Posted by Don M. on 09/28/05 15:57

"ChenHA" wrote in message news:ltqkj19ci2uavbbh4csgti7qe1bksencg3@4ax.com...
> On Wed, 28 Sep 2005 00:52:49 +0100, anthonyberet wrote:
>
> >I am happier using replacement hosts-files, as even if leading to evil
> >peer caches, those caches wont know what files you have or are sharing -
> >AFAIK that isn't in the winmx protocol.
> >
>
> It shouldn't be too difficult for the peer cache to redirect you to
> another computer whose purpose is to collect IP addresses and shared
> files details.
===========

One way to find out is to connect with empty shares at first and download a song you would
know is copyrighted, e.g. anything by Celine Dion (I'm sure she wouldn't disapprove of
digital looting by people who have no money to touch her music - says I while frantically
wiping away tears left and right). I don't think they can help induce infringement for
the purpose of catching infringers who might not infringe otherwise. Likewise, they can't
operate as primaries. They can infiltrate existing networks as they already do. If I
were a sharer of copyrighted material, I'd be concerned if the program itself is
reverse-engineered or goes open source, though. You know, a custom client can be a
perfectly passive data collector, something we've seen with SpyMule.

So I wouldn't worry much about the peer cache servers. We may see set-your-own peer cache
server software before long, and people could set up private WPNs; just be sure not to
give its address to "friends" you don't know (how DC++ hubs get busted). Anyway, we'd
have public and private WPNs and OpenNap.

> There are probably numerous ways someone with
> malicious intent can exploit the peer cache.
>
> I'm not saying that this is what will happened, just that this is a
> rather anarchic phase WinMX is going through, and you simply won't
> know what's coming next. I'm not really worried about it, but a bit
> of caution is probably necessary.
>
> >Running .exe- type patches is potentially more dangerous, of course.
>

Yes, mostly because a honest patch may be bundled with malware and viruses that way.


Don

[Back to original message]