MediaDefender Hacker Speaks Out

Written by Enigmax & Ernesto on January 14, 2008 

In September 2007, anti-piracy company MediaDefender’s emails went public after a hacker gained access to their systems. The attacks cost the company a huge amount of money, not to mention acute embarrassment. Now the person behind the attacks speaks.

The whole Media Defender scandal needs little introduction. The anti-piracy company is incredibly unpopular with most of the file-sharing community, so when they fell victim to a hacker and their company secrets spread all over the Internet, few held much sympathy for them.

Soon it became known that a shadowy group known as MediaDefender-Defenders appeared to be behind the attack - they host the Media Defender emails on their website to this day, but little was known about the chain events, or who was behind them - until now.

In an interview with portfolio, the hacker (using the pseudonym ‘Ethan’) explains how things led up to the leak. Ethan, a polite high-school student who lives with his family, was on his Christmas break when he first gained access to the anti-piracy companies servers by exploiting a weakness in their firewall. This was the end of 2006, at a time when business was still good for Media Defender, with revenue standing at nearly $16m.

The interviewer, Daniel Roth, says he communicated with Ethan on pre-pay phone to ensure security. Meeting after school in a local bookstore, Ethan handed over a flash drive holding confidential Media Defender information, explaining that the initial security breach hadn’t amounted to much and that he had difficulty in gaining the interest of fellow hackers. However, a few months later Ethan decided to go back and take a second look - which bore more fruit - giving him access to the company’s email, it’s networked resources and even its telephone system. He then explains how he passed on some of the information to a fellow hacker who gained access to Media Defender servers and used them for denial-of-service attacks.

Logging in a handful of times each month through the summer of 2007, Ethan started to get bored with ‘Monkey Defenders’ - his pet name for the anti-piracy outfit. Deciding to go out with a bang, he and the Media Defender-Defenders gathered thousands of the company’s internal emails and published them on web.

A text file included with the emails stated: “By releasing these emails we hope to secure the privacy and personal integrity of all peer-to-peer users. The emails contains information about the various tactics and technical solutions for tracking p2p users, and disrupt p2p services,” and “A special thanks to Jay Maris, for circumventing there entire email-security by forwarding all your emails to your gmail account”

Just days later, slamming the anti-piracy company again and again seemed to be the aim of Ethan and friends, as they released a private telephone conversation with the New York attorney general’s office, a P2P tracking database, followed a few days later by all of Media Defender’s anti-piracy tools.

Ethan said that he didn’t set out to ruin Media Defender: “In the beginning, I had no motivation against Monkey Defenders” he said. “It wasn’t like, ‘I want to hack those bastards’. But then I found something, and the good nature in me said, These guys are not right. I’m going to destroy them.”

Ethan, who is now sought after by the FBI because of the leaked emails, is getting close to this goal. It all went downhill for MediaDefender after the leaks got out. In November it turned out that MediaDefender’s parent company ArtistDirect lost almost $1,000,000 because of the hack, and their stock price plunged soon after that.

To make it even worse, a week after the sensitive information was made public, the Pirate Bay launched a counterattack against their arch rival. They decided to use the information from the emails to file charges against some of MediaDefenders customers including Paramount Home Entertainment, Twentieth Century Fox and Universal Music Group for corrupting and sabotaging their BitTorrent tracker.

There is no doubt that the pirates have won this battle, and it will be very hard for MediaDefender to regain their credibility. To quote MediaDefender CEO Randy Saaf: “This is really fucked…”. Yes, I’m afraid it is Randy.

Previously: Video: How People Are Tracked Using BitTorrent

Next: Trading BitTorrent Tracker Invites – Commodity or Curse?

104 Responses

Pages: « 1 2 3 4 [5] Show All

101 Jan 21, 2008 at 19:31 by Anonymous

#62: There are two words that defeat your analogy “Open Source”

102 Jan 29, 2008 at 00:54 by Anonymous

First of all, Almost the entire populace of hackers who have any skill whatsoever are 1. Fighting against a very real threat - The information security and talentless ‘Whitehat’/Ethical Hacker bloc 2. Are The Whitehat bloc

All of these people who claim to have all this talent, or to have done this and that, They are using OTHER people’s exploits. They are bruteforcing passes, That requires about 15 minutes of knowledge about C and sockets and you will be one of these revered ‘hackers’.

As has been mentioned before, Ethan is hardly a real hacker.

103 Jan 30, 2008 at 23:59 by sundaydriver

Hi..could someone please try this out and tell me if it works.
THANKS IN ADVANCE.

“MAKE $50K - FAST & LEGAL”
Posted by dcwill43 on Aug-31-06 at 01:23 PM (PT)
Make $50,000 fast- perfectly legal! REALLY WORKS!

THIS IS NOT A JOKE…….IT REALLY WORKS…….I SWEAR!

Matthew Jenneson, Cleveland, Oh -”within 2 hours I had $400″

Do you need extra income ? Quickly and Legally ?
Do you have a PayPal Account ? ( if not, the set up takes under 5 minutes AND IT’S TOTALLY FREE !!! )
You could make up to $ 50,000 in one month’s time with more money coming in every month thereafter !

$ 50,000 in PayPal ?
That’s Right ! $ 50,000 dollars in your PayPal ACCOUNT, IT WAS PROVEN ON OPRAH and this system is COMPLETELY LEGAL !!!
You may have heard of this program ( or one like it ) on 20/20 or even in the Wall Street Journal.
$ 10 that’s all it takes. I’ll try to keep it short and sweet.
To get started just copy this whole page and paste it to edit it. Simply follow the instructions below and in 2 to 3 weeks, you will have as much as $ 50,000 in your PayPal account or even more.
Most people respond to this program because of the low investment ( $ 10 dollars ) and the high profit potential. There is no limit to the income you can generate from this ( you can do it over and over ). If you follow the instructions, you will reach thousands of people ! Honesty, Faith, and Intregrity make this system work.
I think everyone has heard of PayPal. Anyone with an e-mail address can join for FREE ! If you’re not already a PayPal user, the first thing you need to do is sign up.
Sign up for PayPal here http://www.paypal.com
It’s real easy to set up and it’s FREE !!! Just make sure you have a Business or Premier account or you may be subjected to a monthly income limitation which may slow this program down.
Send $ 5 to the first person on the list by using the paypal send money feature, and include in the e-mail: “Please add me to your list”. This keeps the program legal. Then send another $ 5 to the 5th person on the list, with an e-mail that says: “Thank you. I’ve joined”.
Remove the 1st e-mail address and place your address at the bottom. This moves the 2nd to 1st, 3rd to 2nd, and the 5th into 4th.
DO NOT TRY TO PLACE YOURSELF IN THE FIRST PLACE. IT WILL ONLY REACH THE PEOPLE YOU SEND IT TO, AND THEN YOUR NAME WILL BE REMOVED FROM THE LIST !
If you do this the way it was designed, it will reach thousands by the time your name gets to the top.
REMEMBER TO SEND a $ 5.00 dollar donation to the 1st e-mail address and the message “PLEASE ADD ME TO YOUR LIST”, and send an e-mail with the words “THANK YOU - I’VE JOINED” and the other $5.00 dollars to the 5th person.
This will help the 5th person to keep track of progress of the letter and continue to send out more e-mails. Here is the list:
1.) desaulles3@yahoo.com
2.) Justin3442@aim.com
3.) neuclaalum1@hotmail.com
4.) jhorton999@yahoo.com
5.) deeprules@hotmail.com
(Make sure it’s the same e-mail address that you used to open your PayPal account. This is the way you will receive your payment)
Now that you have paid the 1st and the 5th person and sent them both an e-mail ( via PayPal account ) and placed your e-mail address in the 5th place, then what you need to do is post your letter. You can post on craigslist.com, backpage.com, message boards and newsgroups (there are thousands) and you can even send an e-mail to your e-mail list. IT IS YOUR JOB AS THE 5TH PERSON ON THE LIST TO ENSURE THERE ARE AT LEAST 20 “THANK YOU. I’VE JOINED” replies.
The fifth person is the guardian of the system ! If there are not at least 20 replies then the 5th person will keep sending/posting the letter until there are.
MAKE SURE YOU SEND $ 5 DOLLARS TO THE FIRST PERSON TO THANK THEM FOR WHEN THEY WERE THE GUARDIAN OF THE LETTER AND $ 5 DOLLARS TO THE 5TH PERSON SO MORE EMAILS CONTINUE TO GO OUT !!!
Now the fun happens. We reap what we sow. Other people will see your posting and do the exact same thing, bringing you lots and lots of dollars !!! Seriously, it’s common sense - you do it and 25 or more people see and do the exact same thing and everyone wins !!!
You will recieve thanks AND THE SAME BLESSING. When your name is on the 1st slot, 8,000 to 15,000 people will send you $ 5.00 dollars ! Keep in mind the most you spend is $ 10 DOLLARS ! ( WHAT GOES AROUND, COMES AROUND ! )
********************
TESTIMONIALS:
Mary Gatters, Columbus, SC:
I only have one thing to say to you: OH MY GOD ! I sent out 142 copies total before 20 replied, like the instructions said. Then I went on a short vacation. When I got back, my account had over $ 32,000 dollars in it already and the money was still coming ! I’m still floating in air (especially with my new car). I thought the guardian system sounded cheesy, but now I realize it is the formula that makes this letter really work ! THANKS !
Richard Barrie, Boulder, CO:
I was shocked when I saw how much money came flooding into my PayPal account. Within 3 weeks my account balance has ballooned to $ 22,449. At first I thought there had been some sort of error with my account !
HERE ARE THE STEP-BY-STEP DIRECTIONS AGAIN:
Step 1.
Set up your PayPal account, if you don’t already have one, and send the top name ( 1st person ) $ 5.00 dollars. DON’T FORGET to include “Please add me to your list”. This is important as it keeps the program legal.
Step 2.
Send the other $ 5.00 dollars and and a note stating “Thank you. I’ve joined” to the 5th name on the list.
Step 3.
Remove the top name, bump the other 4 names up one place each. Place your name in the bottom slot and you will receive a minimum of $ 100.00 for your efforts.
Step 4.
Keep sending/posting the letter until you receive 20 “Thank you, I’ve joined” replies in your mailbox.
That’s it, It’s that simple !

Please give it an honest effort, you will not be disappointed and will be very glad you did when it starts to work. Remember, all you are going to be out of pocket is about the cost of a couple of coffees with the opportunity of banking thousands of dollars into your PayPal account! Take the smallest risk of your life !!!! Take 10-20 minutes to work on this small project and reap the rewards !

104 Mar 20, 2008 at 15:20 by Cillian

He IS in Jail. For a VERY long time. And by “Well dressed” these days, I am sure it was all an act. He’s probably a hideous-looking kid. Like most these days.

Pages: « 1 2 3 4 [5] Show All

Responses are closed

All remaining responses will continue to be archived. Use the TorrentFreak forums if you want to discuss something.