AfterDawn: News

Major flaw exposes privacy-conscious BitTorrent users on VPNs

Using a VPN service like ipredator in Sweden to share files with some level of security using BitTorrent or similar methods has become very popular as more tough laws pass to address Internet piracy. However, for those using IPv6 in combination with a PPTP-based VPN, a flaw may have undermined the entire idea of the VPN in the first place.

A security flaw was revealed at the Telecomix Cipher conference that would allow a third party to find the true IP address of a user sharing through a VPN. To make matters worse for some users, there are suggestions that anti-piracy investigators in Sweden at least are aware and may have been exploiting the flaw to identify "anonymous" sharers.



IPv6 is set to replace the IPv4 protocol, but most users using IPv6 arguably have no idea they are, as it is promoted by newer operating systems like Windows 7.

The operators of ipredator are aware of the issue and have said they will contact all users about it. Other privacy-based VPN services may want to do the same thing. Simply turning off IPv6 in Local Area Connection properties on Windows should serve as a workaround for the problem.

Written by: James Delahunty @ 22 Jun 2010 5:26

• Previous article

• OnLive service priced for United States

• Next article

• Apple sells 3 millionth iPad

• 3 comments

• KillerBug

  They can't contact their users; all their users are anonymous! The only way they can get me a message is to post it on their website and hope I happen to look at the website for some reason. Good thing I turned off IPV6 to save other headaches. If IPv6 really takes off, I am sure we will see iPredator or something similar in an IPv6-only form...maybe they could call it i6predator...so that when you say it fast it sounds like, "I sick predator".

  22.6.2010 06:46 #1

• townliar

  I am not good with computers how do I check if I am using IPv4 or IPv6?
  Anyone explain and how to turn it off if I am on IPv6.
  
  Thanks

  24.6.2010 05:51 #2

• Mr-Movies

  Originally posted by KillerBug: They can't contact their users; all their users are anonymous! The only way they can get me a message is to post it on their website and hope I happen to look at the website for some reason. Good thing I turned off IPV6 to save other headaches. If IPv6 really takes off, I am sure we will see iPredator or something similar in an IPv6-only form...maybe they could call it i6predator...so that when you say it fast it sounds like, "I sick predator". Smoke another one please, Anonymous? ya right! They know who is connected through their VPN so they know where you are period.
  
  To disable IPv6 in Windows 7 right-click on your network connection icon in the SysTray, lower right corner of your Desktop, and open Network Sharing. Click on the Connections: Local Area Connection and in that UI click on the Properties button. Now unselect the box for Internet Protocol Version 6 (TCP/IPv6) and click on the OK button. This will disable your IPv6 connection.
  

  24.6.2010 11:39 #3