Tuesday, March 23, 2021

TorrentFreak's Latest News

 

Mangadex Has Been Hacked, Users Should Assume Data Has Been Breached
Andy Maxwell, 22 Mar 06:48 PM

With the rise in popularity of manga comics and magazines in the West, sites like MangaDex are proving irrestable to millions of fans.

This so-called 'scanlation' platform – a portmanteau of 'scan' and translation' – offers manga titles in languages other than their original titles. These transformed publications are then offered to a new audience but one that doesn't have to pay for the privilege.

A year ago, MangaDex was pulling in an estimated 30 million visits per month but according to SimilarWeb stats, that figure has reached more than 75 million. However, due to exceptional circumstances, those visitors – at least for the foreseeable future – will have to obtain their content from elsewhere.

MangaDex Says it Was 'Hacked' Last Week

In an announcement Sunday, MangaDex revealed that in addition to mitigating DDoS attacks, last week it was subjected to a much more serious security threat.

On March 17, MandaDex's operators said that they discovered that a "malicious actor" had gained access to an administrator account by reusing a session token found in an old database leak. However, while it was possible to identify and patch the vulnerable piece of code, a further review of the site revealed additional problems.

"After the breach, we started spending many hours reviewing the code for possible further vulnerabilities, and started to patch what we could find to the best of our capabilities," the MangaDex statement reads.

"This ran parallel to us opening the site after the breach, as we had incorrectly assumed that the attacker would not be able to gain further access. However, as a precaution, we had started rolling out monitoring of our infrastructure and had remained vigilant in the event the attacker returned."

MangaDex Returns – But Not For Long

According to the site's operators, early on Saturday the attacker gained access to a developer account belonging to an individual who had been offline for four days. The site was immediately shut down (less than a minute) so that further investigations could be carried out. Within minutes, however, a reported 10 users of MangaDex received an email from the attacker.

"MangaDex has a DB leak," it read. "I suggest you tell their staff about it."

MangaDex says that there was a ransom request for "10k BTC [sic] or everything goes public" but there's still no evidence that a database breach occurred. However, "for best security practices, we will assume it has happened," they warn. [See update below]

Just short of two hours after the developer account was accessed, the attacker reportedly updated a git repository containing a source code leak, noting that MangaDex had patched two out of three CVEs (Common Vulnerabilities and Exposures). Nevertheless, MangaDex's operators "assumed the worst-case scenario" and decided to keep the site down for further investigations.

Ongoing Work to Secure The Site

"As of writing, we have invited numerous volunteers to assist our developers with identifying the last possible CVE claimed by the attacker in the codebase," MangaDex continues.

"Thanks to our volunteers, we have identified a good number of potential security flaws and moved to rectify them. However, at time of writing, we have still yet to identify the last possible CVE claimed by the attacker.

"With that knowledge in mind, we were confronted with a difficult decision. If we had assumed incorrectly that the web code is now secure, we could end up being compromised again by the attacker. As a result of that, in good conscience, we could not possibly re-open the website to users presently."

The MangaDex operators say that having considered several options for reponening, they have decided the platform will remain closed until v5 of the site (a total platform rewrite) is working up to a base level, one that at a minimum will allow users to read, follow and upload content.

Security of Users

MangaDex appears to be handling the hacking incident with professionalism, including full disclosure and by not playing down the potential severity of any breach. At this stage, they know that the attacker has gained access to information not seen by regular users but there is still no evidence of a full-host or recent database breach. That being said, the advice is for users to consider their information compromised.

"As a user, we will encourage that you would assume that your data has been breached, and take precautions immediately, such as changing the passwords of any accounts that might share the same password as your MangaDex account. As a generally good security practice, password managers are highly recommended to keep your online identity secure," the operators conclude.

When the site will return is still unclear, with estimates ranging from one to two or even three weeks. In the meantime, the site is advising people to obtain updates from Twitter.

Update: An earlier version of this article indicated that no ransom had been demanded by the attacker. MangaDex informs TorrentFreak that "10K BTC" was requested which the team believes relates to "10k USD in Bitcoin rather than 600M USD in Bitcoin."

From: TF, for the latest news on copyright battles, piracy and more.

UK Police Warn Students Not to Use Sci-Hub But Publishers 'Promote' It
Ernesto Van der Sar, 22 Mar 10:35 AM

By offering free access to millions of 'paywalled' research papers, Sci-Hub is often described as "The Pirate Bay of Science".

The site is used by researchers and students from all over the world, to obtain papers they would otherwise have a hard time accessing.

Academic publishers are not happy with the service. They see the site as a threat to their multi-billion dollar businesses and have tried to shut it down through lawsuits and blocking efforts. Thus far these have failed. In fact, Sci-Hub may be more popular than ever.

This doesn't mean that the pressure is off, however. New blocking lawsuits keep getting filed and Sci-Hub was recently banned from Twitter again. To top it off, the police in the UK are now getting involved as well.

Warning Students and Universities

The City of London Police's Intellectual Property Crime Unit (PIPCU) is now actively warning students not to use Sci-Hub. At the same time, universities are being encouraged to block access to the site from their network to prevent further damage.

According to the police, Sci-Hub uses malicious means, including phishing emails, to trick university staff and students into sharing their login credentials. This information is then used to access paywalled research in order for it to be shared openly, without paying the publishers.

It may appear strange that the police are getting involved in such a matter, but the PIPCU unit is known for its attention to copyright issues. For example, it previously contacted domain registrars in an attempt to suspend pirate sites, without much success.

'Network and Devices are At Risk'

With this latest effort, PIPCU is helping publishers, suggesting that the safety of students and the university network are both at risk.

"We would urge people to not use Sci Hub, as doing so could pose a threat to their personal information and devices," says Max Bruce, Cyber Protect Officer from the City of London Police.

"If you're tricked into revealing your login credentials, whether it's through the use of fake emails or malware, we know that Sci Hub will then use those details to compromise your university's computer network in order to steal research papers."

The risks are even broader according to the police, who warn that credentials of other members of a household could potentially be at risk too. The press release further mentions that people could end up downloading "dangerous" content from the site. Therefore, blocking it would be the best option.

Sci-Hub's Place in the Academic World

The warning was picked up by the BBC and others. We decided to contact Sci-Hub founder Alexandria Elbakyan to hear her side of the story. Unfortunately, she is yet to respond, but we nonetheless feel the need to add some extra color and context.

At this point, it's pretty clear that Sci-Hub is violating copyright law. However, when we zoom out a little, we can't help but notice that the site has pretty much cemented its place in the academic world.

Aside from the fact that millions of researchers and students use it, Sci-Hub has a more lasting effect as well. Every month, new papers are published which actively cite and reference Sci-Hub links in the literature list.

These are not just researchers who write about the Sci-Hub phenomenon. On the contrary, it's mostly scientists who add Sci-Hub DOI links to their publications, to make it easy for readers to access the articles they reference. A quick Google Scholar search reveals how prevalent this is.

sci-hub google scholar

This isn't the work of just a handful of rogue researchers either. The articles with Sci-Hub links appear in well-respected peer-reviewed journals and publications. That's certainly a mixed-signal compared to the warning issued by UK police.

Ironically, the Sci-Hub links even appear in publications from the major publishers who have sued Sci-Hub or tried to have it blocked. This includes Elsevier, Springer, and John Wiley & Sons, which are among the biggest players.

Acedemic Publications Reference Sci-Hub

Below is one of the many published examples. In this case, the researchers include a variety of Sci-Hub links in their reference section, directly from the Springer-owned journal website.

sch-hub links

In other words, the same publishers who are trying to stop Sci-Hub, help to 'promote' the site through their own publications. This is indeed a mixed message.

The Sci-Hub Effect?

Finally, it's worth noting that references and citations form the foundation of academic publishing. The above shows that Sci-Hub is playing a role here and some argue that the "cybercriminals" actually help the progress of science.

A few weeks ago a new study was published, in a Springer publication, which shows that articles downloaded from Sci-Hub are cited more often, while more Sci-Hub downloads predict future citations.

"The results suggest that limited access to publications may limit some scientific research from achieving its full impact," the researchers concluded.

While this conclusion can be debated, it's certainly possible that Sci-Hub may actually benefit science.

That brings us back to the City of London Police. While the advice to students is undoubtedly well-intentioned, we believe that Sci-Hub is much more complex than the average cybercrime case. Discussing it without proper context should almost be considered a 'crime' in itself.

From: TF, for the latest news on copyright battles, piracy and more.

Top 10 Most Torrented Movies of The Week – 03/22/2021
Ernesto Van der Sar, 21 Mar 11:30 PM

justice leagueThe data for our weekly download chart is estimated by TorrentFreak, and is for informational and educational reference only.

These torrent download statistics are meant to provide further insight into the piracy trends. All data are gathered from public resources.

This week we have three new entries/returnees in the list. "Zack Snyder's Justice League" is the most downloaded title. The film can be watched online legally on HBO Max, but that's not available everywhere.

The most torrented movies for the week ending on March 22 are:

Movie Rank Rank last week Movie name IMDb Rating / Trailer
Most downloaded movies via torrent sites
1 (…) Zack Snyder's Justice League 8.4 / trailer
2 (1) Raya and the Last Dragon 7.7 / trailer
3 (2) Coming 2 America 5.5 / trailer
4 (5) Cherry 6.5 / trailer
5 (4) Monster Hunter 5.3 / trailer
6 (6) Wonder Woman 1984 5.8 / trailer
7 (3) Tom and Jerry 5.4 / trailer
8 (back) Tenet 7.5 / trailer
9 (7) Crisis 6.1 / trailer
10 (back) Soul 8.1 / trailer

Note: We also publish an updating archive of all the list of weekly most torrented movies lists.

From: TF, for the latest news on copyright battles, piracy and more.

 
 
Powered by Mad Mimi®A GoDaddy® company

No comments: