Thursday, January 9, 2020

TorrentFreak's Latest News

 

PrimeStreams IPTV Redirecting to ACE But its Not an Anti-Piracy Seizure
Andy, 09 Jan 09:22 PM

For the past several weeks, some 'pirate' IPTV services have been subjected to 'hacks' carried out by as-yet unidentified people.

In early December, Helix Hosting became the first reported case. Its homepage was defaced with a message explaining that the service had been asked to pay a ransom or face having its customer database leaked online.

Just a few days later, PrimeStreams became the victim of similar blackmail efforts. Its operator revealed that a weak password had been exploited and that 10 bitcoin was being demanded in order to prevent the service's confidential data from being exposed to the world.

Unconfirmed reports indicated that other services were also targeted in December, which may or may not have settled in the face of similar threats. However, PrimeStreams' situation appears to be ongoing as a quick visit to what used to be its main servicing domain (PrimeStreams.store) reveals a rather ominous message.

This countdown-timer message usually indicates that a domain has been taken over by the Alliance for Creativity and Entertainment, the global anti-piracy coalition headed up by the MPA. It is currently displayed on dozens of file-sharing and IPTV platforms, commonly after they have reached some kind of settlement with the world's largest entertainment groups. Vaders and Openload are two of the most obvious examples.

Of course, seeing that message will probably be enough to send many customers running for the hills but the truth is relatively easy to uncover. This isn't a domain seizure carried out by ACE but most probably the work of a malicious actor, as a dive into the domain's details reveal.

As the image above shows, at the time of writing the PrimeStreams domain is using the services of Njalla, the domain registration and hosting service closely associated with Pirate Bay co-founder Peter Sunde. That doesn't mean that Njalla has anything to do with the issue, of course, but it does indicate in a particularly clear way that ACE isn't the entity in control here.

When ACE does take control of a domain, Openload.co for example, there are many tell-tale signs that the seizure is legitimate, including the use of the MPA's own nameservers, redirection to certain banks of servers in the United States, not to mention contact details that relate to bodies and individuals at the MPA.

If we rule out the highly unlikely possibility that the operator of PrimeStreams redirected his own domain to ACE's anti-piracy servers, then we're left with a situation that was most probably engineered by a malicious actor. Whether that was the same person who threatened the site in December is unknown but losing a domain to an unauthorized third-party is an extremely serious matter.

The double-edged sword here is the involvement of Njalla. While there's a possibility that there might be an element of sympathy at the sight of an unlawful hack (not to mention that some of the team were previously involved in The Pirate Bay and Piratbyrån), Njalla is utterly militant when it comes to the privacy of its users so may not even be able to help.

That might have played a part in PrimeStreams' decision to dump this domain entirely and transfer to a new one. The big question, however, was whether the service had any more big security headaches waiting to kick in. Sure enough, within hours of going live, incredibly that domain was 'hacked' as well.

In the meantime, ACE gets yet another traffic boost.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

Canadian Pirate Site Blockade Expands With New Domains
Ernesto, 09 Jan 10:41 AM

Last November Canada's Federal Court approved the first piracy blockade in the country.

Following a complaint from major media companies Rogers, Bell and TVA, the Court ordered several major ISPs to block access to domains and IP-addresses of the pirate IPTV service GoldTV.

A few days after the order was issued the first blockades were active. These prevented GoldTV customers from accessing the IPTV portal directly, as intended, but it didn't take long before several alternative domains popped up.

These new domains are managed by GoldTV or its resellers and point to the access portal, allowing subscribers an unblocked route to access the IPTV service.

This wasn't entirely unexpected. While IPTV blockades are relatively rare, we have seen similar 'proxy' workarounds in the past when traditional pirate sites were blocked in other counties. Having learned from this experience, the Canadian court order specifically allowed Bell and the other companies to expand the blocklist.

Specifically, they can amend the original blocklist with any "domain, subdomain or IP address that has as its sole or predominant purpose to enable or facilitate access to the Target Websites," provided that the IP-address is "not associated with any other active domain."

Such an update was requested early last month and two weeks later the Canadian Federal Court approved it. An overview of the new blocking requirements was published this week by Andy Kaplan-Myrth, TekSavvy's vice-president of regulatory affairs.

This shows that, after some IP-addresses and a domain name were previously removed, several new ones were added with the latest order.

The newly added addresses include gold.myiptvplanet.com, live4k.online, and several pctvhd.net and beex.me subdomains. When we checked these, all indeed redirected to the GoldTV access portal. According to reports we received, the new domains have been added to the blocklist of several Canadian ISPs, as expected.

Avvidavids reveal that the new domains were tracked down by posing as a customer or reseller of the GoldTV service.

Interestingly, the rightsholders asked to keep the names of the new domains secret until the order was granted. The Wire Report notes that they sent a letter (pdf) to the ISP asking them to "refrain from publicizing" the new domains until the Court made a decision.

Keeping possible updates out of the public eye is in the interest of the copyright holders, as it prevents GoldTV from anticipating new blocks. However, it raises concerns among some legal experts who believe that information in a public case should be out in the open. If not, that should be up to a court to decide.

That said, the Canadian procedure is much more transparent than in other countries such as the UK, where new blocklist updates aren't published at all, making it impossible for the public to check for potential overblocking.

While the expanded blocks are certainly frustrating for GoldTV customers, there will likely be new domains to replace them, continuing the whack-a-mole. The downside for the copyright holders is that there's a significant delay in the process.

Bell and the others first have to file for an amended order, which then has to be approved by the court. After that, it can take up to two weeks before ISPs implement the blockade. This whole process can take more than a month. In this timeframe, new domain names may have already been put into use.

While website blocks are far from perfect, the continued frustration of switching to new domains may be enough for some pirates to throw in the towel. Or they may switch to more permanent circumvention alternatives, such as VPNs.

Meanwhile, the bigger blocking battle continues as well. Internet provider TekSavvy has appealed the blocking order and hopes to have it overturned. It clearly violates network neutrality and undermines the open Internet, the ISP previously said.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

 
 
Powered by Mad Mimi®A GoDaddy® company

No comments: