Gnutella Forums

Gnutella Forums (https://www.gnutellaforums.com/)
-   BearShare Open Discussion (https://www.gnutellaforums.com/bearshare-open-discussion/)
-   -   SECURITY WARNING! Your name is shown in Bearshare! (https://www.gnutellaforums.com/bearshare-open-discussion/1324-security-warning-your-name-shown-bearshare.html)

Watcher May 23rd, 2001 03:05 PM

SECURITY WARNING! Your name is shown in Bearshare!
 
Vinnie, the God and dictator of Gnutella loves his program name so much he made a secret little keyword that seems to bypass all sorts of safeguards. What's the keyword?

"bearshare"

That was hard to figure out wasn't it?

Go ahead, try it. Search for bearshare and you will find stuff like I did! I didn't use bearshare to get these search results, it may block them.

Filename: brianna@bearshare[1].txt
Contents:
LastVisitCookie
143145399
bearshare.net/
0
620126208
29536452
2238848912
29416453
*

So now I just connect the IP with all her MP3 files and I have more proof for a lawsuit. Just think if poor brianna had used her last name!

Go ahead, search for "bearshare bossname" (bossname is your boss' name, or your spouse or whatever) let us know what shows up! I DON'T KNOW HOW FAR THIS GOES!

Vinnie doesn't care about your privacy, it's taken major pressure to get him to get rid his spyware and he continues to use a browser tie in (to IE of all the stupid ideas, no way to turn it off, forced - controlling what you do) and who knows what cookies are getting out over the net.

Do we know what else bearshare does without your knowledge? Do you trust your privacy to a guy who wants to rule the whole Gnutella Net?

Vinnie now says he's going to delete any messages he doesn't like from his forum. So this privacy information wouldn't get out to most of his users. Talk about a control freak! Why does it take so much pressure to get just a few changes from this guy? Why is he so worried about messages asking to make his software more privacy concerned?

BECAUSE HE CAN'T CONTROL EVERYTHING WITHOUT HIS SPYWARE!

Here's another one I found:
Filename: home office@nude-***************[1].txt
Contents:
Apache
tuc125.dakotacom.net.65052985977479297
nude-***************.net/
0
3046415744
29407761
4290580608
29407552
*

So now we know where this guy has been, so he likes nude britney spears. But what if it was "gay-naked-guys-doing-it.net" ? And what if the IP was this guys work? Could he lose his job over this? YOU BET!!! (and don't think it doesn't happen, even in secret) I have a date code, IP and a DNS name for his port, what else do I need?

BEARSHARE IS SPYWARE!

I could go on and on, these files are all over the place!

This attitude of BearShare's author sucks and isn't going to change. The only way out is to stop using it and hope he goes away and gets a job somewhere that has nothing to do with the net.

You would think by now people would stop using closed source software like this when it comes to network connections. Your privacy is more important that you think.

Most people don't get it till something bad happens. People run firewalls to protect their computer, the firewall ain't working if you told it that BearShare is OK to transmit packets!

What if I could get your e-mail password? Could I send mail to your boss or lover/spouse and screw up your life? And why would some net kiddie not want to do this just as a "joke"? Thinking it was fun?

Yes, Vinnie will say he fixed this after a lot of pressure, but who knows if he just changed the keyword or encrypted it! He wants access to anything he can get, he wants to control everything he touches, he dreams of being a dictator! Control, control, control!

Run Open Source software only!

YOU HAVE BEEN WARNED! STOP THE BEAR!

(post this everywhere!)

CycloCide May 23rd, 2001 05:09 PM

Actually, that particular problem has nothing to do with BearShare; the same thing could happen with any peer-to-peer client. The problem is that some people are sharing their whole hard drive because they don't know any better. CNet wrote an article about this a few months ago at http://news.cnet.com/news/0-1005-200-4762138.html

Unregistered May 23rd, 2001 06:36 PM

Not that many
 
Quote:

Originally posted by CycloCide
CNet wrote an article about this a few months ago at http://news.cnet.com/news/0-1005-200-4762138.html
Yes, but searching for other files that should be there doesn't turn up much. Granted, some people are screwing up, but there isn't enough of them to count for how many of these cookie files are out there.
Why is BearShare the only one returning most of these files? Are Limewire users smarter?
Besides, what does it take to get a simple warning when you try to share your main directory. It just goes to show you how much privacy means to this programmer.

CycloCide May 23rd, 2001 07:00 PM

Re: Not that many
 
Quote:

Originally posted by Unregistered


Yes, but searching for other files that should be there doesn't turn up much. Granted, some people are screwing up, but there isn't enough of them to count for how many of these cookie files are out there.
Why is BearShare the only one returning most of these files? Are Limewire users smarter?
Besides, what does it take to get a simple warning when you try to share your main directory. It just goes to show you how much privacy means to this programmer.

What do you mean by "other files that should be there"?

You'd be surprised at how many people wouldn't know better than to share their main directory, and a single person could be sharing thousands of cookies.

Regardless, BearShare isn't sharing cookies by default. BearShare is probably the the one returning most of those files because more people use BearShare than LimeWire.

I just tried sharing my main directory in LimeWire and it didn't warn me either.

Yoshi May 24th, 2001 02:33 PM

Cyclocide: Actually, no, it can't. Search for "Gnotella" or something and you don't get scores of personal information. Everybody knows that Bearscare has spyware. Mr. Millionaire was right. You really don't care about your privacy until you get busted because of the lack of it. Knowing the Bearscare thing, I don't see why anybody uses it. Well, I guess they don't care. They should, but that's not my business.
Mr. Watcher Person Whatever: If this was an original post, you've opened up some very important information, that no one knew about, save "Vinnie". I hope Bearscare gets sued for this. If it's not, well, this is a very popular forum, so you've alerted a lot of people.
Bearscare People: Why do you have spyware? Trick question, you put it there. But why did you put it there? Were you planning to get personal info from people, send them e-mailbombs (they do exist), blackmail them, and threaten their life? No??????? Then why?? You probably <b>will</B> get sued for this. I hope you have money for lawyers and court fees and payments. HAHAHAHAHAHAHAHAHAHAHAHAHA!!!!!!!!!!!!!!!!!!!!!!!! !!!!

Vinnie May 24th, 2001 11:17 PM

Yes
 
Cyclocide, now do you see why I have to have the forums on BearShare.Net moderated?

This is getting ridiculous.

FYI, BearShare automatically shares any directory that you had set up in Napster, if Napster was installed.

Therefore, if you had MP3 files in your C:\Windows directory or underneath, and those directories were added to Napster's list of shares, then BearShare will pick it up and share those directories as well.

Since BearShare shares more than MP3, you might end up sharing cookies and the like.

Unregistered May 25th, 2001 01:08 AM

Whoa!
 
Hold the pony! A new revelation from Mr. BearShare himself. BearShare checks other applications to see what files they are sharing! Since when did we give you permission to do that?

Without a doubt it is user-configurable, but can't you see how this is damaging when most newbie slime aren't presented with a dialog to set those configuration options BEFORE they start sharing?

BearShare is at most an ongoing beta project at what corporate-sponsored global network stupidity can do to you!

Unregistered May 25th, 2001 02:58 AM

Re: Whoa!
 
Quote:

Originally posted by Unregistered
Hold the pony! A new revelation from Mr. BearShare himself. BearShare checks other applications to see what files they are sharing! Since when did we give you permission to do that?

Hallo:

now, keep the guns secured, will you ;). This is well known, and also clearly visible under [setup] [shared].
I switched to another servent partly because the developer telled things mostly only after being pressed by users, but this Napster directory discussion is truly unimpurtant, I believe. No offence to you, anyway.

Greetings....

Unregistered May 25th, 2001 03:16 AM

HELLO!
 
What did I just finish saying? Most newbie slime don't even open the setup; they just begin searching to their heart's content. And while they're searching for files, most of them don't even realize they're sharing files! This isn't just an issue with BearShare, but probably a lot of Gnutella servants out there. The authors need to stop forcing features onto users and keep a basic default of what they do and don't need.

chr_rossi May 25th, 2001 03:28 AM

Re: HELLO!
 
Ok, agreed.
Surely these things are very difficult for newbies. Maybe it would be better to do things like this not on default.
Greetings....

Wonko May 25th, 2001 06:59 AM

Argh
 
People, if you want this forum to have at least some air of credibility, don't post obvious bullshit...

BearShare does have some serious shortcomings, and I don't like the idea of moderation either (Which is why I'm here), but come on...

Vinnie May 25th, 2001 08:57 AM

Moderation
 
In response to user feedback, I've come up with a scheme where posts (hopefully) wont have to be deleted, only moved to the proper forum.

This will be unveiled at the new bearshare.net, coming soon

Wonko summed it up best, people are postng obvious bullshit and it is for this reason that I am reacting.

NOTvinnie May 26th, 2001 03:41 PM

You don't get it
 
Quote:

Originally posted by Vinnie
Wonko summed it up best, people are postng obvious bullshit and it is for this reason that I am reacting.
That's the problem, YOU DON'T GET IT!

People are posting their actual concerns, you don't address the problem, try to blow it off, and thus you get more rant than you can handle.

1. You can fix the cookie problem, it only shows up in bearshare return packets, nothing comes from limewhere or gnuc, so GET THIS THROUGH YOUR THICK SKULL - THERE IS A PROBLEM WITH BEARSHARE!!!

2. I repeat so you might get it, its a BEARSHARE PROBLEM.

3. Again, ITS A PROBLEM IN BEARSHARE!

How can you fix it?

Only share from the folder bearshare is in unless the user specifically asks for another folder, then WARN THEM! After that it's not your problem.

Now come on Vinnie, you are suposedly a brilliant guy, didn't you think of that, or were you just lazy?

Stop acting like you can't solve this problem and go fix it!

YOU ARE PISSING ME OFF NO END!

On one hand you seem like a smart guy, then you do really stupid things. PICK ONE!

DAMN!

(no wonder no one likes you)

Unregistered November 17th, 2001 07:16 PM

Re: SECURITY WARNING! Your name is shown in Bearshare!
 
Quote:

Originally posted by Watcher
Vinnie, the God and dictator of Gnutella loves his program name so much he made a secret little keyword that seems to bypass all sorts of safeguards. What's the keyword?

"bearshare"

That was hard to figure out wasn't it?

Go ahead, try it. Search for bearshare and you will find stuff like I did! I didn't use bearshare to get these search results, it may block them.

Filename: brianna@bearshare[1].txt
Contents:
LastVisitCookie
143145399
bearshare.net/
0
620126208
29536452
2238848912
29416453
*

So now I just connect the IP with all her MP3 files and I have more proof for a lawsuit. Just think if poor brianna had used her last name!

Go ahead, search for "bearshare bossname" (bossname is your boss' name, or your spouse or whatever) let us know what shows up! I DON'T KNOW HOW FAR THIS GOES!

Vinnie doesn't care about your privacy, it's taken major pressure to get him to get rid his spyware and he continues to use a browser tie in (to IE of all the stupid ideas, no way to turn it off, forced - controlling what you do) and who knows what cookies are getting out over the net.

Do we know what else bearshare does without your knowledge? Do you trust your privacy to a guy who wants to rule the whole Gnutella Net?

Vinnie now says he's going to delete any messages he doesn't like from his forum. So this privacy information wouldn't get out to most of his users. Talk about a control freak! Why does it take so much pressure to get just a few changes from this guy? Why is he so worried about messages asking to make his software more privacy concerned?

BECAUSE HE CAN'T CONTROL EVERYTHING WITHOUT HIS SPYWARE!

Here's another one I found:
Filename: home office@nude-***************[1].txt
Contents:
Apache
tuc125.dakotacom.net.65052985977479297
nude-***************.net/
0
3046415744
29407761
4290580608
29407552
*

So now we know where this guy has been, so he likes nude britney spears. But what if it was "gay-naked-guys-doing-it.net" ? And what if the IP was this guys work? Could he lose his job over this? YOU BET!!! (and don't think it doesn't happen, even in secret) I have a date code, IP and a DNS name for his port, what else do I need?

BEARSHARE IS SPYWARE!

I could go on and on, these files are all over the place!

This attitude of BearShare's author sucks and isn't going to change. The only way out is to stop using it and hope he goes away and gets a job somewhere that has nothing to do with the net.

You would think by now people would stop using closed source software like this when it comes to network connections. Your privacy is more important that you think.

Most people don't get it till something bad happens. People run firewalls to protect their computer, the firewall ain't working if you told it that BearShare is OK to transmit packets!

What if I could get your e-mail password? Could I send mail to your boss or lover/spouse and screw up your life? And why would some net kiddie not want to do this just as a "joke"? Thinking it was fun?

Yes, Vinnie will say he fixed this after a lot of pressure, but who knows if he just changed the keyword or encrypted it! He wants access to anything he can get, he wants to control everything he touches, he dreams of being a dictator! Control, control, control!

Run Open Source software only!

YOU HAVE BEEN WARNED! STOP THE BEAR!

(post this everywhere!)


I just like to take a moment and remember the stupid people..

Unregistered November 18th, 2001 01:41 AM

It's funny that the person that made this post along time ago didn't realize that they showed a cookie for someone who went to some britney spears porn website. Hah, they probably don't even know what cookies are.

Unregistered November 18th, 2001 07:07 AM

Quote:

Originally posted by Unregistered
It's funny that the person that made this post along time ago didn't realize that they showed a cookie for someone who went to some britney spears porn website. Hah, they probably don't even know what cookies are.
I like cookies

Unregistered November 18th, 2001 12:55 PM

You are dicks!
 
Whinging tossers!

xoric November 22nd, 2001 12:14 PM

"Upmarket" LimeWire???
 
First post here for me.
Throughout the forums in Bearshare and Limewire there are numerous posts slagging off Bearshare and singing the praises of Limewire. I have to say that I've read nearly all of the posts in Bearshare and I haven't yet come across any references to "newbie slime". The stupidity of anyone who is not able to remember when they were a "newbie" is beyond comprehension... How does this person actually manage to type text? Delightful.

Notices to "protect" users so that they don't enable sharing of every file on their computer? Great idea! But, I think that should follow the much higher priority of installing air-bags on their keyboards in case they have a crash. Gimme a break!

The mentality that allows the attacks on "newbie slime" is a fundamental cause of many of the problems that new users encounter... Simply because they are fearful of asking their questions if it is probably going to result in flaming. None of this is a new thought or revelation!

Re: the cookies

Unless I've got this totally wrong, AnalogX's CookieWall is doing a very nice job for me, as is AnalogX's POW!
Maybe there are cookies getting through... Some say yes to that, but I haven't seen one intelligent word to prove it.

Anyway, cool it with the attacks on newbies, hmmm?
By now, I'm sure we'd all love to see some videos of unregistered falling on his *** while trying to learn how to ride a bike. Could make a number one video to share!!!

Cheers to Morgwen if he's lurking...

xoric:cool:

Morgwen November 22nd, 2001 12:20 PM

Cheers! :)

Morgwen

A Programmer December 6th, 2001 09:44 PM

You don't have to be a newbie to realize that p2p file sharing involves you seeing someone elses files. LOGIC dictates that if you can see their stuff, they MAY be able to see yours.

With all the concerns about privacy, viruses, copyright infringement, lawsuits, etc. anyone with common sense will learn more about what they are installing on their PC, either from websites or from friends who have tried it.

All you need to do is take a look at the shared directories option in your particular p2p software and make sure that your shared directory (and its subdirectories) contain nothing confidential or illegal.

If the user is not bright enough to figure out that sharing C:\ is probably not a good idea, then I'm amazed that they managed to figure out how to run a computer in the first place.

Don't blame the programmer for a user's lack of judgment.

penelopesweb December 7th, 2001 08:54 AM

whats all this now
 
alright, im new at this so try not to think im a big dummy but whats all this now?
is it really possible that i am sharing files in locations other than my downloads folder? is there another program that i can use? Where can i get intelligent background information on this issue so that i can make informed decisions, et cetera.
thanks for any help

Becker December 7th, 2001 03:29 PM

hmm..
 
Go to setup> sharing.. you see those folders listed? those are the only folders people can look in too.. you see the smaller list to the right of it? those are the only file types people can see :)
Becker

Morgwen December 7th, 2001 03:37 PM

Hi!

If anyone have time...

read Watchers post... the first one...

He/she was talking about bearshare.net and the cookies...

Only an information!

Morgwen

penelopesweb December 8th, 2001 12:36 PM

wow, thanks for all your help
 
well, i checked it out and bearshare was only sharing its own downloads folder, morpheous, on the other hand seemed to be sharing my whole local hard drive by default (i might be new at this file sharing stuff~but i know i didnot configure it to do that).
any one using morpheous, keep an eye out - i called all my friends who use it, no one else was sharing c: - but a couple of them were sharing c:\program files, crazy hey

Morgwen December 8th, 2001 12:43 PM

Morpheus shares only one folder:

C:\Program Files\Morpheus\My Shared Folder

But if you change something you can also share your HD...

It is not the fault of Morpheus... you have to pay attetion of your settings...

Is this is all new for you, you can asked me - I know almost every client!

Morgwen

penelopesweb December 8th, 2001 05:43 PM

morpheous
 
i thought about what you said - frankly, i could not believe that i would do something that would share my entire drive without noticing it, so i removed all the morpheous files and reloaded it from the disk that i orginally load it from and guess what, it went right back to sharing the whole hard drive - then i downloaded a new version from the net, installed that and it defaulted to just the shared folder. weird hey - the friend who provided it to me was maybe not so friendly?

Morgwen December 9th, 2001 12:38 AM

Do you trust your friend?

Do not install files if you donīt trust them 200%...

Is he an programmer?

Morgwen

penelopesweb December 20th, 2001 07:44 AM

sorry it took so long to get back
 
yes, he is a programmer and i thought i trusted him - but i won't be using his software anymore - i'm just back online after massive crash and i think all may be related - thanks for the heads up - I'd probablly still be asking him to help me fix this beast if not - thanks again.

Unregistered December 26th, 2001 11:23 PM

What's funny is this was reported over a year and a half ago and you can still pull up those cookies by searching with bearshare as a keyword.
Seems like someone likes this feature. That someone should fix it.
If you think it's simply some idiot sharing their entire C drive, then search for typical windows files, you won't find as many as those cookies.
This is something worse than you think.

Unregistered December 27th, 2001 01:08 AM

The cookies also appear on more than one BearShare client. I did a search on the keyword "bearshare" in Gnucleus. One cookie was shown on 19 different hosts, another was on six different hosts. Looks like BearShare is sharing a little too much.

Morgwen December 27th, 2001 02:26 AM

What have the cookies from bearshare.net to do with sharing your HD?

The thread started with the cookies... and the entire HD discussion was offtopic and about Morpheus!

Morgwen

Morgwen December 27th, 2001 02:37 AM

I cheked this...

Yes there are some files that could be cookies...

but bearshare donīt shares them automatically - only if you change the settings! For example you choose to share your entire HD - its is a stupid choice...

Note:

Bearshare shares only the files which you can see under "files"... so check this...

Morgwen

Brotaris December 27th, 2001 09:03 AM

You work for the National Enquirer, right?
 
Quote:

Originally posted by Unregistered
What's funny is this was reported over a year and a half ago and you can still pull up those cookies by searching with bearshare as a keyword....
Wait a minute! &nbsp; A year-and-a-half????

BearShare has been out for only a year!! &nbsp;And the reporting of this cookie sharing problem is not even a year old yet. &nbsp;Stop trying to sensationalize things.

Becker December 27th, 2001 08:01 PM

Re: You work for the National Enquirer, right?
 
Quote:

Originally posted by Brotaris
Wait a minute! &nbsp; A year-and-a-half????

BearShare has been out for only a year!! &nbsp;And the reporting of this cookie sharing problem is not even a year old yet. &nbsp;Stop trying to sensationalize things.

you look a little to closely at things.

Go to setup> shareing. if C: is listed remove it and add just the folders with the files you wish to share.
Beckere

Becker December 27th, 2001 08:01 PM

Re: You work for the National Enquirer, right?
 
Quote:

Originally posted by Brotaris
Wait a minute! &nbsp; A year-and-a-half????

BearShare has been out for only a year!! &nbsp;And the reporting of this cookie sharing problem is not even a year old yet. &nbsp;Stop trying to sensationalize things.

you look a little to closely at things.

Go to setup> shareing. if C: is listed remove it and add just the folders with the files you wish to share.

Becker

Brotaris December 27th, 2001 10:01 PM

huh?
 
Becker? &nbsp;You replying to me? &nbsp;My comments about Unregistered's post have nothing to do with what you just said.

Whassup wid dat? &nbsp;:confused:

Morgwen December 28th, 2001 02:44 AM

Sometimes its better to read the posts first! :D

Morgwen

Becker December 28th, 2001 06:05 AM

Re: huh?
 
Quote:

Originally posted by Brotaris
Becker? &nbsp;You replying to me? &nbsp;My comments about Unregistered's post have nothing to do with what you just said.

Whassup wid dat? &nbsp;:confused:

i was talking about the year and a half thing. i remember reading post before when people said they used bearshare for a year and it was only 6 months after the first release. i dont know... it was late last night i forget what i was thinking, if i offended you i am sorry. :)
Becker

Brotaris December 28th, 2001 07:55 AM

....
 
No offense; just confused (as usual) :)

Unregistered December 28th, 2001 02:48 PM

You can't tell me all these people are stupid enough to share their whole drive, and besides that, wouldn't they all show up on the shared screen thing?
Why is it hard to find basic windows files? Are you saying it must only be sharing the first level of the C: drive?
Why don't you tell us where these files come from, are they on your computer somewhere? Where?
I don't have them here, but I don't visit "barbie" sites nor do I use IE.
Maybe it's a security flaw with IE?
I remember when bearshare started to suck, and it was more than a year ago!

Brotaris December 29th, 2001 09:06 AM

....
 
Quote:

Originally posted by Unregistered
I remember when bearshare started to suck, and it was more than a year ago!
BearShare was first released in December 2000.
So tell me how you could have had problems with it a year-and-a-half ago.

The only way it could be more than a year is if it was a year and three weeks,
or two weeks, or one week, or days, or hours.


All times are GMT -7. The time now is 05:42 PM.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 ©2011, Crawlability, Inc.

Copyright Đ 2020 Gnutella Forums.
All Rights Reserved.