Usenet safety

[KFlint]

Moral of story: wanna get caught eventually, use P2P. Wanna download to your hearts content in safety, use Usenet. I wouldn't even use DDL because the baddies could bait you into downloading something and log your IP address.

How? Do the file uploader on a DDL site know who snatched a file? Unless it's possible I don't believe it's a risk at all on known sites...

[anon]

There are many P2Ps that use SSL or other encryption protocol, which anyway only prevents packet sniffing by 3rd parties but does not make a user anonymous in the least. To provide true anonymity requires hiding a person's actual IP address, a function completely unrelated to SSL encryption.

Spot on as usual.

How? Do the file uploader on a DDL site know who snatched a file? Unless it's possible I don't believe it's a risk at all on known sites...

I have yet to hear about a file hoster that lets uploaders see the IPs of who downloaded their files. That doesn't mean the site itself wouldn't keep logs, which could be requested by law enforcement in extreme cases, but with that outlook there's no truly safe method of downloading stuff.

[sandman_1]

How? Do the file uploader on a DDL site know who snatched a file? Unless it's possible I don't believe it's a risk at all on known sites...

It would be infinitely easier going after the DDL provider who's subscriber is responsible for the infringing material. Everything is centralized to one location: 1 account and 1 provider. With Usenet, it is decentralized. The content is mirrored on several providers.

[zootman]

Cheers fellas this has been a big help.

So if packet sniffing/inspection is prevented by SSL, and anonymity is provided by a VPN - are there any VPN services you guys would recommend? Hypatia says one preferably based in Sweden; is there any particular VPN provider that people've had good experiences with?

[cola]

There are many P2Ps that use SSL or other encryption protocol, which anyway only prevents packet sniffing by 3rd parties but does not make a user anonymous in the least. To provide true anonymity requires hiding a person's actual IP address, a function completely unrelated to SSL encryption.

The actual p2p traffic isn't SSL. It's in RC4, which is weak but only meant to get around traffic shaping. Although some trackers have SSL on their website.

I have yet to hear about a file hoster that lets uploaders see the IPs of who downloaded their files. That doesn't mean the site itself wouldn't keep logs, which could be requested by law enforcement in extreme cases, but with that outlook there's no truly safe method of downloading stuff.

I'd be more worried that the DDL site was set up as a honeypot instead of worrying that they'd be forced to turn over logs. Especially when you see files being hosted at new or lesser known DDL sites.

So if packet sniffing/inspection is prevented by SSL, and anonymity is provided by a VPN - are there any VPN services you guys would recommend? Hypatia says one preferably based in Sweden; is there any particular VPN provider that people've had good experiences with?

I wouldn't bother with a VPN if you only plan on using usenet. If you're wanting to p2p over VPN, go ahead, but for usenet alone its complete overkill, and not worth the money.

[maddphaxr]

Never got a DMCA with newgroups.

[zot]

So if packet sniffing/inspection is prevented by SSL, and anonymity is provided by a VPN - are there any VPN services you guys would recommend? Hypatia says one preferably based in Sweden; is there any particular VPN provider that people've had good experiences with?

This explains some of the differences between a few popular VPNs; basically, some VPNs keep logs and others do not:

http://torrentfreak.com/which-vpn-providers-really-take-anonymity-seriously-111007/

[JustDOSE]

Moral of story: wanna get caught eventually, use P2P. Wanna download to your hearts content in safety, use Usenet. I wouldn't even use DDL because the baddies could bait you into downloading something and log your IP address.

How? Do the file uploader on a DDL site know who snatched a file? Unless it's possible I don't believe it's a risk at all on known sites...

how, virii, thats how they will know. once you install a freshly made virii that norton((or w/e)how do you think Norton gets those virus on there list? someone had to have installed it) doesnt stop

how do we know that certain mushrooms will kill?? someone sometime was hungry enough and ate one..... LOL /dead X.X

[mjmacky]

How? Do the file uploader on a DDL site know who snatched a file? Unless it's possible I don't believe it's a risk at all on known sites...

how, virii, thats how they will know. once you install a freshly made virii that norton((or w/e)how do you think Norton gets those virus on there list? someone had to have installed it) doesnt stop

how do we know that certain mushrooms will kill?? someone sometime was hungry enough and ate one..... LOL /dead X.X

That's assuming the upload is a virus, but the whole analogy seems to have lost footing. We are assuming we're competent enough to avoid grabbing unknown executables.

[zot]

Regarding the possibility of a download "honeypot" -- we should keep in mind that in most countries (strictly) downloading copyrighted material is itself not illegal. It seems most baited traps deal in child porn, and anyone who dares to download it can expect a 4 AM swat-team raid.

how do we know that certain mushrooms will kill?? someone sometime was hungry enough and ate one..... LOL /dead X.X

Mass spectrometry would be another way of determining toxicity levels.