Saturday, November 28, 2009

Anti P2P Organization Blocking


The tools used to keep you safe when downloading from file-sharing networks can be used by the organizations to snare you!



Simply blocking the access to a peer list that comprises a torrent download does not stop ANYONE accessing the same .torrent and viewing the list of those participating in file sharing. Above is a peer list from an active download showing a list of peers that were currently connected to the "pool". If an "Anti P2P" organization were to be connected to this "pool" using an IP obscuring software program you would see their FALSE IP address along with your OWN. If this list were to be used to reverse look-up these IP address's you can be identified (unless you are also using a program to obscure your IP.

Wednesday, November 25, 2009

Aircrack Windows XP VMWare Player

This is aircrack-ng running on an Asus 1000HE Windows XP Netbook running a Debian Linux Virtual Appliance in VMWare Player.



Shown is the airoscript console. Connection to the wireless adapter in the Netbook has been established as this screen-shot was mailed from this machine.

Experiments with packet sniffing and injection can now be started.

The Host operating system is Windows XP Home, the o/s that the Asus was supplied with. The virtual appliance was downloaded and configured using VMWare Player. A torrent package of Mac OS Leopard contained a copy of VMWare Workstation 6.5.1-126130.exe - but this was not used for this configuration.

Pages relating to Aircrack-ng on this blog:
Downloading VMWare Player:
  • VMWare website - VMWare Player - I recommend that you download the player from the VMWare website, the authors of the player rather than a 3rd party download site.

Thursday, November 19, 2009

Performing a Reverse IP Look-up

There are many on-line services that allow you to get a first order idea of where an IP address is located.

Shown below is a peer list taken from a uTorrent client that was seeding the movie Deep Impact.

Taking the first in the list it appears that the P2P downloader is located on a network run by a company in Saudi Arabia.

If you click on the image above and scroll down you will see the contact information for this ISP. THIS IS WHAT AN ANTI-P2P ORGANIZATION WOULD DO!

If the ISP keeps records of who has been assigned an IP address, they can and they do, they can be forced to hand over your personal details if served with a court order. In the case shown here it is not clear whether the copyright owners for the movie in question would have any authority in Saudi Arabia.

If you are using a service to obscure your IP address, like BTGuard or TorrentPrivacy, then their IP address will appear in the list. Consequently if they are served with a court order they also are legally bound to hand over your details. In the case if BTGuard they are based in Canada - TorrentPrivacy, on the other hand are in the Russian Federation and further removed from the legal systems of North America and the movie houses.

If you are using a service such as PeerBlock (Peer Guardian II) ALL THAT HAPPENS IS THAT THE IP ADDRESS OF THE ANTI-P2P ORGANIZATION WILL NOT APPEAR IN THE LIST SHOWN AT THE TOP. This does not mean that they are not there, watching your every move they are just using an IP address that not known as hostile and placed in the block list.

**** Wayne McAlpine, the person who claims to have the solution to tracking down pirates is the same person who has been trying to work out who I am for well over a year! He accused me of being a "nobody", well if this is supposed to be an example of how he is "somebody" I for one are not impressed. There is little wonder that there was little interest in his solution:

"There's many things that people get away with every day;" McAlpine said. "The music industry complains there's a $38 billion loss each year. That's a sizeable amount of income. And I think if they were really honest about addressing it they would probably look at things more open-armed."

Wayne McAlpine is obviously not to be taken as an authority when it comes to things related to technology. In fact he is particularly sensitive to "bad" things said about him on the Internet.

Tuesday, November 17, 2009

Microsoft Virtual PC vs. VirtualBox

Although Windows 7 has the new and improved Microsoft Virtual-PC so that it can run XP-Mode it is not as "polished" as Sun's VirtualBox (and of course, VMWare is likely to be even more so - as it is a "paid" solution - VMPlayer is free but lacks some of the features of the full product).

Virtual-PC, for Windows 7, is supposedly a vast improvement on Virtual-PC 2007, there are enhancements that have been made to the Integration Features (in that USB devices are now accessible from the virtual machine), however, these are pretty much limited to Windows guest operating systems - the use with a Linux guest is not as slick (full screen mode, cursor capture etc.).

VirtualBox on the other hand, has a full suite of Guest Additions that allow both Windows and Linux to operate in a 'Seamless Mode'.

From the Microsoft faq page for Virtual PC the following observations are made about Virtual PC as compared to VirtualBox:
  • Support for XP-Mode to 2014
  • Needs AMD-V or VT - (VirtualBox does not)
  • Cannot support a 64 bit guest - (VirtualBox does)
  • Is aimed at small businesses (larger enterprises are supposed to use MED-V)
  • 3-D graphics, audio, and TV tuners, do not work well under virtualization today. - so it not available on Home Premium (This is especially true of the Microsoft virtualization product!)
  • XP-Mode is a free download of a fully licensed copy of XP SP3 (in 7) - but a copy of XP is easy to find if you look
  • MED-V is built on Virtual-PC (one wonders if it has similar limitations?)
In short, Virtual PC has a ways to go. But kudos to Microsoft for sparking the interest in a better product!

PS - a search for: "ubuntu 9.10 screen resolution under ms virtualpc 2007 800" hit this blog - the screen resolution under VirtualPC (The new one!) sucks as compared to VirtualBox.

You can find a more in-depth discussion of this topic and the use of VirtualBox on my website www.tempusfugit.ca

Links:

Saturday, November 14, 2009

vboxadditions autorun sh

  •  VirtualBox and VMs on The Technology Muse

How to add Virtualbox Guest Additions

Simply click on the autorun.sh icon in the filemanger view of the vboxadditions.iso (attached in settings)



See my earlier post: "Setting the display resolution in a Virtual Karmic Koala" for more screen-shots of this.

You will not see the Guest Additions CDROM if you have not attached it and hence you will not see all the files contained on it - these include those for Windows - 32 bit and 64 bit operating systems.
The guest additions .iso is to be found in the virtualbox directory on the host computer.