank which is regulated by the Central Bank of Nigeria.

                      If it will be possible for you to assist us, we would be most grateful. We suggest that you meet with us in person on the forums, and that during your visit I introduce you to the representatives of the Methlabs and P2P Company, as well as with certain officials of the PeerGuardian community.

                      Please call me at your earliest convenience at [Phone Number]. Time is of the essence in this matter; very quickly the revolutionaries will realize that the server backup was intact and will attempt to transfer it to another domain.

      Yours truly, etc.

    4. Re:Update on the Methlabs.org site by Geoffreyerffoeg · · Score: 2, Insightful

      "Recently, we had several former staff members revolt against the entire P2P community as a whole. They tried to sabatoge Methlabs and attempted to wipe the Methlabs server of all its data."

      "To update everyone on the current situation, there has been some news going around the Internet of a revolt which happened in Methlabs. This is hearsay."

      Say what? Was there a revolt or wasn't there? The other side's story isn't self-contradictory.

      "We assure you that Methlabs development will continue, and ALL OFFICIAL PROGRAMS MUST be downloaded directly from Methlabs.org . Assume that all other sites contain spyware or malicious code which may not be directly trusted."

      This looks suspicious to me. Isn't it possible to do a DNS spoof or a simple web server attack and get access to methlabs.org? Shouldn't any site worth anything have reliable, trusted backups?

      And shouldn't the site post hashes of several recent releases instead of simply saying "download from here only, honest!"?

      "We would like to you login to the Methlabs forums (http://methlabs.org/forums/) and change your password."

      Actually, go straight to the Methlabs forums and change your password to something completely random. And if you used your old Methlabs password somewhere else, get rid of it. Assume for your password's sake that Methlabs.org and Methlabs-Team-in-Exile are both able to compromise your password.

      But still, it's good to recognize this position. We don't know what happened, and the fate of a site this crucial to security is not something to jump to conclusions about.

    5. Re:Update on the Methlabs.org site by Haeleth · · Score: 1

      Say what? Was there a revolt or wasn't there? The other side's story isn't self-contradictory.

      Nor is this. It's not very well written, I'll grant you, but I think it's clear enough that what it's saying is basically "some of them left and then revolted against the rest of us. You have probably heard that I revolted against everyone else, and I deny that."

    6. Re:Update on the Methlabs.org site by ion_ · · Score: 1

      "we had several former staff members revolt against the entire P2P community as a whole"

      Yeah, that's a really believable line.

      "we also have confirmed that they possess weapons of mass destruction."

  14. Sources for who to trust and not to trust in this. by Anonymous Coward · · Score: 2, Insightful

    Slyck.com, Zeropaid.com, UniteTheCows.com, p2pnet.net, p2pconsortium.com and many others are saying the same thing... even the person who started the whole thing and who the domain name is named after has been locked out.

    Officially, according to the founders of the community, their lead article writer, almost all senior administrators and the software developer of PeerGuardian 2... methlabs.org was hijacked.

    peerguardian.sourceforge.net IS trustworthy.

    (it's where the developers, founders, etc. are saying to go for new releases.)

  15. "login ... and change your password" = danger by dsandler · · Score: 5, Insightful

    Without knowing any details, it's hard to know which party in this situation is the malicious one (possibly both). But this message on the methlabs.org blog is causing the Lost-In-Space-Robot in my head to wave its arms madly:

    Unfortunately, they gained access to site backups. In doing so, your passwords may have been compromised, although they are MD5 encrypted. We would like to you login to the Methlabs forums ([url redacted]) and change your password. We sincerely apologize for this issue.

    If the webmaster is telling the truth, this is an innocuous request. [Of course, sufficiently strong passwords will survive precomputed hash attacks, and it's still pretty hard to brute-force MD5 hashes (even given recent weaknesses).] However, if the webmaster is malicious, this is no different than a PayPal phishing scam: "Come visit our website (the legitimacy of which is, at best, in doubt) and enter your old password on a Web form. Go ahead, enter a new one, too. Thanks."

    The right thing to do in this case, where you have multiple parties which may all be malicious and some of which may have your passwords, in plaintext or hashed format, is probably to stop using those passwords immediately. If you use that forum password elsewhere, change it elsewhere. As for methlabs.org, the safest course of action is probably to wait and see who the good guys are before typing any passwords in, old or new.

    1. Re:"login ... and change your password" = danger by huiac · · Score: 1

      An additional concern, and one not addressed by the notice on methlabs.org, is that the passwords they are asking you to confirm and then replace are, presumably, the same passwords in the 'backups' used by the 'developer group'; if the methlabs.org site were both sincere and competent, they would have told you to change your passwords with *both* the Empire and the Rebel Alliance (and using different new passwords for each), as there's obviously some doubt as to which side is which.

      As it is, he's advising you to suspend your own judgement and assume that methlabs.org is the only one you should trust; while it may be true, and they'd know if it was, providing instructions that don't allow you to CY own A is dubious and unnecessary.

      And whether he's trustworthy or not, he's effectively asking you for the keys to your identity with the other group. Noone deserves that level of trust, least of all in a situation like this.

      John.

    2. Re:"login ... and change your password" = danger by njyoder · · Score: 1

      Of course, sufficiently strong passwords will survive precomputed hash attacks, and it's still pretty hard to brute-force MD5 hashes (even given recent weaknesses)

      That depends entirely on the password hashing algorithm used. There is a common misconception that if it uses md5, that it is automatically secure. That is patently false and the way much software uses md5 is insecure, especially with the 'custom' php forum apps.

      Many will just apply md5 once or twice and some will uses little or nothing for a salt. That can easily be cracked via brute force with a single modern computer and a couple of days at most, even for a good password. Take a look at the mdcrack webpage, an older Athlon computer can do 9 million md5 hashes PER SECOND. That's a lot.

      For something good, look at FreeBSD's md5 crypt, which hashes it 1000 times, concatenates the large salt and password in various ways each iteration. THAT would be infeasible to crack.

  16. Attack of the PeerGuardian Robots by hackwrench · · Score: 5, Funny

    We are the PeerGuardian Robots
    We are here to protect you
    We are here to protect you from the terrible secret of PeerGuardian
    Do not trust the Methlabs Robot. He is malfunctioning
    Do not trust the Sourceforge robot. He is inferior.

    1. Re:Attack of the PeerGuardian Robots by Alsee · · Score: 1

      Do you have peers in your house?

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    2. Re:Attack of the PeerGuardian Robots by YU+Nicks+NE+Way · · Score: 1

      Are you thinking treasonous thoughts, troubleshooter?

      Report immediately to the clone activation center for replacement activation.

      Thank you. The computer is your friend.

  17. Re:One of those things about the open source crowd by WhiteWolf666 · · Score: 5, Informative

    Form an LLC (couple hundred dollars).
    Give all assets that you want to protect to the LLC.
    Distribute ownership of the LLC among ALL memebers, and require license changes/ownership changes/policy changes/domain changes, etc, either unanimous consent or a 2/3 (maybe 3/4) vote.

    Fundamentally, the purpose of a business 'shell', in any small organization, is to put your assets in one place so that no one can legally mismanage them.

    If, for example, methlabs.org had been the property of methlabs, LLC, and the administrator tried to boot you off, you could send an e-mail to your registrar from the 'director' of the LLC, indicating that the administrator was not acting in the interest of the LLC. You send them the *signed* (can be signed electronically, using the US gov't standard, which is a bit silly \ \ ) LLC articles of incorporation, showing either that the administrator member had no right to do that, OR that he wasn't a member of the LLC.

    Then they hand you the 'keys' to the castle, so to speak.

    --
    WhiteWolf666 an exBush supporter. All you new-school,compassionate,save the children Republicans can rot in hell
  18. Too Bad... Sooo Sad...Another CDDB by Macfox · · Score: 1

    I noticed this just last week. The forums went offline and there hasn't been hardly any moderator updates made to correct the mistakes in the IP DB.

    Many of the mistakes can be put down to them assuming whois.sc IP location is current, when in fact much of it's historical.

    I was getting frustrated trying to get a couple of updates done, but there are 100's of mislabelled/ named IP ranges yet to be addressed. It's now obvious why nothing was being done.

    If the blocklist isn't going to be updated regularly and with reasonable accuracy, then there's not much point to it.

    As the article states time to source your blocklist elsewhere...Just another CDDB type fiasco.

    --
    Area51 - We are watching...
  19. A similar thing by Skiron · · Score: 1

    Happened to the uklinux Guy:

    http://www.jasonclifford.com/uklinux.html

    BTW, if you are in UK stop using UKLINUX, use http://www.ukfsn.org/ which is what Jason started after the take over of his first ISP.

  20. Consider the jihad by la_migra · · Score: 5, Funny

    This and other injustices perpetrated by slashdot's editors are documented within the pages of Anti-slash: Sacred Jihad Against Slashdot. We invite you to join our community and force slashdot's editors to answer for their crimes.

    In Sacred Jihad,

    jihadi_31337

  21. Re:One of those things about the open source crowd by WhiteWolf666 · · Score: 5, Interesting

    Also, 2 more points ;-)

    1. Form the LLC anyways. Use the name, MethLabs LLC

    File a cybersquatting request. Even if you loose, its not a bad way to go. If you can show you started the project, you'll be in *really* good shape, I think. As far as I know, if you have a business name, you are virtually guaranteed the domain name. What's good for the goose is good for the gander.

    Emphasize that its a *security* site. ICANN generally frowns on people trying to subvert security software.

    2. Trademark the term "Peerguardian". This costs about ~$400. You may have to take a collection for this. Then, you can pretty reliably prevent him from using that term on methlabs.org.

    A trademark will help you achieve number 1, above, and virtually guarantees number 3, below.

    3. Sue in small claims court. Make sure to sue in *his* state, but not necessarily his jurisdiction. Even if you don't get the domain back, claim the maximum (usually $3000) in damage. The loss of your projects domain name is easily worth much, much more, but $3000 should be fairly easy to start up again with (pays Domain fees hosting fees LLC fees, etc. . .), and its a fun way to stick it to him.

    Small claims court usually only takes a day of work, and the filing fees are pretty small, too. Even if he doesn't pay, you can enter a judgement against him, have the pleasure of actually employing a creditor FOR you (not against ;-) ) and use this as additional proof (even though small claims doesn't set a precedent) for your cybersquatting claim.

    Plus, small claims judges are big on practical issues. They don't like to see people get screwed, and generally side with the abused party.

    --
    WhiteWolf666 an exBush supporter. All you new-school,compassionate,save the children Republicans can rot in hell
  22. Re:I've got a better idea by Seumas · · Score: 3, Informative

    PeerGaurdian isn't about spam email blocking. It's about blocking IPs that belong to MPAA/RIAA/DOJ/Government/BSA and other organizations that flood p2p networks, looking to gather information on you and send you a lawsuit.

  23. Seems both sides are accusing the other. by 91degrees · · Score: 1

    and oddly, both sides are encouraging people not to use the other sides list.

    These are just blacklists aren't they? Having both will - at worst - mean that too many IP addresses are blocked. Why no tuse both lists until we can find out what's happening?

    1. Re:Seems both sides are accusing the other. by macdaddy · · Score: 1

      But only one side (the legit side at SourceForge) is recommending you use a well-known and trusted competitor's list. That's saying something. There is no question about who we should trust.

    2. Re:Seems both sides are accusing the other. by 91degrees · · Score: 1

      Yeah, but personally, I think the guys that left were being morons, and the guy responsible for the server responded by being even more of a moron. Sometimes nerds are like this.

      Now both sides are trying to play it up and set everyone against the other side to protect their own reputations.

  24. the problem with "news" sites by SuperBanana · · Score: 1, Interesting

    ...is that we really don't know who to believe, especially since nobody has bothered to the things journalists do. Like go out and interview people, corroborate stories, and so on.

    We get:

    "However, after speaking to the Methlabs team and various connected members of the community, P2Pnet, SuprNova and Slyck can all confirm that the original story that the domain has been hijacked is genuine"

    So "Slyck News" is claiming they've done so- but they haven't given any names, quotes, or details as to how they arrived at this conclusion?

    The whole thing is one Big Internet Drama, and pardon me if I just don't care.

  25. Why God gave man hardened fists... by michaeltoe · · Score: 1

    ... to bang against the wall, as the cut-throat world of business leaves you in the dust.

  26. No honour amongst theives. by Chmarr · · Score: 1, Informative

    No honour amongst thieves.

    Okay, I'm NOT saying that ALL P2P users are thieves, but I don't think ANYONE in their right mind is going to argue that copyright violations is not the majority use of P2P networks.

    So... EVEN IF a handful of folk in a group are using P2P software for utterly and totally legitimate purposes, the majority aren't, and of THOSE people, their sense of ethics is at least tainted, and most likely totally horked.

    So... takeover of a P2P-related group by one of its members? No surprise there. Roll in the next drama please.

    1. Re:No honour amongst theives. by globalar · · Score: 1

      The thieves reference feels like a troll (obviously infringment is not theft). History is rife with "unethical" actions involving patents, trademarks, copyright, etc - by corporations and individuals. There is no honor in business and consumerism period. Selling and buying is about self-interest.

      But it bothers me that you cite ethics. Ethics is not synonymous with the law. The whole notion of "intellectual property" in modern economies could be argued as unethical. The law, generally, conveniences those who enacted it. I don't remember having a specific vote on copyright laws, do you?

    2. Re:No honour amongst theives. by Chmarr · · Score: 3, Interesting

      Yes, I agree that the use of 'theft' is inappropriate. However, it really is drawn out to say 'copyright violation' all the time. Can we take it as read that I DO understand the difference between theft of proprty, and the unlawful redistribution of information ?

      And, no, you don't get a specific vote on copyright law. You didn't get a specific vote on a bunch of things. You live in a republic, not a democracy. The last TRUE democracy was ancient Greece, where they voted on near everything, and things didn't turn out so well for them :)

      My point (and I really don't see why it was labelled 'off topic'... even 'flamebait' might have been more accurate) was that P2P communities are rife with people that just want their free stuff, and they don't give a damn who they hurt. So, it should be NO surprise that one of them turned against the PeerGuardian developers. William wanted his free stuff - where 'stuff' here meant the methlabs.org site - and he didn't give a damn who he hurt.

      No surprise whatsoever.

      If one wants to deal only with ethical people, don't create programs that will attract a highly disproportionate amount of unethical people.

    3. Re:No honour amongst theives. by Chmarr · · Score: 1

      The very fact that I corrected myself, and didn't use the word 'theft' inappropriately in my reply I think proves that I'm NOT 'persisting' in the use of it. Thanks for not even reading my reply.

      And, frankly, the 'sabotage' that PeerGuardian is trying to work around is the sabotage caused by the copyright holders (or their agents) to try and make P2P less effective in the illegal distribution of copyright materials. So, frankly, they don't score "ethics" points at all.

      So... perhaps a decent analogy is worthwhile: If you manufacture shovels, which COULD be used to shovel pearls, but are most certainly going to be used to shovel dirt too, you should expect to have dirt flung on you from time to time.

    4. Re:No honour amongst theives. by real_smiff · · Score: 1
      the ethics of P2P is not relevant to this discussion. what matters to users of methlabs products (of which i'm not one btw) is whether or not the people there are on their side or not. sorry but people are complicated creatures and the world just isn't that black and white.

      btw i reject your simplistic idea that people who use P2P to commit copyright infringement are not also capable of honest and ethical behaviour. (besides, they may admit that their actions are illegal, but have decided they are not immoral, for example because they also purchase the material they keep or for many other possible reasons, but as i said, its not directly relevant to the topic).

      my opinion is that the domain/project hijacker is likely a "worse person", and certainly a bigger menace to society, than one who downloads music they haven't paid for.

      --

      This is my Sig, this is my Gun. One is for Slashdot and one is for Fun.

    5. Re:No honour amongst theives. by zurab · · Score: 1
      Yes, I agree that the use of 'theft' is inappropriate. However, it really is drawn out to say 'copyright violation' all the time.

      Then just call it 'rape' - it's certainly a shorter word than 'theft' (so you don't have to type an extra character) and just as appropriate.

      You live in a republic, not a democracy.

      When will these statements go away from /.? The 2 notions, as they are most often referred to, are not mutually exclusive - you can have a democratic republic.

      My point (and I really don't see why it was labelled 'off topic'... even 'flamebait' might have been more accurate) was that P2P communities are rife with people that just want their free stuff, and they don't give a damn who they hurt. So, it should be NO surprise that one of them turned against the PeerGuardian developers. William wanted his free stuff - where 'stuff' here meant the methlabs.org site - and he didn't give a damn who he hurt.

      That could be, but most likely is not the case. This has nothing to do with your "P2P user" prejudice. Disagreements and power grabs happen all the time, even among people - what a surprise - who have never even heard the term P2P, or if they did - they'd never consider using anything similar.

      As for the ethical legitimacy of the program itself: I use P2P to share and download files - I could care less about MPAA and RIAA content, however. I download some public domain music, just few days ago I got some books that are in public domain also. And no, I don't want MPAA and RIAA to send my ISP an automatically generated DMCA notice just because I am sharing a file called cinderella.txt. I don't want them to send me their automatically generated lawsuit threats or lawsuit notifications either. So, I might actually consider something like that P2P firewall for myself.
    6. Re:No honour amongst theives. by Sycraft-fu · · Score: 1

      You seem to be confusing legality and ethics. Legality is if something conforms to the laws in a given country. Copyright infringement is illegal in the US. Ethics are a higher set of believefs, it is what a person believes to be right and wrong, regardless of what the government says. For example slavery was legal in the US for quite some time, however many people considered it to be unethical, and eventually the law was modified to match that.

      Likewise, just ebcause copyright infringement is illegal, does not necessiarly make it unethical. This is espically true given that the companies on the other side of this fight, the media companies, are known to engage in highly unethical behaviour themselves, have multiple times been convicted of illegal activities (like price fixing) and so on.

      Further, it's a crime with no direct harm. With theft, someone is actually deprived of something. A theif takes an item from a person that the person then no longer has. With copyright infringement, there is no actual loss. There is potential loss, as in now a person might not make a purchase they would have, but then lots of things create potential loss: Competing products, bad reviews, etc. This was substantiated by a Harvard and UNC study that found that P2P sharing had no stastically significant effect on music sales.

      But the realy issue is that lots of people, perhaps even the majority of people, engage in copyright infringement. Doesn't matter if it's downloading songs on the net, copying a movie they rented, copying a friend's CD, whatever. The people that do it aren't shady cirminals, they are generally normal citizens. Most you would call upstanding and ethical as a whole.

      Well, if you pass a law that makes most of you citizens criminals, the problem is not them, the problem is the law.

    7. Re:No honour amongst theives. by huiac · · Score: 1

      Just as an aside, the canard about Greece being a democracy (the only 'true' democracy, the first democracy, whatever) really needs to have a stake driven through its heart and extinguished once and for all.

      Firstly, most people say 'Greece' when they really mean 'Athens, from time to time'; Greece was a geographical region, not a nation or federation of any meaningful kind, and had no government of its own; Athens had periods of government-by-the-people interspersed with Tyranny.

      Only citizens got to vote in Athens; doesn't sound so bad until you realise that this excluded slaves, women, and many other residents whoe weren't born in Athens; someone somewhere has estimated that less than 5% of the population were citizens.

      The Vikings were at least as democratic; they had 'kings' and so on, but they ruled by consent and were subject to potential replacement by the population at regular gatherings called Things, which also thrashed out laws, major disputes and so on; government and leadership in Viking communities was not by fiat or divine authority, but with the support and approval of the group.

      Of course they still held slaves who didn't have a say (but in much smaller numbers than in Athens), and women (generally, but not always) were effectively disenfranchised, but this contrasts with Athenian democracy which was essentially a private club available only to an elite. There's also clear evidence that slaves and women had legal protection in most Viking communities (although it was much cheaper to kill a slave than a freeman), which wasn't really the case in Athens.

      The oldest democracy still in existence is almost certainly Iceland, founded by Vikings, and which has a recognizably democratic form of government that dates back to the 11th or 12th century.

      John.

  27. Did other members get an email like this? by basil+montreal · · Score: 4, Insightful

    "Dear Member,

    The majority of the Methlabs.org administration and development team have been forced out of their website following a series of threats and incidents. The member of the group that had been trusted to handle the finances and servers slowly managed to take over each individual part of the web site's assets, eventually claiming control over the entire group and locking out the majority of staff.

    The organisation's founders, Tim Leonard and Ken McKelland, as well as the majority of the organisation's staff and developers (including the main developer of the PeerGuardian2 application, Cory Nelson and the staff members responsible for auditing the PeerGuardian Blocklists) have all been forcibly removed from the servers that were funded from donations given to the organisation by happy users, and from text advertising placed on the websites forum and project pages.

    The money, which was to have been used to help fund the development and hosting costs of the group is now unavailable, stolen by the one who was trusted to keep it.

    Development of PeerGuardian will resume, and the website will temporarily move to http://peerguardian.sourceforge.net/ until a new domain is registered and a new server found. The intention of the group is to register a non-profit organisation to handle the development of Methlabs applications and to promote open source projects that aid both security, privacy and peer-to-peer technologies, in order to prevent a repeat of this incident.

    The team wish all their users the best through this difficult time, but promise that development will continue. Please visit http://peerguardian.sf.net/ for news as we make progress. All other sites, including http://methlabs.org/ and http://blocklist.org/ are under control of the rogue member and should not be trusted for safe updates to our applications or lists.

    A new build of PeerGuardian will be released soon to reflect these changes. Until then we ask you to continue using Beta 6a but with caution as the update servers are no longer under our control.

    All staff are available in irc.freenode.net, channel #methlabs if you wish to chat.

    Thanks, The Methlabs Staff (looking for a new home) -----

    Adam Hoier, Cory Nelson, Eric Mayuk, Fox Lowe, James Shanelec, Joseph Farthing, Ken McKelland, Steffen Tuzar, Tim Leonard

    aka

    braindancer, D3F, fox, FuRiOuS1, JFM, KuKIE, method, phrosty, r00ted"

  28. slashmelt the hijacked server by alex4u2nv · · Score: 1

    [methlab_member]: Wanna hijack my server?!?! well guess what, its gonna get slashmeleted!

  29. News To Me by Doc+Ruby · · Score: 3, Insightful

    FTFA:
    "UPDATE: William Erwin, now confirmed as the hijacker, has posted news on Methlabs.org, claiming the hijacking news is false and stems from a revolt by former team members.

    However, after speaking to the Methlabs team and various connected members of the community, P2Pnet, SuprNova and Slyck can all confirm that the original story that the domain has been hijacked is genuine.
    "

    The reporter has "heard from both sides", and said that the Methlabs team is correct. That's what real reporters do: they find all the sides of a story, decide which version is the most correct, and tell the story. They don't just report "he said / she said", which reduces the reporter and the publication to puny PR outlets for anyone with a version of the story, no matter how self-serving.

    That's not to say the reporter's version is the most correct, or even correct at all. But that's what separates good reporters from bad ones: their skill at finding the most accurate story version. And then telling it so readers get the most accurate version of the story in our heads. Good journalists back up their judgements with representative quotes and descriptions of evidence to bolster the reader's confidence in their version. Really good journalists make good judgements and back it up, earning the ongoing confidence of their readers.

    We still all need to take any story from where it comes. Which is why it helps to read some reporters for a long time, to understand their track record, their blind spots, biases, vested interests, and insights. We've watched "journalism" turn into a farce precisely because we no longer expect the journalist to use good judgement in reporting, highlighting what they find to be true. We expect journalists to be "objective" to the extent that the journalist disappears, acting only as a stenographer for whoever gets access to them as a channel for that interested party. Which is worse than useless.

    This reporter, on this little story, in a little tech backwater, is exercising exactly the professionalism that most of the people in their industry wouldn't recognize if it faced them across an interview desk.

    --

    --
    make install -not war

    1. Re:News To Me by Dot.Com.CEO · · Score: 1, Insightful

      You are, albeit semantically, wrong. Reporters report. It is journalist who actually "tell a story". This is extreme nitpicking but I thought it important enough to correct you.

      --
      Mother is the best bet and don't let Satan draw you too fast.
    2. Re:News To Me by Doc+Ruby · · Score: 1
      If anything, you've got your quibble backwards.

      Definitions of reporter on the Web:

      Definitions of journalist on the Web:

      Technically, none of those jobs allows for "merely reporting", except maybe a photographer. But all of them, even the PR flack, is "researching and telling a story". Only the "stenographer" is exempt from using their judgement of what to say when they've heard something.
      --

      --
      make install -not war

    3. Re:News To Me by Doc+Ruby · · Score: 1

      Slyck is a "little tech backwater", even in comparison to Slashdot, which is "a giant tech backwater". Compared to the NY Times, CNN, the CBS Evening News, BBC, etc. Which is one reason it is so respectable, and capable of such judicious journalism :).

      --

      --
      make install -not war

  30. Re:I've got a better idea by Anonymous Coward · · Score: 1, Informative

    Peerguardian has nothing to do with spam, primarily its designed to keep the RIAA and MPAA (and thier slimy bloodhounds) from connecting to your PC whilst you are using P2P file sharing software. Of course, you can add known spammers to your list of Ip's to block, but this really isnt an RBL system for e-mail.

    As for the flaw of RBL's, I do agree that they are not perfect. A much better blacklisting scheme is to generate your own local temporary blacklists based on mail (and mailservers) which appear to be spamming. http://www.acme.com/mail_filtering/introduction_fr ameset.html has a good article on such things. By and large though, you are right, RBL's fall down because they are not Realtime enough. They don't adapt to false negative or positive conditions fast enough to be relied on as a anti-spam measure.

  31. Re:I've got a better idea by evilviper · · Score: 3, Informative

    PeerGuardian is not for e-mail, it's for P2P networks.

    Also, I don't know how you can believe that blacklists are useless. I'm down to only about a spam a day, despite my current primary e-mail address being listed all over the internet for years now. Obviously, your choice of blacklists is important, and using other metrics as well helps.

    Besides that, the forces at work in P2P spam are completely different than that of e-mail spam. I can vouch for the PeerGuardian blacklist being extremely effective at blocking probably 99% of P2P spam, and making that last 1% look far less legitimate, and far less likely to be selected.

    --
    Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
  32. Sue by Nom+du+Keyboard · · Score: 4, Insightful

    Anyone who contributed money to PG support should be suing the person who forced the rest of the team out for fraud and theft. I would expect them to have standing in court to pursue such a claim, and could make life very difficult for this apparent criminal.

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
  33. MPAA/RIAA by kd5ujz · · Score: 2, Interesting

    Could the admin have been influenced (via loads of cash) to cause this confusion. Remove or modigy all MPAA/RIAA ip addresses, and make sure they do not go anywhere else for updates? If I was one of the above orginizations, that is what I would do.

    --
    -William
    God is everything science has yet to explain.
  34. Re:I've got a better idea by moxley · · Score: 1

    And this is certainly one thing to consider when you think about why someone would do this - The government and big business and slimy groups like the RIAA and MPAA (who think it's okay to have your computer to ensure that you're aren't doing anything they consider wrong, and don't think shey should be liable if they happen to damage it) have a lot of money and many forms of coercion, bribery and inteimidation to accomplish their goals. THey'd like nothing better than to take over something they know people depend upon to keep p2p free of shams. Just reading that Erwin guy's response, to me it seems fairly obvious that he is using fear based tactics to try to scare people from even really looking into the situation....

  35. Amphetamines by empaler · · Score: 1

    That would be my old chem teacher. He wrote a paper on how to make cleaner metamphetamines with fewer side effects.

  36. Re:I've got a better idea by Jugalator · · Score: 1

    Hmm, are you saying you're using PeerGuardian's blacklists against spam? Or just giving another example of blacklist usage?

    If PeerGuardian doesn't block spam, just connections to you via IP ranges, I'm interested in an open source e-mail client independent solution (i.e. like a proxy?) for spam blocking via common blacklists. Anyone know such a product? :-)

    --
    Beware: In C++, your friends can see your privates!
  37. context plz by taybin · · Score: 2, Insightful

    Could someone tell me who the hell methlabs.org and PeerGuardian are? I've never heard of them before.

  38. Now that they're divided by Nom+du+Keyboard · · Score: 1

    Now that they're divided, I wouldn't be surprised at all to see the ??AA swoop in and compromise at least one of the two (or more) sides. Sounds like this is over money, which the ??AA has in abundance. How long before the blocklist has just a tiny little hole in it waiting to be exploited?

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
  39. Re:One of those things about the open source crowd by Infinityis · · Score: 2, Informative

    Not to be too particular, but since I'm currently going throught the LLC application process, it might be useful to point out that it's not "articles of incorporation" but "articles of organization". "Articles of incorporation" is reserved for a corporation.

    The difference between a corporation (Inc.) and limited liability company (LLC) is subtle but important. A corporation is a perpetual entity, so if a founding member dies, no problem. But if a founding member of an LLC dies, that pretty much ends the LLC. Taxes are a lot easier to handle, along with determining profit. Also, you don't have to have annual meetings where the minutes recorded, etc. However, with either one you get the benefit that your personal assets are not at risk. If the company fails miserably and owes a million dollars in debt, you still get to keep your personal car, your house, your money, etc. Thus the term "limited liability".

  40. Download location hasn't changed! by chasingsol · · Score: 1

    peerguardian.sourceforge.net has always been the location to download the PeerGuardian software, that hasn't changed. It's the only place that the 'hijacker' couldn't take over.

  41. Re:One of those things about the open source crowd by Jeff+DeMaagd · · Score: 1

    It may depend on locale, but in my state, it costs more than a "couple hundred dollars" to start an LLC. It was closer to $600 once everything was done.

  42. Odd, and probably bad by c4ffeine · · Score: 1

    Right before i noticed this story, I updated PG2. It had a new blocklist and program update. Anyone else notice this?

    --
    "73% of quotes on the Internet are made up" -Ben Franklin
    1. Re:Odd, and probably bad by Spirit+Of+Atlantis · · Score: 1

      Yes i noticed this too and the downloading of peerguardian itself acted a little strange, it kept on downloading, for hours.
      I switched off "check peerguardian" and "check lists" and "automatic update".
      I added the recomended bluetack lists in the listmanager except the DONK one and the one for non-network computers.

  43. Methlabs front page ... by da5idnetlimit.com · · Score: 1

    Here is the front page of methlabs...not so much data, just a few hints all is not kosher...
    I really like the first sentence, saying some member revolted against the whole P2P community...

    Either the poster is really trying to cover his back, or he is rally in the middle of something...

    "Methlabs Update
    September 16th, 2005 by Administrator

    Dear Methlabs and P2P Community,

    Recently, we had several former staff members revolt against the entire P2P community as a whole. They tried to sabatoge Methlabs and attempted to wipe the Methlabs server of all its data.

    Unfortunately, they gained access to site backups. In doing so, your passwords may have been compromised, although they are MD5 encrypted. We would like to you login to the Methlabs forums (http://methlabs.org/forums/) and change your password. We sincerely apologize for this issue.

    As of right now, the Methlabs site is back online, although forum posts from the past month have been lost.

    Since all the data was stolen by former staff members, YOU MAY RECIEVE FAKE EMAILS that look like they are from Methlabs. If they do not come from the Methlabs.org domain and from our email servers, DO NOT BELIEVE THEM.

    We assure you that Methlabs development will continue, and ALL OFFICIAL PROGRAMS MUST be downloaded directly from Methlabs.org . Assume that all other sites contain spyware or malicious code which may not be directly trusted.

    To update everyone on the current situation, there has been some news going around the Internet of a revolt which happened in Methlabs. This is hearsay. The current real news is that PeerGuardian development and Blocklist development is on schedule, and Blocklist should be out of Beta within the next week or so.

    Please spread the word that Methlabs.org is ALIVE and DO NOT believe or TRUST any emails that do not come directly from Methlabs.org and our mail servers. These emails are from disgruntled staff members trying to hurt the P2P community as a whole.

    We apoligize for the current situation. Please visit http://methlabs.org/ for OFFICIAL updates, and help us spread the word!

    - The Methlabs Team
    "

    --
    It takes 40+ muscles to frown, but only four to extend your arm and bitchslap the motherfucker
    1. Re:Methlabs front page ... by Nogami_Saeko · · Score: 2, Insightful

      Shorted translation:

      "Please don't look for the software or support anywhere else, because even though they might be legit, I won't be able to control those other sites."

      N.

      --
      "Nothing strengthens authority so much as silence." - Charles de Gaulle
    2. Re:Methlabs front page ... by Aeiri · · Score: 1

      I don't really understand this post... two quotes from it:

      "Recently, we had several former staff members revolt against the entire P2P community as a whole. They tried to sabatoge Methlabs and attempted to wipe the Methlabs server of all its data."

      "To update everyone on the current situation, there has been some news going around the Internet of a revolt which happened in Methlabs. This is hearsay. The current real news is that PeerGuardian development and Blocklist development is on schedule, and Blocklist should be out of Beta within the next week or so."

      "hearsay", as in, "I heard you say it"?

      It sounds like they are trying to wave this situation off like nothing happened, they are just trying to change the topic to "We're coming out with new versions!".

  44. Re:One of those things about the open source crowd by John+Hasler · · Score: 1

    For this sort of thing you want a not-for-profit/non-profit corporation (This is not necessarily a charity). It's a corporation with a charter which forbids it to distribute any money to those who founded and/or control it. It is normally run by a self-perpetuating board of directors. This is how commercial trade associations are usually organized.

    --
    Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
  45. Re:Doc... by Doc+Ruby · · Score: 1

    I think "bloggers" are "journalists", in that they keep personal "journals" - if not "daily", then at least along those lines - of a story. Maybe just their own story. Related, but not in a sub/superset, are "reporters", whose recording of their versions of a story is not defined by frequency.

    Then there are "sources", which can be primary (in the events), secondary (interacted with primary), or tertiary+ (records or consumers/repeaters of records of the story). Sources can be humans, or even machines - the machines provide versions of a story partly defined by their designers, implementors, installers, operators, and selectors downstream.

    All of those roles feed into "publishers". We have become used to defining our sources, reporters, journalists by their relationship to the publisher, rather than their relationship to the story, or even to us. For example, some journalists are "columnists", which connotes more than their formatting into a consistently placed column in the publication. So many of these terms and roles are artifacts of newspapers, further debased by bad translation into TV news. Maybe they should all be different kinds of "correspondent", to be completely accurate to their actual function.

    OTOH, honesty would probably require a lot more business cards printed with the titles "spokesmodel" and "bloviator". But perhaps we could finally get a chance to refactor the redundant "commentator" to "commentor", which has less hype about their mundane role commenting, until we actually get someone who "commentates" for a living, publishing their "commentation" for consumption in our "commentary" facilities.

    --

    --
    make install -not war

  46. Re:I've got a better idea by Have+Blue · · Score: 1

    One wonders how they determine, just from the IP, which clients belong to those organizations and which don't. Because they're just going to get connected through a major ISP (and get assigned an IP from their pool and not a pool that could be traced back to RIAA.com) and become completely indistinguishable from normal clients.

  47. Try "Forget ... and change your password"= win-win by TheScienceKid · · Score: 1

    Also, one might consider using the "Forgotten Password" function on the site in order to set a new password without revealing the old password, thereby allowing you to access the site without giving away your old password and enabling you to remove the MD5 hash of your old password from the server (although it's likely to be backed up).

  48. Re:One of those things about the open source crowd by WhiteWolf666 · · Score: 1

    Yes, but those are more expensive :)

    --
    WhiteWolf666 an exBush supporter. All you new-school,compassionate,save the children Republicans can rot in hell
  49. Re:One of those things about the open source crowd by WhiteWolf666 · · Score: 1

    Sorry, I'm not very particular in my terminology. I believe, however, you might be able to call it articles of incorporation, since an LLC is sometimes refered to as a Limited Liability Company, and others as Limited Liability Corporation.

    For example, this state revenue document, in Illinois, refers to Limited Liability Corporation on page 13: http://www.revenue.state.il.us/LegalInformation/up ia2005.pdf

    IIRC, depending on the state, you can define what happens to the LLC when a member dies in the articles of organization.

    In the past year I've formed 5 LLCs, IIRC. They are significantly easier to run than an S corporation.

    --
    WhiteWolf666 an exBush supporter. All you new-school,compassionate,save the children Republicans can rot in hell
  50. Re:One of those things about the open source crowd by WhiteWolf666 · · Score: 2, Informative

    At legalzoom.com, you can incorporate a Nevada LLC (with registered agent) for ~205, IIRC

    I've done this many times.

    You'll have to find/pay a registered agent unless you can find an address/phone number in state. This is usually under a hundred dollars per year.

    --
    WhiteWolf666 an exBush supporter. All you new-school,compassionate,save the children Republicans can rot in hell
  51. Re:I've got a better idea by downbad · · Score: 1

    The truth is out there.

  52. Not so secure by Spazmania · · Score: 1

    I guess this means that Peer Guardian is not so secure after all, if you can't trust the folks who make and host it. But then, I would have thought that hosting it on a site called "methlabs" in the first place would have clued people in.

    --
    Moderating "-1, Disagree" is simple censorship. Have the guts to post your opinion.
  53. From the Founder of Methlabs.org ... by method_pg · · Score: 1

    The administrators/authors at slyck.com, zeropaid.com, p2pnet.net, unitethecows.com, p2pconsortium.com, digg.com, etc. are all saying the same thing as we are.

    The founder, co-founder, developers and the majority of staff are saying:

    Methlabs.org WAS hijacked.

    PeerGuardian 2 in itself is fine, just read the FAQ about turning off auto-updates from blocklist.org - you've nothing to worry about.

    We just can't vouch for the lists from blocklist.org any more. People who had abused it recently are now fully in control of it, as such it's our duty to report that fact. - If you wish to use those lists despite our warnings that's your decision.

    If it helps to confirm who I am... and if it's possible. Please feel free to get a slashdot admin to check the email I signed up here with as it correlates with who I claim to be and will hopefully help validate my post.

    Sorry for all the confusion this crap is obviously causing, it's the last thing we wanted to drag our users through.

    ...and yes... we are looking into legal action.

    Bottom line: peerguardian.sf.net is okay, that's where we're using as a temporary home for now, if you'd like more confirmation on any of the details regarding this... feel free to drop by the site or our IRC channel on freenode. Again, sorry for all the drama. It's not what we wanted to happen at all. :(

    1. Re:From the Founder of Methlabs.org ... by mbnva · · Score: 1

      This may sound trivial - but upgrade your version to 3.0 immediately - flood the net with it and allow it to point to your sites. Continue all other actions - but unknowing people who want the latest software will go to your site to get PeerGuardian 3.0. Put it on download.com and point to your site... etc... If you want control - take over the media. mbnva

  54. Re:I've got a better idea by Seumas · · Score: 1

    No, you're certainly not going to nail down every IP reliably that is used by these organizations - but you can get the obvious and not-so-obvious ones none-the-less. After all, why do I want doubleclick or BayTSP any access to my machine via P2P (or even to be able to ping my machine, for that matter). There is absolutely no reason I would ever want anything to do in the slightest with either of those groups. That's just an example.

    Considering how many hits I see from the listed IPs, it's clearly not for nothing, even if not perfect.

  55. Reporting vs. Editorializing by gottabeme · · Score: 1

    Ok, maybe I'm wrong, but I always thought that journalism was supposed to be reporting the facts, including opinions and statements from parties on both sides of the story, and presenting it in an objective manner that allows the reader to draw their own conclusions. I thought that the editorial page was where the journalist was supposed to explain which side of the story they think is more accurate and explain their judgements on the issue.

    Far too many "news" media don't even try to distinguish between reporting and editorializing anymore.

    --
    "Those who consume the bulk of goods are those who make them. We must never forget this secret of our prosperity."
    1. Re:Reporting vs. Editorializing by Doc+Ruby · · Score: 1

      Reporting is making a case for the "real story" derived from evidence and witnesses, established as facts. Examining the artifacts of the original events, judging what really happened, then telling the story as accurately as possible. Then there's editorializing, which is news analysis. Opinions, not facts: projections of the implications of the original events (according to reporters' stories) either into the future, or elsewhere in the present, or as new context for interpreting other stories from the past.

      All journalism includes subjective choices. Even "the camera never lies" is pointed in a direction by a cameraperson and their director. The difference between good reporters and bad is their ability to understand the story from the evidence and testimony they get, and ignore the BS. Cameras on a tripod are useless for that. And no one really wants to eat breakfast over a list of data, when they can instead get told a story by a person to whom they relate, who they can trust to tell it accurately.

      Our appetite for "news opinion" is much smaller, which is why we usually have so much more available on Sundays, when we have nothing better to do. But those opinions are so much less accountable than reporting, which can be tested against new facts, that corporate news is biased towards it. Easier to spin the facts in opinions than in reports. So we get more spin, because most facts don't actually favor corporations as much as does spin. That's why the more corporate the news, the more opinion is dressed up as fact. How much more corporate can it get than Murdoch's "News Corporation"? And how much more could fabricated corporate opinion masquerade as facts than on Fox News?

      --

      --
      make install -not war

  56. Re:One of those things about the open source crowd by Frank+T.+Lofaro+Jr. · · Score: 1

    Keep in mind, Nevada is the "new Delaware" when it comes to corporations.

    Very business friendly laws and NO STATE CORPORATE TAX. (only 4 states can say that).

    --
    Just because it CAN be done, doesn't mean it should!
  57. Re:I've got a better idea by po8 · · Score: 1

    OK, as you and others have pointed out, I was totally ignorant about PeerGuardian. mea culpa; I should have RTFA more carefully.

    As far as email blacklists go, though, I can show you to set them up so that even your one spam a day is gone. :-) Seriously, performance metrics for spam filtering of any kind are hard to get right. I've never seen a blacklist where the false-positive rate was acceptably low and the filtering on hard spam was usefully high, but I'd love to find out I was wrong about that too. What are you using?

  58. Re:Nice biased summary by macdaddy · · Score: 1

    Because there is a hijack going on here. Why do you instantly assume that the author of the story has only heard one side?

  59. Re:Nice biased summary by Reality+Master+101 · · Score: 1

    Because the author of the summary was Scuttlemonkey, who I highly doubt is that clued in to the thing. And even if he was, he doesn't give us enough evidence in the summary, nor does the story give us enough evidence (i.e., a back history of who the players actually are) to make an informed judgment about whether a hijack was really going on. All the reader knows is that there are two competing stories, yet we are only told that one is true and one is not without any evidence.

    --
    Sometimes it's best to just let stupid people be stupid.
  60. Re:Nice biased summary by macdaddy · · Score: 1

    It's an article summary, not a novel. There isn't enough space to detail all sides of the story, analyze them, and give a final (hopefully unbiased) synopsis. That's what the links are for.

  61. Complete Lie! by TheScienceKid · · Score: 1

    http://methlabs.org/forums/login.php?do=lostpw you can recover your password there

  62. The Truth from a different point of view by jistanidiot · · Score: 1
    If you didn't RTFA or even if you did, you might not have read the comments on slyck.com.

    I found this comment very interesting. It is the only evidence I've seen of the other side of the story being posted on slyck.com.

    eremini
    Joined: 13 Mar 2005
    PostPosted: Sat Sep 17, 2005 3:29 am
    Post subject:
    Post Body: eremini here. I am gonna post exactly what happened, since there's no need to hide it now. As some of you know cerberius has always been the one that did technicall things on methlabs, set up the servers, updated server software, etc... So it only naturaly the servers were registered to him. Now about a week ago, Furi and Phrosty decided to kick cerb out, right now they are going around forums truying to say that they wanna be professional, but how do profesionals fire peope? They talk to them, explain the reasons, etc. Did they do that? No. Did they try to do that? No. Just one day all of a sudden, they changed the methlabs.org server root password, wiped all the data off it and hijacked a google adsence account, which was registered to cerb's social security number. Now about the domain. Yes, cerb did transfer the domain to him, a couple of months before that (Miles might call this keep all your balls in one sack), but he did not hijack anything, he transfered it with complience to all ICANN rules, which state that the preveious owner gets send an email, to which he gets to reply 60 days (!) if you want to reject the transfer, that didn't happen. So its transfered fair and square. Now about stealing money. What money? The google adsence money (which cerb got back with google being ready to press charges against hijackers for fraud) is still there, no money transfered. Same with paypal, the money, like always, will be used to pay hosting costs and other fees concerning methlabs. There thats the end of the store. Now you decide who to trust, but please don't trust them, just because they put their real names in some attemp to "be profesional"
    It sounds like to me that these idiots tried to covertly take over the server, only to find out that the admin caught them and fixed the problem. I hope google goes after them for stealing the adsence account.
  63. Re:I've got a better idea by evilviper · · Score: 1
    I've never seen a blacklist where the false-positive rate was acceptably low and the filtering on hard spam was usefully high, but I'd love to find out I was wrong about that too. What are you using?

    bl.spamcop.net
    cn.rbl.cluecentral.net
    korea.services.net
    sbl.spamhaus.org
    l1.spews.dnsbl.sorbs.net

    Those lists cover the majority of the spam I recieve.
    --
    Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant