
post
A serious question: what's wrong with pirate bay? I have been using it to download movies, shows and language learning content for over a decade, and I never had any problems.
Those aren't typically risky media. When you're downloading games though, you're downloading executable programs. You can do some serious damage if you execute the wrong things. You're not executing a mkv or a pdf, you're only reading it.
You're not executing a mkv or a pdf
You're half wrong and half right, .mkv files are completely safe but the same can't be said about .pdf files, attackers can embed malicious code, such as JavaScript or hidden executables, within a PDF file.
People really underestimate the capabilities of this .pdf file format. I remember some time ago, someone managed to run doom inside a .pdf file.
Theoretically, there could also be a MKV file that exploits a bug in the video player to get execution.
Far less likely, but definitely possible.
There's a difference between exploiting bugs that haven't even been found and spreading malware through a method that's known by pretty much everyone and is still used to spread malware today.
It's also theoretically possible that your system is already infected by some Advanced Persistent Threats but does that happen that often, No, and have people been infected by running random pdfs they found online, Yes.
You can embed 3d models in PDF.
You shouldn't but you can!
Tell that to circuit board designers. It's horrible every time a 3d model of a circuit board is added. The component height gives no visual advantage, and it's slow as shit on corporate computers.
My first job was extracting text from pdfs, in the end OCR was the most reasonable way. This was back in like 2010 when it was waaaaay harder.
Everyone who enjoys cosmic horror should read the PDF spec. https://pdfa.org/resource/pdf-specification-archive/
Don't download games and software from it and always check the file extensions and make sure they're not something like Movie.mp4.exe or Movie.mkv.exe, other than that you're good.
Also watch out for any link files, .com files and .bat files.
Also watch out for any link files, .com files and .bat files.
I think you meant .lnk files instead of link files.
.scr and .uue are also becoming popular means to spread malware through torrents.
Nothing is wrong with it. I imagine you'd be the type to survive in the wild west because you're equipped to do so while people around you die of dysentery.
it's just guilty of being around for so long so it's popular which attracts a lot of attention.
the most important thing to have when pirating is common sense
the second most important thing to have is a vpn
Still don't know why I'd need a vpn. My country doesn't go after individuals pirating (yet). That's the only reason, as far as I understand, to have a vpn for pirating. So until they start to take come after individuals, I'm gonna save my money.
You only need a VPN in very few countries, some countries where it is needed to avoid fines/getting your internet connection cutoff from your ISP are the US, Germany and a few other countries somewhere in western Europe, also don't pirate polish films without a VPN if you live in Poland, the rest of the world doesn't care about people downloading movies online.
I am in Greece pirating without a VPN, and even after the new anti-piracy law passed, I haven't received a notice (yet).
In Germany they won't cut off your Internet connection. They'll send you a cease and desist for a few thousand euros.
I think you've exactly described why some people need a VPN. My ISP does 3 strikes when they get complaints :/
Also VPN makes you rather anonymous. The sites won't track you and sometimes the trackers on public torrent files are notorious for tracking.
That is not true, the sites do still track you. VPNs don't prevent tracking, they just make sure the tracking is done through a secure tunnel.
VPNs don't prevent tracking, they just make sure the tracking is done through a secure tunnel.
The extra hop adds a significant barrier for the website in knowing the actual source IP. The fake source IP is likely used by many other users, and the user you are trying to track can easily rotate VPN IPs.
Its one less identifier for them to use.
Adtech relies on the OpenRTB 2.5/2.6 spec for tracking, you would have removed 1 identifier out of a hundred (one that isn't really used anyway given SSAI is so popular). In addition to that, cookie expiry timers are typically set to 365 days meaning you're VPN would need to enabled at all times to not invalidate multi-hop. WebStorage API based trackers tend to be indefinite.
ORTB spec: https://www.iab.com/wp-content/uploads/2016/03/OpenRTB-API-Specification-Version-2-5-FINAL.pdf
EDIT: If anyone is looking for more specifics about WHY IP addresses and multi-hop don't matter, the spec includes a mention:
BEST PRACTICE: Proper device IP detection in mobile is not straightforward. Typically it involves starting at the left of the x-forwarded-for header, skipping private carrier networks (e.g., 10.x.x.x or 192.x.x.x), and possibly scanning for known carrier IP ranges. Exchanges are urged to research and implement this feature carefully when presenting device IP values to bidders.
The issue is that mobile is so prevalent and mobile networks rely so extensively on CG-NAT that even with XFF headers, there's no good way to tell if you are going to get an IP address that actually matters. You could potentially put in a lot of auction time trying to figure that out and still just end up with a private address that's unusable. So, aside from the devicetype and the geo object which is used for geo targets and fencing, the device object isn't useful in tracking. Instead adtech uses the user object. This object should contain all your GDPR specifics, any EIDs, 1st party cookie IDs, etc. Even if those change, there usually exists backend mapping that allows for vendors to correlate different user IDs as being the same user ultimately.
...specifics about WHY IP addresses and multi-hop don't matter.
...you would have removed 1 identifier...
So it can matter.
barely, efectively meaningless
Yeah, multi-hop is pointless for tracking. The logic to it is crazy too. People think VPNs make them anonymous (they don't), but they also think multi-hop makes them MORE anonymous. So anonymity is kind of an absolute concept. Either you are or you are not anonymous. You can't be more anonymous than anonymous. There is no +1.
Yeah, multi-hop is pointless for tracking.
The logic to it is crazy too. People think VPNs make them anonymous (they don't), but they also think multi-hop makes them MORE anonymous.
Whether multi-hop matters to tracking is far and away a different discussion than whether multi-hop "makes you anonymous".
I too disagree with the original comment, but also believe the pendulum swung too far the other direction in your replies.
Situations differ. Threat models differ. More hops can, from direct personal experience, make the difference in tracking. Your claim of "...multi-hop is pointless for tracking." has too broad of a scope to be correct.
What specifically about multi-hop makes you think it improves your security? Be specific. What is your "direct personal experience"?
What specifically about multi-hop makes you think it improves your security?
I haven't mentioned security.
So it can matter.
Remember to read the rest of that sentence:
1 identifier out of a hundred (one that isn't really used anyway given SSAI is so popular).
So, no. Not really.
Remember to read the rest of that sentence:
It doesn't change the contradiction.
You almost had the rest of the sentence there:
one that isn't really used anyway given SSAI is so popular
You almost had the rest of the sentence there:
That doesn't change the contradiction.
You're trying to argue without evidence (like I had provided). To summarize these exchange so far its:
- You giving some marketing crap you read from a VPN provider site on their multi-hop service.
- Someone pointing out that it is incorrect with evidence.
- You get mad and basically come back with "Nuh-uh!"
Is there some evidence you'd like to provide or is it going to be another "nuh-uh!"?
- You giving some marketing crap you read from a VPN provider site on their multi-hop service.
I'm sorry, but that isn't correct.
I'm sorry, but that isn't evidence.
I'm unsure what evidence you are referring to.
Threat models differ. More hops can, from direct personal experience, make the difference in tracking
Evidence, or it isn't true.
Evidence, or it isn't true.
Unrelated, but absence of evidence is not evidence of absence.
Anyways, your own statement:
Adtech relies on the OpenRTB 2.5/2.6 spec for tracking, you would have removed 1 identifier out of a hundred (one that isn't really used anyway given SSAI is so popular).
Removing an identifier that is used. (1/100 = matters, "isn't really used" != unused). This contradicts your other statements:
Yeah, multi-hop is pointless for tracking.
...IP addresses and multi-hop don't matter...
Broad statements that don't take into consideration the threat model of other users. Servers you connect to might not be using source IP in any way to track. You might be leaking so many other identifiers, that its completely useless to worry about multi-hop. But this is not true for everyone in every situation.
If its worth anything to you, the Tor Project seems to think multi-hop and IP addresses matter for protecting against tracking.
Unrelated, but absence of evidence is not evidence of absence.
So, I'm not allowed to ask you for proof of your statement? And if its unrelated, then why did you post it? Its unrelated. Also, you're saying you have an absence of evidence, ergo you have no evidence. Having no evidence does not qualify as evidence.
Removing an identifier that is used. (1/100 = matters, "isn't really used" != unused). This contradicts your other statements:
Just because an identifier exists doesn't mean it is used.
BidRequest.imp[i].tagid exists, but advertisers don't use it.
I think you are confusing having an option with something being mandatory.
And Tor nodes are not the same thing as VPN multi-hop. If you think that they are, wow! VPN multi-hop is you connecting to a provider's server that connects to another one of the provider's server then out. It's all the provider's network.
And again, if you connected your Firefox browser to Tor, we could still track you. You'd get cookied or localStorage() tracked. When you disconnect from Tor, that stuff is still present in your browser. Almost like the number of hops you take or the IP address used doesn't seem to really matter, huh?
EDIT: I just realized you think that Tor is built using multi-hop VPN. Its a real life Dunning-Kruger effect! I've never encountered this. You are going to do something really stupid and end up in prison.
So, I'm not allowed to ask you for proof of your statement? And if its unrelated, then why did you post it? Its unrelated. Also, you're saying you have an absence of evidence, ergo you have no evidence. Having no evidence does not qualify as evidence
Asking for evidence wasn't the issue, believing that the truth relies solely upon a discussion providing such evidence is.
I think you are confusing having an option with something being mandatory.
You misunderstood. Some of your own statements say it matters and is used. Mandatory wasn't mentioned nor implied.
And Tor nodes are not the same thing as VPN multi-hop.
I just realized you think that Tor is built using multi-hop.
I didn't state they were the same. Tor uses "multiple hops" (you can find that string the the link I posted earlier). It is critical to the limiting of information seen by any single entity.
And again, if you connected your Firefox browser to Tor, we could still track you. You'd get cookied or localStorage() tracked. When you disconnect from Tor, that stuff is still present in your browser. Almost like the number of hops you take or the IP address used doesn't seem to really matter, huh?
All that state can be removed. And the server might not be tracking that. Situations vary, adversaries vary. If you cannot imagine a scenario in which hops or IP address would matter, I would suggest doing some research.
Its a real life Dunning-Kruger effect! I've never encountered this. You are going to do something really stupid and end up in prison.
Personal swipes mark the end of this discussion. I would suggest you to leave those out next time as It detracts focus from constructive learning.
This will be my last reply. You can also reply if you want (but I won't see it).
Asking for evidence wasn't the issue, believing that the truth relies solely upon a discussion providing such evidence is.
Again, post your evidence or didn't happen. Literally everything after that meaningless without that. The discussion is over because you can't provide that as you are wrong. End.
That is a good point indeed, but also applies for regular internet use..
It’s a general rule, there are exceptions. I’d think it would be obvious why a VPN is needed for some even if you don’t need it.
I think it's the older way around. There are really only 3 or 4 countries where using a VPN to pirate is needed. I'm just willing to bet you live in one of those countries.
You want a tray of cookies for that original line?
Oatmeal please. If you want to be anonymous on the internet, use TOR not a VPN.
Torrenting over TOR. Fantastic idea. You clearly know what you're talking about.
Use cases are important.
Wanna torrent anonymously and don't wanna pay for a VPN? Get into I2P
If you want to download at dial-up speeds for most of your stuff.
It's still new so that's expected, as more and more people start using it, the speeds will get better automatically.
There's also private trackers, you won't need a VPN if you get your torrents from them.
Does I2P utilize nodes or something that can be hosted? I’m lucky enough to live in a location with symmetrical gigabit internet, so even if I don’t use it myself I could at least donate some bandwidth. Could run next to my TOR relay.
Private trackers are a very handy option. I’ve found their rules can often get restrictive. Although it makes sense - gotta protect the swarm.
If you’ve got a symmetrical gigabit line, you'd be a great fit for hosting a high-bandwidth I2P node, it helps the whole network scale and makes things faster for everyone. Though I'd recommend reading more about i2p before diving in.
the most important this to have when pirating is common sense
We disagree actually, it's to have well written tutorials and not to rely on the idea that people can just know things from nothing.
We get the frustration in this meme but honestly, we never liked this kind of attitude in tech spaces, it's exclusionary, gatekeepy and harms people. We understand not wanting to answer every single question but some well written tutorials etc to link to are better than having everyone starting in ignorance and getting in trouble or being harmed for it.
Especially if said tutorials keep up to date and add more answers to people's questions over time.
After all, being helpful actually helps the pirate community in that more people seed, so helping others is actually win-win. There's really no downsides whereas expecting others to know everything or being rude stops this from happening and thus is a loss for all of us.
Tutorials can't cover everything. Once you encounter something completely new, you need common sense to extrapolate from your existing knowledge (which could be from a tutorial or experience, etc).
In the end, whether we're talking about piracy, work or life in general… You need to be able to adapt to situations, not just read guides.
That's not to say well-written tutorials shouldn't exist, but the common sense part is still more important IMO
Sure, but the problem is that people aren't taught those skills necessarily. So it does help when people are willing to help out in case those skills or ability to do that or for many other reasons aren't possible.
We get that not everybody can or wants to, but a quick "I'm unable to help you" is fine, yet we see so mahy people being rude instead. Leave space for those who can or want to help instead 🙂
Who is "we" in this?
Dissociative identity disorder...
Nope. Plurality.
Yeah, I've read this webpage, it's in your profile. It seems to refer to plurality as DID, for example in the #myths section.
It also says: "There have been no such studies done on non-clinical plurality yet, but interest has been growing in the field."
It is also saying that DID is one type of plurality, it is not calling it the only type.
Not all of us have the clinical/medical type of plurality, DID, OSDD etc etc.
If you're genuinely interested then: https://pluralpedia.org/ explains many more types. Especially this page, gives a basic starter: https://pluralpedia.org/w/Plurality
Please read our profile.
My Lemmy client doesn't show profiles by default and it's a pretty popular one. Perhaps it might be wise to introduce yourselves in a sentence or 2 in the future.
My client doesn't show these things, and i'm honestly not interested enough in the matter to read someones bio to put their odd form of expression into context, even if it would show them.
For the sake of efficient communication i would suggest adjusting either by putting that context in your comment or by expressing yourself more clearly.
Dunno man. Common sense for us in IT is different compared to layman. For example, I thought it was common sense to treat incognito mode only as a shortcut so I wouldn't have to clear browsing history and local cookies everytime. Then I read about users thinking incognito mode actually protected them against snooping or fingerprinting.
Verizon sends me a letter every time I pirate something newer than a year old. Congratulating me I guess because they never do anything else.
You don’t need a VPN if you have a good enough private tracker.
{intitle:game I wanted}{infile:*torrent}
This was how I used to format my piracy searches. 13 years later I recognize that forcing the search engine to generate direct links to the torrents instead of handing me pages I could get was probably where those viruses came from 😅
Fat girl bad, noted.
This seems like a meme about piracy for script kiddies. These issues don’t really exist for anyone who knows what they’re doing.
Hence the “starter pack” lol they do indeed not know what they are doing
Why no one is speaking about Dodi-Repacks 😔
top 100 comments