Video: How People Are Tracked Using BitTorrent

Written by enigmax on January 14, 2008 

Being tracked by anti-piracy organizations and receiving infringement notices on file-sharing networks is becoming more common. A security project manager has just released a short video showing how it’s done.

Tip: Want to download Torrents anonymously? Try TorrentPrivacy, the only way to torrents download securely.

A common question from BitTorrent users is how anti-p2p outfits trace and trace file-sharers in order to send infringement notices. We’ve reported on one technique in the past and now, thanks to Dan Morrill, a Security Project Manager with VMC Consulting in Redmond Washington, we have a short video illustrating another basic technique which is easy to understand.

Dan’s example involves him downloading a large file with the popular Azureus client, while giving a commentary on the various types of information offered by the client, a brief overview of how BitTorrent works, how it’s possible to be tracked and how the gathered information could be processed. He also touches on anonymity and the use of blocklists.

A popular piece of IP blocking software is Peerguardian, which can be downloaded at Phoenix Labs, with the blocklists available from Bluetack. Users seeking anonymity can achieve this by using a free proxy server but in reality, most don’t offer performance anywhere near good enough for BitTorrent. VPN services such as VPNTunnel aren’t free but they’re reliable and generally protect users from the techniques shown in the video.

Just one criticism; Dan states towards the end of the video that if you don’t use blocklists you are almost guaranteed to be ‘nabbed’. The majority of people don’t use blocklists and the majority of those are not getting ‘nabbed’.

Indeed, most of the cases we hear of from the United States are people who don’t use BitTorrent at all. On the other hand, blocklists mostly offer pseudo-security, since there’s no guarantee that you are not tracked while using them.

Previously: TorrentFreak Interviews a Lawyer Defending 500 File-Sharers

Next: MediaDefender Hacker Speaks Out

93 Responses

Pages: [1] 2 3 4 » Show All

1 Jan 14, 2008 at 19:43 by Eggman

Where is my chocolate?

2 Jan 14, 2008 at 19:47 by rosco

Peer Guardian II is a bag o’ shite……its a placebo and does as much harm as good.

Anyone that thinks otherwise is a complete Gimp and commonly known as a gullible plonker!

3 Jan 14, 2008 at 19:54 by lulz

so to track people downloading a torrent, you need a bittorrent client and then look at the console to see the list IPs downloading the file. NO FREAKING WAY?!

4 Jan 14, 2008 at 19:55 by rosco

Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop Woop

5 Jan 14, 2008 at 20:21 by Anon

VMC is an absolute JOKE of a company in the IT sector

6 Jan 14, 2008 at 20:22 by big dawg

I don’t get why this is news? I mean, you look at your peers, you see their IPs, you right them down on a piece of paper and you go hunt them down. It’s like looking for a house burglar, when you know he is staying at his momma’s house and you know the address.

We all know that we rely on odds, to escape the federales while we download to our heart’s content! Like buying weed! “They just want the big guys’, lil’ guys like me get left alone, and if not we just get warned…”

At least that’s my story and I’m sticking to it!

:)

7 Jan 14, 2008 at 20:24 by JoeRodge

Whats the difference between a dead baby and a Cadillac? There isn’t a Cadillac in my garage.

8 Jan 14, 2008 at 20:24 by uk_pirate

yarrrr!!! bring it on MAfIAA lackeys!!!

9 Jan 14, 2008 at 20:25 by Gimp

#2 Although PG2 is not the holy grail of p2p protection, it is protection none the less. Of course if you want maximum protectio, rip out your lan cable, but as thats not an option, using PG2 or ipfilter.dat or safepeer, or nipfilter is better than doing nothing at all. Theres an article right here on TF that shows using a blocklist of some sort is indeed of benefit.

10 Jan 14, 2008 at 20:28 by perrguardianpooey

last time i checked peerguardian didnt work on vista 64… any change?… alternatives to peerguardian?

11 Jan 14, 2008 at 20:39 by uk_pirate

I use vista 64, heres what i do: download a blocklist from bluetack, rename the rar file to ipfilter and insert it into your client. for utorrent you place the file in by opening run command and typing %appdata%\uTorrent. put the ipfilter file in there and its done. (utorrent has “use ipfilter=true” set as default). hope this helps.

12 Jan 14, 2008 at 20:40 by linux user

use peerguardian under linux with ipblock (iplist)
https://sourceforge.net/project/showfiles.php?group_id=198679

13 Jan 14, 2008 at 20:43 by Anonymous

My IP is f*ck MPA.AIF.PIR.IAA

14 Jan 14, 2008 at 20:45 by qm2003

Blocklists aren’t for protection (not so for a long time anyway).

They are for keeping out malicious clients, trying to send bad data or slow down the spreading of files.

As a SIDE EFFECT on occasion you also block access to/from snooping anti-p2p companies.

But thats it.

Snooping doesn’t require high bandwidth connections. You could even use an analog modem.

Better rely on some thoughts on what you are downloading and where to get it from BEFORE you start doing it.

15 Jan 14, 2008 at 20:50 by uk_pirate

indeed qm. private trackers anyone?

16 Jan 14, 2008 at 21:02 by Gimp

Private trackers are not a guarentee of safety. They too have thier share of anti p2p lurkers. Perhaps less in the way of bad peers, but not immune to the **aa’s and their ilk.

17 Jan 14, 2008 at 21:03 by gleb

what about TOR?

18 Jan 14, 2008 at 21:23 by Mikle

The database they create, they cant use. What about dynamic IP-adress ;)
An I use Relakks, so I can Relaxx :D

19 Jan 14, 2008 at 21:49 by Gangsta Rap Made Me Do It

[quote]Better rely on some thoughts on what you are downloading and where to get it from BEFORE you start doing it.[/quote] By #14 qm2003

You’re right.

20 Jan 14, 2008 at 21:51 by el90

block lists are a joke… if they want to trace you why dont they just hire a temp broadband with a new IP, or get dialup, or use VPN them self… to think that all their attacks on downloaders are done on their corporate IP is naive surely?

21 Jan 14, 2008 at 21:54 by Be Wary

No way to know 4 sure there aren’t copyright guys is there ?

Or do you have a system? Last I checked anti-p2p organizations use private ip’s.

22 Jan 14, 2008 at 21:57 by Revan

Well I guess he haven’t thought about shared IPs :-D

23 Jan 14, 2008 at 22:40 by TheOneX

I dont think companies and anti-p2p can use information that you gather from the logger.

I mean if they can track me down because of this method than who is to say that i can’t do the same to them.

if i charged for downloading the file because my ip is registered there than anti-p2p companies are doing it ilegal as well.

24 Jan 14, 2008 at 23:15 by Kokarn

Doesn’t this mean they have to download illegal stuff themselves? :)

1 references to this post

Pages: [1] 2 3 4 » Show All

Responses are closed

All remaining responses will continue to be archived. Use the TorrentFreak forums if you want to discuss something.