Comments on: BitThief Downloads Torrents Without Uploading

By: oZZo

oZZo — Fri, 01 Aug 2008 16:25:15 +0000

Here are 2 ways to stop BitThief from spying on you:
http://limboinmetropolis.blogspot.com/2008/07/bitthief-how-low-can-we-go.html

By: ciprian

ciprian — Wed, 30 Jul 2008 07:18:10 +0000

For post no. 18:
see
http://dcg.ethz.ch/projects/bitthief/documentation.php

(there is no RAR archive, by the way)

By: Anonymous

Anonymous — Fri, 11 Jul 2008 07:16:46 +0000

hryuui\

By: WEareNULL

WEareNULL — Fri, 27 Jun 2008 04:54:29 +0000

I am pretty sure that the only reason bitthief even exists is to show the weakness in the Bittorrent protocol. I think we all should be greatefull and anyone who makes a true client, manages a tracker, or works on the protocol should look at bitthief and find a way to fix all the explites they use as well and some of the privacy flaws, I honestly don’t want everyone else who downloaded hacking manuals to know my IP address, even though I have a dynamic address and know how to instantly change it

By: Michael

Michael — Wed, 28 May 2008 16:51:31 +0000

The phrase “Theres no honor among theives” comes to mind.

By: the way

the way — Wed, 30 Apr 2008 03:12:04 +0000

First of all, bitthief is wrong. But I think it should be not difficult to a small group of leechers to change the code of their clients to leech faster without upload, as BitThief shows (and happened before with leech eMule clients). What’s the point in banning named clients if everyone could change a Vuze client to steal bandwith? The change should be at protocol level (IMHO).

By: time to evolve

time to evolve — Thu, 17 Apr 2008 03:58:38 +0000

I guess there is no honor among thieves after all. It’s funny to hear pirates complain about what they are guilty of. The very same justifications for doing what they do can also be used by BitThief users too. Don’t be a hypocrite, keep on stealing what you can and be happy. I know it hurts to be cheated, but how do you think the media industry feels? Most pirates need to climb down from their high horse and accept the reality of this and deal with it, just like the media industries do. Evolve or die, remember? Thank BitThief for forcing BitTorrents to evolve. We want anonymous, fair, and secure BitTorrents for ALL.

By: Conspiracy?

Conspiracy? — Wed, 16 Apr 2008 20:11:46 +0000

So, BitThief is made by peeps in Zurich.. Hmmm. Ya know, that’s where Rapidshare has all it’s servers too. Hmmm.. Conspiracy?

By: AA7

AA7 — Fri, 01 Feb 2008 20:52:16 +0000

How do I actually instal this? I extracted the rar but now what? There is no exe!

By: stuck in the usa

stuck in the usa — Mon, 19 Nov 2007 23:11:54 +0000

I have to use this sort of upload blocking. I have already been contacted by my ISP about seeding torrents. Their policy is that the next time a torrent goes out from my comp my service gets shut off. It sux here in the US because of this crap. Damn Comcast.

By: Grench

Grench — Sun, 30 Sep 2007 18:25:51 +0000

Spingle spandle very very wrangle. Fish wipes waddle and renoogle. Crendangle Fredoogle Skranoogle what time I getting my bum lickeroonioed.

By: dvdwriter - somdaj.com » Late breaking news

dvdwriter - somdaj.com » Late breaking news — Tue, 13 Feb 2007 19:27:11 +0000

[...] The Java based BitTorrent client continuously sends user data to their server. Currently it collects the torrent hash, total size of the download, the current version of the client, total number of pieces available, and the size of these pieces. Since the data is posted on their server, it is possible to link all this info to the users’ IP-address. [...]

By: Steve Berry

Steve Berry — Sat, 03 Feb 2007 08:56:17 +0000

Seems to me we’re all missing the point and we’ve not really understood the rationale behind BithThief’s creation in the first place. I’ll admit as first I was one of those. I actually thought this was tied up to the RIAA/MPAA at one point
The BitThief creators, I believe, are actually trying their damndest (WITHOUT being nefarious) to point out an inherent weakness/set of weaknesses in the underlying protocol.
They’re arguing that the underlying protocol needs to be modified so that what BitThief in particular does is NEVER allowed to happen.
Believe me I think these guys are definetly Pro-BT and they’re using science to promote it. They’re on OUR SIDE guys.

By: BitThief Spies on their Users | TorrentFreak

BitThief Spies on their Users | TorrentFreak — Tue, 16 Jan 2007 20:44:40 +0000

[...] The Java based BitTorrent client continuously sends user data to their server. Currently is collects the torrent hash, total size of the download, the current version of the client, total number of pieces available, and the size of these pieces. Since the post is done on their server, it is possible to link all this info to the users’ IP-address. [...]

By: Gordon

Gordon — Thu, 11 Jan 2007 14:17:35 +0000

Good post by anonymous.
I wonder why it is that bittyrant is getting most of the bad rap ?
bitthief is a leeching cheat that exploits and ignores the protocol to the max .
They even write in their paper that this clients concept could be used by
anti-p2p groups to destroy swarms . I think it’s good that they publish it, that allows
the right people to do something about it ..

By: Remixtures » A lei do mais forte chega ao BitTorrent

Remixtures » A lei do mais forte chega ao BitTorrent — Tue, 09 Jan 2007 20:26:13 +0000

[...] Se o BitTyrant Ã© pelo menos “anti-social”, o BitThief faz troÃ§a das regras e convenÃ§Ãµes do protocolo BitTorrent, bem como das de todas as redes P2P, constituindo a arma ideal para todos os “abusadores” (leechers) que apenas querem receber sem darem nada em troca e contribuirem para o aumento dos recursos de todos. Desenvolvido pelo LaboratÃ³rio de Redes e Engenharia de Computadores de um Instituto TecnolÃ³gico de Zurique, o programa permite efectuar downloads de torrents sem fazer qualquer upload atravÃ©s do recurso a uma sÃ©rie de alteraÃ§Ãµes que, segundo o TorrentFreak, faz com que se apresente constantemente Ã rede “como um novo par recÃ©m-chegado sem nada para dar”. Tal como o BitTyrant, o BitThief tambÃ©m se baseia no Azureus, sendo por isso escrito em Java (apenas disponÃvel para Windows e Linux). [...]

By: LKM

LKM — Mon, 08 Jan 2007 13:38:49 +0000

It’s academic research, so it should be public so everyone can profit from it. And by “profit”, I don’t mean that you should use it to download stuff, I mean that it should be used to harden the bittorrent protocol and servers.

By: wodda

wodda — Sat, 06 Jan 2007 02:12:43 +0000

Sooner or later someone would have written such a client. The BitThief people made it public and “blam!” the torrentfreaks are thinking about ways to prevent such clients from flooding the network. Like “blah” said, full disclosure.

By: Prevent repeated "new" connections from same IP

Prevent repeated "new" connections from same IP — Fri, 05 Jan 2007 22:41:13 +0000

Wouldn’t it be possible to greatly slow BitThief by designing clients / trackers to refuse to allow the same IP address to repeatedly re-announce itself as a “new client” within a time interval (eg 60 minutes)? Therefore a BitThief client downloads a packet, disconnects, attempts to re-connect as a “new client” and is denied connection. Maybe set this to allow one or two re-connections to allow for someone who accidentally canceled their download and is attempting to re-start, or whose ISP hiccupped.
That means that the BitThief client would only be able to download one packet per hour from each seed/peer, and if the IP address of BitThief clients detected in this manner was noted by the tracker, they could be banned for say 12 hours (remember many home users are on DHCP, so their IP address changes sometimes, a permanent ban is not good).

Just a starting point for discussion.

By: blah

blah — Fri, 05 Jan 2007 14:11:38 +0000

I don’t see why they wouldn’t make it public just because they’re academics. Someone could easily develop their own client based on their research.
Which would you rather be able to claim when it matters: a) we did some research on selfishness in the bittorrent protocol or b) we did some research on the bittorrent protocol, including the development of a client which quickly gained some popularity amongst a subset of bittorrent users, was reported in xxxx places included articles in xxxx and xxxx, the effects of which was a discussion of the robustness of the bittorrent protocol and the development of method to prevent selfish users. or something that could possibly go along those lines.
full disclosure and all.

By: Sonnentier

Sonnentier — Fri, 05 Jan 2007 13:41:10 +0000

Screwed stupid associal leecher tool (BitThief).
What do they think their Download comes from? Not from servers they would pay, that’s for sure. No, they join a system of taking and giving, and just don’t give, which is unacceptable. If they don’t give, look elsewhere to get downstream.
It’s amazing how you can write a paper about ‘Free Riding in BitTorrent is Cheap’. Of course, if you just let others pay, it’s cheap. Which finding.
All they write which is positive is to avoid the Uploading others still need to do. Do they think it’s so funny for me to seed? I don’t mind Uploading to newbies with poor ratios, but I mind helping such tards with their handicapped plans. They also see the leeching as a way to kill filesharing, to help copyright companies. Hooray!

By: DE:BUG BLOG » Blog Archive » Torrents werden persÃ¶nlich

DE:BUG BLOG » Blog Archive » Torrents werden persÃ¶nlich — Fri, 05 Jan 2007 08:43:15 +0000

[...] Mehr Diskussion auf: Monkey Bites, Torrentfreak und bei O’Reilly Radar [...]

By: bltz

bltz — Fri, 05 Jan 2007 08:04:41 +0000

That was a great post, Anonymous,

Indeed it’s puzzling that a research institution would release something like this in the wild – they could have done testing, even larger scale testing, without making it public.

Thanks for the info on the connection information, Hope people will be able to use it to ban this client.

By: Anonymous

Anonymous — Fri, 05 Jan 2007 00:39:31 +0000

I find it kind of interesting that both clients are the results of “academic” studies, which could have (and should have) been performed without actually releasing the clients to the public. Guess my expectations are too high.

Anyway, about banning this stupid client; it *cannot* be banned like most others, as it identifies itself as Mainline 4.4.0 (which is a nasty trick in and of itself), so a simple peer_id ban will not suffice. However, if tracker operators do wish to ban it, they will have to examine either the Accept: header or Connection: header, which looks like this when BitThief is running:

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive

The mainline client does not transmit the Accept: header, and it lists the Connection: header as “close” instead.

It may also be possible to ban the client based on its un-parsed peer_id field, as BitThief transmits every character of the 20 byte peer_id URLencoded, so it looks like this:
%4d%34%2d%34%2d%30%2d%2d%31%36%34%64%32%65%34%61%30%66%62%61

Whereas Mainline looks like this:
M4-4-0–55949dd2a9cb

Hope this helps some tracker admins out there.

By: Nabo Ban

Nabo Ban — Thu, 04 Jan 2007 19:59:39 +0000

You mentioned as supported sytsem OS X, but I find only instructions for the use in Linux and Windows.

By: The 8472

The 8472 — Thu, 04 Jan 2007 19:36:50 +0000

> The developers conclude in their research report that swarms with a lot of peers and a high percentage of seeders give the best results for BitThief.

That’s hardly news… everyone knows that, it’s a simple fact because there’s lots of spare bandwidth on a swarm where the # of seeds is greater then the number of peers. And since seeds can’t do tit-for-tat you can freeride them.

BitThief will horribly fail on a torrent w/o (many) seeds, because in that case all it can do is leeching of optimistic unchokes…

By: GrymRpr

GrymRpr — Thu, 04 Jan 2007 18:42:16 +0000

Nice Article.
Best watch out tho Cos the Slycks might steal this also

By: aussiebear

aussiebear — Thu, 04 Jan 2007 17:03:27 +0000

So we can expect BitTyrant and BitThief to be banned by trackers then?

By: Ernesto

Ernesto — Thu, 04 Jan 2007 17:03:23 +0000

[quote comment="36345"]Thanks for the heads up. :(

This is crap. :([/quote]

It is, but it’s out there.
I’m sure it will be banned from most trackers soon enough.

By: bltz

bltz — Thu, 04 Jan 2007 17:00:12 +0000

Thanks for the heads up. :(

This is more than a treacherous leecher tool. I am afraid it could give anti-p2p groups ideas on how to destabilize swarms, and a ready to use tool to do it.

How long before people get frustrated of seeding and see users of this kid of client suck their precious upload bandwidth(most home users have very low uploads compared to DL speeds). Ultimately, people will get annoyed and reduce their seeding all together.

This is crap. :(

By: BitThief Downloads Torrents Without Uploading « Universe_JDJ’s News Blog

Thu, 04 Jan 2007 11:09:56 +0000

[...] read more | digg story [...]