Slashdot Mirror


Demonoid Down For a Week, Serving Malware Laden Ads

hypnosec tipped us to reports that Demonoid is still down after a suffering a massive DDoS last week, and that the domain is now redirecting to a malware-ridden spam site. Notable for surviving a CRIA mandated shutdown, this may be lights out for the torrent tracker: "To begin, while Demonoid’s admin told us that he would eventually bring the site back online, he clearly has other things on his mind. A really important family event puts a torrent site nowhere near the top of his priorities. ... Demonoid has been experiencing staffing issues this year. As we mentioned in an earlier article, there were rumors that one or maybe more Demonoid staffers had been questioned by authorities about their involvement in the site."

60 of 144 comments (clear)

  1. the kick in the pants I needed by Skarecrow77 · · Score: 1

    to finally start researching private newsgroup servers.

    1. Re:the kick in the pants I needed by SuricouRaven · · Score: 1

      The NNTP protocol is a real mess for binaries, really. Severe overheads, awkward packing. There is a reason for those PAR2 files - because delivery is too unreliable to use without them. If you're looking for a non-p2p method of file distribution, you'd be better off with some sort of simple file server - HTTP, even old-fashioned FTP (Which will soon have you loathing NAT). You'll soon run into two problems though: It costs a fortune, and any sizeable pirate service with such centralisation will eventually attract the attention of authorities.

      I think what you really need is some form of content-addressible shared store. Like Freenet, but less paranoid.

    2. Re:the kick in the pants I needed by JMJimmy · · Score: 3

      What's needed is decentralized p2p indexing so taking down any given site doesn't affect the ability to locate files. How to accomplish this is beyond me but I'm sure it's possible.

    3. Re:the kick in the pants I needed by SuricouRaven · · Score: 4, Interesting

      As I proposed. It can be done - and we know it can be done, because Freenet is exactly that. But Freenet is made for dissidents and activists, and it's anti-tracking measures are accordingly paranoid: Performance is sacrificed in order to make it near-impossible to tell what anyone is either publishing or retrieving. This makes Freenet slow. Really slow.

      What you want can be done - it'd have to involve hashes, or better yet hash trees. All it needs is someone with the skill and will to impliment it.

    4. Re:the kick in the pants I needed by SuricouRaven · · Score: 1

      There is a sort of unspoken agreement on Freenet regarding that subject. Everyone knows it exists, but speaking of it is taboo.

    5. Re:the kick in the pants I needed by RaceProUK · · Score: 1

      You mean something like this, maybe?

      And for those with dick ISPs in the UK (and maybe elsewhere), use the Pirate Party UK mirror.

      --
      No colour or religion ever stopped the bullet from a gun
    6. Re:the kick in the pants I needed by berberine · · Score: 1

      I haven't had to use a PAR2 file in years. The delivery of binary files are just fine for me. Maybe I'm the exception to the rule, but I just haven't had problems with incomplete files in at least four years. Many of the bigger usenet servers do offer downloads via HTTP as well.

    7. Re:the kick in the pants I needed by asdf7890 · · Score: 1

      Having to collect the files together, waiting for that last one of the number you need to recreate the original content because for some reason it hasn't made it to your server's feed yet (or it has expired on your server and you need to wait for a repost), not having the content nicely indexed on the tracker we site, and so on, is more hassle than dealing with torrents.

      OK, there are sites that do some of that indexing (but they are potentially subject to takedowns and DoS attacks as much as torrent indexes are), and there are clients that automate the getting of all the parts and unpacking them (as long as the original uploaded has prepared them properly), but at very least you need to research which client to use which is more hassle than just keeping using the torrent client you are already familiar with.

      Just because something isn't difficult, that doesn't mean doing it isn't more hassle than what you do now.

      Oh, and to get a good fast news feed with decent retention periods on binary groups you are going to have to pay. Not much unless you download silly amounts, but more than the nothing most torrent trackers cost to use.

    8. Re:the kick in the pants I needed by SuricouRaven · · Score: 1

      We've really got two problems to solve: Getting the metadata, and getting the data. They need very different tools.

      Getting the metadata is the indexing task - it's been done by websites ever since the appearance of Sharereactor back in ye old days. The challenge isn't to shift lots of data, but to provide a way to filter out the dud files and fakes, and find the links to the files you really want. The Pirate Bay does this.

      Getting the actual data is another problem though: You need a way, given a hash*, to locate the corresponding data. Which may be a hundred gig or more, and it's got to be affordable. But trust isn't needed - cryptographic hashing replaces trust.

      Both of these need to be resistant to takedown efforts - either through hosting in somewhere resistant to legal action, or decentralisation. One of the ideas I like is simply using existing forums, chat and so on to distribute the links - no need to have specialist pirate hubs, every forum becomes a place to potentially copy-paste linkes to things that may be of interest to the forum members. Plus, google then indexes them all.

      *NNTP uses a non-cryptographic identifier, but it fills the same functional role.

  2. Who was going to sites like Demonoid... by BlastfireRS · · Score: 4, Insightful

    ...and not using some form of AdBlock anyway?

    1. Re:Who was going to sites like Demonoid... by Skarecrow77 · · Score: 1

      hell not just adblock, but also noscript, and https everywhere.
      my browsing experience can be a pain in the ass, but at least it's relatively safe.

    2. Re:Who was going to sites like Demonoid... by s0nicfreak · · Score: 5, Insightful

      People that want sites like Demonoid to survive and therefore support them by viewing ads?

    3. Re:Who was going to sites like Demonoid... by westlake · · Score: 1

      People that want sites like Demonoid to survive and therefore support them by viewing ads?

      The geek sees an add that helps pay the bills. The judge sees a profit-making web site.

    4. Re:Who was going to sites like Demonoid... by Skarecrow77 · · Score: 4, Funny

      I've never gotten a virus from warez.
      got one from a porn download once, but that was my own fault. i was about 99% sure that it contained a virus, i opened it anyway to see what my anti-virus would do.

      took me about 5 minutes to clean up the mess, and that was that. turned out to be pretty good porn too.

      but warez? no, never gotten anything from warez.

    5. Re:Who was going to sites like Demonoid... by supersloshy · · Score: 1

      You mean people who don't know that you can get malware from ads like this?

      I use an adblocker not because I don't like supporting websites but because there's no way I'm risking the chance of an infection like that.

      --
      "Our country is not nearly so overrun with the bigoted as it is overrun with the broadminded." -Archbishop Fulton Sheen
    6. Re:Who was going to sites like Demonoid... by gutoandreollo · · Score: 1

      This only tells me you probably need a better antivirus.. :)

    7. Re:Who was going to sites like Demonoid... by MrL0G1C · · Score: 1

      I was bored, decided to throw some viruses in a VM and see what it took to root them out without AV. I found several quickly by downloading the newest keygens and cracks off of pirate bay, so it depends on where you get your warez from I guess. noCD cracks often have trojans.

      --
      Waterfox - a Firefox fork with legacy extension support, security updates and better privacy by default.
    8. Re:Who was going to sites like Demonoid... by Skarecrow77 · · Score: 1

      I rarely download anything major from piratebay.

      one of the nice things about demonoid was that, generally speaking, if a dozen people post comments on a crack or what have you, confirming that they found a virus, the listing gets yanked down. I thusly ran across several things on there that weren't clean, but I never downloaded any of em obviously.

    9. Re:Who was going to sites like Demonoid... by bignetbuy · · Score: 1

      How long have you been downloading "warez"? A year? There was a time when the keygens bundled with apps included trojans. When "legit OS" versions were modified to load a trojan AND access an IRC channel where it sat...waiting to be abused. When opening a PDF or CHM would cause the computer to open browser windows to ad-infested sites AND click on those ads so the malware author got paid. Etc...etc...etc...

      That you've never encountered a virus or trojan doesn't mean they aren't out there...it just means your experience is rather limited.

    10. Re:Who was going to sites like Demonoid... by mister_playboy · · Score: 1

      Registration was open for about 24 hours just before they got DDoSed.

      --
      Do what thou wilt shall be the whole of the Law ::: Love is the law, love under will
    11. Re:Who was going to sites like Demonoid... by alexo · · Score: 1

      I've never gotten a virus from warez.

      I don't know where you're getting your warez from, but whenever I tried the "DIY try-before-you-buy" approach, it came with all sorts of malware.
      Perhaps there is some place where warez are clean but I'm skeptical.

    12. Re:Who was going to sites like Demonoid... by shaitand · · Score: 1

      Actually it suggests to me you need a better anti-virus. The freebies generate false positives left and right and every day people think they are being saved from viruses that weren't really in downloads.

    13. Re:Who was going to sites like Demonoid... by shaitand · · Score: 1

      I can't say I've never encountered a virus/trojan/worm in downloads. I've seen all of the above. For every one of them there are dozens of false positives from free anti-virus software.

    14. Re:Who was going to sites like Demonoid... by Inda · · Score: 1

      I going to back you up, as others are dismissing you so readily.

      Never, not once in 15 years, have I had a virus inserted into my warez. Never from Usenet, Anon FTP, freesite dumps, IRC, ed2k, BT or anywhere else.

      The trick is to stick to scene releases (whatever they are). Search for folder names. Only download RARs. If there's a SFV file, use it.

      Once, only once, there was a script inserted in a WMV (yeah, yeah, I know) file. That script failed to download it's payload.

      I've had viruses on free CDs attached to magazines, freeware, shareware, and email attachments, but never warez.

      Virus scanners sometimes give false positives for keygens, but even that is a rare event. I haven't seen it happen in five years.

      For those screaming "ur virus scanner is shit" - some of us upload the binaries to online scanners where they're checked on 30 independent scanners. You can't get more paranoid than that.

      Arrrrgh, Jim-lad.

      --
      This post contains benzene, nitrosamines, formaldehyde and hydrogen cyanide.
    15. Re:Who was going to sites like Demonoid... by Skarecrow77 · · Score: 1

      How long have you been downloading "warez"?

      since 1993. How long have you been doing it, because apparenty you're doing it wrong.

      I didn't say that no warez was infected, I said I've never been infected. The difference is knowing what you're doing and knowing how to avoid the bad stuff.

    16. Re:Who was going to sites like Demonoid... by Skarecrow77 · · Score: 1

      thanks for the backup.
      it only takes a little paranoia, and a lot of common sense, to avoid getting infected.

    17. Re:Who was going to sites like Demonoid... by s0nicfreak · · Score: 1

      I just ensure my computer can't install anything without my permission and use adequate malware protection, which is a good idea no matter what sites you are going to and no matter if ads "like this" are blocked.

      I use to run a tracker, I know how much of their own money the people running it must pump into it; viewing the ads is a free way to put a little money back into something I use.

  3. Resilience by dontbemad · · Score: 2

    IIRC, demonoid has had several outages throughout the years, some lasting weeks at a time. I would be surprised if this lasted much longer, but I would be far more surprised if this really did spell the end of demonoid all together.

  4. Re:fuck all you by present_arms · · Score: 5, Funny

    fuck all you pirate assholes anyway. I hope you get a virus that blows up your hard drive, you anti-business pricks.

    you forgot to add yours sincerely MPIAA :D

    --
    http://chimpbox.us
  5. I remember the good old days when by Stirling+Newberry · · Score: 5, Insightful

    stopping people from getting information about sex and contraception was supposed to solve some problem or other.

  6. Re:Don't I know it (warning post contains grumpine by __aaeihw9960 · · Score: 1

    For a decade now, I've been operating on the basis of "Do I need it? If not, do I want it? Can I justify spending money on it? And if not, is there a free-as-in-beer legal alternative available?"

    The problem is that most people don't make it to this point. They only see that FREE FREE FREE FREE, and then use their morals against giant companies/for privacy/ anti-government, what-have-you, to justify their decision. A little bit of research will prove that for most things there is a legal, free version available. It might not be 100% what you want, but it'll be close, and it'll be great considering it's free.

    DISCLAIMER: I do pirate things (games usually, or music) to TRY THEM. IF I like them, I BUY THEM. This is because there is no such thing as a good demo anymore.

  7. Re:fuck all you by fluffythedestroyer · · Score: 5, Insightful

    I usually pirate software before I try them. If it's worth it, I will buy it. Same thing with games. Is it worth it to spend 60 for a 8-16 hours game that I will trow away in the garbarge or let it gather dust in my cabinet cause I only played it once ... or is it worth 60$ cause I still play today and the replay value is very strong. With software, is it worth 50$ and more depending on the usage I need from it. lots of software are just overpriced for my needs. That's bad cause I know some software that I would buy the their price is very questionable.

    Prove to me..or us here, people of /. that piracy is anti-business. Give me stats, hard numbers to make me shut up. Afaik, piracy helps business in an indirect way like it or not.

  8. Re:Don't I know it (warning post contains grumpine by jdastrup · · Score: 2

    obligatory link to The Oatmeal: http://theoatmeal.com/comics/computers

  9. Don't do support for family for free (or at all) by John+Bokma · · Score: 1

    Uhm.... how about charging 50+ USD/hour + miles ?

  10. Re:Don't I know it (warning post contains grumpine by Johann+Lau · · Score: 1

    And you post posts that say *zero*. Talk more.

  11. Re:Don't I know it (warning post contains grumpine by RogueyWon · · Score: 4, Insightful

    Because when you're working full-time, have been doing so for a decade and are generally pretty successful, it really rankles to have people who you only see at Christmas and who only pick up the phone when they have a PC problem expecting you to jump to their aid in the way that you did when you were a teenager or student with plenty of free time.

  12. i started missing demonoid when chris marker died by Anonymous Coward · · Score: 3, Insightful

    i went to download some of his more obscure movies (and they're all pretty obscure) and without demonoid i had to pause for a second and think where will i get them? especially since only a few have been released on DVD. well i still found them but it really remind me what a wonderful culture resource demonoid was. i mean any obscure movie from anywhere in the world was probably on there, likewise for music. although i'm still looking for a copy of communist Polish camp classic Hydrozagadka with english subs. wasn't even on demonoid! at least not with subs..

  13. demonoid.me points to 127.0.0.1 by RockoW · · Score: 2, Informative

    For me demonoid.me points to localhost so if you're being redirected to a malaware website your system is compromised.

    1. Re:demonoid.me points to 127.0.0.1 by Anonymous Coward · · Score: 1

      Either that or you are serving the malware yourself :3

    2. Re:demonoid.me points to 127.0.0.1 by shentino · · Score: 1

      Or demonoid's dns got compromised.

  14. Re:i started missing demonoid when chris marker di by Larryish · · Score: 1

    i miss BTJunkie.

    BTJunkie had EVERY FUCKING THING!!!112

    Dammit.

  15. Re:fuck all you by Stizark · · Score: 2

    I have a couple friends who... acquired some of the professional imaging and video software. They used to play with it as a hobby. They then went to school, and are now working-- one designing movies, the other games. They even admit that they probably would never have gotten to where they are without that. The schools that they ended up going to asked them to exhibit some of their work.

  16. Re:I supplement custom hosts files w/ better DNS t by LodCrappo · · Score: 3, Informative

    good info and something I'll have to check out, but I'd add that at least OpenDNS is practically malware in itself due to their screwing around with dns records to advertise to you. they even break SMTP by returning MX results for *everything*, which point to them.... a user on your network fat fingers an email address and the message ends up with opendns? I don't think so.

    the others might be great tho, will try them.

    --
    -Lod
  17. So like... by Westwood0720 · · Score: 1

    ...where am I to torrent stuff now? /sadpanda

  18. Update by twocows · · Score: 5, Informative

    According to the article in TFA, which has been updated, the ads were put in place deliberately by the site admin to recoup some of his costs. Presumably, he didn't know they were full of malware.

    1. Re:Update by Anonymous Coward · · Score: 1

      "I'm shocked, shocked to find that the people who buy ads on my site dedicated to illegal activity would be involved in some sort of illegal activity", said the admin. "I thought these were all fine, upstanding companies."

  19. Re:Don't I know it (warning post contains grumpine by war4peace · · Score: 1

    I have developed this method of appearing to be helpful and trying to resolve the thing over the phone but invariably reaching the "I don't know about that" conclusion, and pointing them to a repairshop. After a few such occurrences they stopped bothering me. It also helps that all my relatives live at least 100 miles away and I don't own a car so they don't expect me to travel to fix whatever they broke.

    --
    ...gis sdrawkcab (usually not responding to ACs; don't bother posting as AC)
  20. Good info... by redizhot · · Score: 1

    Was wondering what was happening.

  21. Re:i started missing demonoid when chris marker di by war4peace · · Score: 1

    This.
    My movie/music tastes are pretty strange at times, and I am genuinely trying to buy some obscure movies or albums. Problem is, they can't be found anywhere any more. Some have been released by Iron Curtain state owned companies (communist era stuff from Czechoslovakia, Poland, Romania, URSS), some were released by now-bankrupt companies, etc. Digital copies are the only chance, and now with less and less large torrent sites around, the chances of actually watching that obscure movie or listening to that obscure album are slimmer. That's too bad, because people will be more and more limited to mainstream crap that sucks most of the time.

    --
    ...gis sdrawkcab (usually not responding to ACs; don't bother posting as AC)
  22. Re:Don't I know it (warning post contains grumpine by hairyfeet · · Score: 2

    Let old Hairy show you how to seriously cut the time down on a boot and nuke there friend. First go to WSUS Offline and have it download the patches and/or service packs for whatever version of Windows it is, you can then put 'em on a thumbdrive or DVD and have them ready to go once the OS is installed. Once the patches are all installed just go to Ninite on the now clean machine and check the boxes for any third party software you need, AV, flash, media players, codecs, etc.

    And then finally once you have it just the way you like it slap in Comodo Time Machine and have it set to make a snapshot on boot. personally depending on how stupid the user is I have CTM take up 10%-20% of the drive, this way next time they do something stupid you can walk them through restoring the system in about 15 minutes. Nice thing is even if they hose the machine so badly it won't boot you can tell them to just hit the Home key on boot and run Time Machine from there. With these little tricks you are talking maybe an hour and a half, maybe six clicks all told, and once set up it'll be damned hard for them to pwn it again. Personally if it were me I'd use Comodo Internet Security for the AV as its not only free it plays nice with time machine, although I've also used Avast and its played nice too.

    As for TFA its not like there aren't a bazillion and one warez sites out there, i'm sure if Demonoid goes tits up another will take its place by the end of the week. You'd think they'd learn its like whack a mole with those things but if the *.A.As want to pay some Media Pretender to play whack a site? their money to blow I guess.

    --
    ACs don't waste your time replying, your posts are never seen by me.
  23. not malware laden by poetmatt · · Score: 1

    this is just retarded. They said they incurred a bandwidth cost from the ddos and turned on advertising to deal with it. I imagine the bandwidth cost before and after the DDOS were probably substantially different. I don't know if they were aware of the bad ads regardless.

  24. Re:Don't I know it (warning post contains grumpine by aaaaaaargh! · · Score: 1

    In my personal experience pirate sites are relatively safe even when browsing them from Windows, I've never had any problems with sites like solarmovie.eu, demonoid.ph/demonoid.me or thepiratebay.org. Actually, I've personally had less problems so far with pirated content than with dysfunctional DRM schemes. Perhaps your relatives are a bit too careless or need better anti-virus software? (Porn sites, on the other hand, are full of malware.)

    But anyway there is an easy remedy: Install GNU/Linux for them and tell them to use GNU/Linux for downloading all the great pirated content out there. Afterwards they can check their downloads with a nice anti-virus software before using them in any way Windows. Works like a charm, keeps your system 100% malware free.

  25. Re:Don't I know it (warning post contains grumpine by jakimfett · · Score: 1

    Oh man...this is techie porn, right here. Time machine+win updates+one click installs=awesome.

    --
    Bits of code, random ramblings: jakimfett.com
  26. use ntp just for the torrent by jago25_98 · · Score: 1

    How's about using NNTP just for distributing the .torrent only :-)

    I did a quick search... amazingly I haven't seen anyone doing this?

  27. Re:Don't I know it (warning post contains grumpine by adolf · · Score: 1

    Hairyfeet,

    I've been reading your banter for years, and while I generally perceive that you're trying to be helpful, this is the first time that you've helped me.

    Thank you for re-introducing me to WSUS Offline (the last time I saw that concept was many years ago and somewhat broken and/or German), and Comodo Time Machine (which I'd not yet found).

    These things will make my life, and the lives of my customers, immeasurably easier.

    Best regards,

    adolf

  28. Re:Don't I know it (warning post contains grumpine by hairyfeet · · Score: 1

    Glad to help, just a little shop owner in BF nowhere that tries to make things easier, both for the common folk and the fellow fixit guys. WSUS was a little buggy the first year or so but now they have it down to a science, just pick whatever updates you want and let it package them however you'd like. I have mine set to once a month download all the updates from XP to Win 7 X64 and that way i can have all the updates and service packs on a single shared drive which cuts out a HELL of a lot of work.

    Now with Time machine there is ONE little catch, but I usually don't mention it because its such a rare condition most don't run into it. if you try to install TM into a system that has both WinXP and Win 7 in a dual boot? it won't work. don't screw anything up, just won't work. That is because Win 7 changes the drive letter so no matter where you install it it looks like C: to the OS and with 2 C: drives TM doesn't know how to handle it. It hasn't be updated in awhile but it works great on XP- Win 7 and while I haven't personally tried it i'm told Win 8 works great as well, and the nicest thing is your grandma can run this. Just tell her to click the home key at boot or pick the clock from Windows, pick how far back she wants to go, and that's it. You can even run it and system restore if you'd like, but TM runs so much better frankly it makes SR pointless. also unlike SR I've found malware don't know how to infect TM so its an easy way to get rid of nasties if they refuse to listen and click on the "free porn/iPad/movies' and get a bug.

    Finally be sure to give Ninite a spin, I've been using them for a couple of years now and they really take the work out of a clean install. Browsers, codecs, media players, flash, Libre office, you can pick as many as you like and with one button it all installs unattended with NO toolbars or other crap. Another nice feature most don't know about is you can use Ninte to update any software that is already on the system, simply check the boxes and ninite will skip anything that is already current.

    So glad you enjoyed Adolf, with WSUS and Time Machine frankly it takes no time to set a system up and more importantly with TM its a hell of a lot harder for them to break it and ruin all the work you've done. Just be sure to tell it to lock the clean install, where you have everything set up just right, and no matter how many years pass you can send it right back to your own version of "factory fresh" with a single click.

    --
    ACs don't waste your time replying, your posts are never seen by me.
  29. Re:Don't I know it (warning post contains grumpine by hairyfeet · · Score: 1

    Glad you enjoyed it, with those little tricks you can take the hassle out of an install and more importantly make it a HELL of a lot harder for them to break it. Another nice trick with Time machine is you can "lock" a snapshot, so once you get the PC exactly how you like it, with all the programs you or the customer wants, you can then lock it and no matter how much time passes you'll have your own 'factory fresh" option just a single click away.

    Heck I walked a former customer over the phone in another state on how to restore the system using the Time Machine I had installed, took her less than 15 minutes to go from a machine her niece had hosed so bad she couldn't even get a desktop to a perfectly running system, you just can't beat that kind of ease of use friend.

    --
    ACs don't waste your time replying, your posts are never seen by me.
  30. Re:Don't I know it (warning post contains grumpine by davewoods · · Score: 1

    there is no such thing as a good demo anymore.

    Ugh, I know right? I miss the good old days when a demo was a 30-day trial, with every feature intact.
    Right when dual core processors came out I built a PC with the most expensive processor I could find. Most games would not even recognize the second processor and have tremendous difficulty running. After the FIRST time that happened, I switched to downloading the game first, just to see if it could even operate on my machine. It probably saved me from buying hundreds upon hundreds of dollars of incompatible games.

  31. Re:Don't I know it (warning post contains grumpine by davewoods · · Score: 1

    Baahaha! Good advice for getting rid of pesky family members posted by something that looks like a spam-bot. Nice.

  32. Re:fuck all you by shentino · · Score: 1

    Don't be silly.

    Businesses don't hate piracy because it makes them lose money

    They hate it because it threatens their monopoly control of the market.