Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: [Full-disclosure] DMCA letters (testing method) |
|---|---|
| Date: | Wed, 23 Nov 2005 18:39:02 -0500 |
We have this problem quite frequently. Get a DMCA notice... start doing lookups for the violator only to find out that there is no flow data for the IP and time period. Sometimes we will receive a letter a few days later to the effect "Sorry, we made a mistake. The IP we wrote you about doesn't seem to be sharing". Perhaps someone is actually checking, just not doing a very good job of it? --Harry Michael Holstein wrote:
I'm not sure who is doing the data collection for the RIAA these days, but after getting several DMCA notices in the last few days, I've noticed that there is never any connection attempts to the IP mentioned, during the time mentioned (and yes, I know how to do the math on timezones). So I conclude the data collection process goes like this : 1) download something and listen to it. 2) retrieve the hash value for the file 3) search directory nodes for who offeres that hash 4) collect the IP addresses 5) provide list to monkeys in room with typewriters. So they never really *check* to see if the person accused is really hosting file, they just trust what the directory server told them. This of course begs the question : How can they ask me to take down something they aren't sure is there? (nevermind that we're a 'provider' under the DMCA and ignore the requests unless it's on something we own rather than provide transit to -- since it's always residence hall IPs). When they actually go the distance and sue somebody, do they at least check then? Cheers,
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | RE: [Full-disclosure] Hacking Boot camps!, Clement Dupuis |
|---|---|
| Next by Date: | Re: [Full-disclosure] SANS Top 20: Mac OS X?, Bruce Ediger |
| Previous by Thread: | [Full-disclosure] DMCA letters (testing method), Michael Holstein |
| Next by Thread: | RE: [Full-disclosure] DMCA letters (testing method), Lauro, John |
| Indexes: | [Date] [Thread] [Top] [All Lists] |