One Piece fan and happy to fly the Mugiwara jolly roger.

  • 0 Posts
  • 14 Comments
Joined 3 years ago
cake
Cake day: June 19th, 2023

help-circle
  • aside from stuff like annas archive / libgen

    in the past, i had ok luck using dht search sites like bt4g (org) but it was very hit and even more miss in terms of whether the torrent/magnet still had seeds. but that approach did have some collections like what you mentioned. and i did used to get the occasional valid collection mixed in among the dead torrents and other bs.

    i havent really done it that way in a long time so not sure how well it works these days tho… like I searched a couple things similar to what you had in the OP and did get some small number of results (less than 1 page). some of those appeared valid but watch out cuz there were also some obvious malware ones that were like <title>.exe. Probably not the best way to do things for 2026+ … and if you try it anyway, i highly recommend an adblocker, an up-to-date torrent client like qbittorrent, and maybe run a antivirus scan on the download when it gets done just to be safe.

    could also check https://fmhy.net/reading but i suspect most of those are also going to be geared more towards individual books than collections. Only other things I can think of are usenet/debrid but I don’t have experience w either so I couldn’t say definitively.

    If you do manage to find a good modern way to get collections, I’d also be interested to hear it.








  • payloads hidden in MP4 metadata

    interesting. i wasn’t aware that was a thing.

    any clue how that works? like if it targets specific video players like vlc or something?

    in my head, i was just thinking that if that was the case, then on linux it might make sense for me to start using flatpak version of vlc (or use bwrap/firejail container on it).


    edit: for anyone else interested in this, there are apparently a bunch of articles about it online. here’s one if you’re too lazy to look for yourself:

    https://cloudmersive.com/article/How-Malicious-MP4-Files-Threaten-Security-and-Reputation

    from the several articles I skimmed, it seems like it is more common to embed a batch or powershell script and target windows users, so being on Linux might help in terms of not being in the primary target demographic. But there was mention of buffer overflow techniques and such so it sounds like it really is kind of random.

    And sometimes its not even technically malware but basically steganography. like the article mentioned this:

    Finally, the possibility of hidden NSFW content (including CSAM and other extremely sinister illegal media) within video files can’t be ignored.

    That last part would actually bother me a LOT more than some windows-specific malware on my non-windows systems. I might have to start running my pirated media thru ffmpeg / etc and having it remove any metadata I don’t specifically whitelist by field and data type… at least for the stuff that doesnt come from well known release groups on popular sites.

    appreciate you calling this out, PabloSexcrowbar



  • I run Linux myself but even on windows… if you have qbittorrent 5.1.2+ (not sure in earlier versions; had to open an old vm image to confirm the feature existed this far back)

    then anyone who only pirates videos/music could just set qbittorrent > downloads > excluded file names to have *.exe on one of the lines and avoid this easily.

    people who do pirate games/software could probably still add something like these to the same setting without disrupting their game/sw dls and still avoid 90+% of these kind of attacks:

    *.avi.exe
    *.flac.exe
    *.mp3.exe
    *.mp4.exe
    *.mkv.exe
    *.ogg.exe
    *dvdrip*.exe
    *webrip*.exe
    *web.dl*.exe
    *web-dl*.exe
    *bluray*.exe
    *1080p*.exe
    *720p*.exe
    *480p*.exe
    *x264*.exe
    *x265*.exe
    *hvec*.exe
    *av1*.exe
    *imax*.exe
    *aac5.1*.exe
    *hdtv*.exe
    *amzn*.exe
    *hulu*.exe
    *yify*.exe
    *yts*.exe
    *eztv*.exe
    

    only spot it might need some fine tuning that i can think of is if you have the occasional fitgirl pack that has optional stuff for 720 vs 1080 videos as a selective download… and you should really be looking at those when you download anyway