Printable View
http://www.earthstation5.com/
No spyware, no ad's, no cookies. Newbie friendly P2P tells you how to use their software safely to avoid the RIAA and still download all your mp3's, movies and such. THE BEST p2p out there by far. The people that run it are constantly in the forumns to answer all your questions.
-zato
Your post sounds nearly like a spam. Be careful with such threads, Zato.
You should have spoken about cryptographic abilities of this p2p network and about its strategies to avoid RIAA investigations. it would habe been clearer.
Well, some work is still needed, but this project seems to be on the good way.
Might be something good vs the RIAA...but for now ima stick to Direct Connect ++ :D
but thanks for sharing that with us...i can at least try it lol
peace
/scriptkiddie18
[edit] damn what a nice website also lol...the background music is kinda cool [/edit]
[edit2] OMG lol im getting to like this **** and plus its because im against RIAA muhahah:D
Dude thanks again...this is great [/edit2]
es5 comes complete with a back door with which any file on your computer can be deleted! located in a beautiful downtown area of a palistinian refugee camp....no thank you! not that there's anything wrong with refugee camps mind you its just that there's something just not quit kosher about this operation
Umm, did anyone notice that they are promoting piracy of not just music and video, but software too? on the tools page they have Serials and Keygens. I bet once they start to get heat from RIAA/MPAA, they will go down faster than Napster...Regardless of the fact that they are located in Palestine.
slick
I agree with Tedob1.. and this was discussed here before in these threads.
http://www.antionline.com/showthread...readid=249517&
http://www.antionline.com/showthread...readid=249294&
http://www.antionline.com/showthread...readid=248016&
and this one had many replies..
http://www.antionline.com/showthread...readid=247694&
backdoors.. possible sting operation ?
somewhat weird claims.. "oh sure, you're protected, no one can see your ip.."
uh huh.. no thanks..
Googled for "backdoor in ES5" and found this
SOURCE: http://lists.netsys.com/pipermail/fu...er/011339.html
Much more at that link including the malicious source. I'd suggest you check it out. And to think i almost considered downloading it. [wipes brow] whew, that was close. :D :pQuote:
ES5 info
--------
EarthStation 5 (aka ES5, aka ESV) (http://www.earthstation5.com and
http://forums2.es5.com/) is a P2P application first released about 6-12
months ago. The people behind ES5 claim that ES5 is the most secure P2P
software in the world. They also claim that they are security experts, and
that they have more than 15 million simultaneous users on-line 24/7. In
comparison Kazaa, the most popular P2P application, only has about 4
million simultaneous users on-line at any given time of day.
Malicious code
--------------
There exists malicious code in ES5.exe's "Search Service" packet handler.
By sending packet 0Ch, sub-function 07h to the "Search Service"'s IP:Port,
a remote attacker could delete any file the user is sharing. If the remote
attacker uses "filenames" with a relative path in them (eg.
"..\..\..\WINDOWS\NOTEPAD.EXE"), the remote attacker could also delete
files in eg. the windows and windows\system32 folders, or any other folder
on the same partition as any of the shared folders. Since most users using
Windows are in the Administrators group, a remote attacker could also
delete the C:\BOOT.INI file which is a required boot file used by ntldr.
IMPORTANT: This is not a bug! They intentionally added this code to ES5.
Vulnerabilities
---------------
There also exists a lot of other vulnerabilities in ES5 (eg. DoS attacks,
buffer overflow bugs, and so on), but these all seem to be unintentional.
Another advisory may have more info on these vulnerabilities, but I'm not
their beta tester so don't hold your breath.
Conclusion
----------
The people behind ES5 have intentionally added malicious code to ES5. If
you have followed the ES5 discussions on message boards and read what the
ES5 people have said and done (eg. DoS attacking BitTorrent sites), this
comes as no surprise. The question then is "why did they do it?" I'm sure
they won't tell us, but here's a theory: They could be working for the
RIAA, MPAA, or a similar organization. Once they have enough users on their
ES5 network, they would start deleting all copyrighted files they own which
their users are sharing. The users wouldn't know what hit them.
slick
As a half hearted rebbutal and comment , The reason they chose Palestine is that the RIAA and such have absolutley NO power or say there (i think Yasser has more important things to do than listen to the RIAA or BSA). There are some reputable people involved in the project, the article from netsys is from october and is no longer relative as that hole has been patched. But it is closed source ,so who knows what else there is, but that is the risk you take with all proggys ,kazaa spyware anyone? , Personally i won't use it (no nix client and closed source) i will stick with http://mldonkey.berlios.de/index.php and the tried and true ed2k links http://www.sharereactor.com/
Supposedly... this "backdoor" was removed. I tried the "exploit" when it first came out, and it really did work. You had to have some knowledge about the ports it was running the search function from and etc (these ports changed per install and the user could set them up to be whatever they chose... to get around proxies, etc). I don't remember the exact details... I posted them here somewhere... probably in one of the threads that jenjen posted.
Ah yes.. here it is.
http://www.antionline.com/showthread...hreadid=249294
ES5 responded to these claims... and have supposedly removed the code...
Read up on it here... amongst other places.
Earthstation5 Responds to Malware Claims
I still wouldn't trust it... just like I won't trust JAP because of their backdoor. At least they released the source code for people to find it. They were silenced by the courts... but they wern't told that they couldn't release the code... ;)
your right phish i could never trust them and nothing they could say now would change that. changing the ports though, their still has to be a common port or server to share/get the sharing info from. otherwise your sitting there on the internet all by yourself...well except for the occasional hacker.