Thus far, these services were believed to adequately hide a user’s IP-address from people they connect to in BitTorrent swarms, but this is not always the case. At the Telecomix Cipher conference a security flaw was revealed that allows third parties to find the true IP-address of someone connected through a VPN.

The security risk is caused by a lethal combination of IPv6 and PPTP-based VPN services, which are very common. IPv6 is the Internet protocol that will succeed IPv4. The protocol is promoted by Windows 7 and Vista, among others, and most people are using it without even realizing it.

The technical details of the vulnerability, explained in this talk (see below), reveal that the true IP-address of users using IPv6 can be easily traced. Even worse, it seems that the Swedish Anti-piracy Bureau may already be using this flaw to gather data on ‘anonymous’ BitTorrent users.

The vulnerability is not limited to BitTorrent either. It can expose people who believe that they are hiding their real IP-address through nearly every connection.

In addition to this gaping hole in VPNs such as Ipredator and Relakks, the talk exposes several other weaknesses from a privacy point of view. Among other things, it is fairly easy to find MAC-addresses and computer names of people who use the same VPN.

The people who run Ipredator are aware of the issue, and TorrentFreak was informed that their users will be notified about the problem. Other VPNs using the same system may want to do the same. From our understanding of the issue, turning IPv6 off should alleviate the threat and make users fully anonymous again.

Source: TorrentFreak, for the latest info on copyright, file-sharing and anonymous VPN services.

The results of the survey clearly showed that avid file-sharers would rather hide their identities than stop downloading. And indeed, more and more BitTorrent users are seeking ways to protect their privacy online, rendering all the newly proposed anti-piracy laws useless.

TorrentPrivacy and BTGuard are just two examples of services launched in the past year, targeted at concerned BitTorrent users. The goal of these and other anonymity applications is clear; hide the IP-address of the file-sharer so he can’t be tracked down while swapping files.

Currently in beta, The Pirate Bay’s Ipredator uses the same tech platform as the VPN service Relakks. For a few dollars a month it routes all your traffic through its servers, hiding your IP address. Ipredator is currently limited to 3000 users but according to the Pirate Bay team there are another 180,000 users on the waiting list, eager to join.

Running a VPN network for hundreds of thousands of hungry BitTorrent users will prove to be quite a challenge. The infrastructure and bandwidth required by a service targeted at file-sharers is significant, not to mention costly. This undoubtedly leads to problems.

The aforementioned Relakks saw its subscriptions double in just a month when the controversial Ipred law came into effect in Sweden this April. This surge in subscriptions led to to major problems with support and updates according to Relakks’s chairman Jan Erik Fiske.

Unlike more traditional VPN services, BitBlinder recently introduced a free solution. Instead of routing the traffic through a central server BitBlinder passes it on through multiple peers. Each peer in the chain only knows the IP address of the next person in the chain, not the original requester/sender.

A few days after its launch BitBlinder had signed up more than 30,000 new users. Right now registrations are temporarily closed to make sure everything runs smoothly for those already using the service, and while they iron out bugs. “We want to make sure it works, and is secure for everyone,” Josh Albrecht, one of the creators of BitBlinder told TorrentFreak.

Because of the increasing interest in anonymity, the Swedish ISP Alltele decided to offer a free service to conceal the IP-addresses of its customers. According to Alltele’s CEO Ola Norberg thousands of users have downloaded the application, which nearly killed the server it was running on.

These examples clearly show that the scare tactics of the entertainment industry are not going to work. There is no doubt that with every new anti-piracy initiative introduced, more and more users will find their way to one of the many anonymizing services out there.

Instead of stopping the pirates in their tracks the entertainment industry has simply inspired a new ‘industry’ worth millions of dollars.

Source: TorrentFreak, for the latest info on copyright, file-sharing and anonymous VPN services.

Millions of people around the globe share files and most do so without a second thought for privacy issues. A lot don’t know that it’s possible for people to monitor their online activities and equally, many will know that they can be monitored but chance their hand that they are one in millions and will probably slip under the radar.

For an increasing number of net users, privacy and a level of anonymity is becoming a requirement, especially for those in locales where ridiculous fines and prison sentences are becoming more prevalent. Those faced with the menace of P2P meddling ISPs or those hassled by the nuisance of sites being blocked can solve all of these problems with a VPN – a Virtual Private Network service.

Anyone looking for a Relakks alternative (who doesn’t wish to read my rantings!) should scroll to the section below marked: “Relakks Alternatives”

The Rise and Fall of Relakks

When Relakks burst on to the scene in late 2006 it was heralded as the “world’s first commercial darknet”, promising to hide your online identity in exchange for a small fee. As a big privacy fan (some might say ‘obsessive’), I immediately signed up for this service and have been a customer ever since. Sadly, I’ve had enough.

Although great for web browsing and running one or two torrents at a time, ask it to handle more than a handful of torrents and the whole connection simply stops responding. I’ve seen many other Relakks users with this same problem and to come home from many hours out, eager to sample what you downloaded today only to find a dead connection, it’s an annoyance. When you were supposed to be seeding a friend’s Hip-Hop album all night and it died after 6mb uploaded and no-one got anything, it’s a major hassle and time to complain to Relakks. Again.

Relaxed Customer Service

Any member of Relakks will tell you – their customer support is VERY ‘relaxed’. Send them a complaint or a query – it takes at least 3 days to get a response. My multiple questions about the ‘dropped connection’ issue always resulted in ‘you have a firewall issue’ response and this is a standard response to people complaining about this. The Relakks ‘News/Status‘ page is never updated, it’s useless.

There have been many, many days where service has been sporadic at best but recently the entire Relakks network was down from Friday to Monday so I ran out of patience and complained in my capacity as TorrentFreak writer – surely this would be enough? I wrote a highly detailed email looking for some definitive answers and the great response from support@relakks.com after multiple attempts at different times was: ‘Undeliverable’

Relakks you have lost me – not on price but customer service. I have you emailed you many, many times over the months, you have never solved my problems. Your service is cheap but when I pay for a premium service I expect support – I get better support from free BitTorrent sites. Time to protest by spending elsewhere – if only I hadn’t paid you 12 months in advance.

Relakks Alternatives

VPNOut kindly got in touch to let us sample their service but due to issues with the host PC (it wasn’t VPNOut’s fault) that trial never really got off the ground but already, responses and customer service levels were way above what i’d experienced with Relakks.

Moving on, I came across VPNTunnel and I thought I’d give it a try. Sadly I had the same installation issues as I did with VPNOut but it was at this point where you really appreciate a company who not only wants your business, but is prepared to bend over backwards to get it. With nearly 20 years in sales, I know good service when I see it and VPNTunnel’s blew me away.

After complaining I couldn’t install VPNTunnel’s software (my PC’s fault, not theirs) a customer support guy got in touch within minutes and over the course of the next 24 hours and number of emails later resulted in me receiving a custom version of their software, tailored to my exact requirements! I was back in business and loving the contrast in customer service levels. Now for a trial run.

After loading 3 torrents and allowing each to connect to a minimum of 10 peers, more torrents were loaded, totaling 15. The connection remained stable with a total speed of around 5mbit, which compares to Relakks. Stability remained for all transfers even after simultaneous downloads were initiated on both IRC and Usenet. More speed would be nice but given the choice, I’ll take reliability instead. A generous 50gig monthly limit is more than enough for me.

Relakks (Sweden) do not reveal what information they hold on their customers but say they won’t give it up unless ordered to in a criminal case carrying a penalty of 2 years in jail. VPNTunnel (based in Scotland) obviously keep your payment data but only carry log in information (your real IP address) for 30 days and there are signs this may decrease further to 21 days. Any potential legal action would need to move at an unprecedented speed to have even a small chance of identifying someone.

File-sharers are notoriously difficult to please – they get everything for free and still expect customer service from torrent sites and the like. So when a file-sharer actually puts his hand in his pocket to pay for a service, he expects to be treated well. I think deep down I’m more angry with myself than Relakks. I’ve promoted Relakks for 12 months to thousands of people and then in the end, couldn’t take my own advice.

You weren’t all bad Relakks, you just took me for granted and although I’ll end up paying more with VPNTunnel, it’s worth it, if only to get stability and that ‘wanted’ feeling.

Here ends my first ever Tor-Rant. Deep breaths….in……out….

Source: TorrentFreak, for the latest info on copyright, file-sharing and anonymous VPN services.

In short, every communications network operator will have to log and store data about all of their users. Whilst the contents of the messages are not currently expected to be stored, everything from the IDs of either end of the communication, anything to identify the type of equipment used, the time and length of the call, and, perhaps most importantly, the location of cellular telephone handsets when used.

The Piratpartiet‘s Rick Falkvinge stresses this last point as a large privacy concern. “We’re rapidly descending into a surveillance society. We know exactly where this road leads – we’ve seen it in Europe’s recent history. When the Berlin wall came down, we were rejoicing that the oppressed Eastern bloc would become like Western democracies. It was never supposed to be the other way around.”

What makes things even more uncertain, is that at present no-one knows how long the Swedish bill will require information to be held. The EU Directive states anywhere from 6 to 24 months. Of equal uncertainty is the legal threshold for obtaining information stored under these measures.

Speakers at the Malmö rally included Swedish IP entrepreneur Jonas Birgersson, CEO of ISP Bredband2, as well as the annonymiser Relakks, whilst Stockholm had Falkvinge, and other Pirate Party board members.

The demonstration echo’s similar protests in other European countries, such as the 15,000 that marched in Berlin in late September. More demonstrations are due in Germany on the 6th in more than 30 cities. With information like this being stored, it will potentially magnify the guilty until innocent approach already being used in file sharing trials. If the jury in the Thomas trial had been shown a record of a communication logged through such a system, they may have pressed for even higher damages per song. The major drawback with these systems, however, was pointed out in a recent court motion by the Oregon Attorney General , whilst you can identify the technological devices used, that still doesn’t identify the person using it. Furthermore, in any well planned criminal incident (which covers terrorism) it’s not unknown to use equipment which does not belong to you. Stolen credit cards, false numberplates, cloned cell phones. As with DRM, it only causes problems, without solving any.

Source: TorrentFreak, for the latest info on copyright, file-sharing and anonymous VPN services.