P2P subverter sees emails leaked on net
Details of attempts to catch paedophiles and pirates are revealed as worker's Gmail account is hacked
A Californian company which specialises in subverting the spread of copyrighted files on peer-to-peer (P2P) networks has seen thousands of internal emails - detailing, among others, its work with the US government to trace pornography and the creation of a fake download site to catch file-sharers - leaked online after an employee's Gmail account was hacked.
Media Defender has worked for companies including Universal Music and artists such as the rap star Jay-Z, and had moved to try to limit the number of downloads of Michael Moore's new film, Sicko, by flooding P2P networks with decoy versions.
Company workings
But the workings of the company have been spread in the most embarrassing form over the Net by Torrentfreak (summarised at torrentfreak.com). The emails, apparently downloaded from the Gmail account of Jay Maris, one of the staff who had cc'd all his email to the external system during the past nine months, show that Media Defender was working with the US Justice Department to try to uncover as much detail as possible about people who tried to access child pornography via P2P networks (a transcript of a phone call relating to the work is at pastebin.com), and that it had set up a fake P2P site - called MiiVi - with the aim of building up a list of P2P users. (The site was taken offline after its association with Media Defender was uncovered.) It then tried again, with a site called Viide.com.
The entire 700MB file of emails is now circulating on P2P networks. One of the messages is reported to discuss the possibility of getting the PCs of people who downloaded a client application from MiiVi to begin sending corrupted or incomplete files on to the file-sharing networks, in effect gumming up the networks with broken downloads.
File-sharing networks constitute a major part of the data that travels the internet every day: about 37% is thought to be due to file-sharing, with web downloads of video from sites such as YouTube and the billions of pictures from web pages just exceeding it at 39%. Email is reckoned to make just 2% of the total. More than 10m machines are logged on to file-sharing networks, and more than 1bn audio tracks swapped each month according to Big Champagne Online Media Measurement, which tracks file-sharing networks.
One of the emails to Media Defender came from Universal Music, where an executive was wondering if there was any data to back up the idea that lawsuits by the music industry were leading to less file-sharing among educational institutions. Randy Saaf, its chief executive, clearly thought not - and forwarded the message to five employees with the note: "Take a moment to laugh to yourselves."
Media Defender has not been shy about publicity for its work: in April Saaf told Guardian Technology that the very openness of P2P networks to all users made it easier for companies like his to subvert them: "These are open trust networks, and they can't authenticate all of the material on the network." But Saaf is not an ideologue: in 2003, he told a Senate hearing in which Senator Orrin Hatch called for technological measures to destroy the computers of people who illegally downloaded copyrighted material that "no one is interested in destroying anyone's computer".
Saaf told the Wall Street Journal that MiiVi had been a test site but that it was not intended to entrap users. However, that does not square with the efforts - detailed in the emails - to ensure that the site rose high up in Google rankings, and Saaf's dramatic response when the news of MiiVi's ownership leaked: "This is really fucked. Let's pull miivi offline," he wrote on July 3, after torrentfreak revealed the news.
Although the revelations could boost Media Defender's media profile and its reputation as an effective counter to the spread of P2P files, the leak of the files and a dump of a huge database of its data tracking the spread of its decoy files across the Gnutella network will raise serious questions about its internal security.
Striking gold
One theory explaining how Mairs' account was hacked is that in the course of his work he used his Gmail address to sign up for one of the file-sharing services he monitored. If his IP address - indicating where he connected from - pointed back towards Media Defender or Miivi, an administrator of the file-sharing service might have tested Mairs's login password on the Gmail account - and struck gold.
Media Defender was not available to comment before press time.
There is a certain irony in the release: last month a US judge threw out a lawsuit by TorrentSpy, a bittorrent search engine, even though it emerged that the Motion Picture Association of America had paid a hacker $15,000 (£7,500) for illegally obtained emails sent between TorrentSpy's executives. The hacker rigged the email server so that every incoming and outgoing email to the company would be forwarded to a Gmail account. No money is thought to have changed hands over Media Defender's emails - but the damage to the company could add up to millions of dollars in lost reputation.
Charles Arthur
Thursday September 20 2007
Guardian Unlimited
© Guardian News and Media Limited 2007
Details of attempts to catch paedophiles and pirates are revealed as worker's Gmail account is hacked
A Californian company which specialises in subverting the spread of copyrighted files on peer-to-peer (P2P) networks has seen thousands of internal emails - detailing, among others, its work with the US government to trace pornography and the creation of a fake download site to catch file-sharers - leaked online after an employee's Gmail account was hacked.
Media Defender has worked for companies including Universal Music and artists such as the rap star Jay-Z, and had moved to try to limit the number of downloads of Michael Moore's new film, Sicko, by flooding P2P networks with decoy versions.
Company workings
But the workings of the company have been spread in the most embarrassing form over the Net by Torrentfreak (summarised at torrentfreak.com). The emails, apparently downloaded from the Gmail account of Jay Maris, one of the staff who had cc'd all his email to the external system during the past nine months, show that Media Defender was working with the US Justice Department to try to uncover as much detail as possible about people who tried to access child pornography via P2P networks (a transcript of a phone call relating to the work is at pastebin.com), and that it had set up a fake P2P site - called MiiVi - with the aim of building up a list of P2P users. (The site was taken offline after its association with Media Defender was uncovered.) It then tried again, with a site called Viide.com.
The entire 700MB file of emails is now circulating on P2P networks. One of the messages is reported to discuss the possibility of getting the PCs of people who downloaded a client application from MiiVi to begin sending corrupted or incomplete files on to the file-sharing networks, in effect gumming up the networks with broken downloads.
File-sharing networks constitute a major part of the data that travels the internet every day: about 37% is thought to be due to file-sharing, with web downloads of video from sites such as YouTube and the billions of pictures from web pages just exceeding it at 39%. Email is reckoned to make just 2% of the total. More than 10m machines are logged on to file-sharing networks, and more than 1bn audio tracks swapped each month according to Big Champagne Online Media Measurement, which tracks file-sharing networks.
One of the emails to Media Defender came from Universal Music, where an executive was wondering if there was any data to back up the idea that lawsuits by the music industry were leading to less file-sharing among educational institutions. Randy Saaf, its chief executive, clearly thought not - and forwarded the message to five employees with the note: "Take a moment to laugh to yourselves."
Media Defender has not been shy about publicity for its work: in April Saaf told Guardian Technology that the very openness of P2P networks to all users made it easier for companies like his to subvert them: "These are open trust networks, and they can't authenticate all of the material on the network." But Saaf is not an ideologue: in 2003, he told a Senate hearing in which Senator Orrin Hatch called for technological measures to destroy the computers of people who illegally downloaded copyrighted material that "no one is interested in destroying anyone's computer".
Saaf told the Wall Street Journal that MiiVi had been a test site but that it was not intended to entrap users. However, that does not square with the efforts - detailed in the emails - to ensure that the site rose high up in Google rankings, and Saaf's dramatic response when the news of MiiVi's ownership leaked: "This is really fucked. Let's pull miivi offline," he wrote on July 3, after torrentfreak revealed the news.
Although the revelations could boost Media Defender's media profile and its reputation as an effective counter to the spread of P2P files, the leak of the files and a dump of a huge database of its data tracking the spread of its decoy files across the Gnutella network will raise serious questions about its internal security.
Striking gold
One theory explaining how Mairs' account was hacked is that in the course of his work he used his Gmail address to sign up for one of the file-sharing services he monitored. If his IP address - indicating where he connected from - pointed back towards Media Defender or Miivi, an administrator of the file-sharing service might have tested Mairs's login password on the Gmail account - and struck gold.
Media Defender was not available to comment before press time.
There is a certain irony in the release: last month a US judge threw out a lawsuit by TorrentSpy, a bittorrent search engine, even though it emerged that the Motion Picture Association of America had paid a hacker $15,000 (£7,500) for illegally obtained emails sent between TorrentSpy's executives. The hacker rigged the email server so that every incoming and outgoing email to the company would be forwarded to a Gmail account. No money is thought to have changed hands over Media Defender's emails - but the damage to the company could add up to millions of dollars in lost reputation.
Charles Arthur
Thursday September 20 2007
Guardian Unlimited
© Guardian News and Media Limited 2007
