Hot answers tagged p2p
11
Convenience:
Offering good codecs
NOT Preventing DVD players from fast forwarding through FBI warnings and 15 minutes of marketing
Easy distribution: kindle, itunes, etc
Allowing fair use: CSS (DMCA), moving between devices, no region locks, etc
Reasonable pricing for electronic goods
If there is more value in buying the good then downloading from ...
11
One tool for trying to enforce DRM is watermarking, i.e. embedding within the media itself a mark which is (almost) invisible to the human viewer, but which is resilient to copies (i.e. the copy has it). Once media copies are individually marked with the identity of their rightful owner, you can trace the origin of fraudulent copies. Do not get it wrong: it ...
9
For signing only, a 512-bit RSA key ought to resist at least a few days, more probably a few weeks, even against determined attackers. This is still "reasonable" as long as you verify the signature "soon". You can imagine that from the point the public key was made public, you have a few minutes, at best hours of security, after which you must consider the ...
6
Blocking Bittorrent is challenging, and can't really be done effectively with port blocks. The standard ports are 6881-6889 TCP, but the protocol can be run on any port, and the peer-to-peer nature of the protocol means that discovering peers that use unblocked ports is simple.
Blocking Bittorrent traffic could be done with a deep-packet-inspection or ...
5
The Digital Rights Management (DRM) question has been around for a while. The simple answer is:
No - anything which one individual has can be shared
Have a read of this question, and the others tagged drm for some discussion. Most of the protection that is put in place fails, on many levels:
Identifying files through checksums or signatures - these can ...
5
You've got most of the likely approaches mentioned in your question but here's a couple of points on them.
Usage. This is the easiest way to start blocking traffic, and what the a lot of ISPs seem to go with most. Have a "fair use" policy which is based on bandwidth and then start taking action against users to go significantly over it. Unfortunately in ...
4
ISPs have never been involved in the process of determining weather or not specific traffic is related to a Copyright violation. From a technical perspective the ISP is one of the worst places to impermanent such a monitoring system. (There is a huge amount of traffic flowing through an ISP, and huge number of possible copyright violations. At best case ...
3
I assume that they would do this by sniffing packets, but doesn't this
all go down the drain if packets are encrypted? I'm trying to think of
how they can detect this kind of activity if packets are encrypted.
I suppose that when the encryption key is sent over a BitTorrent
client, the ISP could intercept the key and then see everything. Would
...
3
If the P2P software isn't explicitly designed for privacy you should assume that it does not provide any privacy.
Some of the data that you are likely to leak when using P2P software might be:
IP address
Any personal files you accidentally share
Any data you provide to the P2P software (e.g. username)
Any data wilfully provided by the P2P software (e.g. ...
3
Many P2P software will create hashes of each piece to prevent a malicious entity from modifying the pieces in-flight. When your P2P client gets a piece, it verifies it's hash. This will prevent one malicious entity modifying a piece of a valid file, but it won't help you if the file itself (qwerty.mp3) is malicious.
If the file itself is malicious, a simple ...
3
Real-life certificates have a neat concept called revocation. It is a way to propagate (in a secure way) the information that a given certificate, though apparently legit and kosher and with all the correct signatures, should not be trusted anymore. That's a kind of "oops" functionality. In X.509, this uses Certificate Revocation Lists and OCSP.
The ...
2
I think you really mean you're looking to combine DNS data from different servers rather than different protocols? Most DNS servers allow you to declare records for a local network (and if, say, you define an authoritative record for google.com then clients configured to use only your DNS will see your records).
Or do you mean different DNS servers? There's ...
2
The growing popularity for Torrent proxies is for anonymity. You can encrypt traffic all you want, but it can always be traced back to the public facing node. The contents of your communication will remain private, however it can be identified that your IP address was in communication with a remote IP address. Without a proxy that will trace back to either ...
2
I'll assume you're talking about BitTorrent, rather than Gnutella or other P2P protocols.
There's no standard port for BitTorrent traffic, so you're going to have to do some digging.
First, BitTorrent talks to a set of trackers. This communication is done over HTTP, and will have (at least) the following headers:
info_hash - a URL-encoded hash of the ...
2
If the protocol is not designed to protect your identity from peers, you should assume it doesn't.
For ADC you'll get the IP address and date/time, which is enough to be identified by the ISP. MAC addresses are layer2 addresses and don't route. Sometimes you can determine them because of leaks in higher layer protocols (e.g., SMB), but any reasonably ...
2
I think what you are looking for is Scapy. It can do all you request and more and is under active development.
"Scapy is a powerful interactive packet manipulation program. It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, match requests and replies, and much more."
2
As far as I know pfsense performs very simplistic traffic shaping where by it prioritizes traffic based on port range. This is just so that you can play games with someone else using BitTorrent on the network. This is just to be friendly, this is not for "security".
Trying to filter all BitTorrent traffic at the gateway is very a difficult problem and a ...
2
Typically, based on the p2p client used, as @mgjk has mentioned, whatever data is available to the client can be leaked. To answer your specific questions :
IP address - This is definitely leaked, since it is needed to create the connection in the first place (different story if you're behind a proxy)
MAC address - Even if the client used has access to ...
2
Time isn't that important. The question is how much money that attacker is willing to spend. From what I heard, breaking RSA 512 currently costs 75-150$ and 30 hours using cloud computing.
We have a very similar question on crypto.SE: Is 512-bit RSA still safe for signature generation?
But have you considered using elliptic curve crypto? For example the ...
2
The general metrics is that the key space should be big enough that the key cannot be guessed within the time the transmission should be protected.
I'm afraid I don't know off the top of my head what the average time to brute force a 512 bit RSA key is with current computers.... but that's the value I'd be looking for, and then compare that to how long you ...
2
DNS resolves domain names to IP addresses. IP addresses are the endpoint identifier so that TCP/IP can create a connection from the source computer to the destination computer, therefore has to be available for the protocol to use.
Hiding your IP in the final connection is like asking your mailman to use ESP to read where the letter is supposed to be ...
2
You can't really keep your IP private if you're using a torrent on the open internet. The reason for this is the way the torrent protocol works. You aren't downloading directly from the server; instead, you are downloading from other downloaders. In order to get a file from said downloader, you must have some way to contact them - that is, an IP address ...
2
Perhaps you could run the p2p programs on a proxy, download the whole file (this is the first time you're going to see it and be able to fully virus scan it... the p2p transmission is irrelevant), then scan it and serve it to the user.
Easy way: web UI for people to search, request & download.
Hard way: intercept from p2p clients and pretend to be the ...
2
I think the reason this question is difficult to answer is because it is the wrong question. You cannot evaluate appropriate expiration times in isolation from the 'thing' being protected. There are no absolutes here. What you really need to determine is what is the maximum expiration time we can accept as being long enough to achieve maximum convenience for ...
1
In addition to what Fiasco Labs said, there are a few VPN services names I could give you because I have used them myself that support P2P downloads, such as ivacy.com or iblocklist.com (phantompeer).
These VPN services do not have many options and often don't offer many VPN protocols, but at the very least you are guaranteed that they don't log any of your ...
1
To state the obvious, you can serve your code over HTTPS.
The architecture diagram shows that it uses SRTP, the secure version of RTP. It uses AES and HMAC-SHA1.
That leaves the question of key establishment for the SRTP session. A quick search suggests this has been a sticky issue to standardize. Clearly this is a goal of the project, but I don't know ...
1
One of the challenges with p2p systems where there are numerous peers, and numerous short term connections, is that authentication may not be manually checked (it would introduce a high overhead) so placing reliance on automatic protection is quite common.
Where a user connects to only one other, confirming a key or certificate fingerprint to avoid a MITM ...
1
As far as legally equating an IP address to a person, that's gone both ways in the USA. The USA Supreme court hasn't ruled, so anything is possible. I suppose that in the Axiomatic System of the US Legal system, you could equate an IP address and a person, but in the Real World, you are correct. Such identification is going to turn out false in some cases. ...
1
You could take a look at a recent technical paper, The Unbearable Lightness of Monitoring. The authors of that paper talk about how the BitTorrent protocol itself allows people to see what Internet Protocol addresses take part in the P2P downloading aspect of BitTorrent. They also say that they have a way to detect monitoring IP addresses, and say that ...
1
See http://techchannel.att.com/play-video.cfm/2012/8/31/AT&T-ThreatTraq-SIfref-DVRbot-Internet-Weather for a video blog on this. Looking at AT&T's 'internet weather', the activity was picked up and they give an analysis of what they found.
The kindsight blog also has information at ...
Only top voted, non community-wiki answers of a minimum length are eligible
