Try to detect a fake server, sending bogus search results
|
|
![]() ![]() ![]() |
Try to detect a fake server, sending bogus search results
| Vladimir (SV) |
Dec 20 2007, 13:09
|
|
Group: Betatesters Posts: 1316 Joined: 31-July 05 From: San Salvador, El Salvador |
I think there's a way to detect fake files on results. Fake servers does not respect "Max. File Size" either "Extension" (really, thet don't respect anything...)
I had tested diverse things, and found that it will be safe to drop results which extension differs from the expected ones, or which file size differs from the interval selected. In any case those settings are not obligatory and therefore will not work 100%, but at least I thing it's better than nothing. One case it could be special useful is when you search for movie types, server returning an "exe" it's likely to be fake. I think this does not need so much heuristics nor parsing, nor anything more than simple double check if results meets the criteria of the search on client side. I can post an screenshot of a situation where all fakes results can be identified by a patron, tell me if you like that I post it and to describe more the idea. |
|
Post
#31
|
|
| muleteer |
Dec 20 2007, 15:14
|
|
Group: Betatesters Posts: 8261 Joined: 29-February 04 |
What if the user does a global search without specifying any additional parameters except the keywords?
Eg. If I'm searching for a movie and its subtitles. I get the big movie (avi, mkv, mp4, iso, rar, whatever) and the small subtitles (srt, rar zip, sub, idx, whatever). |
|
Post
#32
|
|
| Aw3 |
Dec 20 2007, 15:41
|
|
Group: Admins Posts: 7319 Joined: 8-December 03 |
What server version and capabilities (in server tooltips) they had?
|
|
Post
#33
|
|
| Vladimir (SV) |
Dec 20 2007, 16:30
|
|
Group: Betatesters Posts: 1316 Joined: 31-July 05 From: San Salvador, El Salvador |
QUOTE(muleteer @ Dec 20 2007, 09:14) What if the user does a global search without specifying any additional parameters except the keywords? Eg. If I'm searching for a movie and its subtitles. I get the big movie (avi, mkv, mp4, iso, rar, whatever) and the small subtitles (srt, rar zip, sub, idx, whatever). QUOTE(Vladimir (SV) @ Dec 20 2007, 07:09) In any case those settings are not obligatory and therefore will not work 100%, but at least I thing it's better than nothing. I know it's not perfect, but it could avoid some fake results when the user do specify the parameters. QUOTE(Aw3 @ Dec 20 2007, 09:41) I'm proposing a method to drop the fakes results in some cases, but I think it's not possible to determine the server which produce them without modifications to the code (like logging the servers who throw the fake result) |
|
Post
#34
|
|
| muleteer |
Dec 20 2007, 16:39
|
|
Group: Betatesters Posts: 8261 Joined: 29-February 04 |
Basically, if the results returned by a server contains items that do not meet the search criteria, declare that server as a fake and discard all its results. Is that what you are suggesting?
|
|
Post
#35
|
|
| Vladimir (SV) |
Dec 20 2007, 17:09
|
|
Group: Betatesters Posts: 1316 Joined: 31-July 05 From: San Salvador, El Salvador |
No, if the results returned by a server contains items that do not meet the search criteria, just log that server as possible fake (to warn user) and discard only the results that do not match the criteria.
Some day I was thinking in the possibility of not simply discard the results, but to open two tabs per search result: usual tab with processed results and the other tab with the results that were received but did not match the criteria. Like most mail systems, where you have a "spam" folder, that contains the suspicious mail, so you may review them in case of a erroneous behavior of the filtering system. |
|
Post
#36
|
|
| muleteer |
Feb 27 2008, 23:50
|
|
Group: Betatesters Posts: 8261 Joined: 29-February 04 |
Ouch! Suggest you select them all and delete them, then update from http://www.peerates.net/servers.php
http://emuleplus.info/forum/index.php?show...indpost&p=83687 |
|
Post
#38
|
|
| Lastwebpage |
Feb 28 2008, 17:06
|
|
Group: Members Posts: 133 Joined: 13-June 05 |
Sorry,
but I don't see the point why eMule should support any list or dedection of fake servers, can someone explain me the reason for it? There are some good list with NOT fake servers like: http://peerates.net and http://www.gruk.org/ Is this not enough? Yes, I know, when I would enable the both options to automatic get new servers, I would get a lot of fake serves too, but why should someone enable this options? Peter |
|
Post
#40
|
|
| muleteer |
Feb 28 2008, 18:44
|
|
Group: Betatesters Posts: 8261 Joined: 29-February 04 |
Its a personal choice - zegg doesn't seem to mind them. Problem is, fake servers are capable of doing much more that just giving you garbage results. Some could even be data miners for the anti-piracy agencies. Don't forget that you reveal your entire list of shared files to the server you are connected to, plus whatever you are downloading is revealed to every server in the list.
|
|
Post
#41
|
|
| Lastwebpage |
Feb 29 2008, 14:52
|
|
Group: Members Posts: 133 Joined: 13-June 05 |
last one should be catched from the IPFilter.dat, or not?
|
|
Post
#42
|
|
| muleteer |
Feb 29 2008, 16:30
|
|
Group: Betatesters Posts: 8261 Joined: 29-February 04 |
QUOTE(Lastwebpage @ Feb 29 2008, 20:22) True, but ipfilters are not always up to date - a fake server has to be detected and reported to the ipfilter compilers, who will then independently verify the report. Only then does that server get put in. The really bad servers just keep changing their IP addresses - even if they change IPs once every two weeks, the ipfilter will never get them. |
|
Post
#43
|
|
| Lastwebpage |
Mar 1 2008, 07:27
|
|
Group: Members Posts: 133 Joined: 13-June 05 |
QUOTE ed2k://|server|66.90.73.253|8899|/ ed2k://|server|193.138.221.214|4242|/ ... True, but ipfilters are not always up to date This would assume that this fakeserver list get an update each day. |
|
Post
#44
|
|
| muleteer |
Mar 1 2008, 07:57
|
|
Group: Betatesters Posts: 8261 Joined: 29-February 04 |
QUOTE(zegg @ Feb 28 2008, 05:50) the default autoupdate server list at startup also contains a bogus server which screws the search list in latest client1.2c That is exactly what I have been trying to tell you. A lot of good servers bit the dust after eMule Plus v1.2c was released. We know it, you know it, everyone with any sense knows it, but until we release v1.2d you have to make the changes manually. 1. Select all the static servers and remove from static list. (otherwise they won't get deleted in the next step). 2. Select all the servers and delete them. 3. Click the button 'Update server.met from URL', paste the link http://www.peerates.net/servers.php the box and click 'update'. And yes, disable 'autoupdate server list at startup', and also other vehicles for getting fake servers, eg. 'Update server list on server connection' and Update server list when client connects'. If you like, you can also disable 'remove dead server after n retries', or your server list will get smaller and smaller over time as dropped servers have no way of coming back. Latwebpage: you've lost me. |
|
Post
#45
|
|
![]() ![]() ![]() |
| Lo-Fi Version | Time is now: 20th May 2013 - 14:54 |