• Alphane Moon@lemmy.world
    link
    fedilink
    English
    arrow-up
    95
    ·
    22 hours ago

    Funny how the author immediately decided to shut everything down when he realized the number of peer/torrents still sending requests to the domain.

    • evidences@lemmy.world
      link
      fedilink
      English
      arrow-up
      83
      ·
      21 hours ago

      Orphaned domains like this are interesting, there was a defcon talk, I think, where the presenter bought a bunch of blacklisted orphaned domains just to see if anything would try and connect to them. They got hit with so many botnet clients trying to phone home.

      • MysteriousSophon21@lemmy.world
        link
        fedilink
        English
        arrow-up
        30
        ·
        18 hours ago

        Yeah those orphaned domains are a goldmine for security researchers, there was a similar talk at blackhat where they showed how expired domains from major companies still recieved auth tokens and sensitive data for months after expiry.

      • Maestro@fedia.io
        link
        fedilink
        arrow-up
        38
        arrow-down
        1
        ·
        20 hours ago

        Orphaned IPs as well. If you have an IPv4 from your cloud provider and you want to retire it, you should thoroughly scrub your DNS and all other configs before doing so. Otherwise it’s trivial for someone else to spin up a machine on that IP address and abuse your domain.

      • jayandp@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        18
        arrow-down
        1
        ·
        13 hours ago

        From a security standpoint, it means tons of people are requesting unencrypted info from random domains that are possibly no longer controlled by the original owners.

        This is just random speculation on possibilities, but somebody could maybe figure out the IP of a suspected pirate for example, setup a dummy tracker, wait for that IP to show up, and then compare any requested hashes against a database of known torrents. How legal and useful in court this could be would depend on the country, but it is a weak point.

        At the other end of the spectrum, somebody might find some kind of security vulnerability in a popular client’s tracker interface, and exploit that for malware purposes by setting up a fake tracker, but that’s a bit more of a stretch.

        • emeralddawn45@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          3
          ·
          2 hours ago

          I mean they could also just download a million torrents and record the ips of anyone who connects to them to leech, which is what they already do. This is why you use a VPN while torrenting, because you never know who you’re connecting to.

        • Imgonnatrythis@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          3
          ·
          8 hours ago

          I’d recommend always assuming the worst when connecting to torrent trackers. I’m not sure that most of us feel that the trackers we are connecting to are highly trusted providers.

  • ipitco@lemmy.super.ynh.fr
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    1
    ·
    20 hours ago

    That’s the kind of thing that would be cool to do actually, but I’m not server savy enough to make a server that won’t die easily under attacks

  • ipitco@lemmy.super.ynh.fr
    link
    fedilink
    English
    arrow-up
    15
    arrow-down
    51
    ·
    edit-2
    20 hours ago

    paying in crypto is nice partly for this reason

    But a lot of uneducated people will spam “crypto is a scam”

      • ipitco@lemmy.super.ynh.fr
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        11
        ·
        edit-2
        13 hours ago

        Breaking news! Criminals (but not only) use crypto, and people get scammed. This happens as well with fiat, so that must surely mean fiat is a scam!

        Flawless logic, really. You people impress me with your thinking.

        • Psythik@lemm.ee
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          3
          ·
          3 hours ago

          Don’t even bother. You’ll never get through to these drones.

        • GreenKnight23@lemmy.world
          link
          fedilink
          English
          arrow-up
          7
          arrow-down
          1
          ·
          12 hours ago

          if you sell something for $1 at 10am your $1 still buys $1 at 10pm.

          in crypto, it’s easily manipulated, and that’s by design. it’s a scam because the only people who have that control are the wealthy.

          If I sell 1BT worth of something at 10am, it could be worth 2BT at 10pm, but it could also be worth .1BT equally.

          the purpose of a Fiat currency is economic supremacy that is backed by the governing body and the economy that uses it.

          tell me, what governing body or economy is crypto backed by?

          • Phoenixz@lemmy.ca
            link
            fedilink
            English
            arrow-up
            2
            arrow-down
            1
            ·
            9 hours ago

            None of that is “by design” its just the result of an unstable system. Crypto sucks for a long list of different reasons.

              • Phoenixz@lemmy.ca
                link
                fedilink
                English
                arrow-up
                2
                ·
                5 hours ago

                The instability?

                You’re giving it too much credit, especially the altcoins that didn’t look beyond “existing”. I know, I made one like 7 years ago or so and I ain’t proud of it.

                The instability of the worth of these crypto coins is just inherent to the instability of it, and actually not that different from currency fluctuations. You don’t think the entire world works with US dollars, no?

      • JasonDJ@lemmy.zip
        link
        fedilink
        English
        arrow-up
        11
        ·
        17 hours ago

        I imagine the part in the article where OPP destroyed the vps and cancelled the domain because he realized he paid for the vps with his credit card?

        • orclev@lemmy.world
          link
          fedilink
          English
          arrow-up
          27
          arrow-down
          8
          ·
          17 hours ago

          Crypto is not anonymous, the entire concept of how it works is to be the worlds most public and distributed transaction ledger. It is more difficult to track than credit card transactions, but that’s a very big difference from being impossible to track. There have been multiple papers published at this point on how you can de-anonymize any crypto purchase.

          People really need to get over this idea that using crypto to buy things makes you anonymous.

          • Allero@lemmy.today
            link
            fedilink
            English
            arrow-up
            28
            arrow-down
            1
            ·
            17 hours ago

            Some crypto, like Monero, is anonymous. Bitcoin/Ethereum is not.

            In any case, if you use anonymous crypto, make sure to first sent it to a wallet (preferably with a subaddress in case of Monero), and then send it elsewhere.

          • FaceDeer@fedia.io
            link
            fedilink
            arrow-up
            11
            ·
            16 hours ago

            Crypto can be anonymous, if you use the right cryptocurrency and do things correctly. “Crypto” is a very broad term. Different cryptocurrencies have different functions and purposes.

          • kaidezee@lemmy.ml
            link
            fedilink
            English
            arrow-up
            8
            arrow-down
            2
            ·
            16 hours ago

            You know, except for Monero. Really sucks that real private anonymous internet money is getting pushed out of all places possible, while crap like Bitcoin freely exists.

            • ipitco@lemmy.super.ynh.fr
              link
              fedilink
              English
              arrow-up
              2
              arrow-down
              2
              ·
              16 hours ago

              This

              No worries, we can still swap conventional coins to XMR. Many smaller countries are not interested in reguling it, and we already know a few exchanges that don’t give a fuck

          • ipitco@lemmy.super.ynh.fr
            link
            fedilink
            English
            arrow-up
            7
            arrow-down
            2
            ·
            16 hours ago

            People really need to get over this idea that using crypto to buy things makes you anonymous.

            And people should also know that there are privacy coins and mixers

          • surewhynotlem@lemmy.world
            link
            fedilink
            English
            arrow-up
            6
            ·
            17 hours ago

            Exactly. That’s why you had to fill out all the KYC paperwork when you create your Bitcoin wallet.

            Oh, you didn’t?

            Crypto is not hidden, but it can be anonymous. You can’t hide that you got money from X account and spent it at Y account. But there’s no name tied to the transaction.

            • Passerby6497@lemmy.world
              link
              fedilink
              English
              arrow-up
              5
              arrow-down
              1
              ·
              17 hours ago

              Where did the coin come from? Unless you mined it yourself, you’ve left a trail that may eventually lead to you. Even using crypto ATMs, you’re still on surveillance and hoping the tapes/drives roll over before someone comes knocking (which is a very likely bet to win), and even then, you still have a real world location to tie the wallet to because of where the transaction originated.

              Anything that interacts with the real world can anchor your identity to your wallet. Travelling out of state can help obfuscate that to an extent, but a high level adversary will be able to correlate travel with that transaction as well.

              • ipitco@lemmy.super.ynh.fr
                link
                fedilink
                English
                arrow-up
                1
                ·
                edit-2
                16 hours ago

                Ever heard of BTC/any-> XMR -> BTC/any?

                If you know your thing, you can churn, buy the initial crypto with gift cards, use VPNs or Tor… yea GL for finding me

            • ipitco@lemmy.super.ynh.fr
              link
              fedilink
              English
              arrow-up
              5
              arrow-down
              2
              ·
              16 hours ago

              that’s pseudonymous, but if you remove all links with your original identity, you can even use non-privacy coins and not be known

            • Mubelotix@jlai.lu
              link
              fedilink
              English
              arrow-up
              2
              ·
              17 hours ago

              You can hide it using coinjoin transactions. It’s like a mixer but native. It’s not perfect but it’s nice to have

          • rottingleaf@lemmy.world
            link
            fedilink
            English
            arrow-up
            3
            ·
            17 hours ago

            It’s not anonymous, it in fact exchanges everything else from real currencies’ good properties to be hard to control.

        • glimse@lemmy.world
          link
          fedilink
          English
          arrow-up
          9
          arrow-down
          4
          ·
          15 hours ago

          The whole point of the blockchain is it for it to be traceable, though. There’s only the illusion of anonymity with crypto

          • ipitco@lemmy.super.ynh.fr
            link
            fedilink
            English
            arrow-up
            3
            arrow-down
            7
            ·
            edit-2
            14 hours ago

            That’s complete misinformation.

            The point of blockchain is not to be traceable but not alterable or tamperable with unauthorized or false data. A distributed database that can’t easily be faked.

            Some cryptocurrencies, like Monero, achieve high anonymity. While not perfect, good opsec will fix its flaws. Just like anything. That’s not the case with the majority of cryptocurrencies though, but saying anonymity is but an illusion is just false.

      • ipitco@lemmy.super.ynh.fr
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        6
        ·
        14 hours ago

        If you mean through regulation, yes, partly

        If you mean they hold most of it and thus have a total decision power, then I must disagree

    • Phoenixz@lemmy.ca
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      5
      ·
      9 hours ago

      Crypto is not a scam, it’s just plain stupid.

      The entire idea behind it is what a third grader might come up with and think it’s a great idea. It’s not.

      It literally requires every connected wallet to process the same transactions as everyone else. Can you imagine doing billions of transactions per day this way? It is extremely inefficient and yes, this is one of the reasons why even the relatively low amount of transactions that Bitcoin processes costs more electricity than a small modern country.

      It’s in a way comparable to a cpu doing 6+7 in a single CPU cycle whilst AI needs to burn down a forest to answer the same question

      Crypto is stupid.

      I get what its trying to replace and i agree that the current system sucks as well for a long list of reasons, but crypto is NOT the solution. A fundamentally different system must be designed to be able to solve the issues that crypto is trying to solve