Slashdot Mirror


MediaDefender's BitTorrent-Based DOS Takes Down Revision3

Sandman1971 writes "Over the long Memorial Day weekend, Revision3 was the target of a malicious Denial Of Service Attack which brought R3 to its knees. After investigating the matter, it was discovered that the source of the attacks came from MediaDefender, the famed company hired by the MPAA and RIAA to try and stop the spread of illegal file sharing. The kicker? Revision3 was taken down for running a bittorent tracker to distribute its own legal content."

38 of 426 comments (clear)

  1. TO paraphrase world of warcraft by scubamage · · Score: 4, Insightful

    OMGLAWYERSUESUESUE! Seriously, I hope they get even more crucified because of this. Performing a DOS is a clear violation of law in all states, and since it crosses the borders, its a clear felony.

    1. Re:TO paraphrase world of warcraft by Anonymous Coward · · Score: 4, Insightful

      Seems to me MediaDefender also violated their ISP's Terms Of Service. Why then are they still on the net? when a normal user is accused of violating the TOS they are taken off-line. Why/how should MD be any different? Also, law enforcement should be raiding MD offices where the attacks came from to collect evidence (ie PCs and servers).

      I am looking forward to hearing that MD is off-line and without a significant portion of their computing infrustructure.

  2. Re:Criminal investigation? by SpooForBrains · · Score: 5, Insightful

    Exactly. If a normal member of the public did something like this, they'd be facing jail time.

    --
    "The dew has clearly fallen with a particularly sickening thud this morning"
  3. Really? Lucky We Have Laws by jesdynf · · Score: 4, Insightful

    I look forward to the indictment, conviction, and imprisonment of the executives of their operation.

    Failure to achieve these things will not reflect well on the fitness of the rulers to rule.

    --
    Yahoo! Pipes are awesome. How awesome? http://pipes.yahoo.com/jesdynf/slashdot
    1. Re:Really? Lucky We Have Laws by Pedrito · · Score: 5, Insightful

      I look forward to the indictment, conviction, and imprisonment of the executives of their operation.

      Failure to achieve these things will not reflect well on the fitness of the rulers to rule.


      ROFL... You must be new here. Allow me to welcome you to planet Earth. Expect no useful action against Media Defender. And again, welcome to our humble planet...

    2. Re:Really? Lucky We Have Laws by Wandering+Wombat · · Score: 4, Insightful

      Or the people who elected them.

      --
      I like to place meaningful quotes in my sig, so people will know that I know what meaningful quotes are.
  4. Re:Criminal investigation? by HalAtWork · · Score: 5, Insightful

    Corporations aren't normal members of the public. Except they're treated as such in court. So that the people who run them don't get treated like normal members of the public.

  5. Shouldn't have publicized it on their blog by elrous0 · · Score: 4, Insightful

    Revision 3 should have just sued, and sued BIG. By discussing it so glibly, and in such detail, on their blog they're jeopardizing their case. A huge financial hit would hurt the RIAA's cronies a LOT more than a little negative publicity from a blogger.

    --
    SJW: Someone who has run out of real oppression, and has to fake it.
    1. Re:Shouldn't have publicized it on their blog by RichMan · · Score: 5, Insightful

      >>Revision 3 should have just sued, and sued BIG. By discussing it so glibly, and in such detail, on their blog they're jeopardizing their case. A huge financial hit would hurt the RIAA's cronies a LOT more than a little negative publicity from a blogger

      Except then RIAA could have just paid up and fixed their scripts and moved on.

      The FBI investigation is going to turn up more dirt and likely will lead to lots of discovery. Imagine the connections between organizations proper discovery could come up with. Also imagine the work needed to comply. "Ok, RIAA turn over all correspondence you have had concerning enforcement for the last 3 years".

      This does not mean Revision 3 can't sue for damages. But letting the FBI get the ball rolling is the first step. And if the FBI do lay charges then the money part gets a lot easier.

    2. Re:Shouldn't have publicized it on their blog by mabhatter654 · · Score: 3, Insightful

      this is how MD finds out who's downloading torrents.. they hack the servers of private groups and then log the IPs of people who stumble on their illegally placed "infringing" files. This has been the MO for a while and slashdot reports it occasionally. Places like Pirate Bay deal with this all the time but can't report it because they are infringing on copyright so they'd get in more trouble. R3 has no such issue.. they are trying to run an honest shop because their jobs and homes are on the line here. They'll have no problem turning over IP logs to the FBI because their downloads are legal. Nobody LEGAL has gone against these guys like this before. Pass the popcorn!

  6. Re:Criminal investigation? by zantolak · · Score: 5, Insightful

    How do we know that the Revision3 content was legal? Because they (Revision3) say it was? I don't buy it. MediaDefender isn't stupid; they found illegal content and shut it down. The reason there will not be any investigation is because Revision3 cannot allow an investigation to occur, lest they be found guilty of hosting illegal torrents.
    Here in the US we have one little legal principle known as "innocent until proven guilty". Perhaps you've heard of it, perhaps not. Essentially, it's what keeps the justice system from being a Jump to Conclusions mat.
  7. Re:Criminal investigation? by s4m7 · · Score: 5, Insightful

    This appears to fall under the definition of cyberterrorism under the same section, as proscribed by the USA PATRIOT ACT as well.

    --
    This comment is fully compliant with RFC 527.
  8. Re:Criminal investigation? by scubamage · · Score: 5, Insightful

    Exactly. I highly doubt R3 would have contacted the FBI if they were hosting illegal content. They use bittorrent as a method of distrobution for legal content.

  9. Re:smells like... by argent · · Score: 5, Insightful

    they'd risk further massive DDoS attacks in retaliation if they did file a lawsuit.

    That would be the best thing that could happen. Judges have absolutely no sense of humor about people who pull shit like that.

  10. Re:Criminal investigation? by scubamage · · Score: 5, Insightful

    Yup, just like every single contractor on the second death star - every mediadefender employee knows what they're doing. F*ck 'em.

  11. Re:smells like... by RingDev · · Score: 5, Insightful

    Sure, R3 may disolve before it can file a civil suit, but I imagine the US goverment will hold together long enough to bring criminal charges against MediaDefender.

    DOS attacks are a felony. People go to jail for committing felonies.

    R3 can sue, in addition to the criminal charges brought forward by the state, in order to recoup any damages sustained by the attack, but even if they don't, MD still has to face the federal government for breaking the law.

    -Rick

    --
    "Most people in the U.S. wouldn't know they live in a tyrannical state if it walked up and grabbed their junk." - MyFirs
  12. Re:Criminal investigation? by Tubal-Cain · · Score: 5, Insightful

    Here in the US we have one little legal principle known as "innocent until proven guilty". You must be new here
  13. Re:Criminal investigation? by Fastolfe · · Score: 5, Insightful

    1. Copyright infringement isn't normally a crime. You're using the word "illegal" and "guilty" carelessly here.
    2. Committing a crime to retaliate in response to another crime is still wrong, and committing a crime in retaliation for a mere civil infraction doubly so.

  14. Media Defender is going to get shitcanned. by Anonymous Coward · · Score: 5, Insightful

    Hard.

    "Move it's own media files" means they were probably using it for jamming operations against other trackers. Meaning they hacked the server, went to other bittorent sites, said "hey, we've got tasty files here, but only 91% of complete garbage", used revision3 as their server so everyone thought it was kosher instead of, say, Media defenders IP range, and when revision3 kicked them off their servers decided to reconnect and DDOS'd them. Because the input bandwidth was intense for the fubar'd uploads and they had just been cut off of their primary source, they used all available bandwidth to reconnect and DDOS'd.

    What's going to happen here is a combination between defamation of character suites and hacking lawsuits. Those are the kinds of suites that put people out of business and in jail.

    The RIAA and MPAA just shot themselves in the head on this one and their shell company is going to go tits up due to it. That's going to have a concussive effect on the other shell companies which will have a bad effect on their anti-piracy campaign.

  15. Re:Criminal investigation? by jesdynf · · Score: 5, Insightful

    You argued the lesser point with the troll and missed the greater one.

    Why does the legality of Revision3's hosted content matter?

    Is MediaDefender an agent of the federal government, granted extra-legal powers by Congress to commit these otherwise-illegal acts? Are they chartered by a state government? Has their operation been nationalized by the military, or perhaps they possess a letter of marque and reprisal?

    No?

    --
    Yahoo! Pipes are awesome. How awesome? http://pipes.yahoo.com/jesdynf/slashdot
  16. Re:Late Breaking News.... by value_added · · Score: 3, Insightful

    THEINTERNETS (Reuters)- ...

    Brilliant! Dunno if this is original, but it certainly qualifies for meme status.

  17. What's sauce for the goose... by techno-vampire · · Score: 3, Insightful

    MediaDefender seems to think it's just fine and dandy to DOS other sites because they don't approve of what that site's doing. Why don't we all go over there and take a real good look at what they have to say for themselves. Let's see how they like being Slashdotted.

    --
    Good, inexpensive web hosting
  18. If they take down *my legal tracker, I'll sue by MichaelCrawford · · Score: 4, Insightful
    And yes I know it's expensive, but I could find an attorney to take it on spec.

    I operate a tracker to distribute my music. It's more efficient than direct HTTP downloads, so it saves on my hosting bill.

    The point really needs to be rammed home to law enforcement and elected officials that there are many perfectly legitimate, and in fact socially beneficial uses for peer-to-peer file sharing.

    --
    Request your free CD of my piano music.
  19. Competition ... illegal or otherwise by phoomp · · Score: 5, Insightful

    Sounds like MediaDefender wants to take down *any* competition to their clients, illegal or otherwise.

  20. First WTF by SanityInAnarchy · · Score: 4, Insightful

    MediaDefender claims that they have taken steps to ensure this won't happen again. "We've added a policy that will investigate open public trackers to see if they are associated with other companies", promised Grodsky, "and first will make a communication that says, hey are you aware of this." Since when is being a "company" required to legally run a BitTorrent tracker?

    Try this instead: Determine if the tracker belongs to you. No? Then you don't have the right to abuse it in this way.

    --
    Don't thank God, thank a doctor!
    1. Re:First WTF by cheater512 · · Score: 3, Insightful

      Maybe we should just make some honeypot trackers and see what they do about it.

  21. Re:Criminal investigation? by AK+Marc · · Score: 4, Insightful

    MediaDefender isn't stupid; they found illegal content and shut it down.

    Shutting down illegal content with an illegal attack is still illegal. Also, the only evidence of illegal content is the content MediaDefender was trying to put there. They are apparently going to all open BT servers they can find, serving up illegal content generated by them, then shutting them down. That's not looking for problems to address, that's planting evidence and then attacking them claiming vigilante justice. The only ones slinking away will be MediaOffender

  22. Re:Criminal investigation? by s4m7 · · Score: 4, Insightful

    Cops who arrest pot smokers should be aware of this. On the other hand, do you really want the police to be selectively enforcing the laws they feel are "moral?"
    --
    This comment is fully compliant with RFC 527.
  23. Re:Criminal investigation? by Hatta · · Score: 5, Insightful

    I think the world would be a better place if every individual acted according to their conscience. Why else have a conscience?

    --
    Give me Classic Slashdot or give me death!
  24. Re:Criminal investigation? by Anonymous Coward · · Score: 5, Insightful

    So, let me get this straight...

    MediaDefender uses back doors in web server software to plant fake torrents. Then if those fake torrents are removed, and the back door closed, they DDoS the server?

    Wow. Entrapment, AND attacking the network.

  25. Re:Criminal investigation? by Fieryphoenix · · Score: 5, Insightful

    Doesn't matter. Even if there were other, illegal torrents there, it's against the law to take down servers with DoS attacks.

  26. Re:Here's the blog post by jocknerd · · Score: 3, Insightful

    MediaDefender is just the messenger. The FBI needs to go after the source of their money. The MPAA and RIAA companies.

  27. Re:Criminal investigation? by mweather · · Score: 3, Insightful

    Here in the US we have one little legal principle known as "innocent until proven guilty". Not in civil court, where copyright cases are heard.
  28. Re:Criminal investigation? by afaik_ianal · · Score: 4, Insightful

    You have to be kidding. I've seen enough crooked cops to know that can not be a good thing.

    If your morals say that smoking pot is fine, then you should lobby to have the law changed, because I can assure you there's a cop out there somewhere whose morals say it's fine to turn a blind eye while his buddy has his way with you, before planting a few grams of heroin in your car because you didn't pay him for the privilege.

    Will you accept a collect call from reality, Hatta?

  29. Publicity a better business strategy? by davros-too · · Score: 5, Insightful

    Even with free lawyers from the EFF, the costs and risks of civil litigation could be substantial for what looks like a fairly small company. The alternative of focusing on maximising the free publicity and then keeping 100% of your effort on providing a great service might be a better business strategy. I'm just guessing, but if I was in Revision3's shoes I'd think long and hard before starting law suits that could easily tie up scarce resources. The upside could be big I suppose but it would be a gamble and also any payoff would surely be a long way in the future.

    --
    In theory, there's no difference between theory and practice; in practice there is.
  30. Re:Criminal investigation? by mabhatter654 · · Score: 4, Insightful

    Wait until tomorrow afternoon and lock all the employees and directors in their offices under "house arrest" until this is settled. if this was really a corporate sponsored attack they need to find a way to arrest the ENTIRE company just to make a point that this won't be tolerated. In some ways it's economic vigilante terrorism.

  31. Re:Criminal investigation? by dissy · · Score: 4, Insightful

    Not to defend the vigilante actions of "the industry" here; but who's to say that the fake torrents injected into the tracker by them were the ONLY ones on it? Surely if they could find trackers with backdoors, so could others. For all we know R3's tracker had become a clearinghouse for all sorts of "community mirroring" projects.

    For R3's sake; with a highly accusational public post and the feds involved, I sure hope that MediaDefender's fake torrents were the only 'unauthorized' ones ever hosted by R3's tracker. Why? It doesn't really matter at all.

    If I knew you bought illegal drugs, despite being a crime, that doesn't mean I should hope you were really buying illegal drugs when i murder you by shooting you in the head. No matter if you were buying illegal or legal drugs, I would still be in even more trouble for murdering you.

    MediaDefender committed a felony here, while arguing the only reason they are allowed to commit this felony was because they thought R3 was breaking a civil copyright contract.
    No matter if they were breaking copyright or not, that has nothing to do with, nor justifies, nor makes it ok/allowed/legal to launch a denial of service attack.

  32. Re:Criminal investigation? by Hatta · · Score: 3, Insightful

    I can assure you there's a cop out there somewhere whose morals say it's fine to turn a blind eye while his buddy has his way with you, before planting a few grams of heroin in your car because you didn't pay him for the privilege.

    Such a person isn't going to care what the law says, they will victimize people regardless. Think harder about it. You are making a fundamental mistake when you place the law above a persons conscience, where do you think the law comes from? It is (ideally) an expression of our collective conscience. If our consciences are so unreliable, then the law is even more so.

    --
    Give me Classic Slashdot or give me death!