Warez

Demonstration in support of "fildelning" (file sharing, including of warez), in Sweden in 2006.

Warez is a common computing and broader cultural term referring to pirated software (i.e. illegally copied, often after deactivation of anti-piracy measures) that is distributed via the Internet. Warez is used most commonly as a noun, a plural form of ware (short for computer software), and is intended to be pronounced like the word wares, /ˈwɛərz/. The circumvention of copy protection (cracking) is an essential step in generating warez, and based on this common mechanism, the software-focused definition has been extended to include other copyright-protected materials, including movies and games. The global array of warez groups has been referred to as "The Scene," deriving from its earlier description as "the warez scene." Distribution and trade of copyrighted works without payment of fees or royalties generally violates national and international copyright laws and agreements. The term warez covers supported as well as unsupported (abandonware) items, and legal prohibitions governing creation and distribution of warez cover both profit-driven and "enthusiast" generators and distributors of such items.

Terminology

Warez, and its leetspeak form W4r3z,[1] are plural representations of the word "ware" (short for computer software),[1][2] and are terms used to refer to "[p]irated software distributed over the Internet,"[3] that is, "[s]oftware that has been illegally copied and made available"[4][5] e.g., after having "protection codes de-activated".[1] "Cracking, or circumventing copy protection, is an essential part of the warez process,"[6] and via this commonality, the definition focused on computer software has been extended to include other forms of material under copyright protection, especially movies.[6] As Aaron Schwabach notes, the term covers both supported and unsupported materials (the latter unsupported, termed abandonware), and legal recourses aimed at stemming the creation and distribution of warez are designed to cover both profit-driven and "enthusiast" practitioners.[6] Hence, the term refers to copyrighted works that are distributed without fees or royalties and so traded in general violation of copyright law.[7]

The term warez, which is intended to be pronounced like the word "wares" (/ˈwɛərz/), was coined in the 1990s;[4] its origin is with an unknown member of an underground computing circle, but has since become commonplace among Internet users and the mass media. It is used most commonly as a noun:[4] "My neighbour downloaded 10 gigabytes of warez yesterday"; but has also been used as a verb: "The new Windows was warezed a month before the company officially released it". The global collection of warez groups has been referred to as "The Warez Scene," or more ambiguously "The Scene."[8]:p.72 [9][5]

While the term 'piracy' is commonly used to describe a significant range of activities, most of which are unlawful, the relatively neutral meaning in this context is "...mak[ing] use of or reproduc[ing] the work of another without authorization".[10] Some groups (including the GNU project of the Free Software Foundation, FSF) object to the use of this and other words such as "theft" because they represent an attempt to create a particular impression in the reader:

Publishers often refer to prohibited copying as "piracy." In this way, they imply that illegal copying is ethically equivalent to attacking ships on the high seas, kidnapping and murdering the people on them.[11]

The FSF advocates the use of terms like "prohibited copying" or "unauthorized copying", or "sharing information with your neighbor."[11] Hence, the term "software pirate" is controversial; FSF derides its use, while many self-described pirates take pride in the term, and some groups (e.g., Pirates With Attitude) fully embrace it.

Direct download [DDL] sites are web locations that index links to locations where files can be directly downloaded to the user's computer; many such sites link to free file hosting services, for the hosting of materials.[12] DDL sites do not directly host the material and can avoid the fees that normally accompany large file hosting.

Motivations and arguments

The production and/or distribution of warez is illegal in most countries due to the protections provided in the TRIPS Agreement.[13] Software infringers generally exploit the international nature of the copyright issue to avoid law enforcement in specific countries. Violations are typically overlooked in poorer third world countries, and other countries with weak or non-existent protection for intellectual property. Additionally, some first world countries have loopholes in legislation that allow the warez to continue.

There is also a movement, exemplified by groups like The Pirate Party and scholars at The Mises Institute, that the very idea of intellectual property is an anathema to free society. This is in contrast to some of the more traditional open source advocates such as Lawrence Lessig, who advocate for middle ground between freedom and intellectual property.

Legality

Generally, there are four elements of criminal copyright infringement: the existence of a valid copyright, that copyright was infringed, the infringement was willful, and the infringement was either substantial, or for commercial gain (at levels often set by statute). Offering warez is generally understood to be a form of copyright infringement that is punishable as either a civil wrong or a crime.

Often sites hosting torrent files claim that they are not breaking any laws because they are not offering the actual data, rather only a link to other places or peers that contain the infringing material. However, many prosecution cases and convictions argue to the contrary. For instance, Dimitri Mader, the French national who operates a movie distribution warez site, Wawa-Mania, was fined 20,000 € and sentenced, in absentia, to a year in jail by a European court (after fleeing France for the Philippines), for his role in managing the site.[14] In the U.S., through 2004, more than 80 individuals had been prosecuted and convicted for trade in warez products (under the NET Act and other statutes), for movie and software pirating in particular, with a number of individuals being imprisoned, including some enthusiast traders.[6]:p.308 [15]

However, laws and their application to warez activities may vary greatly from country to country; for instance, while Wawa-Mania is under sanction in France, it remains in operation via a host in Moldova, and through use of an Ecuadorian top-level domain.[14] Hence, while high-profile web hosts and domain providers generally do not permit the hosting of warez, and delete sites found to be hosting them, private endeavours and small commercial entities continue to allow the trade in warez to continue. And, in some countries, and at some times, software "piracy" has been encouraged, and international and usual national legal protections ignored. A dispute between Iran and United States over membership in WTO and subsequent U.S. block of Iran's attempts at full-membership has led Iran to encourage the copying of U.S. software; hence, there has been a subsequent surge in Iranian "warez" and "crackz" websites (as Iranian laws do not forbid hosting them inside Iran. The same policy has been adopted by Antigua, and others.

Warez distribution

Warez scene hierarchy.

Warez are often distributed outside of The Scene (a collection of warez groups) by torrents (files including tracker info, piece size, uncompressed file size, comments, and vary in size from 1 k, to 400 k.) uploaded to a popular P2P website by an associate or friend of the cracker or cracking crew. An nfo or FILE ID.DIZ is often made to promote who created the release. It is then leeched (downloaded) by users of the tracker and spread to other sharing sites using P2P, or other sources such as newsgroups. From there, it can be downloaded by millions of users all over the world. Often, one release is duplicated, renamed, then re-uploaded to different sites so that eventually, it can become impossible to trace the original file. Another increasingly popular method of distributing Warez is via one-click hosting websites.[16] In the early 1990s, warez were often traded on cassette tapes with different groups and published on bulletin boards that had a warez section.

Rise of software infringement

Unauthorized copying has been an ongoing phenomenon that started when high quality, commercially produced software was released for sale. Whether the medium was cassette tape or floppy disk, cracking enthusiasts found a way to duplicate the software and spread it without the permission of the maker. Thriving bootlegging communities were built around the Apple II, Commodore 64, the Atari 400 and Atari 800 line, the ZX Spectrum, the Amiga, and the Atari ST, among other personal computers. Entire networks of BBSes sprang up to traffic illegal software from one user to the next. Machines like the Amiga and the Commodore 64 had an international network, through which software not available on one continent would eventually make its way to every region via bulletin board systems.

It was also quite common in the 1980s to use physical floppy disks and the postal service for spreading software, in an activity known as mail trading. Prior to the sale of software that came on CD-ROM discs and after hard drives had become available, the software did not require the floppy disc to be in the drive when starting and using the program. So, a user could install it onto his/her computer and mail the disk to the next person, who could do the same. Particularly widespread in continental Europe, mail trading was even used by many of the leading cracker groups as their primary channel of interaction. Software copyright violation via mail trading was also the most common means for many computer hobbyists in the Eastern bloc countries to receive new Western software for their computers.

A screen shot of pftp logged into several ftp sites. This tool was used by couriers to quickly and easily move large amounts of software from one site to many others. Since couriering was competitive, using this tool was considered cheating.

Copy-protection schemes for the early systems were designed to defeat casual duplication attempts, as "crackers" would typically release a copied game to the "pirate" community the day they were earmarked for market.

A famous event in the history of software copyright policy was an open letter written by Bill Gates of Microsoft, dated February 3, 1976, in which he argued that the quality of available software would increase if "software piracy" were less prevalent. However, until the early 1990s, software copyright infringement was not yet considered a serious problem by most people. In 1992, the Software Publishers Association began to battle against this phenomenon, with its promotional video "Don't Copy That Floppy". It and the Business Software Alliance have remained the most active anti-infringement organizations worldwide, although to compensate for extensive growth in recent years, they have gained the assistance of the Recording Industry Association of America (RIAA), the Motion Picture Association of America (MPAA), as well as American Society of Composers, Authors, and Publishers (ASCAP) and Broadcast Music Incorporated (BMI).

Today most warez files are distributed to the public via bittorrent and One-click hosting sites. Some of the most popular software companies that are being targeted are Adobe, Microsoft, Nero, Apple, DreamWorks, and Autodesk, to name a few. To reduce the spread of illegal copying, some companies have hired people to release "fake" torrents (known as Torrent poisoning), which look real and are meant to be downloaded, but while downloading the individual does not realize that the company that owns the software has received his/her IP address. They will then contact his/her ISP, and further legal action may be taken by the company/ISP.

Causes that have accelerated its growth

In the mid-1990s, computers became more popular. This was largely attributed to Microsoft and the release of Windows 95, which made using an IBM PC compatible computer much easier for home users. Windows 95 became so popular that in developed countries nearly every middle-class household had at least one computer. Similar to televisions and telephones, computers became a necessity to every person in the information age. As the use of computers increased, so had software and cyber crimes.

In the mid-1990s, the average Internet user was still on dial-up, with average speed ranging between 28.8 and 33.6 kbit/s. If one wished to download a piece of software, which could run about 200 MB, the download time could be longer than one day, depending on network traffic, the Internet Service Provider, and the server. Around 1997, broadband began to gain popularity due to its greatly increased network speeds. As "large-sized file transfer" problems became less severe, warez became more widespread and began to affect large software files like animations and movies.

In the past, files were distributed by point-to-point technology: with a central uploader distributing files to downloaders. With these systems, a large number of downloaders for a popular file uses an increasingly larger amount of bandwidth. If there are too many downloads, the server can become unavailable. The opposite is true for peer-to-peer networking; the more downloaders the faster the file distribution is. With swarming technology as implemented in file sharing systems like eDonkey2000 or BitTorrent, downloaders help the uploader by picking up some of its uploading responsibilities. There are many sites with links to One-click hosting websites and other sites where one can upload files that contribute to the growing amount of warez.

Distribution via compromised FTP servers

Prior to the development of modern peer-to-peer sharing systems and home broadband service, sharing warez sometimes involved warez groups scanning the Internet for weakly secured computer systems with high-speed connections. These weakly secured systems would be compromised by exploiting the poor FTP security, creating a special directory on the server with an unassuming name to contain the illegal content.[17][18]

A common mistake of early FTP administrators was to permit a directory named /incoming that allows full read and write access by external users, but the files themselves in /incoming were hidden; by creating a directory inside /incoming, this hidden directory would then allow normal file viewing. Users of the compromised site would be directed to log in and go to a location such as /incoming/data/warez to find the warez content. Messages could be left for other warez users by uploading a plain text file with the message inside.

Hackers would also use known software bugs to illicitly gain full administrative remote control over a computer, and install a hidden FTP service to host their wares. This FTP service was usually running on an unusual port number, or with a non-anonymous login name like "login: warez / Password: warez" to help prevent discovery by legitimate users; information about this compromised system would then be distributed to a select group of people who were part of the warez scene.

It was important for warez group members to regulate who had access to these compromised FTP servers, to keep the network bandwidth usage low. A site that suddenly became very popular would be noticed by the real owners of the equipment, as their business systems became slow or low on disk space; investigation of system usage would then inevitably result in discovery and removal of the warez, and tightening of the site security.

Automated warez distribution via IRC bots

As the ability to compromise and attain full remote control of business servers became more developed, the warez groups would hack a server and install an IRC bot on the compromised systems alongside the FTP service, or the IRC bot would provide file sharing directly by itself. This software would intelligently regulate access to the illicit data by using file queues to limit bandwidth usage, or by only running during off-hours overnight when the business owning the compromised hardware was closed for the day.[17]

In order to advertise the existence of the compromised site, the IRC software would join public IRC warez channels as a bot and post into the channel with occasional status messages every few minutes, providing information about how many people are logged into the warez host, how many files are currently being downloaded, what the upload/download ratio is (to force users into contributing data of their own before they can download), which warez distributor is running the bot, and other status information.[19]

This functionality still exists and can still be found on IRC warez channels, as an alternative to the modern and streamlined P2P distribution systems. The opportunity to find and compromise poorly secured systems on which to create an illicit warez distribution site has only increased with the popular use of broadband service by home users who may not fully understand the security implications of having their home computer always turned on and connected to the Internet.

Types of warez

There is generally a distinction made between different sub-types of warez. The unusual spellings shown here were commonly used as directory names within a compromised server, to organize the files rather than having them all thrown together in a single random collection.

Screenshot of Keygen by MESMERiZE

Movie infringement

Movie copyright infringement was looked upon as impossible by the major studios. When dial-up was common in early and mid-1990s, movies distributed on the Internet tended to be small. The technique that was usually used to make them small was to use compression software, thus lowering the video quality significantly. At that time, the largest copyright violation threat was software.

However, along with the rise in broadband internet connections beginning around 1998, higher quality movies began to see widespread distribution – with the release of DeCSS, ISO images copied directly from the original DVDs were slowly becoming a feasible distribution method. Today, movie sharing has become so common that it has caused major concern amongst movie studios and their representative organizations. Because of this the MPAA is often running campaigns during movie trailers where it tries to discourage people from copying material without permission. Unlike the music industry, which has had online music stores available for several years, the movie industry moved to online distribution only in 2006, after the launch of Amazon Unbox.

File formats of warez

A CD software release can contain up to 700 megabytes of data, which presented challenges when sending over the Internet, particularly in the late 1990s when broadband was unavailable to most home consumers. These challenges apply to an even greater extent for a single-layer DVD release, which can contain up to 4.7 GB of data. The warez scene made it standard practice to split releases up into many separate pieces, called disks, using several file compression formats: (historical TAR, LZH, ACE, UHA, ARJ), ZIP, and most commonly RAR. The original purpose of these "disks" was so that each .rar file could fit on a single 1.44 MB 3½ inch floppy disk. With the growing size of games, this is no longer feasible, as hundreds of disks would need to be used. The average size of disks released by groups today are 50 megabytes or 100 megabytes, however it is common to find disks up to 200 megabytes.

This method has many advantages over sending a single large file:

Despite the fact that many modern ftp programs support segmented downloading, the compression via RAR, ZIP, and breaking up of files has not changed.

Releases of software titles often come in two forms. The full form is a full version of a game or application, generally released as CD or DVD-writable disk images (BIN or ISO files). A rip is a cut-down version of the title in which additions included on the legitimate DVD/CD (generally PDF manuals, help files, tutorials, and audio/video media) are omitted. In a game rip, generally all game video is removed, and the audio is compressed to MP3 or Vorbis, which must then be decoded to its original form before playing. These rips are very rare today, as most modern broadband connections can easily handle the full files, and the audio is usually already compressed by the original producer in some fashion.

Warez and malware

There is a common perception that warez sites represent high risk in terms of malware.[24] In addition, there are several papers showing there is indeed correlation between warez/file sharing sites and malware. In particular, one study[25] shows that out of all domains the study classified as pirate, 7.1% are infected (while out of random domains only 0.4% were infected); another study[26] maintains that '"maliciousness" of the content for sites they classified as pirate (which specifically included warez sites) is the highest among all the researched site categories. Domains related to anti-copy protection tools are among the most malicious sites.[27][28] Another study specifically targeted anti-copy protection tools such as cracks and key generators. They conclude that the majority of these programs aim to infect the user's computer with one or more types of malware. The chance of the end-user being exposed to malicious code when dealing with cracked applications or games is more than 50%.[27]

These statistical data can be questionable though, because most prominent Antivirus software programs tend to classify KeyGens as viruses a priori, although most keygens do not infect the users' computers in any way.

Infected warez directly from the warez scene on the other hand, is a very unusual occurrence. The malicious content is usually added at a later stage by third parties.[29]

Demographics

Warez traders share many similarities to both hackers and crackers. Primary warez distribution groups include a single cracker that renders all copy protected technologies in a warez inoperable. Unlike the typical age of a hacker and cracker, the general age and demographics of a warez trader are older and married IT professionals. The need for attention is another similarity between the groups as well as believe that digital property should be free.[30][31]

See also

References and notes

  1. 1 2 3 Staff at Collins (2014). "Warez [redirects from W4r3z]". Collins English Dictionary, Complete and Unabridged (12th ed.). New York, NY: HarperCollins. Retrieved 26 August 2016. Note, this definition, contrary to this article statements and statements at the Oxford citation, suggests that the term's origin and pronunciation were "influenced by the anglicized pronunciation of Juarez, a Mexican city known for smuggling."
  2. ↑ Sutherland, John (1999-06-17). "Hacking away at our ethics". The Guardian. it's "wares", crossed with "Juarez", the Mexican smuggling capital across from El Paso
  3. ↑ Staff at PC Magazine (2016). "PCMag Encyclopedia, Definition of: warez". New York, NY: Ziff Davis–PCMag Digital Group. Retrieved 26 August 2016.
  4. 1 2 3 Staff at Oxford Dictionaries (2016). "Warez". US English Dictionary. Oxford, UK: Oxford University Press. Retrieved 26 August 2016. Note, this definition is also identical to that in the British English version of this publisher's dictionary.
  5. 1 2 Chandra, Priyank (2016). "Order in the Warez Scene: Explaining an Underground Virtual Community with the CPR Framework". Proceedings of the 2016 CHI Conference on Human Factors in Computing Systems. New York, NY: Association for Computing Machinery (ACM) (May): 372–383. Retrieved 26 August 2016.
  6. 1 2 3 4 Schwabach, Aaron (2014). Internet and the Law: Technology, Society, and Compromises. EBSCO ebook academic collection (2nd, revised ed.). Santa Barbara, CA: ABC-CLIO. pp. 247f, and passim. ISBN 1610693507. Retrieved 26 August 2016. The earlier edition is Schwabach, A. (2006). Internet and the Law…. ABC-CLIO's contemporary world issues. pp. 307–309, and passim. ISBN 1851097317., with same publisher and access date. Pages referenced at 247f are to the 2014 edition, while pages referenced to 307ff are to the 2006 edition, in both cases with page number appearing in superscript, in "rp" markup.
  7. ↑ Rosokoff, Jacqueline (2012-02-02). "The Rules All Digital Music Services Must Follow" (blogpost). TuneCore. Brooklyn, NY: TuneCore, Inc. Retrieved 26 August 2016.
  8. ↑ Witt, Stephen (2015). How Music Got Free: The End of an Industry, the Turn of the Century, and the Patient Zero of Piracy. London: Penguin. ISBN 0698152522. Retrieved 26 August 2016. Pages are as appear in the superscripted "rp" markup, inline.
  9. ↑ Rehn, Alf (2004). "The politics of contraband: The honor economies of the warez scene". The Journal of Socio-Economics. 33 (3, July): 359–374. doi:10.1016/j.socec.2003.12.027. Retrieved 26 August 2016.
  10. ↑ Eds. of the AHD. "Pirate". The American Heritage Dictionary of the English Language (4th ed.). Bartleby.com. Archived from the original on 2008-06-29. Retrieved 2010-02-18.
  11. 1 2 See 'piracy' and 'theft' on Words to Avoid (or Use with Care) Because They Are Loaded or Confusing Free Software Foundation
  12. ↑ sharky (2008-02-02). "Advanced Searching for Copyrighted Content - Part IV - 'DDL' Websites". FileShareFreak. Retrieved 2010-02-18.
  13. ↑ Denton, Adam (2011). "Intellectual property rights in today’s digital economy" (PDF). ITU. p. 15. Copyright infringement is a civil offence in most jurisdictions.
  14. 1 2 [Maxwell,] Andy (2015-04-11). "Sentenced to Jail, Warez Operator Faces $30m Damages Claim". TorrentFreak. Retrieved 26 August 2016.
  15. ↑ Goldman, Eric (2004). "Warez Trading and Criminal Copyright Infringement". Journal of the Copyright Society of the U.S.A. 51 (2): 395–436, esp. 427. SSRN 487163 Freely accessible. See also, Goldman, Eric (2004-01-07), "Warez Trading and Criminal Copyright Infringement," Working Paper, see or .
  16. ↑ Roettgers, Janko (2007-06-17). "Piracy Beyond P2P: One-Click Hosters". Gigaom. Retrieved 26 August 2016.
  17. 1 2 Koziol, Jack (2003). Intrusion Detection with Snort. Sams Publishing. p. 72. ISBN 1-57870-281-X. (View cited page using Google Books)
  18. ↑ Software Piracy Exposed: How Software is Stolen and Traded Over the Internet - By Paul Craig, Ron Honick, Mark Burnett, Published by Syngress, 2005, ISBN 1-932266-98-4, Chapter 7 - The Distribution Chain, Pages 144-145 (View cited pages using Google Books)
  19. ↑ Paul Craig; Ron Honick; Mark Burnett (2005). "Chapter 7 - The Distribution Chain". Software Piracy Exposed: How Software is Stolen and Traded Over the Internet. Syngress. pp. 145–148. ISBN 1-932266-98-4. (View cited pages using Google Books)
  20. ↑ Nicholas Ryan (1997-04-17). "The Truth - by Nicholas Ryan". Yale Herald (David Cassel). Retrieved 2017-05-14.
  21. ↑ David Cassel (1997-04-22). "AOL4FREE Culprit Tells His Tale". Wired. Retrieved 2017-05-14.
  22. ↑ Software Piracy Exposed: How Software is Stolen and Traded Over the Internet - By Paul Craig, Ron Honick, Mark Burnett, Published by Syngress, 2005, ISBN 1-932266-98-4, Chapter 4 - Crackers, Pages 88–90 (View cited pages using Google Books)
  23. ↑ Gehring, Verna V. (2004-08-01). "Chapter 3: Do Hackers Provide a Public Service". The Internet In Public Life. Rowman & Littlefield. p. 47. ISBN 0-7425-4234-3. Ideally, a warez d00d tries to release "0-day warez", copies of commercial software copied, cracked, and re-released on the first day the software is available for retail sale.
  24. ↑ Leyden, John (2005-04-21). "Warez site riddled with mobile malware". The Register.
  25. ↑ Alexander Moshchuk; Tanya Bragin; Steven D. Gribble & Henry M. Levy (February 2006), A. Moshchuk, T. Bragin, S. D. Gribble, and H. M. Levy. A crawler-based study of spyware in the web. (PDF), In Proceedings of the 13th Network and Distributed System Security (NDSS '06)
  26. ↑ Ikinci, Ali (May 2007), Monkey-Spider:Detecting Malicious Web Sites (PDF), University of Mannheim, Laboratory for Dependable Distributed Systems
  27. 1 2 Markus Kammerstetter; Christian Platzer; Gilbert Wondracek (2012). "Vanity, cracks and malware: insights into the anti-copy protection ecosystem". Proceedings of the 2012 ACM conference on Computer and communications security (PDF). CCS '12. Raleigh, North Carolina, USA: ACM. pp. 809–820. ISBN 978-1-4503-1651-4. doi:10.1145/2382196.2382282. Retrieved 2013-07-03.
  28. ↑ Ali Ikinci; Thorsten Holz; Felix Freiling (2008). "Monkey-Spider: Detecting Malicious Websites with Low-Interaction Honeyclients". In Proceedings of Sicherheit, Schutz und Zuverlässigkeit (PDF). Retrieved 2013-07-03.
  29. ↑ Andy (2013-11-11). "Piracy Release Group Has Been Spying on Downloaders For 9 Months". TorrentFreak.
  30. ↑ Eric Goldman, E. Goldman. The Challenges of Regulating Warez Trading., Social Science Computer Review Spring 2005 23: 24-28, doi: 10.1177/089443904271531, SSRN 652702 Freely accessible
  31. ↑ "Turning Zero-Day into D-Day for Cybersecurity Threats". itBusinessEdge.

Further reading

This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.