PDA

View Full Version : Finding KaZaA Polluters


method
09-14-2003, 06:43 PM
I just downloaded a 50-cent track intentionally to receive fakes or to check on hash exploiting.. almost straight away..

206.62.151.21.mp3 was corrupt (The downloads are named after their IP with the thing I'm developing).

The beginning is fine but then it's corrupt. This is one of 'those' files and even better.. 206.62.151.21 belongs to NHI Networks which PG is already blocking - with just one attempt on one song, I've managed to uncover at least one faker for sure.

I'm guessing kazaa's hashing is based on filesize, type and a block of data at the beginning of the file.(well, for mp3s anyway, ISOs etc are probably different)

Anyway.. I'm working on it. Things are looking pretty good so far. Just thought I'd let you all know what I'm up to... oh.. and props to Random Nut for the idea.

Peace!

janett999
09-14-2003, 06:54 PM
thx for the update meth....its appreciated :)
you have done alot for P2P

btw...do you ever check your ZP PM's?

-pin-
09-14-2003, 06:54 PM
i wonder if it's possible to track the rate at which a fake gets distributed across the network. for example, after 24 hours, how many ppl will be sharing that file?

janett999
09-14-2003, 06:58 PM
i would think it would all depend on how popular the file is.

what i do...is i download a file....i put into a test folder, and i wont share it until i listen to it....if its corrupt, i delete it....if not...its shared, i wish more ppl would do this

method
09-14-2003, 07:27 PM
The problem here is that:

213.10.x.x shared the exact same file as 206.62.151.21... except his/hers is genuine and the one I've listed the full IP for was designed to screw people over on multi-sourcing.

Just for the sake of being detailed: They were using port 2023 for KaZaA. They're server name is RACK4724 and they have \\206.62.151.21\C$ and \\206.62.151.21\ADMIN$ set up for shares on a Windows 2000 box.

And Janett.. only when people remind me :) Thanks!!

method
09-14-2003, 11:43 PM
More blocking..

38.118.x.x Performance Systems International

Hosting active KaZaA hash-exploiters:

Peace!!

the_dial_up_boy
09-15-2003, 03:03 AM
Sorry my ignorance Method ,
can you explain to a newbie like me what the hell is all this about ?:lamer: