Planetarion Forums - Cross Shadow Loop (CSL)

Androme · 19 Dec 2005, 15:20

Does anyone know whether any of this is true (portion extracted from an e-mail I got)? I can't find anything about it on Google or anything.

Quote:

We are pleased to announce that we have installed A2ET (Auto Anonymous Encryption Technology) which is currently being implemented on all vip accounts. The feature, which is a first of it's kind in this industry, enables fully anonymous bittorrent filesharing. This feature, developed by our Russian programing team, automatically scrambles using 265 bit encryption all vip user information in the upload/download datafile.

For example: A regular registered user uploading/downloading Chronicles of Narnia, would have his ip address indicated in the userfiles associated with his bittorrent user client such as 67.164.122.83 which resolves to a Comcast cable account in Detroit, Michagan, the rest is history for this registered user. This clearly creates a trail to the registered user's door in the event of an RIAA/MPAA, FBI, Scotland Yard, Interpol and/or local Law enforcment action.

Example number two, AAET protected member uploads/downloads Narnia, this is what his ip address is going to look like to the authorities. 00.00.00.01 . This VIP user is now benefiting from this cross-shadow loop. The cross shadow loop (CSL) is a technology developed in Norway in 2002. Previously this technology has only been used by mobile phone companies to particularly combat the "ghost phone" and cloning problem that plagued the industry in the past. Until now the CSL sourcecode has been protected by the cellular phone companies using it, we thank our Russian dev group for being able to obtain this technoloy and implement it in our A2ET protection for vip members.

mist · 19 Dec 2005, 15:34

how would the server be able to serve you something without knowing your ip? likewise, whoever you're sharing with.

NEWSBOT3 · 19 Dec 2005, 15:44

Quote:

Originally Posted by mist

how would the server be able to serve you something without knowing your ip? likewise, whoever you're sharing with.

it wouldnt,

a thought occurs that the server could handle the file transfers between clients itself, but that'd kill the whole p2p ness idea.

ho hum.

pablissimo · 19 Dec 2005, 15:54

Sounds like bollocks to me, 265 bits of encryption (lol) or no.

mist · 19 Dec 2005, 16:53

Quote:

Originally Posted by NEWSBOT3

it wouldnt,

i meant that the server wouldn't be able to tell you what files it has trackers on, or tell others where to send file fragments if it didn't have your ip.

not sure if you understood, and i think i expressed myself baddly

missed the 265 bit encryption, lol.

dda · 19 Dec 2005, 20:29

"Russian programing team"

Yeah right!

mist · 19 Dec 2005, 20:34

iirc, caspersky labs is russian?

meglamaniac · 19 Dec 2005, 23:56

This is complete bollocks.

The only way to obscure the IP address in logs is to turn off logs altogether, or insert routines to encrypt it every time it gets written out - this means modifying/adding modules to Apache (or whatever web server runs the tracker site) and modifying the tracker itself. It does not take a genius or a russian programming team to do this - a simple MD5 call (or similar one way hash) would suffice if the IP address never needs to be known, or reversible encryption could be used if the admins want the ability to backtrack logs (although the key would almost certainly be the first item asked for in a court case, and it's security would be crucial).
However, in both cases there is next to no point in bothering. If it's one-way then it's pointless logging anyway, as you'll never be able to decode it for your own use, and if it's reversible then when the server gets seized it's likely the key does too. At any rate, it could be cracked eventually.

The IP address will always be visible during comms with the tracker, and anyone* connected to the torrent you are using will be able to view your address - this is impossible to obscure, as the tracker needs to know the real address of it's seeds/peers or it can't communicate with them.

* Most of the time. If the tracker is really busy, you will not get a full list of everyone connected to it, so it's up to chance if yours shows up to the particular RIAA/MPAA agent watching the torrent.