Friday, March 6, 2020

TorrentFreak's Latest News

 

SafeKodi: Researchers Help Kodi Users to Spot Malicious Addons
Ernesto, 06 Mar 10:50 PM

Kodi is widely known as a very convenient media player. While the open-source software is content-neutral, some third-party addons use it to offer pirated content.

In recent years rightsholders and anti-piracy organizations have worked hard to target copyright infringing addons. This is done through enforcement actions, but also through scare tactics.

On numerous occasions, Kodi addons have been associated with malware and other malicious content. While it is certainly true that there are some shady addons out there, the warnings are often overblown, lacking any supportive data.

A more analytical approach to this issue is being taken by a group of researchers from Northwestern University and Brave Software. They use a data-driven model and have created a software crawler to identify any potential threats in third-party Kodi addons.

Their software, aptly named 'De-Kodi,' scraped the web and discovered tens of thousands of addons. A small percentage of these, roughly 9,000, were still active. The researchers then tested them for potentially harmful activity.

The results show that most addons are safe. A significant portion include URLs that are linked to advertising, tracking, or Kodi's own blacklist. However, only 13 addons included URLs that were flagged by Google's Safebrowsing service for potentially malicious "social engineering." Another 131 addons included links to potentially malicious IPs.

"In our study, we discovered 43,308 addons out of which 8,485 were unique and correctly working. Out of these, only a handful was potentially harmful," Brave Software researcher Matteo Varvello tells TorrentFreak.

This doesn't sound like a broad threat, but some nuance is warranted. The researchers also found that many of the problematic addons are relatively popular. This means that while malicious addons are rare, they still have the potential to impact a lot of people.

The SportsDevil addon, for example, which is listed among the ten most popular addon domains, is flagged as potentially malicious, includes tracking scripts and is on Kodi's ban list.

Because users may not be aware of these threats, or the fact that that addons may track them or serve ads, the researchers decided to make the information public in the form of an addon.

"After we built De-Kodi, we realized that the information we collected was very useful to the average Kodi user, not only the research community. An addon was the easiest way to bring this information to the large Kodi user base," Varvello tells us.

The result is the new SafeKodi addon which is available to the public for free. Kodi users who install it can use the software to check whether there are any potential security issues on their platform.

In addition to helping the public, the public can help the researchers as well. SafeKodi allows users to flag addons they think are unsafe. In addition, it will automatically locate new and unknown addons and test these on-demand.

The input from users allows the researchers to expand their findings and provide a more accurate overview of the third-party addon ecosystem.

"The current plan is to attract some user-base for SafeKodi. This allows us to complete our study with potential addons we will discover thanks to our users, and those that appear through the evolution of the Kodi ecosystem over time," Varvello says.

In addition to insights about advertising, tracking, and potential malware threats, the research also provides additional detail on the video sources of addons.

For example, they found that the most popular media serving domains are GoogleVideo.com, Akamaihd.net, and Archive.org. These domains include legitimate content but are also used by pirate services.

The results of the study are detailed in a paper titled: De-Kodi: Understanding the Kodi Ecosystem. The findings will be officially presented at the World Wide Web Conference in April where the De-Kodi source code is also scheduled for release.

Drom: TF, for the latest news on copyright battles, torrent sites and more. We also have an annual VPN review.

Piracy Trial Between Record Labels and ISP Grande Postponed
Ernesto, 06 Mar 04:37 PM

The "repeat infringer" issue remains a hot topic in US courts after rightsholders filed lawsuits against several ISPs.

These Internet providers are accused of not doing enough to stop copyright infringers on their networks, even after receiving multiple 'copyright infringement' notifications.

Last December, one case resulted in a guilty verdict against Cox. Following a jury trial, the company was ordered to pay a billion dollars in damages to a group of major record labels.

Following the verdict, many of the labels shifted their focus to the next target, ISP Grande Communications. This case was scheduled to go to trial last week but, at the last minute, it was postponed until September.

This decision came after the court advised both parties that it only had time for a six-day trial, as opposed to the ten days originally requested. Both the defendant and plaintiffs argued that considering the extensiveness of the case, this was not enough, so they filed a request for a delay.

"The Parties do not believe that six days is an adequate amount of time to try this case. Accordingly, the Parties request that the Court continue the trial setting and reset it at a time that allows for ten trial days," Grande and the record companies informed the court.

Last week U.S. District Judge David Ezra granted the request. This means that the case will be postponed for several months, with the new trial taking place in September.

The extra time will also allow both parties to resolve some of their outstanding differences. Both sides submitted several motions to exclude information from the trial and they hope to narrow these requests in the coming months.

In addition, jury selection has also been postponed. This means that the record labels must wait a bit longer before they can ask potential trial jurors if they read TorrentFreak.

Drom: TF, for the latest news on copyright battles, torrent sites and more. We also have an annual VPN review.

Plex Slammed By Huge Copyright Coalition For Not Policing Pirates
Andy, 06 Mar 01:15 PM

In days gone by, living rooms around the world could be found stacked with video cassette tapes full of films and TV shows. Some bought, others recorded at home, these copies would need to be waded through, to find whatever content the owner fancied watching that day.

With the rise of digital technology, however, such physical collections have largely disappeared, replaced by copies that occupy virtually zero space, with thousands of movies, TV shows, music tracks, and photographs effortlessly stored on relatively cheap hard drives.

Paper-based indexing systems, for those who cared to maintain them in the analog age, have now been replaced by software that not only does all the hard work but also makes collections a thing of beauty. While there are alternatives, Emby for example, the clear market leader is Plex. However, the company behind the software is now facing a backlash for failing to control how people interact with its creation.

According to CreativeFuture, a pro-copyright coalition of more than 560 companies and organizations, Plex – which is basically a pretty media player – is helping to fan the flames of piracy. While there are some exceptions which we'll come to shortly, people generally need to be in physical possession of movies or TV shows to watch them using Plex, with torrents providing the necessary material.

"[T]he problem now finds itself on a dangerous precipice where it could easily slip right back into becoming a crisis again, as it was in the mid-2000s – before streaming was all the rage," Creative Future writes.

"Thanks to a rapidly growing media application called Plex, torrent-based piracy is back in vogue, and better than ever (for criminals who have no problem with profiting from content that doesn't belong to them, that is)."

To set the scene, that Plex is some kind of 'rogue' application, CreativeFuture (CF) aligns the media player with another piece of software, one that has also suffered reputational damage as a result of its users' activities. The choice of adjective to describe both is particularly interesting.

"To understand what Plex is and how it functions, it is helpful to look at Kodi – another dangerous digital media player that we have written about repeatedly here at CreativeFuture," CF notes.

The claim that Plex is dangerous is supported by an article published in The Verge, which reported on so-called 'Plex shares'. Without going into the minutiae, 'shares' effectively allow Plex users to access content on other users' Plex servers which, in some cases, could have been obtained illegally.

That some Plex users allow others to access huge libraries of pirated content is a fact, with some being targeted by anti-piracy groups such as BREIN. But, in common with so many piracy controversies in recent years, CF feels that if Plex users are doing something illegal, then the company behind the Plex software should be held responsible for their actions.

In this respect, CF claims that like "most" tech platforms, Plex is doing what it can to avoid accountability.

"In turning a blind eye to its piracy problem, Plex has joined the ranks of internet heavyweights who refuse to take responsibility for the criminal behavior on their platforms," the copyright coalition notes.

"With heightened scrutiny on the biggest platforms, lawmakers across the country, and abroad, have increasingly demonstrated less tolerance for tech companies that sidestep law and order in their relentless quest for user growth."

Quite what CF believes Plex should do isn't covered. If we take current industry strategies as a benchmark, we might guess that the organization would encourage the use of some kind of pro-active filtering mechanism, which would prevent Plex users from adding potentially infringing material to their own computers.

Of course, that would mean massive implications for end-user privacy, almost impossible calculations to determine who is allowed to add content to a library within the law in multiple jurisdictions, plus an inevitable backlash and migration to other platforms that reject such intrusions. It would also require the company behind Plex to get deeply involved and therefore acquire 'knowledge' of infringing user behavior, something that raises all kinds of red flags.

The piece, which deserves to be read in its own right, also accuses or Reddit of being a "notorious piracy-enabling outlet". What it fails to mention, and probably should've done, however, is that Plex is already making progress with various entertainment industry groups to tackle piracy in the best way possible – providing users with easy access to licensed content.

In 2019, Plex announced it would begin streaming thousands of free movies, TV shows and music documentaries from within the app, after striking deals with relevant rightsholders. The content is ad-supported and the hope is to expand the offering in the future.

"Over time, we'll be adding more stuff from different studios and creators — from Oscar-winning Hollywood movies to the latest from India, Russia, China, Japan, Africa, Latin America, Australia, New Zealand, and Europe to really cool independent movies fresh off the festival circuit," the company said.

That Plex now finds itself in the firing line isn't really a surprise – if Reddit is a "notorious" enabler of piracy, then any company with end users could find itself tarred with the same brush. TorrentFreak contacted the software developer for its opinion on the latest set of claims but at the time of publication, Plex chose to remain silent.

Drom: TF, for the latest news on copyright battles, torrent sites and more. We also have an annual VPN review.

 
 
Powered by Mad Mimi®A GoDaddy® company

No comments: