The Register® — Biting the hand that feeds IT

Feeds

Spook firm readies Virgin Media filesharing probes

The corridors at Detica's central London "Nerve Centre" are lined with portraits of the heroes of Bletchley Park, Britain's World War Two code-breaking powerhouse. The black and white gallery acted as an reminder of the secret government business where the firm makes most of its money when The Register visited recently. We were …

This topic is closed for new posts.

Page:

FAIL

Never is a very long time

"According to Klein there is "absolutely no way" CView could ever be used to report the IP addresses of individual filesharers."

Unless of course someone decides to write logs from the DPI stuff which logs which links the unique ID with the source IP address, or if someone at some point decides to change the implementation so that the IP address isn't stripped...

I just about believe him when he says there is no way that it currently does (ignoring perhaps debug logs) but of course it would be possible for the product to be changed in the future. Whether we should worry about it or not is another matter

Unhappy

We don't know who's going to end up paying for this"

We are, of course.

Big Brother

Yeah right !!!

According to Klein there is "absolutely no way" CView could ever be used to report the IP addresses of individual filesharers. "We believe identifying the consumer is an invasive use of DPI," he said.

did his nose grow longer when he said that ????

hands up all those that believe him.......

FAIL

no way" CView could ever be used to report the IP addresses of individual filesharers.

But it is possible..........

And with the massive clause Mandy has left in his Paper it shouldn't be too difficult to change the legislation to allow for a more invasive penetration. I'm sure Mandy will be in favour of some Deep Penetration.

This is so wrong on so many levels. Thanks NuLabour.

Vote for somebody/anybody /just Vote!

I wonder

If you join a TOR network and someone uses you as an end point to copy down some copyrighted material, are you held liable?

Of course this wil hopefully just fuel education and prolifiration of encrypted P2P etc.

The problem however comes down to wireless networks and spoofed IPs and how far they are going to go to proove an IP was genuine, and how far do you have to go to protect your network to avoid liability, how do you proove it!

What about my Sky Broadband? the Modem is a black box system, I can't even change the KEY on it or monitor it to see if anyone else has connected to it!

Unhappy

Yes, no, how and get a better ISP

If you make yourself a TOR network endpoint, it absolutely falls to your liability. It's pretty much written into every ISP's Ts&Cs. Why do you think people are using TOR?

Encrypted P2P only helps with DPI. All an ambulance chaser has to do is join the swarm and knows who you are (well, what your IP is - and it's getting closer to that being the same thing)

How do you spoof an IP address to download something? You can't. Have seen this misunderstanding of IP spoofing all over the land with regard to this. It's like ordering stuff off Amazon with a stolen credit card and having it delivered to a fake address. All well and good, but you'll never receive the stuff! But incidentally, at the moment our legal system says you don't have to prove anything. Though that seems perilously close to changing.

As for your Sky router - get a better ISP is all I can suggest!

WTF?

Sky Broadband

I don't understand the comment about Sky Broadband Black Box System. I have a Sky Broadband Router (the new Sagem Black boxes). And I have changed the network key and can see Exactly who is trying to use it. The reason I changed the network key was because their key was week, and they were using WEP by default. Sky make no secret of the user-name and password to access the boxes, so why complain about the state of your Sky broadband, when a quick Google will remedy all your problems.

Anonymous Coward
Alert

Stuff Sky's modems, replace 'em!

I took one look at the Sagem cack and replaced it with a Linksys WAG325, which I have control over what is coming and going through my connection!

Sky won't give you the ADSL username/password but there are "methods" to get your password from your username and not that hard to do, Google is you mate.

When I saw that Sky "snoop" port open onthe Sagem and found there was no way to close it, I threw it straight in the spare room! If Sky call up and want to know if it's working and can they get in, I will simply plug it back in, switch all my PCs off, let them play, then remove it afterward!

Stuff their T&C, I want a secure connection on a secure line where I choose what comes and goes from house and my machines, not what some think-headed muppet at Sky-central deems acceptable to move from my machines to the world's most insecure and dangerous network!

"Encrypted P2P only helps with DPI. "

Good, that's what we're discussing :-)

The ambulence chasers would have to join every swarm. this will make them easy to spot.

a title is required

"someone uses you as an end point to copy down some copyrighted material, are you held liable?"

well if you are, you get kicked off your ISP for illegal actions, which is against the terms and conditions. If you aren't, you get kicked off your ISP for not securing your network properly, which is also against most ISP's terms and conditions. so I don't think it matters

WEP? Dont think so

Sky havent used WEP for about 2 years now, all the black routers (netgear, sagem etc) IIRC are all WPA.

At least the 200 or so ive seen are at any rate.

Thumb Down

Work traffic

I use a encrypted VPN traffic to both work systems and into clients systems.

I have to say that I know just how much extra logging is done (for "quality research") which will mean my work traffic will be in the hands of a now private company - who can/will sell this onto my clients competitors.

Time to move to a non DPI ISP.

Jacqui

Non DPI ISPs

I recommend UKFSN or Andrews and Arnold. I'm with the latter.

I'd gladly stick with them if BT implemented DPI with AAISP being unable to opt out; I'd just get myself a VPN.

The answer lies in your post

"I use a encrypted VPN traffic to both work systems and into clients systems"

They will not look encrypted VPN traffic. They almost certainly would not be able to break the encryption.

"I have to say that I know just how much extra logging is done (for "quality research") which will mean my work traffic will be in the hands of a now private company - who can/will sell this onto my clients competitors."

No they won't.

40%

They might be able to record 40% now, but that'll drop to around 0% once everyone* is using encrypted connections, which is the end game here.

FAIL

Don't be such a bloody idiot

Seriously, when will people realise that trying to circumvent this system with encryption is NOT the answer. How long do you think it will take for Mandy to use the powers granted in clause 17 of the Digital Economy Bill to force ISPs to block all encrypted traffic unless the end node is registered on some database somewhere as a legitimate corporate e-Commerce IP and registered corporate VPN server?

Get your heads out of your arses and actually do something to try and stop this nonsense instead of just jumping on the encryption bandwagon - because if you think encryption is going to solve the problem over the long term, you are incredibly naive.

FAIL

And.........

Your obviously superior solution is???

Thought not.

Twunt.

Stop

So....

If they can't tell what is being transmitted, just that so much is being transmitted using those protocols - how long before the record industry tries to claim that my download of fedora is 10 lost album sales for them?

And yeah recording the IP is just a very trivial step away from this, and will probably factor into the next negotiating round for virgins new music business.

FAIL

read the dam article

if it is not encripted they can read it as the box on the other end captures all the P2P trafic you send and reassembles it so they can compare it to a list of copyrighted work

given this I have lots of questions on how it works (what list what if I am doing more than 1 transfer what if I only to half or less at any time etc) but yours is ansered in the article

Thumb Up

It's a service

Your next bill will come complete with tracks from Amazon that the ISP has detected you downloaded. You get to buy Jedwards latest MP3 for £5.99. If that wasn't the track there'll be a link at the bottom of the bill where you can tell them what track you did download.

Anonymous Coward
Big Brother

Eh?

No Detica - actually YOU have missed the point. Data I send using the internet is mine. I own it - and I don't want you peeping into it. Get 'yer bloody mits off! Whether you trace the data back to me is a secondary point - you shouldn't be peeking at what I am doing ANYWAY!

Of course, your connection to the Intelligence Services doesn't make anyone nervous, does it? You know - those intelligence services working for that government that seems bloody obsessed with knowing everything I do, every waking minute of every sodding day?

Oh - and you're owned by BAE? Oh right - I feel SOOOOOO confident about your morals and ethics now...

Virgin - are you ****ing mad?

All this has done is lead me to :

a) Immediately port my data through a secure VPN.

b) Recommend to the many people who come to me for advice (as an IT professional) to stay the hell away from you. In the past week alone, I have managed to stop two people signing up with you... It's a shame, because as an ISP your service isn't that bad...

Oh - and I was never using torrents / file sharing in the first place...

Really Virgin, get some principles, and then live by them.

FAIL

DPI my eye.

Deep packet inspection of encrypted bittorrent packets will tell you ..er..that it's an encrypted bittorrent packet. The payload of which is no doubt a copyrighted film of a bear shitting in the woods.

So. They're going to count the encrypted bittorrent packets and then take a totally unfounded guess as to how much copyright infringement is going on and sex it up with a few buzzwords. Then grease Mandelson's sphincter a bit more till he poots forth more restrictions on, and monitoring of, private people for the benefit of those who deserve nothing more than a swift kick in the nuts. Oh joy.

FAIL

They can tell you're...

...downloading; they can tell WHAT you're downloading.... how do they then propose to prove "Beyond reasonable doubt" that you are ILLEGALLY downloading?

They can tell you're uploading; they can tell WHAT you're uploading; how do they then propose to prove boyond reasonable doubt that the person you're uploading to is NOT licensed to download it?

It's a long way from identifying someone who's up/downloading and proving that it's illegal.

because

under british law there is NO person (exept may the bbc's new service) who is allowed to use the P2P netowrks to share stuff and the list tey will be comperting it to will only include bbc

as far as I rember under british law we have no right to consume meida except in the form they want us to

Coffee/keyboard

I've heard this before

"The first thing we do is throw away the IP address" sounds suspiciously similar to something said by Phorm. We're still waiting to see the much vaunted legal opinion they possess which proves that Webwise is legal.

Saying things like "there is "absolutely no way" CView could ever be used to report the IP addresses of individual filesharers." is nothing but spin, spin, spin. The next logical step is to record the IP address and try to see who is doing exactly what.

It's what the dying middle man heavy "entertainment" industry wants and it's what Sith Lord Mandelson wants.

Escape key - because I want to Escape from this country.

Why are they excempt?

Surely they're purposes downloading illegal content just as much as the people they're chasing - how are they allowed to get away with it?

Troll

cos

they have a letter from mummy mandleson saying it is ok if they skip cort cos they have a cold

Anonymous Coward
Big Brother

Vote for the pirate party

This is (still) a democracy, so we, as the average joes, should have the final say. And I say:

a) Vote for the pirate party. Despite the name, they have more sense in them than anybody else out there,

b) If the taxpayer receives the bill for all this nonsense, WE are not paying,

c) All internet traffic to and from Mandy's giant castle should be logged and made public, just to give the freak a taste of his own medicine.

I don't care about piracy, but I care about privacy. Some people are losing track of their priorities.

Anonymous Coward
Anonymous Coward

How does encryption help?

Sure if you encypt the payload CView will not be able to tell what the payload is.

However the Music Industry and its abulance chasing lawyers work by joining a swarm and grabbing the IPs of PCs in the swarm that upload and download to their monitored client. Surely the fact its encrypted in transport makes no difference since they are part of the swarm?

I've got an idea

I don't download music from the interwebs as I prefer to have a CD, but as filesharing is now likely to instantly identify you (ignore what the say) and make you liable for death at the hands of Mandleson, I reckon all downloaders should just go and start shoplifting at HMV. Easier, more convenient and a lesser sentance if you get caught.

how long....

Before someone releases an Ubuntu build which acoustically matches a major copyrighted work?

Anonymous Coward
Boffin

If Neil of VM and Dan Klein of Detica has nothing to hide ,They as nothing to fear...

"Dan Klein, Detica's media accounts director, and the man in charge of the trial."

If Neil of VM and Dan Klein of Detica has nothing to hide ,They as nothing to fear...

so lets Have the Full Quotes they made to clarify their position on this. a full and detailed graphical layout jpg, showing Exactly how they have integrated this DPI kit into the Virgin Media Core infrastructure, showing the Exact path your inspected VM customers data will take from start to finish for starters Please ASAP.

a pictur paints a thousand words and all that, clarity without compromise.

outbound path: PC>cable modem>UBR>detica DPI kit>VMrouters>interweb>requested web site...whatever

inbound path: web site>interweb>VMrouters>detica DPI Kit>UBR>cable modem>PC....

what happens to your data And the copy they take of it as it enters the DPI kit, and after it leaves ?

you get the picture, will the Virgin Media customers got them too as requested to help clarify this, or is that set of pictures far to to damning of the actual processes taking place unseen by mere paying customers, or will they not publicly appear for more than a nanosecond, then get taken down as the BT Phorm DPI picutures did way back when, thats the question.

so what it going to be Neil and Dan Klein, nothing to fear ,so provide this requested most basic information clearly, openly, and without obfuscation to clarify your position!

or are you going to hide behind the usual and often seen corporate VM and BT executive wall of silence, and darth of any real informative open data directly from the companies people wanting to install and operate this DPI for profit kit on their consumer protected user base.

PS :the names, addresses, and full copys of any legal teams opinions (redacted of any personal info OC) you may have as regards this stage of your plan for plain Public reading is also requested please, so is it nothing to hide or lots to hide and keep out of the pubics view.

WTF?

Absolute rubbish

"According to Klein there is "absolutely no way" CView could ever be used to report the IP addresses of individual filesharers."

Absolute rubbish - if the system is able to identify what is an IP address and strip it from the data replacing it with a UID then of course it can be used to report the IP address - it just takes a few minutes of reconfiguring - nothing more. They must think we are all completely stupid or something.

Furthermore, how many times does it need stating that a UID is NOT anonymous - it is personally identifiable specifically because it represents a single entity and is unique for exactly that purpose.

Also Detica think that is wrong to use DPI to spy on people? Do they take us for complete idiots or are they just trying to insult us? This is the company who since 2006 have netted around £1.7M in payment from the Cabinet Office and Office of Public Sector Information to do exactly that! Lets see what an FOIA Request to GCHQ on how much money they have paid Detica for their DPI services delivers shall we?

CView is not compliant with RIPA, PECR or ECHR and VM's spin that they are exempt under RIPA is exactly that, spin. RIPA only allows exemptions for interception for the purpose of provision and operation of the service - this monitoring is in no way required for either and therefore is not exempt.

I am working about 12 hours a day on this issue at the moment and will not rest until CView goes the same way as Phorm - out of the UK.

Use of this technology for this purpose is a criminal offence.

Megaphone

Correction

As was pointed out by Chris, actually GCHQ are exempt from FOIA Requests, but there is more than one way to skin a cat - let's see if we can get a parliamentary question asked like this one:

http://www.publications.parliament.uk/pa/cm200910/cmhansrd/cm091203/text/91203w0026.htm

Granted it is probably likely to still go unanswered but for a company that allegedly receives hundreds of millions of pounds from British Intelligence services such as GCHQ for snooping technology such as DPI, it is an insult to our intelligencet for them to take the moral high ground with regards to using the same technology being used for detecting copyright infringement.

Detica don't give a shit about privacy, all they care about is making money - to believe otherwise is absurd.

Anonymous Coward
Anonymous Coward

VM Company Terms and Conditions

http://allyours.virginmedia.com/html/legal/oncable/terms.html

Section B.5(i) states:

"We reserve the right to monitor and control data volume and/or types of traffic transmitted via the interactive services on your Virgin TV and/or Internet access"

So effectively anyone who has accepted the terms of service for VM broadband has said they are happy for this to take place. If they are not happy, I refer them to section J.5(c)

FAIL

Whatever results they come up with...

...will have a huge error margin. Encrypted data will no doubt be added to the 'illegally shared file' total. And the music recognition algorithm is by no means 100% accurate. I'd be amazed at 20% accuracy. In the end, if there was no illegal file sharing then the music business will lose out since fewer people will be buying music. Who would fork out money to listen to music that is highly likely to be shit. Try before you buy.

WTF?

Encrpytion?!

Don't get me wrong, but doesn't a VPN only work between your PC and the Router. You can't setup a VPN between the router and your ISP without their permission, or at great expense, they won't let you do that for free. Surely the point is encrypting the traffic between the router, ISP and Internet.

Surely all we would need to do is encrypt the data stream from P2P client we are using?

Unless C-View intend on hacking the data, I don't see how they can "see" what is in your encrypted data stream. Fair enough if people are openly (and stupidly) downloading illegal files, but if some users are actually making the effort to cover their tracks CView won't be able to look at this, will it?

Not really

A VPN is a secure (encrypted) "tunnel" from A to B. It could be from network to network, or PC to a network, or PC to server etc.

For example, I could use a VPN taking me to a server in Russia, or Taiwan or Sweden. All my traffic will be routed over that VPN, so my BitTorrent download is going out of the ISP plugged into the network of the VPN end-point I'm connected too.

Big Brother

Lots more BitTorrent for me, then

First thought, for me, was "Oh, I'd better start downloading lots of Linux distros by BitTorrent again soon." If they're going to intercept perfectly legal filesharing traffic, let's make sure they get lots of it!

Grenade

Better yet

Better than that why not share some files that you own the copyright on with your friend who you've granted permission to download them from you. Then by their own admission they make an *unauthorised* copy of your copyrighted works!

FAIL

Acoustic matching

Good luck with that, especially if they're using Gracenote.

Headmaster

Re: Encryption

@takuhii

No, no. You're setting up a VPN *through* your ISP, no to it. Yes, you want to encrypt the wireless traffic between your computer and your router, because it is sent over the air and can be intercepted by anoyone in range of your wireless adapter.

But a VPN provides an encrypted tunnel through which other traffic can pass. All the ISP knows is that encrypted traffic is going to another host on the Internet, most likely on TCP port 1723.

This differs from encryped peer-to-peer traffic in that the ISP will not know the intended endpoint of your communications, nor the TCP port the endpoint is using. Encrypted peer-to-peer is like encrypted web, in that although the contents of the packet cannot be determined, the address and port of the recipient can be, e.g. www.yourbank.com:443.

So the (rather clunky) workaround for Virgin users wishing to game the system is to connect over a VPN to a system that is not on Virgin, which then forwards your filesharing traffic to your peer. You just have to hope that the peer is not also a Virgin customer.

Thumb Up

Thank you

@Gianni Straniero: Thanks for clearing that up mate, I was always under that impression the VPN was merely between you and your router (esp for home users). Now if ONLY I could find a tutorial on setting one up ;)

Not enough jails to detain all the freetards

Contrary to the paranoia, the objective here is not to turn freetards into nervous wrecks. (That may come later - much later).

> "We're not trying to be 100 per cent accurate," he said. "We're taking a statistical view."

This does not mean what he wants you to think it means. You think you might or might not get sampled, so that makes it a "statistical view".

But he isn't saying what copyright database they are going to be using, so we don't know who or what is on it. Self-evidently the results are going to depend on the database. But how complete is that database? Does it contain only copyrights owned by Big Muzak? As he isn't saying, it seems a reasonable inference that the database is incomplete - and that the results will be biased in favour of Big Muzak. IMHO that's his "statistical view".

Less nu Stasi, more corporatist-fascist business-as-usual.

Thing is though

Perhaps someone can tell me, how will this handle something like TorrentRelay, whereby any torrent is downloaded by another server, unrelated to your PC/Mac whatever, and then once the server has downloaded the torrent, you download from the server as normal HTTP traffic from one IP address. All the dirty work has been done by the other server, and when you download from the server, you show only yours and the servers IP, seemingly no sharing, same as a large update or SP from Microsoft.

The traffic admittedly won't be difficult to decode or inspect, but the idea of DPI is to detect multiple IP's indicating file sharing by torrent or P2P.

Does this mean that all traffic between ISP and IP is going to be inspected or just identifiable sharing data?

Where do you draw the line, is anything over 1MB, going to be determined as file sharing?, what about if I send some holiday snaps to a friend in an email?, whatabout if I send a home movie to a distant relative by email?

Anonymous Coward
Boffin

stop using the reply button, it doesnt work well

people stop using the reply button, it doesnt work well, and means you may miss that interesting informative reply if you dont keep refreshing the pages and rechecking al the replys to date....

just use copy/paste for now untill Elreg sorts this messy thing out.

chris, can you have the Elreg techys make it post all future quoted replys to the end of the threads, as at least then your users page refreshs wil not miss potentially interesting feedback, adding in a direct URL link to the replyed post could be used to take people back to the OPs full entry too

Thumb Up

+1 for the reply proble... ooops!

sorry! :)

The real solution would be for you to get a reply notification icon to replies/new posts since your last visit to that page, and have these new posts highlighted when refreshed. With the update icons in your control panel you won't have to keep hitting refresh on a page... and maybe some option to list by date and a view all instead of paged view when in a discussion too.

Must admit though, I share your pain - the new threading is a bit of a bugger when looking for updates... for long discussions the splitting of posts into multiple pages only adds to the frustration... my old method was to keep pages alive, and hitting refresh once the page reloaded it would jump to my last position... now it's always messed up so gave up.

not both

if we do one or the other but what annoys me is the problem of pepol doing both and then me missing all intresting descuions

Anonymous Coward
Anonymous Coward

RE: Encryption

Encryption hides the content of the packet. Whilst legal teams for the RIAA / MPAA etc. could look at a swarm connected to a tracker - you can do it the pirate way and just use magnet links and DHT for distribution.

WTF?

ISP lose legal defense with this?

surely ISPs will lost the legal defence that they don't know what's going through their network and therefore can't be held accountable with this?

if an ISP know that's someone is using their connection to download copyright infringing material/etc then the ISP is facilitating this and could be help accountable, perhaps?

Page:

This topic is closed for new posts.