Friday, March 11, 2022

TorrentFreak's Latest News

 

Anonymous Hacks Russia's Roscomnadzor Site-Blocking Agency
Andy Maxwell, 11 Mar 08:45 AM

hackerFor many years we've been reporting on efforts by Russian authorities to restrict access to internet content deemed 'dangerous' by the state.

Our focus has been on the relatively tight niche of copyright issues. These typically involve Russian telecoms agency Roscomnadzor and the use of powerful filtering and detection systems to block pirate sites that stubbornly refuse to remove movies and TV shows.

Importantly, the same systems can be used to block almost any website or service that runs contrary to the Kremlin's vision for Russia, Tor included.

Those powers have been increasingly on display since Putin's invasion of Ukraine. After the authorities passed a law that effectively outlaws honest journalism with penalties of up to 15 years in prison, Roscomnadzor went on to block Twitter, Facebook, and any news outlets that failed to toe the state propaganda line.

Censorship-busting VPNs also came under renewed attack in an effort to prevent accurate reporting from reaching the country. But now, as Russian forces face stubborn resistance in Ukraine, Roscomnadzor itself has been violated.

Anonymous 'Hacks and Breaches' Roscomnadzor

In an announcement posted Thursday on Substack, transparency group Distributed Denial of Secrets reveals that a source claiming affiliation with the decentralized hacktivist collective Anonymous has managed to gain access to a trove of Roscomnadzor data.

According to DDoSecrets, the data came from Roscomnadzor in Bashkortostan, the most populous republic in Russia with around four million people. It's a big trove – 820GB of data spread across hundreds of thousands of files in tens of thousands of directories – so it will take time to properly examine what lies inside.

But, for now, DDoSecrets provides a brief rundown.

What's In The Leak?

The release of the leaked data comes in two parts. The first, containing 363,994 files in 43,593 directories, reaches a total of 526.9GB. It also contains fresh data, with some files as recent as March 5, 2022, i.e more than a week into the invasion.

The second part is said to be two directories containing raw data files in proprietary formats for two databases, together exceeding 290GB. DDoSecrets say they will release the raw data while they find for solutions to extract the data. According to early assessments, one database relates to legal issues while the other could be related to HR procedures.

It appears that DDoSecrets wants to make the files public now to ensure that Roscomnadzor's work is quickly accessible to Russian citizens, in case the state decides to follow through with its threat to launch the 'Sovereign RuNet'. If that is implemented, it could mean that Russia disconnects from the wider internet.

Reaching Out To Ordinary Russian Citizens

"The source, a part of Anonymous, urgently felt the Russian people should have access to information about their government. They also expressed their opposition to the Russian people being cut off from independent media and the outside world," the announcement reads.

"We are publishing this release in anticipation of Russia potentially being cut off from the global internet on March 11, and hope Russians will have time to download this data, before then."

The Substack post can be found here and the leaked data here. Appropriately, given their resistance to blocking, torrents and magnet links are provided to access the data. Any potential downloaders should check the advisories first, to ensure they do not succumb to malware and phishing attempts

From: TF, for the latest news on copyright battles, piracy and more.

ACE Says It 'Shut Down' Two Pirate Sites But That's Not Quite The Full Story
Andy Maxwell, 10 Mar 08:30 PM

ACE logoEarlier this week an article was published in Variety detailing the massive task being undertaken by the anti-piracy team at the MPA and Alliance for Creativity and Entertainment.

Jan van Voorn, the MPA's executive vice president and chief of global content protection, explained that his job is to "oppress the bad guys" in order to let legitimate platforms thrive. As our regular reports here on TF illustrate, no one can deny that the team is achieving those goals. Indeed, many pirates are sick and tired of ACE enforcement efforts.

The exact impact is hard to evaluate since ACE/MPA do not always publicly report all of their successes. Indeed, we report way more than they do but according to van Voorn, the North American market is being hit hard. From a high of 1,400 illegal platforms in that region in 2019, various anti-piracy campaigns reportedly reduced that number to 238 in 2021.

The sites are taken down in a number of ways, from cease-and-desist warnings to full-blown litigation. However, there are other options too, including by targeting the intermediary services that the sites rely upon to stay online. The latter aspect is certainly interesting, as an announcement published by ACE last evening reveals.

"ACE Shuts Down Watchseries.ninja and Watchsomuch.org"

"The Alliance for Creativity and Entertainment (ACE), the world's leading coalition dedicated to protecting the dynamic legal ecosystem of creative content and reducing digital piracy, today announced it has shut down the popular streaming sites Watchseries.ninja and Watchsomuch.org," the anti-piracy group's announcement reads.

According to ACE, Watchsomuch.org was launched in March 2019 and offered more than 100,000 hours of TV and film content, receiving 121 million visits in the last two years. In addition, Watchsomuch.org offered a 'VIP' subscription for $8 USD per month which offered faster streaming speeds.

A large proportion of this information is accurate but note the initial "shut down popular streaming sites" reference (emphasis ours) and then a subtle change of terminology later on.

Domain Names Were Targeted, Not The Sites Themselves

"Both domains, which affected all ACE members, are offline following ACE's enforcement actions. ACE's trusted notifier agreements and outreach to domain name registries and registrars led to the domains' suspension," ACE later adds.

Shutting down an actual site and having its domain suspended might sound the same but there are big differences. Pirates tend to be pretty well informed these days and as it turns out, the operators of Watchsomuch knew well in advance they were being investigated.

As far back as 2019 they were served with an injunction indicating that they could be blocked and in 2021, the domain watchsomuch.org was indeed rendered inaccessible in Australia.

Possibly as a result, mid-2020 Watchsomuch was advertising on Twitter that its .org domain wasn't the only option for accessing the platform. The archived site image below shows that an alternative was also displayed on the site itself.

watchsomuch-ss2-2020

On February 9, 2022, the site's operators acknowledged that its .org domain had been 'banned', a likely reference to the ACE suspension action. However, it also took the opportunity to announce that the other domains it uses are still working. There are additional domains too but since they aren't publicly advertised, we won't mention them here.

It's also worth noting that Watchsomuch actually operates both a streaming and a torrent portal that cross-reference each other making new locations even easier to find. All that shows that the platform itself was not shut down, it just lost one of its several domains.

watchsomuch-domain-banned

The situation with Watchseries.ninja is less easy to decipher. ACE says that it carried 10,000 HD movies and 60,000 HD TV show episodes, receiving 85M visits since its launch in June 2020.

We cannot confirm with certainty that the site is still up but, like Watchsomuch, its servers don't appear to have been taken down. Instead, its domain was also suspended as part of ACE's "trusted notifier" agreements. So how do these agreements work?

The Fatal Mistake – Registering Domains Under Donuts Control

In 2016 we reported that the MPAA (now MPA) had done a deal with domain name registry Donuts.

The agreement gave the Hollywood group "Trusted Notifier" status and to the registry became the definitive authority on what is considered a large-scale piracy website. As a result, if the MPA can now show that a domain breaches Donuts' terms and conditions, it can be suspended.

"Donuts will treat referrals from the MPAA expeditiously and with a presumption of credibility," the agreement notes.

While pirate site operators are often quite savvy, those behind Watchsomuch.org and Watchseries.ninja apparently weren't aware of this six-year-old domain suspension deal. The registrars for their domains (1API GmbH and Name.com) are both Donuts affiliates meaning that after MPA/ACE had presented a valid case to Donuts, their .org and .ninja domains were toast.

The overall point here is that announcements about sites being "shut down" shouldn't always be taken at face value, as another recent example shows.

In May 2021, ACE announced that it had shut down massively popular streaming site Cuevana but didn't mention that the most popular of the brand's domains (with 60 million visits per month) was still in operation. The fact that it's still running today earned it a spot on the USTR's Notorious Markets List published last month.

From: TF, for the latest news on copyright battles, piracy and more.

 
 
Powered by Mad Mimi®A GoDaddy® company

No comments: