• db0M
    link
    fedilink
    English
    2072 years ago

    Response from the admins

    From where I’m sitting it looks like classic overconfidence. I would say keep your eyes open in the future but don’t pick up the pitchforks just yet.

    • @FeelzGoodMan420@eviltoast.org
      link
      fedilink
      English
      76
      edit-2
      2 years ago

      Thanks. This community needed your logical input. I’ve been following this over the past few days and it seems like a blatent Reddit-type pitchfork situation. Based on the mods response and the absolute lack of proof surrounding the mods profiting from the crypto miner (honestly who the actual fuck even came up with this?), I think we need to all take a beat.

      Also I don’t follow cracked games but this Emperess person seems like a fucking psychopath and the fact that literally anyone here believes a word she says is absolutely astonishing.

      I am asking this community to PLEASE STOP REPOSTING THIS. Don’t let this community follow the ways of Reddit, please. We are better than that.

      • @Sanrasxz@lemmy.dbzer0.com
        link
        fedilink
        English
        242 years ago

        I agree, this entire thing looks very blown out of proportion to me. It’s not the first time and not the last time there will be malware in a brand new game torrent on 1337x.

        This exact situation has happened before with a new game torrent that had malware, torrent eventually got taken down, and nobody raised a huge fuss other than not to download that torrent.

        • @FeelzGoodMan420@eviltoast.org
          link
          fedilink
          English
          20
          edit-2
          2 years ago

          I feel like this community and the reddit one are made up of 14 year olds who figured out how to torrent 2 weeks ago and are freaking out over the prospect that downloading exe files isn’t safe…who would have thought!

    • SRo
      link
      fedilink
      English
      62 years ago

      So why did he defend the torrent in the comments and said it was not dirty and the uploader is not banned? This defence is laughable.

  • @Navarian@lemm.ee
    link
    fedilink
    English
    1512 years ago

    You know it’s bad when the almost constantly unhinged ‘Empress’ is the one speaking sense.

  • @DonnieDarkmode@lemm.ee
    link
    fedilink
    English
    1332 years ago

    I’ll translate: “I find actions of the 1337x admins disappointing. Deleting my torrents causes confusion for the user base, and these actions reflect poorly on your character, suggesting pusillanimity and insufficient discretion when selecting a sexual partner.”

  • magnetosphere
    link
    fedilink
    652 years ago

    I don’t know why, but I think calling people “pathetic cowardly whores” in this specific situation is hilarious.

    What, exactly, does one have to do when moderating a torrent site to earn the title of “whore”?

    • @Contend6248@feddit.de
      link
      fedilink
      English
      12 years ago

      That post is a bit older IIRC, couple of months.

      Someone posted it because of relevancy i guess. Your point might still stand, i haven’t heard anything about him.

  • @zahel@cosmere.xyz
    link
    fedilink
    English
    40
    edit-2
    2 years ago

    For those asking “private trackers what’s that?”

    /r/trackers (on the bad site I know) has a lot of info

    For those who may be interested in getting into private trackers, you should start with Myanonamouse.net in my opinion. They do an interview on the irc which is easy and you can join that way https://www.myanonamouse.net/inviteapp.php

    It is a tracker for ebooks/audiobooks/comics that is easy to maintain a ratio on (via their generous bonus point system) as long as you are a decent seeder.

    Once you’re on the site for a few months you can access the invite forum which can get you access to other private trackers. Think of it like a ladder.

    Torrentleech (a general private tracker) occasionally has open signups throughout the year.

    • @Yendor@reddthat.com
      link
      fedilink
      English
      242 years ago

      I’m on multiple private trackers, and they all hosted the infected version (they’ve been taken down now). Private doesn’t make it safe, especially when people are using automated tools to be the first to upload a torrent.

      • @zahel@cosmere.xyz
        link
        fedilink
        English
        52 years ago

        I didn’t say anything about that and don’t disagree but private trackers definitely have less of it due to their content having more scrutiny and standards.

        Nothing is perfect. My comment only strived to let people know about private trackers as I saw multiple people ask about it.

      • @AssholeDestroyer@lemmy.ml
        link
        fedilink
        English
        92 years ago

        I’ve been on private trackers since demonid went down. Its the only way to sail, I’ve had zero issues and the content is heavily moderated for quality.

          • @SilentStorms@lemmy.ca
            link
            fedilink
            English
            122 years ago

            No kidding. I pirate for the convenience of downloading whatever I want. I’m not interested in joining the cool kids club by trying to keep up with what’s freeleech and stress about how to maintain a ratio lest face their wrath.

            • @zahel@cosmere.xyz
              link
              fedilink
              English
              3
              edit-2
              2 years ago

              I’ve never stressed over my ratio

              Public trackers are great for when everything you’re looking for is common or freshly released/uploaded.

              Ppl looking for niche content, it’s not gonna be on public trackers.

              Also the main benefit of private vs Public is that you can find a 10-15 year old torrent of some niche content and it will still be actively seeded.

              With public trackers, there is less retention of seeders, even more so for less common content.

              Public trackers often end up with tons of dead torrents with 0-1 seeders after a couple years pass.

              And on a private tracker there is incentive to keep old torrents alive. On public there is none. Ppl grab and run.

              • @GiantBasil@beehaw.org
                link
                fedilink
                English
                12 years ago

                If you don’t mind me asking, do you think it would be possible to keep a an account on a few of these chillest private trackers without a seedbox? The main reason I’ve been avoiding private trackers for years now is that from the way people talk, those are a necessity.

                Things get downloaded in an orderly manner and seeded forever(in a much slower rate that I’d like but), it’s just that Seedboxes are mostly a US and Europe run service and my country’s currency can’t handle that lol

                • @zahel@cosmere.xyz
                  link
                  fedilink
                  English
                  12 years ago

                  some private trackers economies are easier than others and let you benefit off seed TIME rather than upload amount, so as long as you actively seed you still can gain points to gather buffer, etc. So yes it is possible.

                  Also depends on your internet speeds. I don’t use a seedbox and have done just fine, though I’ve had the luck of having had 300 mbps -> 500 mbps -> gigabit ethernet within the last 5 years.

          • @zahel@cosmere.xyz
            link
            fedilink
            English
            5
            edit-2
            2 years ago

            Then that just means everything you’re looking for is common or freshly released/uploaded.

            Ppl looking for niche content, it’s not gonna be on public trackers as often.

            Also the main benefit of private vs Public is that you can find a 10-15 year old torrent of some niche content and it will still be actively seeded.

            With public trackers, there is less retention of seeders, even more so for less common content.

            Public trackers often end up with tons of dead torrents with 0-1 seeders after a couple years pass.

            And on a private tracker there is incentive to keep old torrents alive. On public there is none. Ppl grab and run.

        • @Scrollone@feddit.it
          link
          fedilink
          English
          1
          edit-2
          2 years ago

          I like private trackers but they sometimes have arbitrary limitations on some clients and I don’t like that

    • krolden
      link
      fedilink
      English
      2
      edit-2
      2 years ago

      The best way to get invites is to make friends with as many people on irc as possible

  • @arc@lemm.ee
    link
    fedilink
    English
    382 years ago

    I wouldn’t trust anything from a P2P site that purports to be:

    1. A cracked game / application for desktop and mobile platforms. Maybe it’s legit but assume it is malware.
    2. A serial number generator. If you absolutely must run one of these do it from a throwaway VM, or via WINE emulation to mitigate what it might do.
    3. An encrypted archive with a README. It’s a scam designed to make people sign up to other scams to release a non-existent password.
    4. A movie / audio with an extension such as .scr, .wma, .com, .exe etc. It’s malware.

    Movies, audio & books are generally safe providing they use a recognized extension - mp3, mp4, pdf, mkv, aac, flac, epub etc. Stuff that runs under emulation like console games is generally safe. I say “generally” because an exploit could still be crafted to escape a popular media player or emulator and cause actual harm to your computer.

    All the ads and 3rd party scripts should be considered malicious too and should be erased with an adblocker, or even better use Tor.

    So basically use some common sense and if you really want some game or app, just buy the damned thing or wait for it to go on sale.

    • KubeRoot
      link
      fedilink
      English
      212 years ago

      WINE is not safe to run malware in, it’s not a secure sandbox. AFAIK, anything expecting it can do anything a Linux binary can. (Also, not an emulator, it’s in the original name - WINE Is Not an Emulator)

      • @arc@lemm.ee
        link
        fedilink
        English
        0
        edit-2
        2 years ago

        I know what WINE is and the gist of “Wine is not an emulator”. I have used it extensively and for a while it even contained some of my code (not sure if it still does). But it is still emulating but not in the way people think. WINE is not emulating the operating system but it is emulating the interface that an executable interacts with Windows, aka the Win32 APIs and other DLLs.

        They even touch on this in their FAQ - *That said, Wine can be thought of as a Windows emulator in much the same way that Windows Vista can be thought of as a Windows XP emulator: both allow you to run the same applications by translating system calls in much the same way. Setting Wine to mimic Windows XP is not much different from setting Vista to launch an application in XP compatibility mode. *

        As far as a potentially malicious executable is concerned, you can create a throwaway wine folder to run the thing and delete it as soon as it is done, e.g.

        e.g.

        export WINEPREFIX=~/tmpwin
        winecfg
        # disable wininet from libraries tab, remove Z:, unlink all desktop integration folders
        wine keygen.exe
        # when done...
        rm -rf tmpwin
        

        It doesn’t matter if keygen.exe is evil because it can write anything it likes to the fake C: and the fake registry and it’s blown away. As a precaution disable networking so it can’t reach out either. In the extremely unlikely event that keygen.exe had code to detect it was running under WINE, it would still be subject to the permissions of the uid you had run it as, so you could take even more precautions if you felt so inclined. You could even use a dockerized WINE if you felt like it.

        • KubeRoot
          link
          fedilink
          English
          42 years ago

          On the topic of whether or not it’s an emulator, sounds like semantics in the end - fair enough, I disagree but you make a fair point.

          That said, in terms of security I think it’s very important to point it out that it isn’t any more secure than running a random Linux executable. In my view, the original comment is advocating for running unknown executables under wine as a security measure, and the further argument is that it’s more secure because most attacks don’t target that.

          Sounds like if people rely on that for security, malware will just start targeting that after people get used to assuming it’s safe.

          • @arc@lemm.ee
            link
            fedilink
            English
            02 years ago

            I doubt many people are ever going to do what I suggested so the effort / payoff for malware writers makes it very unlikely they’d bother. They’ll just assume 99.999% of people running the binary are doing so on Windows and code accordingly. Of course anything is theoretically possible.

    • halva
      link
      fedilink
      English
      142 years ago

      wine is a windows api implementation, it’s specifically NOT an emulator

      • @arc@lemm.ee
        link
        fedilink
        English
        12 years ago

        Read their own FAQ. It’s not an emulator in the classic sense of emulating the OS. It is however emulating the API of Windows. I quoted the pertinent line of the FAQ elsewhere and made my point clearer

        • @arc@lemm.ee
          link
          fedilink
          English
          0
          edit-2
          2 years ago

          Not sure what the thumbs down is about. It’s right there in their own FAQ.

          In fact it ends by saying - “Wine is not just an emulator” is more accurate.

          • @nevalem@programming.dev
            link
            fedilink
            English
            42 years ago

            There is a storied history in computing to use tongue in cheek self referential acronyms to denote some humor and finality in distinguishing things that purposely fill a niche in the world of competing, often pricey, commercial software and other hackable reasons.

            So I bet you’re rubbing wrong those of us who remember that gnu is not unix, and more specifically wine is not an emulator. Because they really aren’t.

    • @Fylkir@lemmy.sdf.org
      link
      fedilink
      English
      22 years ago
      1. You could trivially verify an emulated game with a checksum

      2. If a game is released on GOG, there are Checksums that are hidden from the user. GOG games are DRM-free, so there’s no reason anyone would modify the installer.

    • SokathHisEyesOpen
      link
      fedilink
      English
      12 years ago

      Are cracked games no good anymore? You used to be able to get just about any cracked game back in the day. Sure, some of them might be malware, but it was easy to find one that wasn’t.

  • @Morgikan@lemm.ee
    link
    fedilink
    English
    362 years ago

    What evidence has been found that links the crypto-mining wallets with the 1337X admins?

    • @FeelzGoodMan420@eviltoast.org
      link
      fedilink
      English
      11
      edit-2
      2 years ago

      Literally nothing. This entire thing is one of the stupidest controversies that I’ve ever seen. One idiot made a wild accusation about the 1337 mods based on no evidence and apparently that was good enough for this community…we are better than this people, grow up.

      • @Morgikan@lemm.ee
        link
        fedilink
        English
        32 years ago

        I read through the wayback link you had, but it really just sounds like admin are busy with their other lives and getting frustrated with new users spamming “trojan found” which is an extremely common thing to see from new users and they don’t have time to verify everything out there. Even saying it has “unpacker.exe” wouldn’t mean anything as the release was packed. Unless the wallet address can actually be tied to admin/mods, then that’s just heresay.

        That VitaminX user sounds shady as all hell, but that doesn’t mean admin are doing backhanded deals with some users.

      • @dexahtm@lemm.ee
        link
        fedilink
        English
        12 years ago

        I’m wondering if this one is good. It’s listed as a goat in the megathread tho

        • @gregoryw3@lemmy.ml
          link
          fedilink
          English
          202 years ago

          Private sites that people upload torrents to. A lot of them have requirements like “upload at least 1 content that we don’t have” and “must maintain a seed ratio of x”. Most that I’ve seen either have closed registrations, requiring someone to invite you as a referral, or they have interviews to make sure you’re not malicious”.

          I’ve always wanted to be in one because every once in a while I can’t find content that’s old/obscure and it’s super annoying and supposedly private trackers have a bunch of old/obscure content as-well as super new stuff like blu ray rips and native stream rips.

          • Hot Saucerman
            link
            fedilink
            English
            8
            edit-2
            2 years ago

            A lot of them have requirements like “upload at least 1 content that we don’t have” and “must maintain a seed ratio of x”.

            I can attest to seeding requirements, but I’ve seen lots of private trackers, and only very few have rules like “upload at least 1 piece of content that we don’t have.” I would say those ones are in the minority, and most are happy to accept people who only download as long as they keep seeding and keep their ratios up.

            I’ve always wanted to be in one because every once in a while I can’t find content that’s old/obscure and it’s super annoying and supposedly private trackers have a bunch of old/obscure content as-well as super new stuff like blu ray rips and native stream rips.

            Depends on the tracker. Cinemageddon literally only traffics in B-movies and so the worse and more obscure the film is, the more likely it is you will find numerous copies on CG.

              • StickBugged
                link
                fedilink
                English
                32 years ago

                I’m fairly certain a seeder is someone who has already downloaded the file and is actively “uploading” it so that leechers get better download speeds. Don’t quote me on this as I’ve never really torrented anything ever. For more accurate information, just use google

              • Hunter2
                link
                fedilink
                English
                22 years ago

                The way torrenting works, you’re getting different parts of a file from different people, while at the same time you’re also sharing the little parts you’ve received so far with other recent downloaders.

                Seeders are people that already have the full file and are spreading (seeds) for other users to download through the same torrent.

                Leechers are those that are currently downloading the file but still have not finished.

                The term “Leecher” is also used to call those that delete the torrent as soon as it finishes dowaloading. It’s good practice to seed it (upload), at the very least, for the same amount you downloaded.

                • @Enigma@sh.itjust.works
                  link
                  fedilink
                  English
                  32 years ago

                  So everyone is a leecher until the file is downloaded and you tou only become a seeder by allowing the upload to finish? Is that correct? Sorry, just got done driving 17hrs so my mind is a little mush.

        • Hot Saucerman
          link
          fedilink
          English
          8
          edit-2
          2 years ago

          EDIT: I think it is amazing that I have 10 upvotes, and -1 downvotes, resulting in 11 upvotes.

          invite only torrent sites.

          reddit used to have its own private tracker, baconBits, spawned on christmas day 2009. It shut down May of last year.

          there’s plenty of others, though.

          The benefit of private trackers is that since they’re invite-only, you don’t really run the risk of running into copyright cops who want to send you cease and desist notices. They generally tend to go for the easy fish at the public trackers like 1337x and torrentgalaxy. There is a sort of “circle of trust” on private trackers and it can be really easy to get your account banned if someone you invite got banned. They take the circle of trust pretty seriously on a lot of them. (That sounds more scary than it is, I’ve never seen it in practice, but the general rule is “don’t invite people who will cause trouble, because you’ll be accountable for their behavior since you invited them.”)

          Also, many private trackers have an upper limit on users, and stop accepting new users when they hit that limit. Keeping user bases small also keeps you more “under the radar.”

          Finally, private trackers are also a source of many scene groups releases, so if you get on certain trackers, you’ll have faster access to certain releases.

          • @Rai@lemmy.dbzer0.com
            link
            fedilink
            English
            32 years ago

            I hate being that bitch but I gotta clear up:

            “The benefit of private trackers” is what this poster meant.

            • Hot Saucerman
              link
              fedilink
              English
              22 years ago

              Thanks, I put this comment up half asleep before work earlier. Corrections edited in.

              • @Rai@lemmy.dbzer0.com
                link
                fedilink
                English
                22 years ago

                I see your edit—I use Memmy and I used to be able to see separate downvotes and upvotes, but I cannot anymore. I miss that! Maybe it’s a setting somewhere. I didn’t downnvote ya and I’m sure everyone else didn’t because your comment was helpful and we could understand in context what ya meant ;3

                I hope your helpful butt is already on all of the private trackers you desire to be on! I’m on a couple I love, but there’s always the white whales of trackers I can’t be assed to work my way up to hahaha

        • @zahel@cosmere.xyz
          link
          fedilink
          English
          5
          edit-2
          2 years ago

          Invite only torrent sites.

          Retention and availability of seeders is higher.

          You have to seed each torrent for a certain period of time at minimum (usually a week or so) and maintain a good overall upload/download ratio total (1.0 +)

    • Kakertratte
      link
      fedilink
      English
      3
      edit-2
      2 years ago

      Look for releases on the sites of the groups / ppl releasing them. Most offer trackers they seed to.

      Other than that and private trackers, I like torrends.to to meta search for torrents, but there proceed with caution.

      • PrivateNoob
        link
        fedilink
        English
        12 years ago

        Oh didn’t know there was another meta search site like torrentz2. Thank you for the info!

  • @randomguy2323@lemmy.kevitprojects.com
    link
    fedilink
    English
    312 years ago

    God people come on!! This is not the first time this happening , 1337X is still a very reliable and trusted source for torrents , don’t make up things. If you are so worried about security pay for the damn game. Its free and you are still asking the mods to be vigilant 24/7 for every single torrent upload it come on people that’s impossible. I bet many of you here complaining about 1337x wouldn’t last a day being a moderator in this site.

    • AnonTwo
      link
      fedilink
      422 years ago

      Isn’t this ignoring the whole thing in the link about negative responses being removed?

      Sure you can’t have mods being vigilant 24/7, but the link seems to be arguing they’re being vigilant in keeping the bad link up.

      • Tbf, people comment on almost any software with “keygen flagged as Trojan! Avoid!!1!” There are a lot of folk who aren’t as on the ball with this stuff that don’t know how anti-virus works or what a false positive is. It does get annoying dealing with those folk.

      • Clairvoidance
        link
        fedilink
        3
        edit-2
        2 years ago

        They’re not really backing their claim up though in regards to “related to admins” and “admins are deleting other people’s warnings”.
        And as far as I know the torrent has been pulled even.

      • Pons_Aelius
        link
        fedilink
        3
        edit-2
        2 years ago

        Uploads are disabled for new accounts

        This is simple to bypass. Accounts must be 30 days old to upload?

        Create an account or 3 each day.

        Post using the newly mature accounts till they get banned and move on to the next one.

        how can it be so hard?

        A simple solution to a complex problem is usually wrong.

  • Hyperreality
    link
    fedilink
    26
    edit-2
    2 years ago

    At the risk of asking an incredibly stupid question, but if I only ever torrent video/audio, scan everything I download with defender, and only ever use a recently updated version of vlc, what’s the risk?

    I remember getting viruses in ye olden days, but afaik the main problem is malware now.

    • @TeamAssimilation@infosec.pub
      link
      fedilink
      English
      43
      edit-2
      2 years ago

      Risk is practically nothing in your case, because you’re being careful, and know what you’re doing. You won’t run a binary when you were expecting the Barbie movie, for example.

      If you were downloading binaries, then your risk is significant, but even then, unless you’re downloading new releases immediately, it’s likely that your antivirus will catch the new popular ransomware after a few days, when a few thousands of people have become infected. Governments won’t employ valuable zero-days on any rando who just wants to see their new isekai episode.

      • @Serinus@lemmy.ml
        link
        fedilink
        English
        242 years ago

        If you’re using Windows, just make sure file extensions are visible and that your file isn’t named Movie.mp4.exe

    • Cethin
      link
      fedilink
      English
      62 years ago

      This is about a game, which is a .exe. In your case, it’s probably not an issue, but games will be. Pdfs also had an issue for a while, but I think that’s solved. As far as I’m aware, there aren’t any video/audio codec or VLC issues to be worried about though, so you should be good.

    • @TheQuantumPhysicist@programming.dev
      link
      fedilink
      English
      32 years ago

      Movies and audio are very rarely infected, almost never. That depends on bugged software, so that you can be relatively safe of.

      Executables… well… no anti virus can protect you in reality from dumb double-clicks. This is because viruses are trained against anti virus software until they can’t be recognized. There are mathematically an infinite number of patterns to run a program to trick all kinds of anti viruses. So in reality you can’t be safe. Once that’s done by an expert virus creator, the best you have to protect you is a behavioral detection of viruses, which may or may not work.

      So, don’t rely on anti viruses. They barely protect you from script kiddies and legacy viruses.

      • @stroep@feddit.nl
        link
        fedilink
        English
        272 years ago

        He doesn’t pirate VLC, he pirates the audio/video he plays with it and asks if there is any danger in that.

      • Lollerskater
        link
        fedilink
        142 years ago

        Not what they’re asking, read closely. They’re curious about the risk from using pirated audio or video material (not executables). VLC is only mentioned as their player of choice, so it’s easy to assume they’ve already got it installed.

  • DataproletM
    link
    fedilink
    English
    222 years ago

    It’s one torrent that’s not safe. That doesn’t make the entirety of the website unsafe!

    • @aranym@lemmy.name
      link
      fedilink
      English
      492 years ago

      If the admins endorse malware, it’s best to assume the entire site is compromised.