Ash_EP3
Member
Registered: 15th May 07
Location: Melksham, Wiltshire
User status: Offline
|
I do wonder how do they actually monitor your usage of the internet?
What if you are making transactions via online banking etc...? surely the person monitoring you would have a big grin and a pen and paper ready with account number sort codes etc?
Invasion of privacy FTL
|
John
Member
Registered: 30th Jun 03
User status: Offline
|
Nobody can see the banking transaction apart from you and the bank.
|
Ash_EP3
Member
Registered: 15th May 07
Location: Melksham, Wiltshire
User status: Offline
|
quote: Originally posted by John
Nobody can see the banking transaction apart from you and the bank.
Thats what I thought originally but I was told that your ISP keep a record of every web page you view...?
|
willay
Moderator Organiser: South East, National Events Premium Member
Registered: 10th Nov 02
Location: Roydon, Essex
User status: Offline
|
ISP may keep a record of the TCP/UDP transaction, such as, IP 12.2.2.2 accessed 23.3.3.4 on port 80 at $time.
If they were proxing your connection or doing man in the middle style attacks on you viewing secure websites (banking, online ordering etc) you'd get a warning about the certifications not being correct I think.
They can find out if you are downloading illegally by Bittorrent very easily, but its not your ISP doing the work its companies paid by the record labels/movie studios etc.
When you use bittorrent, you download a file which points you to a tracker, a tracker is a server/system which all the clients to and report info such as if they have the file (seeding) or if they are requesting it (leeching).
The tracker then tells you where to upload/download from, so what these companies do is connect to the trackers, record all the IPs that are connected to it, do a WHOIS on the IPs so they know what ISP they belong to then send an email to that isp saying that between times X and Y they saw IP address A connect to IP address B downloading Z. And then the ISP has to follow it up and warn the end user.
|
Ash_EP3
Member
Registered: 15th May 07
Location: Melksham, Wiltshire
User status: Offline
|
quote: Originally posted by willay
ISP may keep a record of the TCP/UDP transaction, such as, IP 12.2.2.2 accessed 23.3.3.4 on port 80 at $time.
If they were proxing your connection or doing man in the middle style attacks on you viewing secure websites (banking, online ordering etc) you'd get a warning about the certifications not being correct I think.
They can find out if you are downloading illegally by Bittorrent very easily, but its not your ISP doing the work its companies paid by the record labels/movie studios etc.
When you use bittorrent, you download a file which points you to a tracker, a tracker is a server/system which all the clients to and report info such as if they have the file (seeding) or if they are requesting it (leeching).
The tracker then tells you where to upload/download from, so what these companies do is connect to the trackers, record all the IPs that are connected to it, do a WHOIS on the IPs so they know what ISP they belong to then send an email to that isp saying that between times X and Y they saw IP address A connect to IP address B downloading Z. And then the ISP has to follow it up and warn the end user.
Thanks Willay - You my friend are an IGenius
|
willay
Moderator Organiser: South East, National Events Premium Member
Registered: 10th Nov 02
Location: Roydon, Essex
User status: Offline
|
its ok mate
|
nova_gteuk
Member
Registered: 15th May 02
Location: South Wales Drives: The Bandwagon
User status: Offline
|
quote: Originally posted by John
Nobody can see the banking transaction apart from you and the bank.
They showed on the real hustle.
That just by sitting outside someones house in a van with a laptop on wireless with a few programs easily downloaded on the net,they can show detail of that person's bank details hed just entered in to book a flight online.
So if they can do it that easy,im pretty sure people who monitor the internet can get details.
|
willay
Moderator Organiser: South East, National Events Premium Member
Registered: 10th Nov 02
Location: Roydon, Essex
User status: Offline
|
Um isnt that easy mate with SSL certificates and stuff, unless you spoof it and the user accepts an out of date or not signed certification, then you deserve to be done.
|
willay
Moderator Organiser: South East, National Events Premium Member
Registered: 10th Nov 02
Location: Roydon, Essex
User status: Offline
|
or they would have to get a key logger installed on the guys PC, but it isnt as easy as you make it sound
|
John
Member
Registered: 30th Jun 03
User status: Offline
|
Nova you have no idea what you are talking about.
If you are dealing with card/bank details it uses SSL as willay says, as long as you are on a legit site nobody can see whats happening in that transaction apart from the people on both ends.
The real hustle makes a lot of stuff up.
|
willay
Moderator Organiser: South East, National Events Premium Member
Registered: 10th Nov 02
Location: Roydon, Essex
User status: Offline
|
sorry but is Real Hustle fiction or non fiction?
|
John
Member
Registered: 30th Jun 03
User status: Offline
|
It's presented as non-fiction but a lot of the stuff is just made up imo.
|
Brett
Premium Member
Registered: 16th Dec 02
Location: Manchester
User status: Offline
|
TBH I believe anything the bird in it tells me
|
willay
Moderator Organiser: South East, National Events Premium Member
Registered: 10th Nov 02
Location: Roydon, Essex
User status: Offline
|
|
nova_gteuk
Member
Registered: 15th May 02
Location: South Wales Drives: The Bandwagon
User status: Offline
|
quote: Originally posted by John
Nova you have no idea what you are talking about.
If you are dealing with card/bank details it uses SSL as willay says, as long as you are on a legit site nobody can see whats happening in that transaction apart from the people on both ends.
The real hustle makes a lot of stuff up.
Even though exactly what they did has been in the news with people getting their details that easy.
There was a guy in swansea in a cybercafe he took his laptop in and sat there collecting details,he got seven years for fraud after being caught 
|
willay
Moderator Organiser: South East, National Events Premium Member
Registered: 10th Nov 02
Location: Roydon, Essex
User status: Offline
|
Theres alot more in it then just downloading some programz off the Internet. I'm not saying its impossible.
|
FruitBooTeR
Member
Registered: 18th Jan 07
Location: Wolverhampton Drives: S15
User status: Offline
|
quote: Originally posted by willay
ISP may keep a record of the TCP/UDP transaction, such as, IP 12.2.2.2 accessed 23.3.3.4 on port 80 at $time.
If they were proxing your connection or doing man in the middle style attacks on you viewing secure websites (banking, online ordering etc) you'd get a warning about the certifications not being correct I think.
They can find out if you are downloading illegally by Bittorrent very easily, but its not your ISP doing the work its companies paid by the record labels/movie studios etc.
When you use bittorrent, you download a file which points you to a tracker, a tracker is a server/system which all the clients to and report info such as if they have the file (seeding) or if they are requesting it (leeching).
The tracker then tells you where to upload/download from, so what these companies do is connect to the trackers, record all the IPs that are connected to it, do a WHOIS on the IPs so they know what ISP they belong to then send an email to that isp saying that between times X and Y they saw IP address A connect to IP address B downloading Z. And then the ISP has to follow it up and warn the end user.
What about software that you can use to hide your IP
|
willay
Moderator Organiser: South East, National Events Premium Member
Registered: 10th Nov 02
Location: Roydon, Essex
User status: Offline
|
Hide your IP? you need to be more specific then that.
If you proxy your connections through something like TOR then you risk having absolutely SHIT download speeds because you wont let other peers peer directly to you.
There are other ways... one being use co-located server on the internet in another country, run the bit torrent software there then SCP (secure copy over SSH) back to your home machine, they can't detect shit in SSH sessions iirc.
|
Tom
Member
Registered: 3rd Apr 02
Location: Wirral, Merseyside
User status: Offline
|
quote: Originally posted by nova_gteuk
quote: Originally posted by John
Nova you have no idea what you are talking about.
If you are dealing with card/bank details it uses SSL as willay says, as long as you are on a legit site nobody can see whats happening in that transaction apart from the people on both ends.
The real hustle makes a lot of stuff up.
Even though exactly what they did has been in the news with people getting their details that easy.
There was a guy in swansea in a cybercafe he took his laptop in and sat there collecting details,he got seven years for fraud after being caught 
A likely story
|
John
Member
Registered: 30th Jun 03
User status: Offline
|
So now because a guy in swansea was on the news that collected some peoples details you are an internet expert?
|
willay
Moderator Organiser: South East, National Events Premium Member
Registered: 10th Nov 02
Location: Roydon, Essex
User status: Offline
|
|
FruitBooTeR
Member
Registered: 18th Jan 07
Location: Wolverhampton Drives: S15
User status: Offline
|
Packet Sniffing FTW
|
willay
Moderator Organiser: South East, National Events Premium Member
Registered: 10th Nov 02
Location: Roydon, Essex
User status: Offline
|
you can sniff SSL etc but all you're going to see is encrypted bullshit because its SECURE
|
FruitBooTeR
Member
Registered: 18th Jan 07
Location: Wolverhampton Drives: S15
User status: Offline
|
I cant find a link atm...but did you ever here about those people who changed a packet name of a file being sent to a printer over a network to something else (A film title) and they got one of these letters saying they were sharing illegal downloaded data...
The ISP got owned obviously..
Find that quite funny tbh
|
Ren
Member
Registered: 16th Oct 04
User status: Offline
|
Is that even possible? I thought sending files to the printer was a completely internal procedure.
|