Limewire improves security by adding feature to filter fakes

December 23, 2005

Even though Limewire is preparing a version to block the sharing of files without a license, so far they have released a new beta version of Limewire which fights fake files, such as those containing spam, viruses, Trojans and so on. This version incorporates a feature called TigerTree hash, which effectively keeps the integrity of files during download.

The Spam
filter works by storing information about files, where search results can be filtered by keywords, size, verified SHA-1 hashes or even IP address. Information about what is spam is gathered through two methods: One which includes the user marking which results they find to be fake and another which covers the learning of items commonly found in search results. Both of these measures are used to give each file a rating and once this rating goes over a certain threshold, the file is flagged as spam. This Limewire version has been released as a public beta on the 13th of December.

Whichever reason, its clear Gnutella developers are maintaining a strong defense against enemy attacks. Although file hashing has been instrumental in the development of P2P networking, Limewire hopes its latest efforts are just as ground breaking. A result of the initial efforts of a Frostwire developer, Limewire has brought spam filtering to their latest public release.

The filter is designed to learn by storing information. When a search is conducted, the user can block certain results by key words, size, verified SHA-1 hashes and/or IP address. Taking this information, the filter will then begin to learn by creating spam profiles. If a future search result fits a malicious profile, the file is labled as spam.

From the user, the filter learns patterns of what the user marks junk and what the user marks not-junk. From the network, it learns about things that are often found together in search results. It puts these two types of patterns together in order to make guesses at what is junk and what is not.

As Limewire is working on a version which blocks the sharing of material without a license, this
version looks like it will be Limewire's last release before the new secure version that enforces license checking. Limewire decided to start working on a legal version as a result of the RIAA sending out cease & desist letters to various P2P companies asking them to block copyrighted material from being shared over their network or face legal action. Limewire returns quite a lot of fake results, even
if one attempts to searches for something that should not return any results
such as a lengthy random string of characters.

Feel free to discuss about Limewire and other file sharing services on our Music Download, Peer to Peer (P2P) & Legal Issues forum.

Source: Slyck News