Hacker News new | ask | show | jobs
by grecy 3556 days ago
I have to wonder if the following would have any impact:

1. Create something, copyright it and put an insane value on it (movie, book, music, something)

2. Put it on torrent sites.

3. Spoof the IP address of a ton of high profile people - hopefully executives at he kinds of places the sue for this crap.

4. Download that copyrighted content with the spoofed IPs, and make sure it's "Monitored" by one of the companies that monitor this junk

5. Sue them all for downloading your copyrighted content.

6. Likely in court they'll argue that an IP address does not equal an individual, thus ending this nonsense once and for all.

Thoughts?

4 comments

It's fraudulent. You'd have to claim under oath/affidavit that you believe the people you are suing are in fact infringing on you copyright, and that you have suffered a monetary loss as a result. As you know with certainty that neither of those statements is true you'd be committing perjury and fraud.
There is a lot of fraud in DMCA takedowns already. If none of it has been punished, that tells you something about the risk of such fraud.
> 3. Spoof the IP address of a ton of high profile people - hopefully executives at he kinds of places the sue for this crap.

> 4. Download that copyrighted content with the spoofed IPs, and make sure it's "Monitored" by one of the companies that monitor this junk

How do you download using a spoofed IP address? Won't the three-way handshake to open a TCP connection with the server go awry because the server's SYN/ACK response to your SYN will go to the machine the really has the IP address you are spoofing? The server will then expect an ACK for that packet, and that ACK will have to give the sequence number that was in the server's SYN/ACK.

Since you won't have seen the server's SYN/ACK, you won't know the sequence number. If you can guess it, you could send a spoofed ACK to make the server happy, and the server should then start sending data packets. You'll have to send ACKs for them, but I suppose that could be done blindly.

So the question is, it seems, how do you guess the sequence number? It's 32 bits, and I believe most modern TCP implementations chose the initial sequence number for a connection, so blind guess seems a bit impractical.

Don't know much about torrent technology, but it seems you can download torrents over UDP. Not sure how convincing you can be, though, like, can you pretend to be seeding from that address?

Likely a more successful course of action would be to spearphish the targets and compromise one of their machines, so you can actually download the content as them. You might as well even plant child porn or whatever on their computers, while you're at it. In for a penny in for a pound I suppose.

You can do that, but not even the EFF is saying that the uncertainty of your machine being compromised by a targeted attacker should prevent LEOs from being able to obtain a search warrant for it.

Give a close read to their recommendations, and then map them back to the scenario you propose.

> put an insane value on it

Your declaration that your recording of your epic rock opera cycle is worth eighteen hundred million euro doesn't amount to anything unless you can get the court to agree.

You're going to need some kind of documentation of its "insane value".

Sounds promising, but who's going to bell the cat? (especially steps 1 and 5 which involve massive inputs of time and resources)