Site Offers History of Torrent Downloads By IP

tsu doh nimh writes "You may have never heard of youhavedownloaded.com, but if you recently grabbed movies, music or software from online file-trading networks, chances are decent that the site has heard of you. In fact, you may find that the titles you downloaded are now listed and publicly searchable at the site, indexed by your Internet address. So far, youhavedownloaded.com has recorded more than 50 million unique Internet addresses belonging to file-sharing users. The site is searchable by file name and by Internet address. When you visit, it automatically checks and lets you know if your Internet address is in the database."

Re:Geez, we're down to scare tactics now, huh

[ZackZero]

Except there's also a disclaiming "Don't take it seriously" link at the page; essentially, they've only made a proof-of-concept.

Zero results

[IANAAC]

I tried it. Came up with zero results or me. I download a lot too.

I don't do anything out of the ordinary to otherwise secure or anonymize my downloading using either Transmission or Vuze, for what it's worth.

Re:indexed by your Internet address

[iluvcapra]

Obscure, but I got it. [youtube.com]

Do take it seriously

[AceJohnny]

From the "Contact Us" page (which, among other things, lists a postal address in an Antarctic research base):

This site is a joke. But its data is not.

Re:Facebook data harvesting tool

[SirGarlon]

The details can be found after logging in to your Facebook account.

I know this is Slashdot and most people get it, but for those who don't -- this looks like a form of phishing to get your Facebook password. I'm not a security expert but I imagine they are using a man-in-the-middle attack to log your password while you log in.

This is probably exactly what parent intended to imply.

Re:Geez, we're down to scare tactics now, huh

[NatasRevol]

Actually, they do. Click on Some files others have loaded, click on one of those files - takes you to torrent page.

Or type in name of software, click on link, click on software - takes you to torrent page.

Wow

[CapnStank]

I sort of tire of the ol' Slashdot jumping to conclusions but here's how it works:

1. They visit public tracker websites.
2. They query the tracker for a list of peers given a torrent hash (not difficult)
3. Dump all data into the database that can be searched through their website

That means your data is not on there if you're a torrent user because you're using a tracker they aren't indexing or you have a dynamic ip that they haven't categorized yet. In the same way this is why you can get false positives. All this B.S. about honey pots or fear mongering is dumb considering how straight forward this website is.

They just want your Facebook

[Kernull]

At the time of writing this comment, they have implimented a facebook-login in order to see your list. I attempted to use their captcha device instead, because I hate facebook (which was somewhere around 20 characters long, case sensitive). I tried to enter the captcha about 15 times using different images and each time it told me I was wrong. I don't believe it is possible to login by their captcha and they are mandating the facebook.com login. I suspect this website might be a trap / facebook scraper. Earlier in the day I was able to see 'my results' which were incorrect.

Re:Honeypot?

[Totenglocke]

The best part is, the site wants you to log in using facebook to "prove you're human" - that way they can pin an IP address to an actual name and email address. If you don't use the facebook link, they provide something like a 26 letter long captcha (which as far as I can tell, will never let you in, thus forcing you to log in via facebook if you want to view the site). This site sounds like an extreme scam.

Re:Honeypot?

[AmiMoJo]

It looks like they scrape popular torrent sites like TPB and then list every address in the swarm. Problem one is that legal torrents are on there too, and problem two is that trackers list fake random IP addresses to make the data unreliable in court.

My home IP address is listed with torrents I never touched, and so is my mobile one. That is despite that fact that Vodafone blocks BitTorrent and I have never used it on my 1GB/month plan.

The whole site is a troll, clearly they either don't understand the data they are collecting or they are deliberately misrepresenting it.