Comments on: IsoHunt Goes Secure, Adds SSL Encryption

By: victoria

victoria — Wed, 31 Dec 2008 06:05:44 +0000

so its impossible my ISP to track me
great news…

By: Anonymous

Anonymous — Mon, 21 Jul 2008 05:25:24 +0000

To Hannes,
Once the site is on https. The url can only be seen by you. No matter the method of pushing the data.

By: walker1977

walker1977 — Sun, 29 Jun 2008 11:53:51 +0000

100% security = cancel your internet
should i care about security? for me not really but it does help some of the people are scared out there. if they want to know what i am doing then fine with me because no matter what i do somebody is watching. most security out there for the everyday consumer is out of date by a few years. it is just a way for the companies to make money by releasing stuff part by part. do you really think the everyday consumer gets to use the security that the governments use? no we don’t. but hey i could be wrong but who cares.

By: Anon

Anon — Sat, 28 Jun 2008 00:20:24 +0000

ANOTHER STEP IN THE ARMS RACE! MUAHAHAHA

By: D00D

D00D — Fri, 27 Jun 2008 23:38:06 +0000

It is interesting that “search terms” seem to be the most valuable bits of information used to track an individual.

I am guess it is much more difficult to process actual data that people download.

By: D00D

D00D — Fri, 27 Jun 2008 23:31:39 +0000

scroogle offers SSL anonymous search engines. now i understand why.

By: Anonymous

Anonymous — Fri, 27 Jun 2008 21:32:31 +0000

VIRUS WARNING IS TRUE????????????

By: Anonymous

Anonymous — Fri, 27 Jun 2008 19:27:01 +0000

@40 That’s good. It must be effective then

By: Anonymous

Anonymous — Fri, 27 Jun 2008 19:23:04 +0000

this blanket blocking of sites seems to be a creeping death. Yet if the encryption helps then good. But what does it matter if search terms can still be seen or users’ IPs can be traced? I thought uploading was the issue. Even uploading a torrent doesn’t prove distribution. Intent is not enough. As far as monitoring seeders goes, it must be done independently and not by cartel interests, as they are obviously biased, self-interested, and proven liars and criminals. Proxies need to be anonymous or something

By: torrent

torrent — Fri, 27 Jun 2008 19:17:26 +0000

https://feedthe.net is also using encryption to hide their criminal activities

By: torrent

torrent — Fri, 27 Jun 2008 19:16:01 +0000

i read it here http://tinyurl.com/3pz7t2

By: Canadian

Canadian — Fri, 27 Jun 2008 17:35:30 +0000

“this is basically ridiculous tinfoil hattery.”

True, but a good start is still a good start, is it not?

By: American

American — Fri, 27 Jun 2008 16:55:46 +0000

rofl at secure public trackers…

By: mininovaarerunbypricks

mininovaarerunbypricks — Fri, 27 Jun 2008 12:50:35 +0000

constant banning of ip making uploading torrent difficult
mininova are heavily moderator by lazy fat jerk who has too much free time screw them all. i hope mininova.com goes down.
one of the worst site IMHO
they think they can be an ass and get away with it.

By: Josh Townsend

Josh Townsend — Fri, 27 Jun 2008 10:23:22 +0000

Yup, no doubt about it. SSL totally ROCKS. All sites should have an SSL cert.

http://www.Ultimate-Anonymity.com

By: Do it

Do it — Fri, 27 Jun 2008 07:57:59 +0000

Use only there SSL URL, think of it as protection if that makes you use it.. lol.

By: Anonymous

Anonymous — Fri, 27 Jun 2008 07:52:49 +0000

Comment 17′s link is a bloody trojan!! DO NOT CLICK. I clicked on link, firefox asked me to download a .com file, i obviously cancelled, but AVG still came up and moved it to the vault. if you’ve clicked the link run a virus scan now!

By: ror

ror — Fri, 27 Jun 2008 06:50:12 +0000

SceneTorrents.org is using SSL encryption too!

By: bongo

bongo — Fri, 27 Jun 2008 03:55:32 +0000

anyone else having trouble accessing superfundo.org?
according to their backup domain, superfundo.co.cc, it’s been shut down…noooooooooooooooooooooooooooooooooooo!!!

By: nigger

nigger — Fri, 27 Jun 2008 03:27:50 +0000

torrentfreak is for n0bs

By: ruskie

ruskie — Fri, 27 Jun 2008 02:40:07 +0000

Or they can bypass the cost and go with a free certificate authority like cacert.org

By: mmm

mmm — Fri, 27 Jun 2008 02:38:41 +0000

“ISPs and authorities increasingly use Deep Packet Inspection hardware to block access to BitTorrent sites, or spy on users’ browsing habits. To offer its users more privacy, isoHunt has now added SSL encryption, making it impossible for your ISP or the authorities to monitor your activities on the BitTorrent site.”

as if anyone’s been done for browsing a torrent website. they can still join the swarm, find your IP, go to your ISP and issue you a DMCA.

this is basically ridiculous tinfoil hattery.

By: SSL process (and why GET doesn't matter)

SSL process (and why GET doesn't matter) — Fri, 27 Jun 2008 02:28:20 +0000

client connects to $hostip, requests SSL handshake
$hostip responds with certificate, SSL connection is established
client performs GET on $hostip, which may or may not be a request to a vhost AFTER the SSL connection is setup and secure

Basically, the idea is that they can see that you’re connecting (in this case) via port 443 to 208.71.112.30 (isohunt.com), but they can’t see what you’re looking at/for without attempting to break a 1024-bit connection. So, https://isohunt.com/torrents/test (a search) would in fact only show that there’s a connection *to* isohunt, but not what’s being searched for, since none of the communication is ‘in the clear.’

By: requesting

requesting — Fri, 27 Jun 2008 02:04:28 +0000

You can all ready access tpb via https.
https://thepiratebay.org

By: Cc

Cc — Fri, 27 Jun 2008 01:27:19 +0000

There’s no such things as unbreakable encryption . but to do that you will need time and that is something DPI don’t have.

a simple logic . a super computer can decrypt one packet encrypted in 16 bit in less than 5 minute . in here we are talking on one packet but on ISP level we are looking at thousand to millions packet .

now you understand just try use your brain

By: Isn't there the "quantam ecryption" thingy being made?

Isn't there the "quantam ecryption" thingy being made? — Fri, 27 Jun 2008 00:35:22 +0000

I don’t know, as far as I can remember, that was called “impossible to crack” encryption wise (at least theoretically)….does anyone know why they are doing it if SSL is immune to all DPI/hacking? I would guess that it means there are weaknesses to SSL (which on wikipedia, they did point out a few on SSL v2, but not SSL v3….), if so, then ernesto, please, don’t tell everyone here that SSL is some miracle non-decryptable/DPI’ed/some other method. If not, then nvm, I don’t really have a clue personally…..just trying to use logic.

By: WakuWaku

WakuWaku — Thu, 26 Jun 2008 23:46:50 +0000

Ernesto … doe dit eens lezen … http://www.spitsnieuws.nl/archives/tech/2008/06/downloaden_toch_illegaal.html

By: pfff>>>wordpress_errors

pfff>>>wordpress_errors — Thu, 26 Jun 2008 23:42:21 +0000

btw piratebay also has its tls/ssl active now =)

https://thepiratebay.org/

Cert Summary:

Holder: thepiratebay.org, thepiratebay.org

Issuer: Equifax Secure Global eBusiness CA-1, Equifax Secure Inc.

Expires: 26/06/09 01:41:00 PM GMT

Encryption Protocol: TLS v1.0 256 bit AES (1024 bit RSA/SHA)

By: Brandon Atkinson

Brandon Atkinson — Thu, 26 Jun 2008 23:22:18 +0000

how does one enable ssl? is it just browser or does it have to be in the torrent program also?

I hate Bell because they throttle everything now, even xbox live! stupid jackholes.

By: #YLS#

#YLS# — Thu, 26 Jun 2008 22:50:30 +0000

Someone please get rid of the comment with the virus link…

Yeh liked the service at ISOhunt but i’ve been put off them for sometime now due to there innacurate and hefty spam content.

By: SpikeIH

SpikeIH — Thu, 26 Jun 2008 22:44:47 +0000

Hannes you’re full of shit.

SSL isn’t “aware” of HTTP as its an underlying layer that any upper protocol such as HTTP can ride upon.

The SSL session begins first before the HTTP GET request ever happens, so tell me how one can “Sniff your URL” if everything is encrypted after the initial SSL handshake?

I suggest you read up on SSL and how it actually works before spouting bullshit.

Now, if they wanted to know what TLD’s you visit they can easily do this by sniffing your DNS requests, but again that will only give them the TLD.

By: Rekrul

Rekrul — Thu, 26 Jun 2008 21:37:17 +0000

I clicked one, Firefox prompted me to download the file, which I did. I then saw that it was a .COM file and deleted it. It never ran so it never had a chance to infect my system.

By: www.eZee.se

www.eZee.se — Thu, 26 Jun 2008 21:35:19 +0000

“If you clicked any of those links, and your not running Kaspersky, you’ve been infected with a trojan.”

Also detected by ESET, update your AV and do an immediate scan.

By: Buck

Buck — Thu, 26 Jun 2008 21:34:31 +0000

Now we just need search engines created for Firefox to search these secure sites. Currently the ones available are the unsecured websites.

By: turd

turd — Thu, 26 Jun 2008 20:48:19 +0000

@56, haha lol is that you?

By: Br!t0n

Br!t0n — Thu, 26 Jun 2008 20:39:06 +0000

@54,

bullsh!t, I’ve clicked on them, they are not trojans, just a funny video site. You’re just paranoid.

/Br!t0n

By: Anonymous

Anonymous — Thu, 26 Jun 2008 20:32:15 +0000

If you clicked any of those links, and your not running Kaspersky, you’ve been infected with a trojan.

By: Hannes

Hannes — Thu, 26 Jun 2008 19:57:21 +0000

@20 well in general SSL is very usefull, for example if you need to login to view a page it would help to protect the content, since the URL would not help an attacker.

as soon i have to enter some sensitive information i look for a SSL connection, but in this case i dont see the reason to implement it. but the guys at isohunt are smart, there is probably a good reason for it, still i cant see it at the moment.

By: sufu feedburner?

sufu feedburner? — Thu, 26 Jun 2008 19:48:17 +0000

the people in crazy countries should add the sufu rss feed so they can direct download .torrent files without visiting any websites ;)

http://superfundo.org

http://feeds.feedburner.com/superfundo-torrents?format=xml

By: Peter Green

Peter Green — Thu, 26 Jun 2008 19:44:10 +0000

@6 So is this really worth the bother?
It costs money to by cert’s and if they buy more servers that ups the cost even further! And for what purpose?
Debate…

By: Hannes

Hannes — Thu, 26 Jun 2008 19:20:22 +0000

well, well done.

https://isohunt.com/torrents/?ihq=test

notice the “?ihp=test” in the URL? test is my searchterm, and as said before URLs are still seen even when the connection is encrypted via SSL.

By: Cracker Jack

Cracker Jack — Thu, 26 Jun 2008 19:15:57 +0000

just gotta do

https://www.isohunt.com

notice the “s” for SECURE

By: Hannes

Hannes — Thu, 26 Jun 2008 19:03:00 +0000

Well, as far as i have understood SSL it encrypts the traffic coming from the client with a provided async-key from the server and vice versa.

if you want to block a website the only thing you have to do is to blacklist the ip you want to be blocked. meaning as far as not blocking isohunt goes, this would not be a very effective countermeasure.

as far as content goes: SSL does encrypt the content, still an “eavesdropper” would see the URL you request. And since isohunt can be accessed by everyone the information can be restored by browsing the same URLs as the person you want to surveil.

same problem for search: isohunt uses the GET-Method that basicaly appends your search-term in the URL. The content would be save if they were using the POST-metho, but here we have the same problem as with the content, since the URL can be seen by anyone even when using SSL and therefore the content or the searchterm can be restored.

Sure thing it will work to overcome proxys that block the download of .torrent-files, but the other three cases are AFAIK not very effective counter-measures.

By: TV

TV — Thu, 26 Jun 2008 19:00:17 +0000

I have been running a similar poll for 2 weeks now – these are the current response stats:

How important is a secure (SSL) (https) login for you on websites and irc?

I guess it is handy on some occasions. 39%
Very, I must have one! 32%
It does not really concern me at all. 19%
What is that? 10%

Votes: 1,122

By: Anonymous

Anonymous — Thu, 26 Jun 2008 18:51:45 +0000

The 80% figure isn’t really accurate as only a small portion of users have voted thus far. In reality many of the sites visitors will probably not even vote in that poll.

By: Anonymous

Anonymous — Thu, 26 Jun 2008 18:33:58 +0000

Question: this is only for the site, not the tracker connections? That would be a good idea, if practical.

I noticed today that torrentbox added SSL. I must applaud everyone at sites that offer encryption for anything – encryption is great :)

By: www.eZee.se

www.eZee.se — Thu, 26 Jun 2008 18:32:26 +0000

YESSSSS! The next step in our evolution and the only logical way to proceed with present governments all over the world caving in to big corporation / MAFIAA pressure, they started this escalation and they sure as hell are going to pay for it.

Encrypted P2P… welcome, make yourself at home!

Cheers!

By: jsk`

jsk` — Thu, 26 Jun 2008 18:14:00 +0000

tpb is about to add it as well

By: rasha

rasha — Thu, 26 Jun 2008 18:08:05 +0000

what.cd did the same thing