Author Topic: Oneswarm: Turtlehopping + Bittorrent  (Read 16455 times)

0 Members and 1 Guest are viewing this topic.

Offline rb2k

  • Advanced
  • ***
  • Posts: 297
  • Karma: +3/-0
    • View Profile
Oneswarm: Turtlehopping + Bittorrent
« on: January 20, 2009, 07:32:54 AM »
From one of the devs: "You might be doing this already, but if you know some experienced users that would be comfortable with some slightly buggy software, feel free to try it out with them."

http://oneswarm.cs.washington.edu/beta/
user: tester
pass: 0n3swarm

Versions for Win/Lin/OSX  (32+64 bit binaries available)

Oneswarm is a azureus mod/plugin which allows to build your own darknet including turtlehopping over the bittorrent protocol (at least parts of it as far as I know...).

As IPs are gathered by DHT, this works fine with dynamic IPs
« Last Edit: January 20, 2009, 01:21:18 PM by rb2k »

Offline crypton

  • Elite
  • *****
  • Posts: 1699
  • Karma: +10/-0
    • View Profile
Re: Oneswarm: Turtlehopping + Bittorrent
« Reply #1 on: January 20, 2009, 01:11:53 PM »
You has downloaded the sources and binarys ?
And you know if this encrypted?

And which version of Azureus is usen?
Azureus has some backdoors in some versions which i hear long ago...

http://oneswarm.cs.washington.edu/download.html
« Last Edit: February 24, 2009, 09:18:53 AM by crypton »

Offline rb2k

  • Advanced
  • ***
  • Posts: 297
  • Karma: +3/-0
    • View Profile
Re: Oneswarm: Turtlehopping + Bittorrent
« Reply #2 on: January 20, 2009, 01:21:02 PM »
You has downloaded the sources and binarys ?
And you know if this encrypted?

i cant login on this page with the data .

Only binaries so far (but it's java... bytecode isn't that hard to decompile). I think once they have a "public" release, we'll see the sources.
As far as I know they use the usual bittorrent encryption

The data is correct

Offline crypton

  • Elite
  • *****
  • Posts: 1699
  • Karma: +10/-0
    • View Profile
Re: Oneswarm: Turtlehopping + Bittorrent
« Reply #3 on: January 20, 2009, 01:29:14 PM »
As far as I know they use the usual bittorrent encryption

This is for the traffic shapping dont know is realy secure.

now it worked...

About OneSwarm some infos found:

OneSwarm webinterface for f2f:
http://127.0.0.1:29615/

OneSwarm Development version (2008.03.05 | Azureus Vuze 3.0.5.0)

found OneSwarm has a own update system it updates some files/folders:
OneSwarmAzMods.jar
osf2f plugin files
osgwtui plugin files

it checks from here the latest update files found via log:
http://update.oneswarm.net/update/pluginlist3.php?type=&version=0.0.3&app=OneSwarm&os=Windows+XP&arch=x86&ui=az2&java=1.6.0_11&pmv=1.16

it checkes every start for new updates
Quote
Checking osf2f
    Current: 0.1.720, Latest: 0.1.720
Checking osgwtui
    Current: 0.2.409, Latest: 0.2.409
Checking azplatform2
    Current: 1.16, Latest: 1.16
    Current: 1.8.8, Latest: 1.8.8

at start it connects via few seconds to this address possible for update check(see via TCPVIEW):
marlon.cs.washington.edu
« Last Edit: January 20, 2009, 03:33:54 PM by crypton »

Offline rb2k

  • Advanced
  • ***
  • Posts: 297
  • Karma: +3/-0
    • View Profile
Re: Oneswarm: Turtlehopping + Bittorrent
« Reply #4 on: January 20, 2009, 04:24:25 PM »
This is for the traffic shapping dont know is realy secure.

Message Stream Encryption establishes an RC4 encryption key which is derived
from a Diffie-Hellman Key Exchange combined with the use of the torrents info
hash. Thanks to the Diffie-Hellman Key Exchange, eavesdroppers can’t gather
important information about the crypto process and the resulting RC4 encryption
key.
 +

RC4 is used as a stream cipher (mainly because of its performance). To prevent
the attack on RC4 demonstrated in 2001 by Fluhrer, Mantin and Shamir[13] the
first kilobyte of the RC4 output is discarded.
The "Standard Cryptographic Algorithm Naming" database[14] has a "most con-
servative" recommendation of dropping the first 3072 bit produced by the RC4
algorithm, but also mentions that dropping 768 bit "appears to be just as reason-
able".
According to these recommendations, the 1024 bit dropped in the MSE specifica-
tion seem just fine.


(from: http://www.marc-seeger.de/wp-content/uploads/2008/07/thesis-the-current-state-of-anonymous-filesharing.pdf)
« Last Edit: January 20, 2009, 04:26:19 PM by rb2k »

Offline crypton

  • Elite
  • *****
  • Posts: 1699
  • Karma: +10/-0
    • View Profile
Re: Oneswarm: Turtlehopping + Bittorrent
« Reply #5 on: January 20, 2009, 04:42:45 PM »
No it uses i think own Encryption,
it does not uses the RC4 from Azureus.

looked into publickey-client.jar with
http://java.decompiler.free.fr/

found some classes for Client/Server SSL Puplickey method.

Mail from Developer:
Quote
> is there no changelogs avaible?
There are currently no change logs available since OneSwarm still is
under active development. Once we get past the initial release updates
will include change logs.

> > and Oneswarm is realy secure?
As far as we know there are no security issues with OneSwarm, but it
is a large software project and there might be security bugs we don't
know about. Also, OneSwarm is not an anonymous system, it is a system
that is hard for external parties to monitor. "No anonymity system is
perfect these days, and OneSwarm is no exception: you should not rely
solely on the current OneSwarm network if you really need strong
anonymity".
Personally I trust OneSwarm for my own files.

> > About i know that Azureus had some backdoors in some versions which
> > comunicated to some third party companies.
OneSwarm is free and open source, it does not contain any back doors.

> > and i get with a auto update of Oneswarm a azureus.exe and
> > AzureusUpdater.exe this i think i doesnt needed .
Thanks for letting us know, we will fix it in future versions.

// Tomas




« Last Edit: January 20, 2009, 06:40:21 PM by crypton »

Offline rb2k

  • Advanced
  • ***
  • Posts: 297
  • Karma: +3/-0
    • View Profile
Re: Oneswarm: Turtlehopping + Bittorrent
« Reply #6 on: January 20, 2009, 08:20:00 PM »
No it uses i think own Encryption,
it does not uses the RC4 from Azureus.

looked into publickey-client.jar with
http://java.decompiler.free.fr/

found some classes for Client/Server SSL Puplickey method.


Might be SSL tracker stuff... But I forgot: the connection is already established by exchanging certificates! So there actually might be more to it than RC4 + Diffie Hellmann

Offline crypton

  • Elite
  • *****
  • Posts: 1699
  • Karma: +10/-0
    • View Profile
Re: Oneswarm: Turtlehopping + Bittorrent
« Reply #7 on: January 20, 2009, 08:35:26 PM »

This projects is very intresting a new alternative is born ;D, but only doesnt like the javascript webinterface.

Offline Andylee

  • MaGOG
  • Elite
  • *****
  • Posts: 757
  • Karma: +17/-13
    • View Profile
Re: Oneswarm: Turtlehopping + Bittorrent
« Reply #8 on: January 20, 2009, 08:49:20 PM »

This projects is very intresting a new alternative is born ;D, but only doesnt like the javascript webinterface.

*sign*
Ich bin Anti- (-christ, -alk, -kaffe, -tabak, -patent, -firefox)

Das Gewicht des Wortes steigt mit der Zahl der Zuhörer. Gebt Worten ein Gewicht!
de.wikisource.org

Offline crypton

  • Elite
  • *****
  • Posts: 1699
  • Karma: +10/-0
    • View Profile
Re: Oneswarm: Turtlehopping + Bittorrent
« Reply #9 on: January 23, 2009, 09:27:08 PM »
New OneSwarm Build is released

You can get the latest version with atuo update too.
« Last Edit: January 23, 2009, 09:58:48 PM by crypton »

Offline isdal

  • Posts: 3
  • Karma: +1/-0
    • View Profile
Re: Oneswarm: Turtlehopping + Bittorrent
« Reply #10 on: January 24, 2009, 12:33:52 AM »
Hi all, My name is Tomas, I'm one of the OneSwarm developers
Just figured I will answer some questions to avoid confusion:

>No it uses i think own Encryption,
>it does not uses the RC4 from Azureus.
Correct, all network connections are encrypted. We are using standard 1024 bit ssl encryption with client certificates (using the ssl library in java)
Authentication is handled like this: You specify the public key of your friends, in the ssl handshake we get the public key of the remote host, if it is a friend the connection is allowed.

> Source code decompiling
We are in the process of preparing a public release, we will publish the source code then. If you want the source code earlier send an email to oneswarm(special "a" character)cs.washington.edu and we will give it to you. The OneSwarm source is released under GPL.

>How it works (very briefly)
OneSwarm is a friend-to-friend network, you only have direct tcp connections with your friends. If the content you request is further away it will get forwarded by your friends. The only IPs you ever see are the ones of your friends. All forwarded communication is done in "channels", channel packets don't contain any information about the original source of the packet.

To speed up downloads OneSwarm is using both multi-source and multi-path downloading. If the content you request is available from multiple sources you will open channels to each of them. If the content is available using multiple different overlay paths to the same source you will use all paths.

We are using BitTorrent as the data transfer protocol, each overlay channel is handled as a BitTorrent peer. This means that OneSwarm can be used as a BitTorrent client as well, when you start a download you can choose between the normal public BitTorrent network, and/or the OneSwarm friend-to-friend network, you can then choose to share the data in the friend-to-friend network so your friends don't have to use the public network. Right now the OneSwarm network is pretty small so most content is not available (yet?)... There is also a clear text search that allows you to search torrents that are shared in the network.

>This projects is very intresting a new alternative is born Grin, but only doesnt like the javascript webinterface.
Haha, yeah. There are multiple reasons for why we chose a web based ui. One is that it allows remote access. In settings: enable remote access, specify a username and password and you have access to your data wherever you are. We are also allowing remote streaming of movies, we use ffmpeg to convert most formats to flash so you can watch xvid moves remotely using a normal web browser.

Feel free to give OneSwarm a try, it is actually pretty great :-)

Offline rb2k

  • Advanced
  • ***
  • Posts: 297
  • Karma: +3/-0
    • View Profile
Re: Oneswarm: Turtlehopping + Bittorrent
« Reply #11 on: January 24, 2009, 11:21:35 AM »
one thing that I really miss is the ability to automatically share a certain folder.
e.g. check every minute for new directories in that folder and automatically create a new swarm for the directory.
I think the "watch directory" part of the settings only checks for new torrents to download

Offline crypton

  • Elite
  • *****
  • Posts: 1699
  • Karma: +10/-0
    • View Profile
Re: Oneswarm: Turtlehopping + Bittorrent
« Reply #12 on: January 24, 2009, 12:31:41 PM »
We are using BitTorrent as the data transfer protocol, each overlay channel is handled as a BitTorrent peer. This means that OneSwarm can be used as a BitTorrent client as well, when you start a download you can choose between the normal public BitTorrent network, and/or the OneSwarm friend-to-friend network, you can then choose to share the data in the friend-to-friend network so your friends don't have to use the public network.

Feature Request:
It bether when you can remove public BitTorrent network from OneSwarm?
Mean to not allow more to use the unencrypted und unsecure puplic BitTorrent network, people which want use unsecure network they must take Orginal Azureus.
« Last Edit: January 24, 2009, 12:38:04 PM by crypton »

Offline CSE Mike

  • Posts: 2
  • Karma: +1/-0
    • View Profile
Re: Oneswarm: Turtlehopping + Bittorrent
« Reply #13 on: January 24, 2009, 04:03:55 PM »
one thing that I really miss is the ability to automatically share a certain folder.
e.g. check every minute for new directories in that folder and automatically create a new swarm for the directory.
I think the "watch directory" part of the settings only checks for new torrents to download

Watch directories do in fact create new swarms by grouping files in a given directory.

Offline rb2k

  • Advanced
  • ***
  • Posts: 297
  • Karma: +3/-0
    • View Profile
Re: Oneswarm: Turtlehopping + Bittorrent
« Reply #14 on: January 24, 2009, 05:02:05 PM »
one thing that I really miss is the ability to automatically share a certain folder.
e.g. check every minute for new directories in that folder and automatically create a new swarm for the directory.
I think the "watch directory" part of the settings only checks for new torrents to download

Watch directories do in fact create new swarms by grouping files in a given directory.


Uh, awesome!
I can't seem to get it working though :(
I added a directory to the watch list, put two files in there and restarted oneswarm (hoping for a "recheck" on startup).
I can't see the files in the added directory anywhere (nor any new swarms).

btw: is there an "official" IRC channel somewhere?


UPDATE:
Just started it on another server and it worked fine.
The only thing that is kinda annyoing is that if you have this directory structure in your "watch" folder:

\myself singing\cd1\
\myself singing\cd2\

it will result in 2 swarms called "cd1" and "cd2" and not simply one swarm called "myself singing".
It would be really nice if the sharing would occur on a maximum depth of 1

e.g.
\my_last_holiday.avi
==> single file as a swarm called "my_last_holiday"

\last year\my_last_holiday.avi   
\last year\my_last_holiday.txt
==> a swarm with the whole folder called "last year"

UPDATE2:
ok, seems I don't understand the way files are shared ^^
I've got 2 folders full of files

bla\folder_a\file_a.mp4
bla\folder_a\file_b.mp4
bla\folder_a\file_c.mp4
==> results in a swarm called "folder_a"

bla\folder_b\file_a.mp4
bla\folder_b\file_b.mp4
bla\folder_b\file_c.mp4
==> results in several swarms called file_a, file_b, file_c ...

Strange O_o
« Last Edit: January 24, 2009, 05:45:44 PM by rb2k »