sig2dat 3.0.a - all inclusive tool for safe download
 

hi - what you all waited for - v 3.0.a is here :tu:

includes new funtionality: signature calculation

now uses the uuencoded hash string, which is also used for access from p2p (thanks to giFT project for that info)

use it and you will become a highly pleased user or M/K/G p2p services :SH:

:beer: indy :beer:

You guys are putting in alot of good work on Morph but I wonder how your labour will be affected when 2.0 comes out. :dunno:

i don't really expect heavy changes in this matters - they didn't even change with the last update, otherwise the unix-clients couldn't be used anymore.

the only thing, that could really affect my work is, if they add a direct signature(hash) search function. but this would probably be the best, they could do. in this case i just learned a little about, how win32 api works and nothing much is lost for me either :)

btw. it's ready to use and waiting for comments - not much work will be done anymore.

indy

btw. there is a file verification site for the e-donkey

http://www.sharereactor.com/

they also use a hash-value to identify the files.
its just not the same like for the MKG system.

indy

excellent job indy:tu: when 2.0 comes out i'm sure you guys'll be the first out of the gate w/the new files!

- js.

some of you guys ('n gals:)) put a lot of work in downloading faked movies either :b: and i don't think, this will change with version 2.0. :FB:
btw. i don't watch tv - so i have much time to play with win32 api :rofl:
indy

.

thanks ethen,
since you tried it, how's about you starting.
just post a few lines :TY: of your favorite songs, movies, ebook or whatever here in this forum.


how's about a game, "guess the favorites of the other" , maybe the thing starts a bit, if it's not only me posting signatures.

indy :beer:

Hey Indy...

Your "Surprise" isn't a surprise anymore... I've d/l that song three times now...

But I guess the important thing is that it has worked all three times...

hey buzz,
thank you for your positive echo:beer: and sorry for the inconvenience. I took this song, because it gives a quick result for anybody, who wants to try the thing. (btw. its a nice song too :))

another important thing were, that anybody here, who has a good quality rip of a song or an album ready or downloaded or a verfied movie at hand would post the data here. just to verify that it works also with anybody - not just with me:RI: it really takes just a minute to do that.
(it's rather boring for me, always to d/l my own mp3's:rofl: )
indy

.

thanks for the 1. try
this looks really funny. is it really 1.9 G Bytes?

but besides:
you should not take a

• kazaadownloadyyyy.dat

because such a file could not be shared. It is not completely downloaded and therefore the UUHash cannot be calculated correctly - additionally it could be locked by the p2p client and not accessible for sig2dat.

the file, which signature you want to publish, should be a complete song or movie with appropriate extension like: mp3, mpg, avi or such things.

it is not essential that you share that file, but it should be somewhere accessible at the p2p net.
i would appreciate if you won't give up, but give it another try :beer:

indy

.

.

.

i think we can stand the spam :) - as soon as i'm at home i will try, in office i have no morpheus access.

concerning dbb2dat:
there is a difference. dbb2dat uses the data1024/256.dbb files to get the hash. but there are different drawbacks using this method; 1. the dbb files are locked when the client is running and its rather inconvenient if you have to stop a running traffic just for getting a signature. 2. the dbb file could contain different versions with the same filename even if they are already deleted, thus giving confusioning results if you not familiar with this.
furthermore its not updated to the new UUHash string. but you still can get it from http://www.geocities.com/vlaibb/dbb2dat - sig2dat still can process the "Signature:xx-xx..." string.

sig2dat calculates the signature standalone from a given file, not using the morpheus data base (therfore i called it "all inclusive") - the algorithm was taken from the giFT project.

indy

@ethen - worked perfectly :AP: - almost immediately started download from 2 sources.
------
File:<Sade - Lovers Rock - 11 - Its Only Love That Gets You Through - r3mix - cx14b9.mp3>
Length:3686970Bytes
UUHash:=NkvbQQv9opGcupZdPFM/8aadWY8=
File:<Sade - Lovers Rock - 02 - Flow - r3mix - cx14b9.mp3>
Length:4643056Bytes
UUHash:=QvGlUa1jxPKI25HaAV9srsByZuI=
File:<Sade - Lovers Rock - 03 - King Of Sorrow - r3mix - cx14b9.mp3>
Length:5542885Bytes
UUHash:=xy17VTQCApkBQDMPWgqVEtvbrUE=
File:<Sade - Lovers Rock - 04 - Somebody Already Broke My Heart - r3mix - cx14b9.mp3>
Length:5530435Bytes
UUHash:=nluXhS6w8jiHABtHYsEpJD6AB88=
File:<Sade - Lovers Rock - 05 - All About Our Love - r3mix - cx14b9.mp3>
Length:2885259Bytes
UUHash:=i0JzVcIYMxW0/XaaOvnaI2lT94Y=
File:<Sade - Lovers Rock - 06 - Slave Song - r3mix - cx14b9.mp3>
Length:4696818Bytes
UUHash:=C/kglYWOdcQfGW1nZNAZKxE7fXU=
File:<Sade - Lovers Rock - 07 - The Sweetest Gift - r3mix - cx14b9.mp3>
Length:1980414Bytes
UUHash:=eNmUvsDKwxBVZPz+frOXdowaw0c=
File:<Sade - Lovers Rock - 08 - Every Word - r3mix - cx14b9.mp3>
Length:4475128Bytes
UUHash:=CB1c884xfTsaYRtmtdKqYzlGotw=
File:<Sade - Lovers Rock - 09 - Immigrant - r3mix - cx14b9.mp3>
Length:4438306Bytes
UUHash:=lZFGsu5DuTaA5VGzhbl3X+1cRiw=
File:<Sade - Lovers Rock - 10 - Lovers Rock - r3mix - cx14b9.mp3>
Length:4970258Bytes
UUHash:=9eYpzja6b+/NmWXg6KFvdidsK6M=
File:<Sade - Lovers Rock - 01 - By Your Side - r3mix - cx14b9.mp3>
Length:5379963Bytes
UUHash:=9sn0e94UKivti5IRATplzCXR8yo=
-------------
indy

.

Hi Ethen,

JohnDoe345, the site owner, and I, one of the verifiers, are avid readers of this forum. So if people like you demand this feature often and loud enough :HAC: :PO3:, I'm sure JohnDoe can be persuaded to think about adding signatures in some way. Now that Indys sig2dat is so comfortable to use and can create signature files out of downloaded files without having to go to Morphs dbb files, you don't have to download your files using Morph. You can use any P2P client. I personally use iMesh most often because I don't lose downloads when it crashes (unlike with Morph).

Btw, iMesh can 'import' Morph's kazaadownload files. And I guess iMesh can also use the signature files that sig2dat creates. Have to give that a try today.
Since JohnDoe and the others of the Morpheus Info team don't have as much time on their hands as they would like, and probably lack the knowledge of doing a dynamically searchable database of movies (Morph Info is plainly a collection of static pages that JohnDoe updates manually), it will be hard for us to integrate something like that into Morph Info. But maybe you have some brilliant ideas? I could also imagine some sort of collaboration between the two sites, like us adding a 'Search for Signatures' that links to your database, or something.

I'll get into contact with JohnDoe about this and talk it through, that is if he doesn't read this first and adds some comments of his own.

Oh, and keep us informed about how you are getting along with your site. I'd be interested to see it work and how it works.

Stoepsel

Ethan,

I admit that I haven't gotten around to Indy's new version of his sig2dat program due to a lack of free time, but I have downloaded and I'm currently talking with Indy on the Morpheus forum in the movies section. Talking to him here too will just mean that we both will be repeating ourselves.

Although, I have just recently downloaded Indy's new program I have already used his older versions and am fully aware of the benefit and potential of Indy's program. Basically, it has been a work in progress and I am waiting for Indy to work out all the bugs before using signature startfiles on my site. If you read the Morpheus forum section I mentioned above then you would know that there are still some problems with Indy's program. We need to wait until many of the bugs are worked out before introducing it to the mass public because most users will have a negative first impression of the program if it is bug prone. They might not want to try it again.

Indy knows how hard it is to get people to use a new program. He's been trying to get more people to use his program for awhile now, but users are still afraid or don't want to deal with it yet.

Also the comments that stoepsel have stated are true. (If you didn't know, stoepsel is one of the 3 volunteers helping me out with the site) His statement about not being able to do a complex database is true. I don't know enough about html to do something that advance. Also, I don't have enough free time to make the website more complex even if I knew how. If you are able to do this and are willing to create a website for it then we should definitely talk. I can easy link Morpheus Info to yours. As I have mentioned on the site, finding correct movies will be more effecient if everyone help out in some way. But we should really wait until most of the major bugs are fixed first.

Indy is doing a great job, and it's too bad that I don't have enough free time to help him progress this program further. I can talk on the forums at work but I can't work on the website or help test indy's programs until I'm done with work.

.

.

sig2dat 3.1.a
 

there is a new version attached 3.1.a

1. removed "\\" from filename at single selection
2. keyboard entry for UUHash added
3. a few "maybe" bugs removed

i just attach it here, you can try it from here.

there is no installation or setup
the info about the shared folder is read from the registry

indy

sorry found something, that makes it incompatible for win95, 98 & probably me for files > 300k

i 'm on a solution - but it should work from nt40-0 up for all files
indy

sig2dat 3.2.a
 

as far as i tested with win98

sig2dat 3.2.a

can handle now all filesizes with win98 and up, probably also 95.

it takes a lot longer than 3.1.a - a couple of minutes on a 600 MB file

if you have time, please try it , comments are welcome
indy

.

hey ethen,
of course it's all right, you can link as you want and also use all information and text from my homepage as you want to. i'm just happy when i see people using it (maybe i find some signatures of quality mp3 rips to download for me).

differences sig2dat 3.1.a 3.2.a:
3.1.a uses a read method(overlapped) which is not supported by win9x/me os but is much faster. so if it works for you, you can use 3.1.a because 3.2.a is much slower but they do the same thing.

concerning sw sharing:
from the calculation of UUHash, i learned that it is not 100% secure - in fact only sample blocks of the files are taken for hash calculation. that is enaugh for identifying the files - but it is not as i believed that every bit counts - this is true only for certain parts of the file.
there are additional security problems for sw - so you could worst case download a faked file from a totally faked client - with some virus inserted underways :b:
for sw sharing, there should be a 'long' and exhaustive signature, which is calculated by sig2dat and published and only used for verification.
i thought of some 256 Byte double md5 Hash, which is calculated from all bytes of the files in the forward and the backward direction including filesize.

indy

.

Ethan,

Your site sounds really good :tu: Here are some hashes for anyone who wants to try out indy's program:

File: (smr)the_mothman_prophecies-ts(1of2).avi
Size: 214734.000KB
UUHash: =8x5l8sBREbbkhRDOa3Wy5DOlEcM=

File: (smr)the_mothman_prophecies-ts(2of2).avi
Size: 194036.000KB
UUHash: =mFYJhaAr+EwKeetJ12m3863/+KY=

File: [tmd]a.walk.to.remember.ts.(1of2).avi
Size: 167624.000KB
UUHash: =J5ZOR+sBYA5dvEM8hxEjVGC/opA=

File: [tmd]a.walk.to.remember.ts.(2of2).avi
Size: 93400.000KB
UUHash: =DqYyRMcN4d3B6cXNNAdgnrXoiQg=

File: Collateral Damage (Part 1 Of 2).avi
Size: 141252.000KB
UUHash: =i936czwtxRC+8a6y1YtyZxCbOSc=

File: [tmd]collateral.damage.ts.(2of2).avi
Size: 139184.000KB
UUHash: =9kRbqBl2XdU4GMHE29E4O/AKfWE=

File: [tmd]slackers.cam.(1of2).avi
Size: 114886.000KB
UUHash: =OwvnJhyLr2Olr9h1meHzN+eIYTA=

File: [tmd]slackers.cam.(2of2)(1)(1).avi
Size: 105576.000KB
UUHash: =iFkBm9paUzoi3KxWhst6cIMR3b0=

File: Platoon [dvd-rip - divx].avi
Size: 670267.188KB
UUHash: =dxvtTPXY0CcvpgYsFlDJaivE09M=

indy,

I noticed that 3.1.a and 3.2.a calculated the same UUHash, but 3.2.a was WAY slower.

So, now that you confirmed that 3.2.a is 'merely' a version designed for 'backwards compatibility' with Win98, I'll stick to 3.1.a when I'm using Win2K.

If you're bored you can add some kind of Windows version check to sig2dat, so that you use the fast method when possible and otherwise use the slow method. There's an API function to retrieve the Windows version. If you need details on this let me know.

Thanks,
Stoepsel

Thanks Indy for the reg entrys/ on my sys morpheus is back up / nor just able to upload but I can search and d/l glory be

hi meziadin! welcome to nu. :tu: we're gald you're here!:beer:

- js.

.

Ethan,

I've been meaning to drop geocites for awhile now, but I never had the time to research others sites besides angelfire. If you are linking to one of my sites you ready should link to the angelfire one. It doesn't look like geo is going to have a long future with me. Thanks for the list of free servers :tu: I'll see if I have any time this weekend to check some of them out.

I think the best way we should work together is for you to concentrate on files other then movies. Eventually, I want to also display indy's hash numbers and drop the resolutions and fps. If you want to also do it then that's ok too, but there's no need to repeat ourselves.

Once I see the "preview" of your site then I'll get a better idea of how things might run between us. We all appreciate your efforts Etan :tu: I can't wait to see your site.

.

Well, we aren't getting out of the quality business because we provide stars that tell users how good the quality of a movie is. I might end up keeping the resolution and fps because it seems that some users really like these 2 pieces of information. I guess we could just let your website handle all the hash/signatures and just link to you.

Nothing is final. I was just thinking about it.

.

i think there are just 2 different things:

• why to select a movie for download
  
  for that all the quality stuff like name, size, fps, all over quality (stars) is very important. as i read from the forums, many users with slow connection spend days to download a movie and it would very useful for them to know a priori what they will get.
  
  
• how to really get the selected movie at last
  
  thats the point where the UUHash starts doing its job.

it's just very important that these two things stay fitting together.

indy

.

Well, like a said before I was thinking about dropping the resolution and fps because we introduced the star ratings a few weeks ago for quality. I just thought it was reduntant to include all 3 pieces of information. Also, I was trying to make less work for my verifiers. I guess I should keep them because it seems that users like all three and might want to have more then just the stars.

So....indy (if you have time) I have a favor to ask you. Can you make a program like your startfile one that gives me the filename, filesize, resolution, and fps? This way my verifiers and myself can quickly cut and paste the information rather then typing it all out. If you don't have time or can't do it then I'll understand.

I've been meaning to change the name. It's no longer going to have the Morpheus name. I think the site is going to turn into a more general verified movies site for the FastTrack network. Although, I'm sure some of the filesizes work on other p2p programs. I have do a little more research to make sure.

i agree with the idea to make the movie site(s) more "p2p-international"
i. e. there is a site for the edonkey (http://www.sharereactor.com/) - maybe you get some inspiration.

i think most p2p systems use a hash value maybe we can extend to some of them.

as for the movie details - for now i do not know how to extract them, but they are more or less open formats and maybe there is already some code available. if anybody is expert herein - there is no problem to share my code (it's rather undocumented) for further development.

indy

.

Thanks for the script, but I think I'm going to just drop geocities and have everyone be redirected to angelfire. Geo has drastically reduced their free server features. Also, according to their stats less then 1% of my viewers use browsers older 5.0. I'm sorry for those who still have the older browsers, but geo is really making it a pain for me to update the website with their new restrictions.

Geo was going down almost everyday until I added the angelfire mirror site. For the time being I'm going to make another angelfire site as the new mirror. I did try researching some of the banner free ads you gave me a link to, but a lot of them weren't working (signups for new users didn't go through), or had very limited free server features, or didn't exist anymore.

Oh well, problems come with the territory of using free servers. The banner ads aren't as annoying as long as they don't flash. The pop-ups can be eliminated with freeware programs that kills them. I don't know how long it is going to work out at angelfire, but I guess I'll cross that bridge when I come to it.

hey john,
congratulation to your new p2p FT logo - looks good.
but one thing: on the left it reads

• - Grokster/Kazaa -

but there are actually 3 clients on the FT net, what is with the client of the users @fileshare - nobody tells me what client it is - i should have its registry entries also for my sig2dat.

nobody there, who ever was a napsterite@fileshare :RI:?

indy

Thanks indy...the Morpheus Info name didn't exactly fit anymore. ;)

Quote:

but one thing: on the left it reads - Grokster/Kazaa - but there are actually 3 clients on the FT net, what is with the client of the users @fileshare - nobody tells me what client it is - i should have its registry entries also for my sig2dat. nobody there, who ever was a napsterite@fileshare :RI:? indy

From what I've heard fileshare was another program trying to use the FastTrack network, but it didn't really get enough users. I vaguely remember a rumor saying that they didn't have permission to access the FastTrack network, so they didn't get a lot of support. I think a hanful of people still use it and they somehow have access to FastTrack but I don't think there is a lot of them, so you don't have to worry about making your program work for them. I did a search on Cnet and they said that the program isn't available anymore. Maybe someone is keeping it alive, but it doesn't look like they are an official memeber of the FastTrack programs.

Maybe someone else knows more about this??

.

Update...
 

.