Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Trojan P2P
Search Topic:
view: topics flat text 
Post a:

Comments on news posted 2003-10-03 17:53:25: The makers of one of the newer 'stealth' p2p applications, dubbed Earthstation 5, are being accused of including malicious code in their application. We spoke briefly on Earthstation 5 earlier this year. ..

page: 1 · 2 · 3 · 4 · 5
AuthorAll Replies


Techie2000
In Vertigo
Premium
join:2001-12-05
clubs:
 Not surprised

It was bound to happen sooner or later. Companies were already bundling spyware with their P2P apps, now they want to be 1337 h4X0rz too...

vlad7

join:2002-12-30
seems to be true

the creators of ES5 don't say anything about it after 1 day. btw I never installed that crap.
--
Try Mozilla FireBird!


wheelzoff

join:2001-02-14
Irving, TX
clubs:

Already fixed.......

They already replaced the installer on the site, with the malicious code removed and they claim there is no longer a problem, but the fact it was there anyway IS the problem.
--
"The Stars Win The Stanley Cup, The Stars Win The Stanley Cup", Ralph Strangis.


purplejello

join:2001-08-23
Reno, NV
clubs:

Poisoned

Ahh, well let's conduct a thought experiment.

Your lock company decides that all of the locks it produces will be unlockable by a skeleton key, copies of which are given to the CEO and his friends.

The public finds out, becomes outraged, and the locks are replaced without this security flaw.

You would never buy from that company again. And by 'you', I mean 'the entire populace'. What is different about this situation? They've effectively lost the trust (permanently) of their potential user base.
--
( `( ¯`( ¯`·._ Death Ring _.·´ ¯ )´ ¯ )´ ) - Visit Deathring.us for Drinking Games, Mixed Drinks, Hot-Or-Not, Girls, Games, Cheats, Hacks, Topsites, and AIM Utilities.


ChrisDAT
Google Keyword Compsysnyc

join:2002-02-26
Hollis, NY

Don't sleep on the RIAA...

They have the deep pockets to outright buyout smaller, less known p2p players for the sole purpose of droppin dime on the users... Remember, they have to be able to "get" however many copyrighted works from an offender. If you're dialed up, that could take months, and if you only stay online long enough to get what you want (regardless of your connection type/speed), you're virtually untouchable... The goal of the RIAA is to halt the sharing of their protected works, either by litigation, or by otherwise making it "dangerous" to be assiciated with p2p in general...

I make sure I pay attention to what is happening... wholesale downloading will get an ip [or ISP] banned, as will accelerators and other, seemingly automation driven attempts at "lifting" stuff....

BeWare... Big brother is on the prowl, and the list is in the open. cjw


LordMalak

join:2003-07-02
Brazil

 Are we suposed to trust Palestinian software??

Sorry, but I have a problem using software made in countries that are hostile to the United States, or are involved in some kind of religious/political conflict with us.

Here we have a Palestinian software that puts trojans in US computers. Now the Palestinians are eternally at war with Israel, which seems to be in bed with Washington. If this is not Yasser Arafat's last attempt to attack the United States, I don't know what is.
--
SBC DSL Tech Support.


dmd8605

join:2001-12-13
West Milton, OH
I think your tin foil hat is a little bit tight.


reub2000
Premium
join:2001-12-28
Evanston, IL
We'll be hearing about this from the RIAA.

It wouldn't suprise me if the RIAA uses this as an excuse to get rid of p2p. They've already used p2ps abilty to share files on your hard drive against p2p.


Omega
Displaced Ohioan
Premium
join:2002-07-30
Cheyenne, WY
clubs:
reply to wheelzoff
Re: Already fixed.......

I never installed it.

Now I never will. It looked to be promising, but I will not install it into my computer now.

c0mmander

join:2001-10-03

reply to reub2000
Re: We'll be hearing about this from the RIAA.

notice that the "bad code" allows a remote user to delete shared files.

from the article posting:
"There exists malicious code... could delete any file the user is sharing... C:\BOOT.INI file which is a required boot file used by ntldr.
"

sounds like something the RIAA would pull, remember when they convinced orrin hatch that hacking computers to delete copyrighted files should be legal?


footballdude
Premium
join:2002-08-13
Imperial, MO

reply to dmd8605
Re: Are we suposed to trust Palestinian software??

Remember all of the Palestinians dancing in the streets when they heard about the World Trade Center attack? Have you noticed all of the Palestinians blowing themselves up lately? Why is it so hard to think that some of them might have tried to strike at American computers? I haven't seen any evidence of that but I certainly wouldn't think of it as a wacko conspiracy theory, either.


morbo
Complete Your Transaction

join:2002-01-22
00000
clubs:
·Charter Pipeline
·AT&T Southwest

said by footballdude See Profile:
wacko conspiracy theory
sounds about right.
--
me fail english? that's unpossible.


reub2000
Premium
join:2001-12-28
Evanston, IL
reply to c0mmander
Re: We'll be hearing about this from the RIAA.

Even better. Delete copyrighted songs, and then "compain" to congress about how p2p is a security risk.


tenebrion

join:2001-12-12
Rancho Palos Verdes, CA
clubs:

reply to vlad7
Re: seems to be true

said by vlad7 See Profile:
the creators of ES5 don't say anything about it after 1 day. btw I never installed that crap.

so thats why my friends computer complained about missing boot.ini
--
"Demons wait in every corner, reach for you with poisened claws,
Madness spreads its wings above, you're lying helpless on the floor"


Wolverine2
It Wasn't Me
Premium
join:2001-01-30
Wilton, CA
clubs:

Hmm, nothing catchy comes to mind

How about this, the RIAA is involved in the malcious code included within the p2p software. They of course dont admit this, having the software made by a palestinian company benefits the RIAA, because now the government could use some portion of the patriot act to disallow the use of p2p programs because they could represent a threat to national security. Far fetched . Wouldn't it be a brilliant plan though .
--
'Do Not Go Gentle' into that 'Good Night'. Rage, Rage against The Dying of the Light... "Dylan Thomas"


keith2468
Premium,MVM
join:2001-02-03
Winnipeg, MB

We don't know who installed the back door

How soon people forget the original licensing agreement Kazaa published with its product.

If the product is otherwise good it will be adopted, or at least cut-up and some parts adopted.

In the case of ES5, what people are forgetting is that the Palestinians are the focus of intense intelligence activity by foreign countries.

Not just the government of Israel, but the governments of the US, Russia, and even a few other Arab countries (e.g. Jordan) want (or act like they want) to keep the Palestinians hobbled.

And then there is the RIAA angle.

Who put the back door in the code? ES5, foreign intelligence agencies, the Palestinian government, the RIAA, someone else?

There are a lot of suspects and I would say we don't have enough information to do more than guess.


A J 121
Who Is Keyser Soze?
Premium
join:2001-01-15
UK
clubs:

reply to Wolverine2
Re: Hmm, nothing catchy comes to mind

They would never do this. Due to the fact that if they hacked into a PC in the UK (for example) then they could be prosecuted under UK law. The Computer Misuse Act 1990 says "A person is guilty of an offence if: he does any act which causes an unauthorised modification of the contents of any computer"
I cannot see the RIAA being stupid enough to do this. It would wipe them out in an instant if they were found to be involved. They may be able to mess with PC's in the US but don't forget that other countries don't have to worry about the RIAA as its powers and legal clout mean nothing to them.
--
The greatest trick the devil ever pulled was convincing the world he didn't exist.


keith2468
Premium,MVM
join:2001-02-03
Winnipeg, MB

reply to LordMalak
Re: Are we suposed to trust Palestinian software??

Are you suggesting that people in other countries boycott US vendors and services when their countries are involved in some kind of relgious or political conflict with the USA?

The USA is a big powerful country and it is or has been in some kind of conflict with just about every country in the world, usually involving broken trade treaties, but sometimes involving political interference in domestic elections, giving weapons to "rebel" groups (aka terrorists). I'm sure a political scientist or historian could give a longer more detailed list.

And talk about spyware or defective software.

Home of Microsoft, Gator, etc., etc.

Let us hope, for the sake of the US software and hardware industry, that people in other countries are not so quick to blame the whole country for the actions of a few companies.

"Do unto others as you would have others do unto you."


adnoctum
Status Woe

join:2003-05-18
Athens, GA
reply to A J 121
Re: Hmm, nothing catchy comes to mind

This is of course assuming that the RIAA is smart enough to think all these plans up. They are the ones who are suing their customer base, hoping to encourage sales.
--
The cause is hidden. The effect is visible to all.~Ovid


SuperJudge
Magus
Premium
join:2002-11-14
Albany, GA
clubs:

reply to wheelzoff
Re: Already fixed.......

said by wheelzoff See Profile:
They already replaced the installer on the site, with the malicious code removed and they claim there is no longer a problem, but the fact it was there anyway IS the problem.

They'll take out the malicious code, but leave a loophole that will allow them to just upload a trojan remotely, and you're still hit.
--
MediaXPeer
Forums » Trojan P2Ppage: 1 · 2 · 3 · 4 · 5


Friday, 27-Nov 18:06:23 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF