<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: OiNK Database Didn&#8217;t &#8216;Self Destruct&#8217;, Wasn&#8217;t Encrypted But Users Safe?</title>
	<atom:link href="http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/feed/" rel="self" type="application/rss+xml" />
	<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/</link>
	<description>Torrent News, Torrent Sites and the latest Scoops</description>
	<lastBuildDate>Sun, 22 Nov 2009 15:19:37 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.3</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: anon</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-212581</link>
		<dc:creator>anon</dc:creator>
		<pubDate>Tue, 13 Nov 2007 23:01:18 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-212581</guid>
		<description>Alan Ellis was fired from his job due to some of the site code being found on a work machine/laptop. As such the police raided his work place.

Genuine source :)</description>
		<content:encoded><![CDATA[<p>Alan Ellis was fired from his job due to some of the site code being found on a work machine/laptop. As such the police raided his work place.</p>
<p>Genuine source :)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: VivaGardner</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-201661</link>
		<dc:creator>VivaGardner</dc:creator>
		<pubDate>Fri, 02 Nov 2007 02:52:37 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-201661</guid>
		<description>You&#039;re a moron aza.  You obviously have limited private BT experience.  OiNK was fucking easy to maintain ratio.</description>
		<content:encoded><![CDATA[<p>You&#8217;re a moron aza.  You obviously have limited private BT experience.  OiNK was fucking easy to maintain ratio.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: VivaGardner</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-201660</link>
		<dc:creator>VivaGardner</dc:creator>
		<pubDate>Fri, 02 Nov 2007 02:51:26 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-201660</guid>
		<description>Nubs!  Yeah, cause hell exists.......</description>
		<content:encoded><![CDATA[<p>Nubs!  Yeah, cause hell exists&#8230;&#8230;.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: TehPAINE</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-201067</link>
		<dc:creator>TehPAINE</dc:creator>
		<pubDate>Thu, 01 Nov 2007 09:58:29 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-201067</guid>
		<description>The official OiNKS Pink Palace SHIRT!



http://www.cafepress.com/oppluvvpigg</description>
		<content:encoded><![CDATA[<p>The official OiNKS Pink Palace SHIRT!</p>
<p><a href="http://www.cafepress.com/oppluvvpigg" rel="nofollow">http://www.cafepress.com/oppluvvpigg</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Nubs!</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-199912</link>
		<dc:creator>Nubs!</dc:creator>
		<pubDate>Tue, 30 Oct 2007 23:45:39 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-199912</guid>
		<description>You will all burn in hell for stealing anyway so why get stressed out if you get slapped with a 100k lawsuit.. Satan will drill your ass for alot more! LOL!</description>
		<content:encoded><![CDATA[<p>You will all burn in hell for stealing anyway so why get stressed out if you get slapped with a 100k lawsuit.. Satan will drill your ass for alot more! LOL!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Meskarune</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-198735</link>
		<dc:creator>Meskarune</dc:creator>
		<pubDate>Mon, 29 Oct 2007 07:36:41 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-198735</guid>
		<description>This whole thing has just made me what to pirate more and stick it to those guys. I&#039;ve been using http://www.nch.com.au/soundtap/index_b.html?ref=google&amp;ref2=mstb to record streaming radio and up load songs/albums.</description>
		<content:encoded><![CDATA[<p>This whole thing has just made me what to pirate more and stick it to those guys. I&#8217;ve been using <a href="http://www.nch.com.au/soundtap/index_b.html?ref=google&amp;ref2=mstb" rel="nofollow">http://www.nch.com.au/soundtap/index_b.html?ref=google&amp;ref2=mstb</a> to record streaming radio and up load songs/albums.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-198595</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Mon, 29 Oct 2007 02:32:54 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-198595</guid>
		<description>Regardless of any records Oink may have kept, unless these authorities have tapped into a torrent you are seeding and have actually gotten a pirated file from you, how can they prove that you are indeed trafficking in illegal sharing? Anybody can name a torrent anything they want, and then rename a legal file as something illegal to fool you. Fake files are rampant anyway so just because a torrent and file are name &quot;Bourne Ultimatum&quot; doesn&#039;t mean that is the real file you will end up with--so how can they get you for illegal files if they never were able to hook up to your computer and get the real file? A log listing the names of user uploaded files means nothing without the actual file that they can prove is illegal to go with it (and referenced/gotten from your IP).</description>
		<content:encoded><![CDATA[<p>Regardless of any records Oink may have kept, unless these authorities have tapped into a torrent you are seeding and have actually gotten a pirated file from you, how can they prove that you are indeed trafficking in illegal sharing? Anybody can name a torrent anything they want, and then rename a legal file as something illegal to fool you. Fake files are rampant anyway so just because a torrent and file are name &#8220;Bourne Ultimatum&#8221; doesn&#8217;t mean that is the real file you will end up with&#8211;so how can they get you for illegal files if they never were able to hook up to your computer and get the real file? A log listing the names of user uploaded files means nothing without the actual file that they can prove is illegal to go with it (and referenced/gotten from your IP).</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: annoyed</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-197911</link>
		<dc:creator>annoyed</dc:creator>
		<pubDate>Sun, 28 Oct 2007 04:32:42 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-197911</guid>
		<description>silly people, it doesn&#039;t matter what was in those logs.  it could be your fucking social security number and the authorities wouldn&#039;t be able to touch you.  

there was this thing called cheating that oink and the mods spent plenty of time trying to prevent.  to do this you have to adjust what your client tells the tracker.  in other words there is no proof that these logs contain accurate information.  they could easily be tampered with by oink himself or the users.  for example, i&#039;ve saw a guy in the forums one time that had a ratio of 10000.00 in a matter of minutes of being on the site.  he was obviously kicked off, but there is no proof that this type of thing did not take place regularly.

now quit fucking crying. jeez</description>
		<content:encoded><![CDATA[<p>silly people, it doesn&#8217;t matter what was in those logs.  it could be your fucking social security number and the authorities wouldn&#8217;t be able to touch you.  </p>
<p>there was this thing called cheating that oink and the mods spent plenty of time trying to prevent.  to do this you have to adjust what your client tells the tracker.  in other words there is no proof that these logs contain accurate information.  they could easily be tampered with by oink himself or the users.  for example, i&#8217;ve saw a guy in the forums one time that had a ratio of 10000.00 in a matter of minutes of being on the site.  he was obviously kicked off, but there is no proof that this type of thing did not take place regularly.</p>
<p>now quit fucking crying. jeez</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: WinBSF</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-197739</link>
		<dc:creator>WinBSF</dc:creator>
		<pubDate>Sat, 27 Oct 2007 22:40:41 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-197739</guid>
		<description>In the weeks and days leading up to the close of the site I would notice at approx 1am Pacific time the site would stop for 10-15mins while the system was &quot;backed up&quot;.  the message also suggested the user grab a cup of coffee.  Must mean it was what 8am in England.  sounded right to me.  I saw this happening a couple of times so I know he backed something up.</description>
		<content:encoded><![CDATA[<p>In the weeks and days leading up to the close of the site I would notice at approx 1am Pacific time the site would stop for 10-15mins while the system was &#8220;backed up&#8221;.  the message also suggested the user grab a cup of coffee.  Must mean it was what 8am in England.  sounded right to me.  I saw this happening a couple of times so I know he backed something up.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ah</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-197112</link>
		<dc:creator>Ah</dc:creator>
		<pubDate>Sat, 27 Oct 2007 07:09:53 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-197112</guid>
		<description>[quote comment=&quot;196611&quot;]Private site IMHO sucks. The user are selfish and only want to do 1:1
So in short their trading byte for byte. That&#039;s not how p2p should work
If most of you didn&#039;t join site like this public site would be a lot better
I don&#039;t blame oink for being like that I blame people for being such a sheep and let the few abuse them with BS ratio. Most user don&#039;t have decent upload speed, to maintain a ratio is torture or abusive. Plz do us all a favor and go public!
You get a lot more people to leech and sleep a lot better at night knowing that you are anonymous.
oink is not just maintaining ratio they are nazi![/quote]


I bet 90% of ex oink users would not use a public &quot;oink&quot;

so then what?  No good content and public &quot;oink&quot; is shit just like every other public tracker</description>
		<content:encoded><![CDATA[<p>[quote comment="196611"]Private site IMHO sucks. The user are selfish and only want to do 1:1<br />
So in short their trading byte for byte. That&#8217;s not how p2p should work<br />
If most of you didn&#8217;t join site like this public site would be a lot better<br />
I don&#8217;t blame oink for being like that I blame people for being such a sheep and let the few abuse them with BS ratio. Most user don&#8217;t have decent upload speed, to maintain a ratio is torture or abusive. Plz do us all a favor and go public!<br />
You get a lot more people to leech and sleep a lot better at night knowing that you are anonymous.<br />
oink is not just maintaining ratio they are nazi![/quote]</p>
<p>I bet 90% of ex oink users would not use a public &#8220;oink&#8221;</p>
<p>so then what?  No good content and public &#8220;oink&#8221; is shit just like every other public tracker</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ink</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-196854</link>
		<dc:creator>Ink</dc:creator>
		<pubDate>Sat, 27 Oct 2007 00:45:22 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-196854</guid>
		<description>ThisISIT so you basically chicken out on the best thing you ever discovered, gz to that.

In a few decades you&#039;ll be like todays old war guys who actually wet their pants but brag about how heroic they were when they were young and in war... you&#039;ll be Grandpa Simpson (not that I think war is heroic).

Todays copyright laws are outdated and not fit for an internet-world bending over like a girl won&#039;t help changing that.</description>
		<content:encoded><![CDATA[<p>ThisISIT so you basically chicken out on the best thing you ever discovered, gz to that.</p>
<p>In a few decades you&#8217;ll be like todays old war guys who actually wet their pants but brag about how heroic they were when they were young and in war&#8230; you&#8217;ll be Grandpa Simpson (not that I think war is heroic).</p>
<p>Todays copyright laws are outdated and not fit for an internet-world bending over like a girl won&#8217;t help changing that.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: ThisISIT</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-196710</link>
		<dc:creator>ThisISIT</dc:creator>
		<pubDate>Fri, 26 Oct 2007 21:52:00 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-196710</guid>
		<description>Well i&#039;m done with torrents. I stumbled upon oink by accident some time ago and actually bought lots of the music i downloaded and went to shows of the new bands i discovered. All this madness isnt worth it. I found emusic.com which looks pretty good so when i feel like downloading music i can use that...save me from having to leave the house to buy music all the time!

Seems unfair that all oinkers could potentially get lumped in the same category of pirates trying to take down the industry which isnt the case at all.

Thanks to oink i&#039;ve bought way more albums, discovered way more bands, went to way more shows and spread the word about all these new bands to friends than i ever would have without it. 

It&#039;s a shame they don&#039;t take the oink model and make it a legit site. That&#039;s all we really need.</description>
		<content:encoded><![CDATA[<p>Well i&#8217;m done with torrents. I stumbled upon oink by accident some time ago and actually bought lots of the music i downloaded and went to shows of the new bands i discovered. All this madness isnt worth it. I found emusic.com which looks pretty good so when i feel like downloading music i can use that&#8230;save me from having to leave the house to buy music all the time!</p>
<p>Seems unfair that all oinkers could potentially get lumped in the same category of pirates trying to take down the industry which isnt the case at all.</p>
<p>Thanks to oink i&#8217;ve bought way more albums, discovered way more bands, went to way more shows and spread the word about all these new bands to friends than i ever would have without it. </p>
<p>It&#8217;s a shame they don&#8217;t take the oink model and make it a legit site. That&#8217;s all we really need.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-196617</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Fri, 26 Oct 2007 19:34:42 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-196617</guid>
		<description>[quote comment=&quot;196584&quot;]All the talk of hunting down members is just BS on the part of the record industry, and they know it.[/quote]

really.

well i&#039;m convinced!

Must be very easy to assuage your fears by portraying the authorities as the villains of the piece and therefore dull witted morons.

Unfortuantely police computer teams aren&#039;t stupid.</description>
		<content:encoded><![CDATA[<p>[quote comment="196584"]All the talk of hunting down members is just BS on the part of the record industry, and they know it.[/quote]</p>
<p>really.</p>
<p>well i&#8217;m convinced!</p>
<p>Must be very easy to assuage your fears by portraying the authorities as the villains of the piece and therefore dull witted morons.</p>
<p>Unfortuantely police computer teams aren&#8217;t stupid.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-196613</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Fri, 26 Oct 2007 19:32:14 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-196613</guid>
		<description>[quote comment=&quot;196163&quot;][quote comment=&quot;195656&quot;][quote comment=&quot;195583&quot;]The key things that would leave users in trouble are:

logging IP addresses

logging torrents downloaded

logging torrents uploaded

As far as I remember, oink did all three of those.  They have to log IPs so they can ban cheaters, right?  And I&#039;m pretty sure I saw the IP address I was using (my neighbor&#039;s wireless) in my profile (with an &quot;only visible to you&quot; notice, but still recorded in there.)

They also had a list of torrents you snatched, as well as what you uploaded.[/quote]

Actually, just because it displays the IP you are logged in from doesn&#039;t indicate it&#039;s being stored.  In fact, Paine himself indicated that they didn&#039;t log IPs for snatches in his blog.  (http://tehpaine.blogspot.com/)  Check the quote below.

[quote=Paine]A few people have asked me if we logged the IP you snatched things from. The answer is no, we did not log snatch IPs.[/quote]

So, yeah.[/quote]
Wouldn&#039;t that be entrapment?[/quote]
 It says so in the blog, wow it must be true!

I mean thse people are honest enough to do something they know is legally extremely risky *irresective of how noble people might find it). These guys were engaged in illegal activity and you are just going to trust something they could have easily said to cover their own backsides.

I for one would like a damn site more evidence than just &#039;trust us, we&#039;re professionals&#039;.

Yeah, professionals who got stalked and caught with their pants down.</description>
		<content:encoded><![CDATA[<p>[quote comment="196163"][quote comment="195656"][quote comment="195583"]The key things that would leave users in trouble are:</p>
<p>logging IP addresses</p>
<p>logging torrents downloaded</p>
<p>logging torrents uploaded</p>
<p>As far as I remember, oink did all three of those.  They have to log IPs so they can ban cheaters, right?  And I&#8217;m pretty sure I saw the IP address I was using (my neighbor&#8217;s wireless) in my profile (with an &#8220;only visible to you&#8221; notice, but still recorded in there.)</p>
<p>They also had a list of torrents you snatched, as well as what you uploaded.[/quote]</p>
<p>Actually, just because it displays the IP you are logged in from doesn&#8217;t indicate it&#8217;s being stored.  In fact, Paine himself indicated that they didn&#8217;t log IPs for snatches in his blog.  (<a href="http://tehpaine.blogspot.com/" rel="nofollow">http://tehpaine.blogspot.com/</a>)  Check the quote below.</p>
<p>[quote=Paine]A few people have asked me if we logged the IP you snatched things from. The answer is no, we did not log snatch IPs.[/quote]</p>
<p>So, yeah.[/quote]<br />
Wouldn&#8217;t that be entrapment?[/quote]<br />
 It says so in the blog, wow it must be true!</p>
<p>I mean thse people are honest enough to do something they know is legally extremely risky *irresective of how noble people might find it). These guys were engaged in illegal activity and you are just going to trust something they could have easily said to cover their own backsides.</p>
<p>I for one would like a damn site more evidence than just &#8216;trust us, we&#8217;re professionals&#8217;.</p>
<p>Yeah, professionals who got stalked and caught with their pants down.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: aza</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-196611</link>
		<dc:creator>aza</dc:creator>
		<pubDate>Fri, 26 Oct 2007 19:29:39 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-196611</guid>
		<description>Private site IMHO sucks. The user are selfish and only want to do 1:1 
So in short their trading byte for byte. That&#039;s not how p2p should work
If most of you didn&#039;t join site like this public site would be a lot better
I don&#039;t blame oink for being like that I blame people for being such a sheep and let the few abuse them with BS ratio. Most user don&#039;t have decent upload speed, to maintain a ratio is torture or abusive. Plz do us all a favor and go public!
You get a lot more people to leech and sleep a lot better at night knowing that you are anonymous.
oink is not just maintaining ratio they are nazi!</description>
		<content:encoded><![CDATA[<p>Private site IMHO sucks. The user are selfish and only want to do 1:1<br />
So in short their trading byte for byte. That&#8217;s not how p2p should work<br />
If most of you didn&#8217;t join site like this public site would be a lot better<br />
I don&#8217;t blame oink for being like that I blame people for being such a sheep and let the few abuse them with BS ratio. Most user don&#8217;t have decent upload speed, to maintain a ratio is torture or abusive. Plz do us all a favor and go public!<br />
You get a lot more people to leech and sleep a lot better at night knowing that you are anonymous.<br />
oink is not just maintaining ratio they are nazi!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-196610</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Fri, 26 Oct 2007 19:27:34 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-196610</guid>
		<description>[quote comment=&quot;195380&quot;]well im glad its safe to say the logs didnt have enough evidence to incriminate the users[/quote]
What is that based on? What evidence is there to suggest there isn&#039;t enough to base this on? I mean is the guy a lawyer? Let&#039;s get real about this!</description>
		<content:encoded><![CDATA[<p>[quote comment="195380"]well im glad its safe to say the logs didnt have enough evidence to incriminate the users[/quote]<br />
What is that based on? What evidence is there to suggest there isn&#8217;t enough to base this on? I mean is the guy a lawyer? Let&#8217;s get real about this!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Azazel</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-196584</link>
		<dc:creator>Azazel</dc:creator>
		<pubDate>Fri, 26 Oct 2007 19:01:08 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-196584</guid>
		<description>Also from BMTV-Admin:


Quote:
Originally Posted by ....... View Post
&quot;For the record, from Paine&#039;s blog:
Edit 2: This is an important one -- Your passwords do NOT need to be changed, they were stored as salted MD5 hashes. All the authorities have is the hashes. The only way they can get the original passwords is via brute force. The chances of that are slim to none if you followed standard good password practice.&quot;

A:
Only if you follow good password procedure. If your password is kitten, it&#039;s likely to be broken in under 30 seconds.
The problem occurs because although password hashes are salted with a &#039;secret&#039; key, the secret is stored alongside the hash. The MD5 hash of [secret]password[secret] is no harder to break in brute force than the MD5 of password, when you know what [secret] is. Because MD5 hashes are so quickly generated, if you used any regular word for your password a good dictionary attack will find it in seconds.


The thing that should give people hope is that nothing found on the server can in anyway be used in a real case against any members. It is impossible to say whether a user with certain stats listed in the database shared even one copyright file, or that they uploaded the amount listed in the database.
They may have filenames from the snatched table, but without having the exact file that was shared, the name of a file is not enough. I could share a file called starwars that was actually midget clown porn. Without a copy of that file, nobody can say it definately was or wasn&#039;t starwars that was shared.

All the talk of hunting down members is just BS on the part of the record industry, and they know it.</description>
		<content:encoded><![CDATA[<p>Also from BMTV-Admin:</p>
<p>Quote:<br />
Originally Posted by &#8230;&#8230;. View Post<br />
&#8220;For the record, from Paine&#8217;s blog:<br />
Edit 2: This is an important one &#8212; Your passwords do NOT need to be changed, they were stored as salted MD5 hashes. All the authorities have is the hashes. The only way they can get the original passwords is via brute force. The chances of that are slim to none if you followed standard good password practice.&#8221;</p>
<p>A:<br />
Only if you follow good password procedure. If your password is kitten, it&#8217;s likely to be broken in under 30 seconds.<br />
The problem occurs because although password hashes are salted with a &#8217;secret&#8217; key, the secret is stored alongside the hash. The MD5 hash of [secret]password[secret] is no harder to break in brute force than the MD5 of password, when you know what [secret] is. Because MD5 hashes are so quickly generated, if you used any regular word for your password a good dictionary attack will find it in seconds.</p>
<p>The thing that should give people hope is that nothing found on the server can in anyway be used in a real case against any members. It is impossible to say whether a user with certain stats listed in the database shared even one copyright file, or that they uploaded the amount listed in the database.<br />
They may have filenames from the snatched table, but without having the exact file that was shared, the name of a file is not enough. I could share a file called starwars that was actually midget clown porn. Without a copy of that file, nobody can say it definately was or wasn&#8217;t starwars that was shared.</p>
<p>All the talk of hunting down members is just BS on the part of the record industry, and they know it.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Anonymous</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-196583</link>
		<dc:creator>Anonymous</dc:creator>
		<pubDate>Fri, 26 Oct 2007 18:59:34 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-196583</guid>
		<description>A knowledgeable Admin (BMTV) said: 

&quot;Hate to rain on the feelgood parade, but a couple of points.

Quote:
Originally Posted by GoodOmens View Post
An interesting tibit dug up on torrentfreak:

a source has stated that the OiNK membership list was not only encrypted, but also equipped with a &#039;self-destruct&#039; type mechanism which relied on a regular signal to continue in &#039;OFF&#039; mode.

Should be comforting to all the users^^
That source doesn&#039;t know too much about encryption.
If the entire table was encrypted, the server would need a copy of the decryption key (in public/private keypair encryption) or another method for decrypting the contents in order to operate. A webserver cannot perform magic and call up details without decrypting. The police have the server which means they have the decryption key/method and it&#039;ll take no time to get the plain text.

The self wiping database may be true, and may not be. The problem with requiring a regular &#039;signal&#039; comes when there are problems on either end that result in the signal not arriving. Leaseweb have had their share of problems lately, with something like 50-60% packet loss in one of their datacenters. The loss of signal would cause a downtime and loss of some stats as the site would have to be rolled back to a backup database. If that has never happened, it&#039;s unlikely to be true.

Even if it is true, you have to consider data forensic methodology. When dealing with HDDs for evidentiary purposes, you never work on the HDD in the original machine. You never even boot from that HDD.
What the police teams will be doing is taking a copy of that drive before they do anything, then browsing the files with the drive attached as a non-booting slave. No cron jobs will run to wipe the database, no code will be running awaiting the &#039;signal&#039;, and all MySQL databases are copyable as files.
All they have to do is copy all the files from that HDD to a clean MySQL install and they can read everything at will.

The only thing that could save the data from being examined is if the users table was stored in a HEAP table (stored in memory). Even then, some data may have been written to disk as the table expands outside of memory allocation or is operated on with large join operations that would exceed available memory. In either case, data may be recoverable from disk.
It&#039;s unlikely the users table was stored only in memory though, as it means all data is lost on a power down or reset. Tables could be recovered from backups, but as the police have those anyway it kind of defeats the purpose of having it in memory only.&quot;</description>
		<content:encoded><![CDATA[<p>A knowledgeable Admin (BMTV) said: </p>
<p>&#8220;Hate to rain on the feelgood parade, but a couple of points.</p>
<p>Quote:<br />
Originally Posted by GoodOmens View Post<br />
An interesting tibit dug up on torrentfreak:</p>
<p>a source has stated that the OiNK membership list was not only encrypted, but also equipped with a &#8217;self-destruct&#8217; type mechanism which relied on a regular signal to continue in &#8216;OFF&#8217; mode.</p>
<p>Should be comforting to all the users^^<br />
That source doesn&#8217;t know too much about encryption.<br />
If the entire table was encrypted, the server would need a copy of the decryption key (in public/private keypair encryption) or another method for decrypting the contents in order to operate. A webserver cannot perform magic and call up details without decrypting. The police have the server which means they have the decryption key/method and it&#8217;ll take no time to get the plain text.</p>
<p>The self wiping database may be true, and may not be. The problem with requiring a regular &#8217;signal&#8217; comes when there are problems on either end that result in the signal not arriving. Leaseweb have had their share of problems lately, with something like 50-60% packet loss in one of their datacenters. The loss of signal would cause a downtime and loss of some stats as the site would have to be rolled back to a backup database. If that has never happened, it&#8217;s unlikely to be true.</p>
<p>Even if it is true, you have to consider data forensic methodology. When dealing with HDDs for evidentiary purposes, you never work on the HDD in the original machine. You never even boot from that HDD.<br />
What the police teams will be doing is taking a copy of that drive before they do anything, then browsing the files with the drive attached as a non-booting slave. No cron jobs will run to wipe the database, no code will be running awaiting the &#8217;signal&#8217;, and all MySQL databases are copyable as files.<br />
All they have to do is copy all the files from that HDD to a clean MySQL install and they can read everything at will.</p>
<p>The only thing that could save the data from being examined is if the users table was stored in a HEAP table (stored in memory). Even then, some data may have been written to disk as the table expands outside of memory allocation or is operated on with large join operations that would exceed available memory. In either case, data may be recoverable from disk.<br />
It&#8217;s unlikely the users table was stored only in memory though, as it means all data is lost on a power down or reset. Tables could be recovered from backups, but as the police have those anyway it kind of defeats the purpose of having it in memory only.&#8221;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Somebody</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-196576</link>
		<dc:creator>Somebody</dc:creator>
		<pubDate>Fri, 26 Oct 2007 18:50:35 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-196576</guid>
		<description>I WANT to feel unnerved about this, but the facts are really making it difficult for me. 

1. I live in America, so I&#039;m not TOO worried about the Dutch Police coming after me.

2. Even though my account donated, it was a friend of mine that donated on my behalf so that I could give him an invite (yeah, it broke the rules....sue me). So they&#039;d go after him before me =p.

3. I&#039;m one of 180k+ users, not to mention I only DL&#039;d like 6 gigs of old content. I would be low on their priority list.

All I have to worry about now is uploading my old Oink stuff to BOink.</description>
		<content:encoded><![CDATA[<p>I WANT to feel unnerved about this, but the facts are really making it difficult for me. </p>
<p>1. I live in America, so I&#8217;m not TOO worried about the Dutch Police coming after me.</p>
<p>2. Even though my account donated, it was a friend of mine that donated on my behalf so that I could give him an invite (yeah, it broke the rules&#8230;.sue me). So they&#8217;d go after him before me =p.</p>
<p>3. I&#8217;m one of 180k+ users, not to mention I only DL&#8217;d like 6 gigs of old content. I would be low on their priority list.</p>
<p>All I have to worry about now is uploading my old Oink stuff to BOink.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: OiNK.ms</title>
		<link>http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe-071025/#comment-196534</link>
		<dc:creator>OiNK.ms</dc:creator>
		<pubDate>Fri, 26 Oct 2007 18:03:16 +0000</pubDate>
		<guid isPermaLink="false">http://torrentfreak.com/oink-database-didnt-self-destruct-wasnt-encrypted-but-users-safe/#comment-196534</guid>
		<description>http://oink.ms/

lol?</description>
		<content:encoded><![CDATA[<p><a href="http://oink.ms/" rel="nofollow">http://oink.ms/</a></p>
<p>lol?</p>
]]></content:encoded>
	</item>
</channel>
</rss>
