TorrentFreak Email Update

NSA Authorized Monitoring of Pirate Bay and Proxy Users

Posted: 18 Feb 2014 02:40 AM PST

The revelations of former NSA contractor Edward Snowden have caused shockwaves around the world and resonated in all corners of the online community. Today the leaked material is of particular interest to torrent site users.

Published on Glenn Greenwald’s The Intercept, the new papers reveal internal NSA discussions over what can and cannot be monitored in various circumstances.

In Q&A‘s between NSA staff, Threat Operations Center Oversight and Compliance (NOC), and the NSA’s Office of General Council (OGC), torrent sites are mentioned on a number of occasions, with The Pirate Bay sitting front and center.

Tracking The Pirate Bay and its users

The first question concerns the querying of non US-based IP addresses which have been obtained from home soil.

“If we run across foreign malicious actors at home (spam email, router/IDS logs, torrent sites, etc) can we bring those IPs here and use the SIGINT [intelligence-gathering by interception] system to monitor these guys?” the member of staff asked.

“It might be okay,” NOC and OGC responded, “but wait for confirmation.”

The second instance came from a staff member asking questions over the monitoring of servers overseas, alongside the possibility that U.S. citizens may be using them.

“Is it okay to query against a foreign server known to be malicious even if there is a possibility that a US person could be using it as well? Example, thepiratebay.org,” the NSA employee wrote.

No problem, came the reply, but exercise caution.

“Okay to go after foreign servers which US people use also (with no defeats). But try to minimize to ‘post’ only, for example, to filter out non-pertinent information,” NOC and OGC wrote back.

From the documents it’s clear that the NSA sees both The Pirate Bay and Wikileaks as organizations that threaten U.S. security through their distribution of U.S. secrets. What follows is a question which seems to suggests that once a torrent has been released on The Pirate Bay, it’s possible to analyze traffic sent before the release was made in order to trace the leaker.

“[If a] list of .mil passwords [were] released to thepiratebay.org…can we go back into XKS-SIGINT (using a custom created fingerprint) to search for all traffic containing that password in foreign traffic just before the release? the NSA worker asked.

Tracking people using proxies to hide their activities

While many consider proxies as useful tools to mask their online activities, it has to be presumed that organizations such as the NSA have the ability to track individuals using even multiple instances. The next set of questions skip over the mechanics of how that might be possible (with the clear implication that it is) and jump straight to what is permissible.

[When an actor is]….posting to thepiratebay.org (a foreign web-server)….through multiple proxied hops, are we allowed to back-trace that communication even if it hops through US based proxies?” an NSA worker asked.

“In other words, back-trace the post from thepiratebay.org to a Chinese base proxy which came through a US based proxy, which came through another US based proxy, which came through a Russian based proxy etc”

“Assuming you mean via SIGINT metadata,” came the NOC response, “then SPCMA-trained [Supplemental Procedures Governing Communications Metadata Analysis] analysts would be able to use SPCMA-enabled tools to chain through U.S. based proxies. It is not authorized otherwise.”

While on the one hand these discussions suggest that some kind of effort is being made to protect US citizens from NSA spying, on the other it’s fairly obvious that they are being swept up en masse whether they like it or not.

Furthermore, the odds of being caught up in that dragnet only increase should U.S. citizens dare to become involved in organizations like Wikileaks or use torrent sites including The Pirate Bay. Worryingly, the threshold for becoming categorized as an associate of a “malicious foreign actor” appears to be lower than ever.

Source: TorrentFreak, for the latest info on copyright, file-sharing and VPN services.

De La Soul Gave Away Pirated Copies of Their Own Music

Posted: 17 Feb 2014 09:41 AM PST

In a decade spilling over with heavy aggressive gangsta rap from the likes of N.W.A, the birth of De La Soul in 1987 was a much needed breath of light fresh air.

Two years later the trio’s debut album 3 Feet High and Rising was making waves and a quarter of a century on its magnificence hasn’t diminished one bit – if you can get to hear it.

Trouble is, unless you have it on some old-skool format (I have my vinyl here), you can’t obtain it legally online. It’s a complex story of the band’s undoubted sampling prowess and refreshingly ‘liberal’ approach to copyright, followed by a licensing nightmare that not even two decades and a half of negotiations could put to rest.

This past weekend, however, De La Soul had a rather special gift for their fans. To celebrate 25 years since the launch of 3 Feet High, the band dropped the album and their entire back catalog on WeAreDeLaSoul.com, a site set up on Valentine’s day to spread the love to fans old and new.

This musical free-for-all was great publicity for the band (who have new album coming out later this year) and a golden opportunity for people who wanted to get their hands on gems such as The Magic Number, Say No Go, and my personal favorite Ghetto Thang, without having to resort to obtaining the music from pirate sources.

On that front, however, there’s both good and bad news.

Yes, De La Soul delivered on the music front, handing over the tunes in exchange for the downloader’s email address, but those hoping to get tracks untainted by piracy will be disappointed. As first spotted by Recode, it seems De La Soul had a bit of a problem obtaining ‘official’ digital copies.

Text revealed in the metadata on the 3 Feet High MP3s appears to show that De La Soul (or someone close to them) downloaded the copies from Russian pirate site Rappalata before making them available on their own site.

3Feet MetaTags

The alternative explanation – that these are actually official but previously unreleased MP3s to which someone close to the band has ‘mischievously’ added Rappalata’s URL – is a fun one, but very fairly unlikely to say the least.

3FeetRapp

Sadly De La Soul’s weekend giveaway is now over, with the band’s music retreating once again into analog exile. Of course, copies of the Valentines giveaway have already appeared on torrent sites including The Pirate Bay, which raises an interesting point.

If the band are unable to digitally release the majority of their music due to copyright and licensing issues but are happy to give it away, it seems highly likely that they simply want their fans to listen to and enjoy De La Soul music in the run up the release of their new album.

Is listening to it on YouTube (possible) really any different from grabbing it from Pirate Bay? After all, not only are the samples unauthorized, the MP3s are too…..

Source: TorrentFreak, for the latest info on copyright, file-sharing and VPN services.