Demonoid Resurrection Dismissed As Malware Was Legitimate 83
wo1verin3 writes "Previously reported on Slashdot was a story about a malware attempt masquerading itself as a Demonoid resurrection. It turns out this really was Demonoid making a comeback. With the site now back online with a new host, TorrentFreak caught up with its admins who tell us they have no malicious intent and simply want to bring a community back to together. While there is still uncertainty, one thing is absolutely clear – they do have the old Demonoid database."
Re: (Score:1)
Nonsense. Just be careful about what you're downloading; brand new garbage is more likely to get them to extort you than older garbage.
Re: (Score:1)
Understand, even in other countries it can be risky.
See, in lost of places there is non-enforcement.
Except, downloading (or uploading, in some cases, is still illegal.
Never think that just because the police are ignoring you now, that they will continue to.
Every time you commit a crime, protect yourself, even if the crime is just.
This can mean obfuscating or just plain hiding.
Re: (Score:2)
Except, downloading (or uploading, in some cases, is still illegal.
Downloading is illegal almost nowhere. Uploading is illegal almost everywhere.
Much of the non-enforcement is that a complaint must be lodged before prosecution can happen, and the content owners and rights defenders are waiting for the "best" test cases for their agendas.
umm (Score:1)
WTF is Demonoid resurrection? And why did Slashdot editors not recognize TWO slashvertisments (or "viral ads" or whatever you want to call it) in a row?
Re:umm (Score:5, Funny)
WTF is Demonoid resurrection?
It's the fourth installment in the Demonoid series, coming after Demonoids and Demonoid^3.
Re: (Score:2)
Re: umm (Score:5, Informative)
Demonoid was/is an extremely popular torrent tracker that was shut down a while ago. There was always speculation that the site would return, as it had after past interruptions.
Also, as it's a semi-private tracker, it doesn't gain much from "slashvertisements".
Re:umm (Score:5, Funny)
Who is Ass King Nicely?
Re: (Score:2)
"Who is Ass King Nicely?"
SO so tempting to put one of a list of /. users' names here!
Re: (Score:3)
Re: (Score:1)
Re: (Score:1)
A link to it (Score:5, Informative)
To save having to read the linked articles it's here http://www.d2.vu/ [d2.vu]
No Seeders anymore? (Score:1)
Obviously not an expert but Demonoid was dead for so long who is still seeding these old files?
Isn't this ressurrection almost totaly D.O.A.?
Re:No Seeders anymore? (Score:5, Informative)
Obviously not an expert but Demonoid was dead for so long who is still seeding these old files?
Most torrents seed across multiple trackers and sites nowadays. Even if one site goes down, the same torrent may exist on dozens of other sites, and list the trackers for each of them.
Re: (Score:3, Interesting)
Obviously not an expert but Demonoid was dead for so long who is still seeding these old files?
Most torrents seed across multiple trackers and sites nowadays. Even if one site goes down, the same torrent may exist on dozens of other sites, and list the trackers for each of them.
Yes but how do new trackers announce themselves to existing seeds? Sure if the files were spread to other trackers and Demonoid brought back their tracker on the old domain then the system will just pick up where it left off. However, Demonoid is now restarting on the d2.vu domain so how would any of the current seeded files from Demonoid pick up on this tracker?
They effectively will be starting from scratch, their only benefit is their name, goodwill, and the existence of a database of potential users to w
Re: (Score:1)
Each torrent has a hash, if you want you can feed said hash to a recent enough client and it will make a general cattle call about more info. If the info is available it will then use said info to bootstrap the actual torrent download.
This allow the same torrent to be handled by multiple overlapping torrents.
Also, Demonoid operated both public and private tracking. Some of the more obscure stuff was usually only seeded on the private side and that tracker was never apparently shut down.
ovo -hoot
Re: (Score:2)
It looks like this iteration won't even have a tracker, so, there will be no need to announce the tracker.
Re: (Score:2)
Sure, sites that used demonoid as the sole tracker will be harmed by this, however many torrents that were on demonoid had multiple trackers. Those are still working quite well. It will take some take for a relaunch to get back on its feet, but it is certainly nice to see.
Re: (Score:2)
"Isn't this ressurrection almost totaly D.O.A.?"
First, it hasn't been gone long at all. 8-9 months only. But it did move around a bit before it disappeared.
Second, as for DOA: that's kind of like asking whether a library is DOA because it hasn't added any books in the last few months. Kind of a silly question, really.
It's a trap? (Score:5, Informative)
Maybe. From the old official IRC channel on p2p-network.net:
"Topic for #demonoid is: OPEN REGS:UNKNOWN; SITE: DOWN; FORUM: DOWN; TRACKER: DOWN;| Welcome to #demonoid. | d2.vu is not demonoid, not run by demonoid admin or staff, and should not be supported. The site could be used to collect your usernames/passwords for their own use. Use at your own risk."
Re: (Score:2)
Re:It's a trap? (Score:5, Informative)
I agree, let's just say that there are members that never got that email about it being up. I wouldn't trust that they have the old db and most likely they are just phishing basically.
It's the genuine database all right. I just logged in and all the details about my old account are there (including the good old up/dl ratio). I hope in the following weeks rare torrents will get seeded again. Not even pirate bay had the variety of rare torrents that demonoid had.
Re:It's a trap? (Score:5, Insightful)
Hopefully it's not a password you have used anywhere else.
These people definitely have a copy of the old database, and thus salted password hashes.
Anyone logging in right now is also providing their clear-text password and confirmation if it is the correct password, as well as their IP.
Between the two facts that the government would have spent the time cracking the hashes without much concern over the cost, plus the banner ads that would complicate a sting type operation, it's looking less like a government honeypot.
Still, we know very little about these new admins.
We know the original admins are aware of this and do not approve, and we have been told (by the new admins) that they were given a backup of the database and website for safe keeping in case the original admins needed it to resurrect the site, which has not been disputed by the original admins.
Re: (Score:3)
Hopefully it's not a password you have used anywhere else.
These people definitely have a copy of the old database, and thus salted password hashes.
Anyone logging in right now is also providing their clear-text password and confirmation if it is the correct password, as well as their IP.
As it was pointed out in the TorrentFreak article comments, you could always choose to pretend you've forgotten your password and have Demonoid reset it. That provides no confirmation the password they had was correct. The password they have would only be useful on other sites that also use one's email address for username, and honestly anyone not using a spam or otherwise not-their-normal email address for registration for this kind of thing deserves to get hacked for their stupidity.
Re: (Score:3)
I'm going to have to second this guys post - some of the obscure stuff on demonoid was fucking incredible. I could not only find rare foreign films, in the correct (foreign) language but with subtitles AND 720p AND with good seeds.... and often......... and even older ones.
Seriously though, as a movie buff there were movies on demonoid, in good quality which where incredibly difficult to find anywhere, even legitimately. I do feel a bit bad about getting dodgy copies, I really do but damn it was useful
Re: (Score:2)
Re: (Score:2)
Same for me, my old account is still there and I logged in.
However, when i checked for some rare torrents that I knew were there before, they were gone.
I'm with you on hoping the rare torrents getting seeded again - that was Demonoid's niche in the torrent community
Re:It's a trap? (Score:5, Informative)
Re: (Score:2)
Re:It's a trap? (Score:5, Informative)
Because I entered the wrong password for my account first and it didn't let me in, then when I used the correct one it did. It also has the correct sign up date on my account profile.
Re: (Score:1)
pwgen'd password that isn't used anywhere else, why would I care?
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
I did receive the mail. And I was able to login with old credentials.
Re: (Score:1)
Re: (Score:2)
If you're concerned... (Re:It's a trap?) (Score:2)
Request a password reset. The password reset form requires only a valid username to be entered, and the email address associated with it will receive an option to reset the password.
Okaaaay... (Score:5, Insightful)
So the Demonoid that was distributing malware was not a fake... so the admins really were sending malicious code to people in an effort to "bring a community back to together"?
And now they want people to trust them?
Re: (Score:3, Informative)
It' can happen on filesharing sites that advertisers have malware on their ads/sites--the firesharing site's administrators should check, but sometimes aren't very conscientious about it.
Re:Okaaaay... (Score:5, Informative)
Hell, we were Europe's leading portal site for years back in 2002, and even we sometimes had malware in our ads!
It's a tricky business, because you usually have deals with advertising companies who themselves deal with thousands of clients automatically. It is impossible to prevent all malware that way. And it is impossible to manage it all by hand. (It would cost more that the ads earn you.)
Of course we banned those ads quickly when we found out. But it was really a pointless battle. Even if we'd have done it all manually, the ads still came from foreign servers... by the thousands... and were sometimes changeable after going live. (E.g. Flash ads are unpredictable because closed-source.)
And we'd be gone bankrupt.
Hey... we went bankrupt anyway. ;))
So: Deal with it. Cause it's not going away. Malware in ads is to be expected. Always.
Re: (Score:2)
Re: (Score:1)
I'm curios what portal site.
Re:Okaaaay... (Score:5, Insightful)
Or to put it another way, ads *are* malware, and as such, need to be blocked. Just as its standard fare to run AV on (Windows) PCs, all PCs regardless of OS should be running adblockers. Until the online advertising industry cleans up its act (don't hold your breath), everyone should be blocking their trojan-infused crap.
:)
Some may call this a dishonest justification for blocking ads; I call it safe and smart computing.
Anybody have a car analogy? I couldn't come up with one. Extra points for working Natalie or Soviet Russia into the car analogy
Re: (Score:2)
Re: (Score:2)
It' can happen on any site that advertisers have malware on their ads/sites
Fixed.
InvestorVillage once had a problem with malware. Blue now pays much more attention to who the advertisers are.
--
BMO
Re: (Score:2)
according to the hosting company, the ads had a malware vendor.
Confusing Headline (Score:3, Insightful)
I interpretted this as:
The demonoid resurrection was dismissed
because
the malware was legitimate.
Even after reading the summary I was stilll completely lost for about 5 more passes.
Please write your headlines more clearly.
Not even making sense (Score:3, Insightful)
What the fuck does "as soon as I logged in I was phished" mean? Do you even fucking understand what "phishing" means? How do you even decide you've been phished if this is your only place with this user and pass? (well, no, last one might get you a notice for failed attempt to log in to your mail box, though I don't think I've seen those from many services)
tl;dr: parent's seemingly shilling for some shitty "very useful program", Go away and come with proper MyCleanPC success story.
Re: (Score:2)
What the fuck does "as soon as I logged in I was phished" mean?
The only reasonable intrepretation I can think of is "Shortly after logging in, my (previously dormant) registered email received a phish-email."
Why do you assume their error when there's a clear explanation that satisfies the description given?
As far as I can tell, the shitty program he's hawking doesn't even exist. So none of that matters.
PGP (Score:2, Interesting)
All this "is it real" crap could have been avoided with a single, PGP-signed message.
Re: (Score:3)
What exactly would that avoid? It's not the original admins who are doing this, so who exactly among the people doing this, delivering a secure message, would you trust?
Re: (Score:2)
What exactly would that avoid? It's not the original admins who are doing this, so who exactly among the people doing this, delivering a secure message, would you trust?
The ones who had keys the original admins had signed as trusted...