Torrenting exposes your public IP. In a country where government doesn't care, does that pose a risk?
I honestly don't believe I will have any legal trouble because I don't do anything like cp or worse, I just pirate media I like, not even porn. But across users of communities, or on public trackers, is IP exposure something to be concerned about?
It's good opsec to have a VPN when torrenting but thats largely due to the risk of being identified commiting a crime.(Or at the very least, having your ISP send you an angry letter about copyright infringement)
If thats not part of your threat model, then you dont need to worry.
dont give 'em anything to fuck with you down the road. seems a no brainer. "Mrs. TheHooligan95? ahh yes we are here to confiscate your home because your son TheHooligan95 illegally downloaded Ninja Kods 3 back in 2001. No, you cant talk to your son. He was already executed for corporate treason this reason."
People have and will be executed for dumber reasons.
White rich girl picked you out of the lineup. Don’t worry, DNA science won’t prove you’re innocent for another decade after justice has been carried out.
Also these people lawyers are surely building large network graphs to identify p2p traffic so one might as well give them less information about where other people are seeding to or torrenting from.
Recent qbitorrent update supports cross sharing between public/i2p users.
But people have to enable the option, most public trackers aren't aware off and most private trackers are not into sharing their well builded closed piracy club money making scheme
What do you mean by "the government doesn't care"? Do you mean that they are not enforcing copyright protection laws to your knowledge? Or that copyright protection laws don't actually exist in your country at all? If the laws exist but are not being enforced, there is always a possibility that they will be enforced in the future or that a change in government will lead to a change in approach. Your government could also potentially pass new laws in the future that make it easier for foreign entities to go after yourself and other pirates through your local courts.
You need to work out exactly what the law in your country says, what the government's attitude towards piracy is and whether there is a legal precedent in your country for the prosecution of pirates. For example, in Australia we have copyright laws and a government that is at least somewhat committed to upholding them, but we also had a significant court case a little over a decade ago in which it was ruled that the ISP being sued was not responsible for the piracy its users were allegedly engaging in. This essentially set a legal precedent within Australia that allows ISPs to turn a blind eye to piracy and makes it more difficult for foreign entities to prosecute Australian pirates. This is why most court-ordered anti-piracy action within Australia is limited to DNS blocks on websites. As a result, many Australians feel safe torrenting without a VPN because they believe it is very unlikely their ISP could be compelled in court to hand over their information or that there is even the will to attempt this following that high profile defeat in 2012.
In my country it is illegal to share, but not illegal to download, since when consuming you're not meant as a websurfer to know the source of that something. Should that law change, it cannot retroactively affect something that happened in the past. So I don't plan ever to share anything publicly, but only the very few things I'm very passionate about to the point I want to share them with communities of friends which you can access through invites only. Sharing a back up copy with your friends is not illegal either even if the EULA or whatever says it is, unlike for example in the UK.
I was specifically asking about cybersecurity in general.
In some countries private law firms chase down infringers on behalf of copyright holders. They then attempt shakedowns with the threat of legal action if you don't pay. They have a financial interest to catch people, and moral compasses vary.
Also, mistakes can happen (you, your family, guests using your wifi, in the courts, in the ISPs, in the law firms, in the tech they are using to identify people). Shit happens.
And if (when) it happens, then you would still have to deal with it, costing you time and money.
Understand the risks and make choices to minimize them if you can.
In other words, your computer is downloading stuff from other computers, that's potentially receiving stolen property, but a potential argument might be that you didn't know that it was stolen. It's not a good argument, but it's an argument. So you're an individual who potentially broke the law. Depending on how much money you have, you might get a knock on your door.
But then, you also distribute that potentially stolen property to other computers, because that's how BitTorrent works, and now you're part of a distribution network dealing with stolen property. The chances that once you've discovered you come away with just a slap on the wrist are slim to none.
How do they find you?
Through your IP address.
How?
By figuring out who owns that address, who loaned it to you to get online at that specific time. One packet at a time the research will bring them closer to knocking on your door.
So, is it a big deal that your public IP address is linked to torrenting? Yes it is.
Is this the whole story? Not by a long shot, but it's not my job to teach you how to break the law.
but it’s not my job to teach you how to break the law.
It sounds like it's literally not against the law where this person lives. Like The Pirate Bay when it began, they responded to US lawyers sending them takedown requests by pointing out that US law didn't apply to every country on the planet.
That could change in the future, sure, but I think that this person probably has a better idea of whether that's a possibility in their home country than we do.
Meh. I don't know about OP but where I live ISPs are forced to relay the legal notice, but nothing more happens. There is no prosecution and nobody will knock on my door.
I have been torrenting on and off since the protocol exists and never once hid my IP. My ISP relays me the threats from the industry, I ignore them, and continue what I was doing before. Same for everyone in my country. Those that end up paying for a VPN and hiding their IP are just intimidated onto doing so, because of the threats. But again, aside from getting that threatening email, nobody will knock on your door for torrenting here.
Yeah i agree I torrent only occasionally and I haven't ever received an ISP angry letter but that's sounds right to me ...
The only thing I never understood is if I use a VPN my traffic is passed encrypted to a remote server somewhere else but from there on its unencrypted so the servers owner ISP should notify him about my inlecit traffic and it make sense he will notify me back so what's the point in relocating an angry letter... ?
“I’m going to offload my need to be technically literate in order to pirate to my local library and let them deal with the problem because I’m an entitled asshole who shits where I eat and doesn’t realize I’ll get in trouble anyway.”
A lot of businesses and libraries block the ports needed to torrent or do much of anything beyond basic web access. Some places, especially libraries, will also have web filters in place to further complicate access to torrent sources.
Even if by chance you could find a place that has those ports open and can get past the filters, as others have said, it is still possible for them to have enough information to identify you.
Assuming the government defs doesn't care and wont cooperate with lawsuits.
Yes and no. Knowing your IP is sort of like knowing a PO box you rent. It can be used to try and transmit stuff to you, it can also be crudely geolocated, or if the person you're buying it from gives you up it can be traced directly to you as a person.
If someone wanted to, and you had terrible safety practices (such as opening mail you aren't expecting, the digital equivalent would be having software listening to ports) they could send you something harmful but this is probably not very likely unless you are pissing powerful people off (e.g. you're using that IP to distribute anti mossad documentaries or something :P). Your biggest threat is that somebody finds out who you are by going to your ISP and making them give you up.
If you are confident that this is very high effort and you are a small fish it's not much of a risk.
If you do use a VPN for torrenting, ensure it supports port forwarding. You won't be able to seed if the provider doesn't allow port forwarding. Sharing is caring :)
Is the legal environment tomorrow going to be the same for you as it is today? Are they going to change the law, (or the interpretation of it) tomorrow? Have they already done so, but that news hasn't reached you yet? If they have changed it, does a hostile entity have your information already logged?
To answer your question, yes, you should be concerned about exposing your public IP address.
they could still be recording your IP, with intent to build a case against you, even if that requires one day in the future that your government randomly decides to bend the knee to the US. I still think that's a long shot though.
Oh man, normally I don't respond to these kinds of posts because I'm always worried I'll just be helping someone that does CP. BUt, since you 100% definitely don't, which I think is really cool that you don't btw, I'm going to give you the advice that you shouldn't be concerned about IP exposure.
is your country a member state in WTO? are your copyright laws compatible with that of the US? does your country recognise foreign copyright claims from the countries that your pirated media comes from?
your worst risk as someone who just pirates safe media for personal consumption is getting a letter from your isp and that only happens if there are laws against it on the books and your isp feels threatened. if your country simply doesn't enforce its copyright laws it's unlikely you'll be chosen to be punished to set an example (they'll most certainly target notorious distributors) and your chance of getting sued by a media company amongst thousands of potential defendants in what i assume is a third world country is almost non existent.
I'm in the same boat. There have been numerous copyright lawsuits that have been thrown out by the courts in my country; however, I pirate because I'm poor AF so I can't afford a VPN anyway.
If you're self-hosting a VPN that you're using for piracy, you'll still have an unique IP associated with you, and your hosting provider knows that you're using that IP. Doesn't that defeat the purpose?
If you actually need privacy you should use something like tor, or a box which you have access to that can't or wont be traced to you (e.g. you have access to someone else's by covert means, you bought a server with cash in the mail, you bought a server in a nation that will never cooperate with the nation you're antagonising) which you tunnel to and use as a proxy.
A VPN is not necessarily very secure and doesn't mitigate the most serious threats like phone home programs that will ID you over the clearnet later. Trusting a VPN is extremely dicey and should absolutely not be relied upon to keep you out of gaol. It's better than nothing, but shouldn't be over emphasised.
I lived in Cambodia and the gov doesn't really care about pirating media and games so I can pirate as much as I wanted but ironically they arrested one of the pirate bay founder here and deported him back to Sweden
Does the government just "not care" or is piracy specifically legal because there aren't local laws against it?
While you say they don't care right now, do you think there is a possibility that they might care in the future? Because governments often capture lots of information on their citizens with the knowledge that they can then target people that they dislike. Piracy is one of many things governments can use against a person if they really dislike them or what they're doing.
If it's explicitly not illegal and won't be in the near future, I wouldn't be too worried.
However, it might be a good idea to avoid public trackers anyway and focus on slowly growing a good reputation on private trackers. That might take some time, especially if you have a slow connection, which is quite possible in a country that doesn't care about this sort of thing.
You won't necessarily need a VPN for a private tracker, but it gives you a small amount of protection since at least the members of a private tracker are a (supposedly) vetted, trusted community instead of just any random person grabbing your IP.
It's more up to the isp. I torrented VPN free for a couple years when I lived in Burlington, Vermont and used the Burlington Telecom ISP. No copyright letter, no fees, and no legal issue.