this post was submitted on 10 Mar 2025
31 points (100.0% liked)

Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ

59878 readers
179 users here now

⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.

Rules • Full Version

1. Posts must be related to the discussion of digital piracy

2. Don't request invites, trade, sell, or self-promote

3. Don't request or link to specific pirated titles, including DMs

4. Don't submit low-quality posts, be entitled, or harass others



Loot, Pillage, & Plunder

📜 c/Piracy Wiki (Community Edition):

🏴‍☠️ Other communities

Torrenting/P2P:

Gaming:


💰 Please help cover server costs.

Ko-Fi Liberapay
Ko-fi Liberapay

founded 2 years ago
MODERATORS
 

Am I correct in thinking this?

all 10 comments
sorted by: hot top controversial new old
[–] [email protected] 22 points 4 weeks ago

Yes.

While there is no end to paranoia, I would call a VPN over sftp quite useless.

Unless, of course, the seedbox itself needs a VPN to be reached in the first place.

[–] [email protected] 10 points 4 weeks ago

Probably. Depends on how much you trust your seedbox host. Using a VPN to connect to the seedbox to download stuff is probably overkill

[–] [email protected] 7 points 4 weeks ago

It's much lower risk, someone dedicated could prove you accessed a seedbox, but it would be a lot harder to prove you violated a copyright

[–] [email protected] 4 points 4 weeks ago* (last edited 4 weeks ago)

Your seedbox should have it's torrent traffic routed through a VPN, so that copyright complaints are delivered to (and ignored by) the VPN provider.

You do not need a VPN between you and the seedbox.

[–] [email protected] 3 points 3 weeks ago

Just letting this pdf here about security of Seedboxes: https://media.defcon.org/DEF%20CON%2031/DEF%20CON%2031%20presentations/Anon%20-%20Mass%20Owning%20of%20Seedboxes%20-%20A%20Live%20Hacking%20Exhibition.pdf

I could see the real source IPs for all other users in last logs.

Accessing their web interfaces shouldn't be a risk, as you've already paid them and thus left a paper trail. But the point about accessing the IPs from the last ssh (or sftp) logins might be worth using a VPN for. If another user is able to get them law enforcement could too (not that it's likely).

[–] [email protected] 3 points 3 weeks ago

SFTP / SSH encryption in transit is perfectly safe.

The seed box itself will probably have logs on it that you accessed it from your home IP

The seed box hosting provider might have logs that you're connecting to them from your home.

Your ISP can see that you accessed a box on a hosting provider with an encrypted protocol.

As long as you're not hosting anything so serious that a state agency will come in raid the hosting provider break into the box and grab the content and logs, you really have nothing to worry about.