Slashdot Mirror


Who Is Downloading the Torrented Facebook Files?

eldavojohn writes "Gizmodo's got an interesting scoop on a list of IPs acquired from Peer Block revealing who is downloading the Facebook user data torrented this week: Apple, the Church of Scientology, Disney, Intel, IBM and several major government contractors just to name a few. The article notes that this doesn't mean it's sanctioned by these companies or even known to be happening, but the IP addresses of requests coming to one of the users' machines match to lists of IP blocks for each company."

142 comments

  1. needs control group by FuckingNickName · · Score: 3, Insightful

    On an average popular torrent, are these companies also listed?

    1. Re:needs control group by Anonymous Coward · · Score: 4, Interesting

      I bet they are.

      At the company I worked for the IT department had a machine which was always on and whose only purpose was to download files like that over BitTorrent. Of course only a few people inside IT knew about this machine.

      The company had about 10'000 employees. I guess a company like Intel (which has around 80'000 employees) downloading some random file over BitTorrent is absolutely nothing special.

    2. Re:needs control group by commodore64_love · · Score: 2, Interesting

      I'm surprised any employee gets away with that.

      On my job, about five years ago, I installed torrent to grab some Doctor Who audio files to relieve the boredom, and the next day I came-in to discover my computer missing. They thought I had some kind of virus, wiped the drive, and handed it back to me a day later.

       

      --
      "I disapprove of what you say, but I will defend to the death your right to say it." - historian Evelyn Beatrice Hall
    3. Re:needs control group by Anonymous Coward · · Score: 0

      What is there to "get away with"? What are they doing wrong?

    4. Re:needs control group by commodore64_love · · Score: 0, Redundant

      Anonymous Coward didn't read my message. Let me spell it out: Many companies ban torrenting or P2P.

      --
      "I disapprove of what you say, but I will defend to the death your right to say it." - historian Evelyn Beatrice Hall
    5. Re:needs control group by linzeal · · Score: 3, Informative

      Try it at Intel, you will be walked out of the door in 30 minutes. What kind of IT department would expose the company to liabilities like that ?

    6. Re:needs control group by Anonymous Coward · · Score: 0

      Not to mention stealing company time and resources.

    7. Re:needs control group by Anonymous Coward · · Score: 0

      On my job, about five years ago, I installed torrent to grab some Doctor Who audio files to relieve the boredom, and the next day I came-in to discover my computer missing. They thought I had some kind of virus, wiped the drive, and handed it back to me a day later.

      Well, as I said, this was happening inside the IT department. They were the only ones who had "direct" access to the internet. For most other users, only HTTP(S) was allowed and their traffic was routed through a proxy server.

      Traffic which didn't go over the proxy server wasn't even watched by anyone. And BTW, even if unusual (HTTP-) traffic was going through the proxy, I doubt anyone would have noticed. The companys CISO was actually the only one working for IT Security, and instead of caring about actual security, setting up an IDS or watching logs, he was busy doing risk management, "compliance" and reporting to corporate management...

      But you are right, at most companies a "normal" employee wouldn't get away with that (though I think most companies block BitTorrent anyway).

    8. Re:needs control group by PinkyGigglebrain · · Score: 4, Interesting

      Which highlights the point that whoever is downloading the torrent at Intel must be doing so with authorization.

      As to your question of "what kind of IT department ..." I can answer that one. Last place I worked as IT manager, but not by my choice, I wanted to lock the firewall down and block everything but web, email and a VPN port. I was overridden by the Boss, seems one of the guy in the machine shop (who also did the IT support before me, Goddess! what a mess!) had been downloading torrents of MS Office, Solidworks, MasterCam, Win XP and just about every software app they had in the office. Every time I tried to bring up the issue and try to get auth to start getting licenses I was told it would be too expensive. This was during the same time that the boss/owner took $400,000 out of the company accounts to buy a new house, he was also laying people off because their wasn't enough work for them.

      When the employee count got down to 25 I was laid off too on the premise that they didn't think they needed a full time IT department, the guy from the machine shop was going to babysit the network again. Thing that pisses me off if as long as he doesn't fuck with it will run smoothly until a hardware failure. I had set everything up to be just about idiot proof. Makes me think I did my job too well but its the only way I know how to do things.

    9. Re:needs control group by Penguinisto · · Score: 1

      Nope - and there's a reason for it: Shellshock.

      I've previously worked at Intel, and got to watch the headcount slaughters of 2007 and early 2008... (hint: that ~80k headcount used to be ~115k). Fortunately on my end, I got to watch it from afar... my friends got to see it up close and personal.

      After seeing their own peers get laid off and either sent to the Pool (if lucky) or straight to unemployment (if not)? The survivors were too busy trying to justify their continued employment (most still are, though I suspect that's eased up by now), and most of the folks I knew then and now have their shit wired extra tight when it comes to work.

      Also, think about this- you wouldn't want to lose a $75-$100+k/yr job over a $20 movie, would you? Most sane people (even us IT types) can do that sort of math in pretty short order. Besides, you can get better network speeds @ home anyway. :(

      --
      Quo usque tandem abutere, Nimbus, patientia nostra?
    10. Re:needs control group by ooshna · · Score: 1

      Should have turned his ass in for the money. I think Microsoft has a rewards for whistle blowers in businesses.

    11. Re:needs control group by LoRdTAW · · Score: 1

      Are you 100% positive about that? Maybe that is true for non-it staff but what about IT? As another poster mentioned above, a few IT guys could have a box or even a virtual machine buried somewhere for torrents or other stuff.

      Years ago at college I worked in the tech building IT department. They watched the computer labs like a hawk. But they were pretty lax about who worked in the office. I setup a computer in a back room and hooked it to the network and ran a Half-life death match server on it. They had no idea it was there as it was in a room full of old computers and other electronic junk. I had that server running for about two semesters before it died. I also downloaded quite a few songs via Napster and burned them to CD to take home (CD burners were a luxury then).

      Just because an IT department is strict does not mean the IT guys themselves are. Many feel they are above the law.

    12. Re:needs control group by i_liek_turtles · · Score: 1

      A call to the BSA would have been a fun way to say goodbye.

    13. Re:needs control group by c0mpliant · · Score: 3, Insightful

      Just because an IT department is strict does not mean the IT guys themselves are. Many feel they are above the law.

      You're right, which is why its usually a good idea to isolate your IT Security team from the IT department at large. Don't give them access to implement policy, just make it and monitor for abuses.

      --
      There is no -1 disagree
    14. Re:needs control group by Anonymous Coward · · Score: 0

      If the company has the ability to monitor and trips flags for certain protocols and certin IP addresses, there is huge chance that same software has the ability to block it as well instead of just report it. In my company and others like it (law firm), blocking the "bad" is the norm, not just logging it. I don't know of too many companies that have a position for "daily internet access log watcher" unless it is a really small place and the IT guy does it when he is bored.

    15. Re:needs control group by stephanruby · · Score: 2, Interesting

      At a major corporation I used to worked for, the PR director used to purchase all the WetFeet reports and FuckedCompanies.com alerts (in addition to the more traditional news clipping service related to our company). If anonymous people within your company are going to be publishing internal gossip/information about your company, and if your job is Public Relations, you might as well try to do your due diligence and try to be the first one to see what they're saying about you. I suspect that in the case of this Facebook information, I wouldn't be surprised if one of the corporate drones was ordered to download the data set in order to compare it to a list of existing employees (or at least, to a list of senior executives). It's the job of PR to not only protect the image of the company, but the image of its more well-known employees as well.

      As to Intel, I'm not surprised they're on that list. Intel has been known to go through the trash of its own employees as a counter-intelligence precaution. Early mornings, they'll pick up the trash of their own employees and switch their trash can with an identical one so as not to attract the suspicion of the targets they have under surveillance. Same goes with the Church of Scientology, nobody should really be surprised that they're on there either.

      Having an easy to download data set to compare to an existing data set is an attractive proposition for someone in management who doesn't know about the possibility of creating his own downloadable data set from the YahooSQL/YSQL tool or google labs free custom search engine tool.

    16. Re:needs control group by Anonymous Coward · · Score: 1, Insightful

      Bottom line, you were laid off and someone felt the poor slob machinst was capable of running the network. What people do not understand about employment. The boss is always right, even if you have documented proof of the problems that you sent him and he blew them off, he is STILL right. If you job is fix 10 widgets in an hour and you only do 5, you are failing. It doesnt matter that the guy next to you "fixes" 10 an hour but his sloppy work ends up with 5 of them coming back in 6 months. See, the company and your boss is measuring your performance off of how many per hour you do, not your extended recall rate. If you do 10 per hour, you succeed and look good. Now in 2 years of the boss gets direction to reduce the extended failure rate and they start measuring that, well, you fix them correctly and reduce your failure rate and now you will look good. Sorry man, that is how it works dude, really. Okay, that concept is "wrong" and does not seem ethical but you are the employee and the company defines the rules. Another example. Your bosses biggest concern is being at work on time. You are a dedicated employee that devotes 110% effort when you are at work but you sometimes are late. Your cube mate is a freaking idiot and spends more time avoiding work than doing work but... He always gets to work on time. In theory, you are the better employee but in reality, the boss hates you because you are always late. It happens, deal with it.

      Like i said, the simple fact you were let go has nothing do to with your technical ability, it was because your boss did not value your worth. The boss is always right.

    17. Re:needs control group by FlyMysticalDJ · · Score: 1

      There should be a -1 Spam moderation, because I like reading the offtopic comments, and even some comments are marked offtopic when they are at least slightly tangential to the current discussion. But I never want to read spam, and I don't think anyone wants to.

    18. Re:needs control group by PinkyGigglebrain · · Score: 1

      I thought about it but its not my style.

      However, I am not averse to answering any questions the BSA may ask as long as it doesn't compromise my NDA and security ethics, so nothing about the network config or engineering projects the company worked on while I there. The software isn't covered in that.

    19. Re:needs control group by PinkyGigglebrain · · Score: 3, Insightful

      The boss is not always right, but they are always the Boss.

      And I did what I was told, most of the time.

      I dug my heals in at times, refused to delete backups containing financial information rather than buy extra backup media, which would have been a felony under some of the laws that got passed after Enron, or refused to put the company at risk by trying to download apps on torrents, lest it attract the BSA's attention. I may be willing to follow orders but I was not going to risk jail time or the lively hood of my co-workers.

      I think the biggest thing that got me was I did my job too well. When I started the network needed daily babysitting, some printer wasn't working, or a VOIP phone was buggy. Always something, so I was running around dealing with brush fires all the time, they saw that and thought "Oh, hes doing something". After I had cleaned up the network configs, updated phone firmware, etc., I spent most of my time in my office improving the automation, security and reliability of the IT operations. To an outsider it looked like I wasn't doing anything, and they didn't understand when I explained it to them. Hence I was considered unneeded.

    20. Re:needs control group by Anonymous Coward · · Score: 0

      People would just abuse the spam moderation, just like every other moderation. Eventually, you would have to stop ignoring it. It is already redundant with offtopic.

      Also, if you choose to browse at -1, you really can't complain about all the shit you come across.

    21. Re:needs control group by PinkyGigglebrain · · Score: 1

      It did cross my mind, but its not my nature. It would have cost other people, who had nothing to do with the violations, their jobs if the BSA came in and effectively shut the place down by seizing the servers . I wouldn't mind if the boss get vivisected but I couldn't do anything that would hurt everyone else.

    22. Re:needs control group by JWSmythe · · Score: 3, Interesting

      had set everything up to be just about idiot proof. Makes me think I did my job too well but its the only way I know how to do things.

          That's the best way to do it. It makes your job easier while you're there. As we've learned, there is no company loyalty. They expect us (the employees) to be loyal to the company, but when the time comes to save money, they aren't loyal to us.

          Don't worry, I'm sure he took your nicely configured system, and managed to mangle it in horrendous ways.

          The last real big place that I worked, I had everything running like clockwork. It looked like it was easy, because I did it so well. Within a month of them letting me go ungracefully, people started dropping me emails saying there were problems. They weren't related to the company, they just knew I ran everything. My only answer for them was "They fired me. I don't care. If they want me to fix it, I'd only go back with a huge raise and a bulletproof contract on my terms." They fixed problems. They made worse problems. Still, a few years later, I get the occasional email "their site is down.", which always gets the same response, "I don't care." :) The day they stopped paying me was the day I stopped caring. I do miss that job though. There's a certain feeling of accomplishment to have a well tuned machine running like clockwork.

          The thing in both of our cases is, we know they cut us loose because someone else said they could do it for a fraction of our price. And for that, we know they got someone with a fraction of our ability.

      --
      Serious? Seriousness is well above my pay grade.
    23. Re:needs control group by PinkyGigglebrain · · Score: 1

      The guy hated doing IT related stuff, he just wanted to be run the CNC mills. I doubt he has even bothered to change the root password on the servers much less update the backup scripts. Unless both of the disks (RAID 1) on the main server crash I doubt they will even know if the backups are valid.

    24. Re:needs control group by TooMuchToDo · · Score: 1

      Good luck having your IT security inspect the data within an encrypted tunnel or VPN connection to the outside.

    25. Re:needs control group by yuhong · · Score: 1

      And IMO that is all pretty OK if it is all public information. What is really bad IMO is firing people based on these kind of information, that should change to direct response if possible.

    26. Re:needs control group by yuhong · · Score: 1

      Unless it is something serious like a NDA breach.

    27. Re:needs control group by Anonymous Coward · · Score: 1, Interesting

      I love how people talk about stealing time and resources like it's real. Question: if the CEO of Intel goes to take a dump, let's say it only takes him two minutes. How much money has he "stolen" from the company by not working during that time? Bonus question: How many hours does a lowly paid employee have to "steal" from the company to match that amount?

    28. Re:needs control group by Anonymous Coward · · Score: 0

      "I wanted to lock the firewall down and block everything but web, email and a VPN port. I was overridden by the Boss"

      Good on him. IT admins like you are useless dickheads.

      edit: haha, my captcha is "despotic". Irony!

    29. Re:needs control group by Anonymous Coward · · Score: 0

      The BSA ignores small companies, so nothing would've happened. They talk a big game, but small places get ignored. They're swamped by angry ex-employees.

    30. Re:needs control group by Anonymous Coward · · Score: 0

      Lemmie guess you have your windows cert?

    31. Re:needs control group by toddestan · · Score: 1

      Well, did you get away with it (in the sense that they actually did think it was a virus), or did they figure out that you had purposely installed a torrent client and reprimanded you for it?

    32. Re:needs control group by JackieBrown · · Score: 1

      A lot of companies do not allow personal browsing/downloading using company resources.

    33. Re:needs control group by harlows_monkeys · · Score: 1

      Generally, companies frown on employees using company equipment and company time to commit illegal acts.

    34. Re:needs control group by Anarki2004 · · Score: 1

      You're comparing an involuntary bodily function to downloading content of a questionable legal status. That hardly seems like a fair comparison. Not that I think downloading an episode of Dr. Who is a massive offense, but it is still the company's computer and internet connection and they should be allowed to enforce any policy that they want (within reason of course).

      --
      The teachers will crack any minute, purple monkey dishwasher.
    35. Re:needs control group by linzeal · · Score: 1

      Try running a VPN tunnel to the outside at Intel. It won't happen and the security dudes will be there within moments. I have no idea where the vast majority of you work but such shenanigans would not fly at Intel.

    36. Re:needs control group by RockDoctor · · Score: 1

      However, I am not averse to answering any questions the BSA may ask as long as it doesn't compromise my NDA and security ethics,

      In your jurisdiction, does having signed an NDA over something (e.g., the existence of an illegal activity within your company) protect you from criminal prosecution for active or passive participation in the crime itself?
      I suspect that if you tried that argument in court over here [note], you'd find that the charges laid against you - of "Conspiracy", or "attempting to defeat the ends of justice", depending on which of the several jurisdictions you found yourself in - have tarrifs against them which are not any lighter than actually carrying out the crime in question.

      Now, if you blow a whistle, then you might have a different outcome - in large degree. But that's not the passive stance that you're talking about. If you could provide grounds to justify a belief that the main criminals would have killed you by using you for welding practice or something equally distasteful, then you'd have a reasonable defence and may get away with a suspended or very light sentence. But you would get the conviction that you deserve. (In the eyes of the law ; which are the eyes that count in this circumstance.)

      [note] in reality, if you were naive enough to be try it, you'd probably be trying it first with your own lawyer, whose alternating eruptions of laughter and tears at the ignorance of the masses may hint at how the court would treat it.

      --
      Birds are not dinosaur descendants;birds are dinosaurs, for all useful meanings of "birds", "are" and "dinosaurs"
    37. Re:needs control group by Zero__Kelvin · · Score: 0

      "You're comparing an involuntary bodily function to downloading content of a questionable legal status. "

      If taking a shit is an "involuntary function" for you, you have bigger problems that need to be addressed.

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    38. Re:needs control group by Anarki2004 · · Score: 1

      Ever hear of Montezuma's Revenge? I would hardly call that "voluntary". Go eat a football sized burrito and tell me how voluntary your shit was.

      --
      The teachers will crack any minute, purple monkey dishwasher.
    39. Re:needs control group by stephanruby · · Score: 1

      There is the case of that one Intel employee who collected and stole millions of dollars worth of gold from their fab plant, he was stealing only the remnants of gold by-products from the manufacturing process apparently, that guy was placed under investigation for no other reason than driving too nice a car, but he wasn't fired. The guy resigned. The former spooks at Intel gave him stellar recommendations and helped him get the same job at AMD. That employee was the exception rather than the rule. Intel doesn't usually fire bad employees. It makes them disappear.

  2. hmm...Church of Scientology by Anonymous Coward · · Score: 0

    I wonder what they want with Facebook info? I hope it isn't to harass people.

    1. Re:hmm...Church of Scientology by WrongSizeGlass · · Score: 4, Funny

      I wonder what they want with Facebook info? I hope it isn't to harass people.

      I'm sure they have a more palatable word for it. Perhaps "save", "convert", "assist", etc.

    2. Re:hmm...Church of Scientology by Anonymous Coward · · Score: 0

      probably so they can kill people or put them in one of their slave camps

    3. Re:hmm...Church of Scientology by stonewallred · · Score: 1

      Hell, the word would be fleece. CoS will scan data, pick out those who they think are capable of forking over the cash, and go to work. Scams always need new suckers when you finish milking the old ones.

    4. Re:hmm...Church of Scientology by Runaway1956 · · Score: 3, Insightful

      You can be assured that if they find their own MEMBERS acting out in unapproved ways, those members will be disciplined. The rest of the data? Maybe they'll sift through it, looking for potential rich converts. They can't rest on their laurels, after all. They need to continue bilking wealthy people out of their money!

      --
      "Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
    5. Re:hmm...Church of Scientology by Anonymous Coward · · Score: 4, Informative

      The Scientology word for it is "Audit."

    6. Re:hmm...Church of Scientology by Trepidity · · Score: 1

      That doesn't sound more palatable at all. "You're about to be audited" in most contexts implies, "you're about to be harassed".

    7. Re:hmm...Church of Scientology by nurb432 · · Score: 1

      With them, what else could it be for?

      --
      ---- Booth was a patriot ----
    8. Re:hmm...Church of Scientology by nmb3000 · · Score: 1

      That doesn't sound more palatable at all. "You're about to be audited" in most contexts implies, "you're about to be harassed".

      Well, to be fair, their first choice was assimilate, but they found out it has certain negative attributes attached to it.

      I mean, "You will be assimilated" has a certain pleasant ring to it, don't you think?

      --
      "What do you despise? By this are you truly known." --Princess Irulan, Manual of Muad'Dib
      /)
    9. Re:hmm...Church of Scientology by daveime · · Score: 1

      Resistance is futile.

  3. Not Really News by CheshireCatCO · · Score: 5, Insightful

    Looking over the long list of companies, you see what amounts to a list of large employers. Since we can't know if the downloading was an individual or a company decision, this tells us exactly nothing. There's no story here because there's no useful information.

    Heck, if I were a company that wanted that torrent, I'd get someone to download it at home and walk it in to our office. Companies aren't always that foresighted, of course, but they're also not generally stupid if they're successful.

    (It's like noting that an IP from the NSA checks Slashdot. It could be Slashdot being monitored or, more likely, it could be a random employee just posting.)

    1. Re:Not Really News by bsDaemon · · Score: 3, Interesting

      Or, it could be a random NSA employee posting to provide a cover of plausible deniability to the monitoring! But seriously, the only thing the torrent does is make the information more easily obtained at one go. You can still click through the whole database and get all the information at http://facebook.com/directory. I really don't see where any actual news is involved in this story, even from the beginning.

    2. Re:Not Really News by TheDarkPassenger · · Score: 1

      Ah. That's exactly what they want you to think ;)

    3. Re:Not Really News by Darkness404 · · Score: 2, Interesting

      Exactly, so someone made a crawler to get publicly available information. This is not news at all anymore than its news that someone could do a google search and use web scrapers to make a profile of any /. user.

      --
      Taxation is legalized theft, no more, no less.
    4. Re:Not Really News by AHuxley · · Score: 1, Interesting

      The NSA is the net in the USA, they dont have to sneak around as they just mirror it all off or have contractors do it for them.
      24/7, searching, connecting in real time.
      As for the rest, could be workers seeing the info and requesting it at work for reading, sorting at home?
      For unique interests its a win, search for users with as anti war, anti cult, anti rodent sweatshops interest.
      Befriend, turn, wipe, passive monitor, take over, re direct, mis direct or clone with a few twists. That might be the real key, grassroots that still feel like grassroots, used when needed, tracked when an issue.
      Or a very blunt warning, a second or third world security service officer befriends you, just to let you know they know about your interests and can reach out in the real world too if you write too much :)

      --
      Domestic spying is now "Benign Information Gathering"
    5. Re:Not Really News by alphatel · · Score: 1

      Or it could be that Slashdot is really the NSA!

      --
      When the foot seeks the place of the head, the line is crossed. Know your place. Keep your place. Be a shoe.
    6. Re:Not Really News by bsDaemon · · Score: 1

      I wouldn't have modded you troll if for no other reason than your post is pretty in character with your username's namesake. But I'm pretty sure you weren't trying to be funny either.

    7. Re:Not Really News by stonewallred · · Score: 1

      The NSA doesn't surf slashdot. They get all the relevant information they are looking from when they do their daily deep scan/copy of your computer.

    8. Re:Not Really News by Anonymous Coward · · Score: 0

      GP doesn't really have troll content at all, but really what else can you mod it, since it's got a touch too much paranoia to be truely insightful?

    9. Re:Not Really News by Anonymous Coward · · Score: 0

      Exactly, so someone made a crawler to get publicly available information. This is not news at all anymore than its news that someone could do a google search and use web scrapers to make a profile of any /. user.

      To demonstrate (and with apologies to parent), the torrented information is little more than this.

    10. Re:Not Really News by CheshireCatCO · · Score: 1

      No, Slashdot actually does what it's supposed to do much too well for that.

    11. Re:Not Really News by ushering05401 · · Score: 1

      Seems that from the minute the DHS named /. as a site to watch the other agencies would have had an interest in flushing shit here to see where in the DHS reports it popped up, if at all.

      My impression is that the intelligence agencies are always watching themselves and each other with specific intent, and the population according to averages... Unless you have already graduated to the priority lists or, god forbid, gotten whatever the equiv guv code is for 11-99 classification.

    12. Re:Not Really News by Anonymous Coward · · Score: 0

      Yea cause in the normal course of work at those companies, the employees are likely to have a bit torrent client installed and just happen to be interested in this information and are downloading it during their coffee break or worse, during the time they should be working .... or maybe downloading this torrent and analyzing it is their work! Where is that sarcasm emot-icon.

    13. Re:Not Really News by BiggerIsBetter · · Score: 1

      You can still click through the whole database and get all the information at http://facebook.com/directory.

      That's not entirely true. Scraping the link provided won't give you data from people who have turned off public search listings, so the torrent is potentially more useful...
      Note: This only includes people who have Public Search Listings available on Facebook. Anyone can opt out of appearing here by changing their Search privacy settings.

      --
      Forget thrust, drag, lift and weight. Airplanes fly because of money.
    14. Re:Not Really News by bsDaemon · · Score: 1

      The original story when the torrent was first released indicated that the so-called "hack" was merely scraping the publicly listed information of people with search listings turned on. So the torrent is just convenient, not useful.

    15. Re:Not Really News by micheas · · Score: 1

      The original story when the torrent was first released indicated that the so-called "hack" was merely scraping the publicly listed information of people with search listings turned on. So the torrent is just convenient, not useful.

      The issue is that a lot of people tightened up their privacy settings about two months ago. so being slightly dated might be a lot more useful.

  4. I would not be too surprised by betterunixthanunix · · Score: 1

    I would not be terribly surprised if the organizations that were listed had instructed their employees to download this torrent. IBM, for example, is interested in data mining, and this is a nice data set for testing algorithms on. Scientology probably wants to track current and former members, and is just grabbing anything that will help them in that effort.

    Of course, as others pointed out, there is no indication that this is not just routine; it would be nice to know if other popular torrents were also being downloaded by computers in those IP ranges.

    --
    Palm trees and 8
    1. Re:I would not be too surprised by phantomflanflinger · · Score: 2, Informative

      Most of the traffic PeerBlock blocks is false positives. It blocks huge ranges of IP addresses, YOU could be on one of their lists. The Gizmodo article says "it should be mostly accurate". Lol.

      It used to be called PeerGuardian, remember? The "lucky talisman" app that stops teh RIAA catching you? What a load of balls.

      --
      shin phantomflanflinger
    2. Re:I would not be too surprised by WrongSizeGlass · · Score: 3, Insightful

      I would not be terribly surprised if the organizations that were listed had instructed their employees to download this torrent.

      If a company sanctioned it (and that is purely an assumption) they could be looking for info on their own employees.

    3. Re:I would not be too surprised by gnasher719 · · Score: 1

      If a company sanctioned it (and that is purely an assumption) they could be looking for info on their own employees.

      It would be entirely reasonable for any company doing e-commerce to download these files, and check which usernames/passwords match their own data.
      For example, if there was a facebook user with username gnasher719 and password imsoclever, and Apple found there is an iTunes account with the same username and password, it would be a good idea to put some kind of clamp on that account before someone starts downloading expensive iPhone apps using my account information. Same with Paypal, eBay and so on.

      Looking for your own employees, on the other hand, would be very illegal, except perhaps again to turn off all logins that use the same username and password that is used in the facebook list, and I think impossible to keep secret.

    4. Re:I would not be too surprised by MysteriousPreacher · · Score: 1

      ...except the file doesn't contain passwords, so it would be useless for what you're suggesting.

      I'm not aware of any law prohibiting companies from looking around on the web to see what they're employees are doing. Problems may arise based on how they use the data. e.g. firing someone for things they do in their personal lives that have no bearing on their job or their employer.

      --
      -- Using the preview button since 2005
    5. Re:I would not be too surprised by metamatic · · Score: 1

      Well, IBM prohibits BitTorrent use by employees on IBM computers, so I'm doubtful that the IBM download is sanctioned. The person responsible will probably be hearing from the IT department, now that so much attention has been drawn to it.

      [Opinions mine, not IBM's.]

      --
      GCHQ Quantum Insert installed. If only our tongues were made of glass, how much more careful we would be when we speak
  5. little bit freaked out by some of them... by Anonymous Coward · · Score: 0

    sure scientology and the usual suspects from the movie studios are no surprise. fragile ego and possible blackmail for the former, and default-download-every-torrent-posted-and-C&D-everyone for the latter. ...but halliburton, boeing, and raytheon? that slightly freaks me out. your average user has no interest in this torrent (except maybe some /b/ visitors), as it doesn't represent free entertainment in most cases. but weapons companies? why on earth would they want demographics?

    1. Re:little bit freaked out by some of them... by ushering05401 · · Score: 1

      The entire MIC was built on keeping up with the Jones's acquisitions so to speak. So all it really took was for one player to identify social info as potentially valuable and all players become obligated to pay attention to social media.

  6. Who's downloading? by dandart · · Score: 1

    I was... but then I gave up, because I don't really care. Especially about names and IDs. Hmm, I wonder if I'm in there?

  7. Prone to prosecution? by Voulnet · · Score: 1, Interesting

    If the profiles are private does that mean it is illegal to exchange them in public? Does that mean the downloading or uploading parties are subject to prosecution for spying on private information that was collected illegally?

    1. Re:Prone to prosecution? by Darkness404 · · Score: 4, Informative

      See the thing is the profiles were all public someone just made a web crawler to create it then put it up as a torrent download. No privacy was violated that wouldn't be with a normal search.

      --
      Taxation is legalized theft, no more, no less.
    2. Re:Prone to prosecution? by brasselv · · Score: 3, Insightful

      The profiles are NOT private, nor there is anything "hacked" here.

      This archive contains only the information that users made publicly available (consciously or not) - this stuff was just crawled from the web and put together in one large file.

      There is no news here... if I were Apple or Cisco, I would crawl this public info myself, rather than relying on some dude that posted it on a torrent...

      --
      "Whenever people agree with me I always feel I must be wrong." (Oscar Wilde)
    3. Re:Prone to prosecution? by Anonymous Coward · · Score: 4, Insightful

      Actually, the profiles were all private, and then facebook changed the default privacy settings to make them public and 100 million chumps didn't know/care enough about their privacy to change things.

    4. Re:Prone to prosecution? by nschubach · · Score: 2, Informative

      I just downloaded this package, and all it has a lists of names and URLs to Facebook profiles. If they users made their profile private, you're not going to get anything more than their name.

      --
      Every time I start to have faith in humanity, I ruin it by driving to work between 7 and 8 am.
    5. Re:Prone to prosecution? by Anonymous Coward · · Score: 0

      However, that was a risk they took when they agreed to the terms of service and put their faith in a service which could change for better or worse at any time.

    6. Re:Prone to prosecution? by gurps_npc · · Score: 1

      Is there any information on Facebook that a reasonable person would Really consider to be 'private'? It's sort of like telling the town gossip something and adding "of course, this is in the strictest confidence". When I teach kids to use the internet, the first thing I tell them is that every web site lies a little bit about their privacy. If they say nothing worse than Y will be done, assume Yx2. Face book is a prime reason for this rule

      --
      excitingthingstodo.blogspot.com
  8. Hmmm by kamukwam · · Score: 1
    I am confused. The title says 'Who is Downloading the Torrented Facebook Files?'. So I was guessing they didn't know and were coming to Slashdot to ask if anyone knew.

    But no, they already know it! So why bother and ask us anyway??

    I don't get it.

    1. Re:Hmmm by Anonymous Coward · · Score: 0

      This is what my friend said to me; he said, "Guess what I like? Mashed potatoes." It's like,"Dude. you gotta give me time to guess. If you're gonna quiz me, you must insert a pause in there

    2. Re:Hmmm by Anonymous Coward · · Score: 0

      Or the idiot slashdot editor (it's redundant AND an oxymoron!) could have just left the question mark off the title, which would have made the title 100% accurate.

    3. Re:hmmm by pandrijeczko · · Score: 3, Funny

      No, they are completely different - one is a bunch of rich religious zealots trying to force their opinions on everyone else, the other was founded by L. Ron Hubbard.

      --
      Gentoo Linux - another day, another USE flag.
  9. It's just a list of names people! by Chief_Wiggum · · Score: 1

    This torrent doesn't contain sensitive private information. It's just a very long list of names. That's it! Who cares who downloads a phone book without phone numbers?

  10. Why not? by crow_t_robot · · Score: 1

    Why wouldn't those companies download that info? The information is legal because it was publicly available and it's a measly 3GB download. Even if they get just a tiny bit of market/consumer insight from this data, it was well worth spending the short amount of time downloading the data.

    1. Re:Why not? by cpghost · · Score: 1

      Why wouldn't those companies download that info?

      Because some random dude downloaded the torrent at the time? Let's see: one of the companies is German Telekom. That's the biggest ISP in Germany. Just because they're there, doesn't mean anything at all: it's most likely some of their customers who read the previous Slashdot article and fetched the torrent right away. The same for the other companies. There's nothing to see there, move along.

      --
      cpghost at Cordula's Web.
  11. Program limitations by SunSpot505 · · Score: 2, Interesting

    I would question whether many people other than a major corp have the resources to work with that large a data set. It's not like Joe Schmoe can open that in Excel. Even if Joe could get it open, running any kind of query, even on indexed fields, would take forever. It can take up to 20 minutes for my quadcore to do a sort on our 300k record 200 field database.

    Corporations seem like a much more likely consumer of this data than anyone else. I'm thinking about downloading it just to see... I'll let you know how the sort time goes....

    1. Re:Program limitations by betterunixthanunix · · Score: 2, Interesting

      I think the problem there is the use of Excel; I'm just going to quickly peruse the data with grep to see how many instances of my name are in there. It will take a while because of the size of the data set, sure, but I can just leave it running in the background while I do something else (since the work is done on a line-by-line basis and won't load the entire file into memory).

      --
      Palm trees and 8
    2. Re:Program limitations by hawks5999 · · Score: 1

      A full 20 seconds? How do you stand it?

    3. Re:Program limitations by hawks5999 · · Score: 1

      Shoot. Too early. 20 minutes... yeah. That's more time consuming.

    4. Re:Program limitations by Anonymous Coward · · Score: 0

      If you are using Excel as a "database" YOU ARE DOING IT WRONG.

      DOING IT WRONG also explains why you've somehow shoehorned your data into a 200-column-wide record. Normalization, motherfucker, DO YOU SPEAK IT?

      FFS, at least use Access - a half-ass database engine is better than Excel.

    5. Re:Program limitations by crow_t_robot · · Score: 5, Funny

      Do you really manage a database that large in Excel? Does your computer shit parts of its motherboard out of its optical disk drive every time you open the file?

    6. Re:Program limitations by SunSpot505 · · Score: 0

      Sigh... some of you didn't even read what I wrote did you? I don't use Excel.

      My point was that the average user that does use Excel will not be able to view this, as Excel will truncate the file at 65.5k records or so.

      I have a MySQL (LOL at Access) database, which is what I intend to view and search the FB data in. And no, it doesn't take 20 minutes to add an index, it takes 20 minutes to run a query that includes non-indexed fields.

    7. Re:Program limitations by WMD_88 · · Score: 1

      I believe Excel 2007 removed the 65k rows limitation; it's something sky-high now. (IMO they shouldn't have, if only to discourage people from using it as a database....)

    8. Re:Program limitations by Wingnut64 · · Score: 1

      Corporations seem like a much more likely consumer of this data than anyone else. I'm thinking about downloading it just to see... I'll let you know how the sort time goes....

      (un)fortunately, it's already sorted for you.

      The bulk of the torrent is a 1.29GB bzip2'ed .txt file, which decompresses to ~9.7GB. It contains 170,879,859 rows. Took 7 hours to load that into a MySQL database. I basically only grabbed this to learn about database performance.

      I pity both Windows Notepad, and the poor fool who unzips and doubleclicks it without thinking :)

      --
      echo 'Header append X-HD-DVD "0x09f911029d74e35bd84156c5635688c0"' >> /etc/apache2/httpd.conf
    9. Re:Program limitations by TooMuchToDo · · Score: 1

      I'm uploading it to Amazon S3 and using EC2 instances to parse it.

    10. Re:Program limitations by yuhong · · Score: 1

      And even Excel 2007/2010 is limited to 1048576 rows.

    11. Re:Program limitations by kramulous · · Score: 1

      It is not really that big. You should be able to process that stuff on commodity hardware easily enough. I imagine the big bottleneck will be with the IO. Pretty easy to stripe some disks.

      Quad core with well written code would buzz that tower fairly easily. Only talking about a few gigs of compressed data here.

      I would use directory structures with an info file in each to store this information. That would be my database.

      --
      .
    12. Re:Program limitations by Anonymous Coward · · Score: 0

      You're doing it wrong: http://lucene.apache.org/solr/

      You don't want a database you want an index. Both Excel and MySQL (and others) are not the right tools.

    13. Re:Program limitations by Anonymous Coward · · Score: 0

      Does your computer shit parts of its motherboard out of its optical disk drive every time you open the file?

      Yours too? I knew I wasn't the only one!

    14. Re:Program limitations by daveime · · Score: 1

      If you are loading a big table in MySQL with a ton of rows and indexes, foreign keys etc ...

      Load the table structure first.
      Disable indexes.
      Load the table data.
      Enable indexes.

      If you don't he'll be updating the index sorting and stats once for every row inserted, rather than doing one pass at the end on the whole dataset. It can make the difference between taking 7 hours to load, and perhaps 90 minutes.

    15. Re:Program limitations by daveime · · Score: 1

      Oh, and if you have 2 hard disks, you can also get a huge performance boost by telling MySQL to store the table and index files (MYI and MYD if you're using MyISAM tables) on one disk, and the transaction logs etc on the other disk. Saves you a large amount of disk thrashing.

      And don't use InnoDB tables for this data ... it's reference data, you're not going to need transactions and rollbacks etc, as you're unlikely to be writing anything ... it'll probably be 100% read only access.

    16. Re:Program limitations by Anonymous Coward · · Score: 0

      It can take up to 20 minutes for my quadcore to do a sort on our 300k record 200 field database.

      You're doing it wrong. Excel is a spreadsheet program, not a database. If you use the correct tool for the job, you can manage datasets a hundred times as large as that, on hardware ten years old.

  12. Tormented by kamukwam · · Score: 3, Funny

    What is a tormented Facebook file??

    1. Re:Tormented by Fumus · · Score: 1

      I'm going to patent Facebook: Torment as soon as I figure out a nice plot for the game.

    2. Re:Tormented by MasterPuppeteer · · Score: 1

      The plot is simple : this guy wakes up with amnesia, doesn't remember who he is. So, he starts browsing through millions of Facebook profiles to figure out his identity. Along the way, he becomes friend with a flying, talking skull (hey, the guy got bored after browsing through a few tens of thousands of profile so he started doing mushrooms) and together they get into some wacky adventures.

  13. So should corps be held liable? by gjyoung · · Score: 2, Insightful

    When they pull crap like "we just reset/changed/added some protection settings, everything you had guarded is now wide open, kthxbye!", especially when it is a blatant attempt to further their own business plan, and then someone sucks all the data off and makes it available like this entity did?

    The old "permission change without warning" has happened with Yahoo and FB that I know of.

    YA, TOS probably state they can do whatever they want, but with TOS like that there has to be a fine line crossed somewhere eventually that lands them in hot water.

    1. Re:So should corps be held liable? by ScrewMaster · · Score: 1

      When they pull crap like "we just reset/changed/added some protection settings, everything you had guarded is now wide open, kthxbye!", especially when it is a blatant attempt to further their own business plan, and then someone sucks all the data off and makes it available like this entity did?

      The old "permission change without warning" has happened with Yahoo and FB that I know of.

      YA, TOS probably state they can do whatever they want, but with TOS like that there has to be a fine line crossed somewhere eventually that lands them in hot water.

      Well, if they continue to make themselves dangerous they're going to find the number of users will fall off. Everyone I know that was a big Facebook user isn't anymore. Partly my doing, I suppose, I just mentioned that Facebook isn't as careful with your personal data as they could be, and let them Google more if it concerned them. Just type "how do I cancel" into Google and don't even press Enter ... the very top of the suggestions list is "How do I cancel my Facebook account." Seems a lot of people are interested in that.

      Social networking is, by and large, a crock. There are some examples where it can be useful: Linked In is one such site. Even so, you have to be careful. You may not want people at your current employer networking with, for example, the fine folks from some old employer that fired your ass. Whatever the reason, there are certain risks that I don't think most people really think about very hard.

      --
      The higher the technology, the sharper that two-edged sword.
    2. Re:So should corps be held liable? by Rolaulten · · Score: 1

      Yes, 'how do I cancel my facebook' is the first recommended search query on Google, but the interesting thing is it does not turn up on Google trends - due to lack of data on Google's part.

  14. Mind telling us what RDBMS? by Kupfernigk · · Score: 1

    If a quad core system is taking 20 minutes to build an index on a table with 300 000 rows and any sane key, something is very seriously wrong.

    --
    From scarped cliff or quarried stone she cries "A thousand types are gone, I care for nothing, no not one."
    1. Re:Mind telling us what RDBMS? by Anonymous Coward · · Score: 0

      That would depend upon whether there is only 1 simple index or a ton of referential integrity foreign keys involved, plus how much the DB is keeping in RAM, what other loads the DB is having to service etc etc.

    2. Re:Mind telling us what RDBMS? by maxwell+demon · · Score: 1

      That something can easily be identified. It's written right in the original post: open that in Excel.

      --
      The Tao of math: The numbers you can count are not the real numbers.
  15. There's nothing wrong with what they're doing. by AnonymousClown · · Score: 2, Insightful

    Heck, if I were a company that wanted that torrent, I'd get someone to download it at home and walk it in to our office. .

    Why? There's nothing wrong with what they're doing.

    People put their lives up for public view. And if you made you profile private or whatever, then that's an issue with FB and not with these companies.

    This is not different than reading someone's published autobiography.

    --
    RIP America

    July 4, 1776 - September 11, 2001

    1. Re:There's nothing wrong with what they're doing. by stonewallred · · Score: 1

      Eh, my profile is semi-private. But then again, don't use my real name, there are no pictures of me on there, and I DGAF if fake info gets scrapped, mined and sold. More power to them.

    2. Re:There's nothing wrong with what they're doing. by CheshireCatCO · · Score: 1

      I didn't say there was anything wrong with it. But just because something is legally and morally alright, it doesn't mean you want everyone knowing you're doing it. With grabbing profile information like that, one can easily imagine a PR nightmare (especially given recent, related events), so why even chance it?

    3. Re:There's nothing wrong with what they're doing. by MechaStreisand · · Score: 1

      In my experience, not using your real name can cause some problems, as then someone else can create a profile that does use your name that you can't control. And then you have to get it deleted. Of course, if you can manage to get it deleted without facebook knowing that you have a profile there with a fake name, then I guess it works out, but when this happened to me, my fake name profile got killed too.

      --
      Disclaimer: IANAL. This post is, however, legal advice, and creates an attorney-client relationship.
    4. Re:There's nothing wrong with what they're doing. by harlows_monkeys · · Score: 1

      Why? There's nothing wrong with what they're doing

      The fact that this is being discussed on Slashdot illustrates that you are wrong about this. At the very least, it prompts a lot of speculation as to what those companies want with that data. Many are going to offer theories that postulate the companies are going to use it for non-nice things. This means the companies are going to have to devote some resources to trying to minimize the damage from such speculation and rumors. All of which could be avoided if they had just had someone download it over their home internet connection and bring it in on a disk.

  16. And who cares? by harris+s+newman · · Score: 1

    Really, these are publicly posted profiles, you can download them yourself. Its now news, move on!

    1. Re:And who cares? by Anonymous Coward · · Score: 1, Informative

      The profiles aren't in the torrent. Only the user names and the profile number. Nothing else.

  17. It is all about employment. by sgtspacemonkey · · Score: 0

    I know for a fact, that at least def contractors, look into your background. It is common practice among a lot of people out there to when they enter the job market to "hide it all", by either deleting their profile, or suspending it. This provides a look and a way to compare a prospective employees profile they had at one time vs what they have now. The information is all out there, but someone figure out how to mine it and keep a record, just like google did with everything else. For somone doing a background check, or research on a person, it provides a way to go back and look at what is floating out there in the past.

  18. According to the RIAA by Anonymous Coward · · Score: 0

    According to the RIAA, if those are the IP blocks used to download something, the owner is guilty as sin- except for the corporation cluas whereby any company that is willing to go to bed with the RIAA against the public can dload whatever they want and that goes for private information, and in this case facebook data. It's about time you started really understanding this double standard- Even Johnny Law got on this money train ages ago. RIAA, MPAA and all the collective companies involved are simply strongarming the public and bribing the cops- WTF? is the public blind?

  19. So.... by WindBourne · · Score: 1

    the same companies that object to torrent and other tools because it allows ppl to download their information, are now using these same tools to obtain information about citizens. Oh, the irony.

    --
    I prefer the "u" in honour as it seems to be missing these days.
  20. victims are downloading it to check by Anonymous Coward · · Score: 0

    well I posted a message on my wall to inform my friends, and four of them replied that they'd downloaded it to check if their names were in it.
    So, I'd say a good proportion of people getting it would be the potential victims.

  21. Next up: Who is downloading the IPs? by Arancaytar · · Score: 1

    Who is downloading the list of IPs of people who are downloading the list of Facebook profiles?

    It's like a recursive privacy wank! :D

  22. I did! by ianalis · · Score: 1

    As a researcher, it will make my life easier in case I move on to studying Facebook. Everything in there is publicly available.

    According to the README file, the download contains the following:

    The script used to generate these files (v1)
    The script that will be used for the second pass (v2)
    The full URLs to every profile
    All names, including duplicates
    All names, no duplicates
    All names, no duplicates but with a count
    All first names (with count)
    All last names (with count)
    All first initial last name (with count)
    All first name last initial (with count)

  23. Wonder if their ISPs will be asked to block them by myocardialinfarction · · Score: 1

    Now that they're using the blind ultimate evil that is BitTorrent.

  24. hmmm by mace9984 · · Score: 1

    "Apple, the Church of Scientology, Disney, Intel, IBM and several major government contractors " You can merge the first two, they're the same aren't they? :)

  25. Better question by thePowerOfGrayskull · · Score: 1

    The better question is "who cares?" In what possible way does this bit of information make a difference to any of our lives.

  26. Probably more common than not by cjjjer · · Score: 1

    I would bet that most large companies that sell software/media probably download any or all large sized torrents for the sake of piracy to find out what warez are being shared.

  27. A company by Teun · · Score: 1

    "Apple, the Church of Scientology, Disney, Intel, IBM and several major government contractors just to name a few. The article notes that this doesn't mean it's sanctioned by these companies or even known to be happening, but the IP addresses of requests coming to one of the users' machines match to lists of IP blocks for each company."

    Scientology a company, very insightful eldavojohn :)

    --
    "The likes of Facebook and WhatsApp are free to those whose privacy is of zero value."
  28. One corporation not on the list... by Anonymous Coward · · Score: 0

    Microsoft.

    Discuss!

    1. Re:One corporation not on the list... by gmuslera · · Score: 1

      The corporations downloading it are the ones that don't have already that information.

  29. This is war. by Datamonstar · · Score: 1

    Seriously, people. There is a war raging out there that no one is paying attention to. We are the fodder and the collateral as well as the valuable resource being contested over. The irony is that we could stop it if we wanted to. By just saying "no you cannot have my information" and moving along past all the smoke & mirrors, moving on to alternatives that are not as illusory, ambiguous or untrustworthy as the sites that are currently being heavily promoted and then dumped for another with a NEW color scheme! over and over again.

    In effect, we are turning against our own selves by turning a blind eye to what is really going on when we see Facebook accused of violating privacy or when a corporation has a policy that is a bit too loose with the way it handles private information. Of course, the majority won't stop to question anything until its almost too late and we no longer own or have control over anything we do online (or perhaps offline) anymore. Those are the ones who say the war (no not THAT war, I mean ANY war) is a necessary evil or that it's of no concern to them until they lose a loved one or otherwise become exposed to the gruesome truth. The ones who won't put down the bottle until the liver's just a shred of what it once was, the cigarettes until their lungs can only hold enough air for one more breath. Then they'll stop and say "what have we been doing? How did we let this happen?"

    But it's not only the oblivious, or the sheepish who are to blame. We also have the ones who think that privacy is the only thing at stake when it is not. There is also the general idea that a corporation or group of similarly-funded individuals have the right to simply so as they please so long as the majority of the populace don't express concerns with it. That's not the case, however. Some users don't know any better. Others have been tricked into believing they do not care, and still others are out there trying, using the same channels that are bent back against them, to decry what is happening. They are fighting a war with weapons made by the enemy. How can you hope to make a statement when your only real channel of communication goes through the gate-keepers via Comcast, via X many other s and their collective cohorts? But, what other channels are there?

    --
    The eternal struggle of good vs. evil begins within one's self.
  30. I hope they are seeding.... by dcl · · Score: 1

    nt

  31. I downloaded them by hdon · · Score: 1

    I downloaded them to see if I or my friends' infos are floating around out there.

  32. I also downloaded the torrent by coerciblegerm · · Score: 1

    I downloaded the torrent to confirm that neither my name nor my wife's name is present in the dataset. It doesn't seem so far-fetched that some larger entity than myself might be downloading the torrent for a similar reason; namely to ensure that their employees aren't leaking information about the company. Of course, I'm sure there will be more nefarious uses of this data, but I think for most people it's being downloaded out of curiosity rather than malice.