I use the sister site and the news site, which are cleaner than some other sources. First thing after downloading I check it in VirusTotal. Some are reported as perfectly clean; others have suspected trojans, usually associated with keygens.

Then I do as much as possible in the Windows 10 sandbox. Generally I do a full installation there, then find out where files have been placed, then copy them across. I don't trust keygens so I always run them in the sandbox, and again copy stuff across.

So far no infections. My music PC doesn't have internet access and if something won't install because of this, it doesn't get installed. But this is usually not a problem. (And I allow it internet access for legit software authorisation, which usually only takes a second or two; then I pull the plug!)

 

I've seen faster working guys. Put your back into it!
Guys, work him hard, because that's why mods are for and ...
...one sec I have a PM from "Audiosex Staff"...
...oh. well. my...

Ahem... you majestic Moderator and prince of the Tigers @No Avenger .. and stuff

 

Last edited: Apr 9, 2023

legit a newb but can someone HBO on the sister site, thx for the help btw

 

Someone can for sure.

 

TY TY I didn’t realize it was that “sister” I’ve used it a few times just got a paid rapidgator acc

 

The stuff that one gets from the "sister site" may be "clean", but it's NOT the only place from which to get clean, FREE warez. The download mechanisms used by the "sister site" are for shit. They have more recently become unfriendly to those on VPN's using the "free" download. Therefore I have nothing to do with them. Though the "sister site" powers-that-be are adamant on using these scammy DL sites almost to the point where one could think those dl sites are an extension of these two, or vice versa...That said, it still doesn't exclude the fact that the "seckzy" site and the "sister site" aren't great collaborative audio communities because they are, most definitely.

 

Last edited: Jul 9, 2023

There are two things you should keep in mind. 1 I trust the site, the sister site is 100% reliable, I never had a problem there. My two trusted sources are, the sister site, and the Russian torrent. The second thing is that when you are trying to install a cracked, patched, etc. Possibly you will have alerts from your antivirus, but this is normal because (the technical part of this, about system modifications, etc., the experts know as they have already told you). Because we are not going to detract from other teams on the sister site that do a magnificent job, R2R is a legend, it is a team that we all love, but there are other teams that work and strive so that we have the vsts, and many times on the site bro I see these other teams as pioneers first and then R2R and while the way they create the patched installer or whatever Windows may be can tell you it's a virus, it's a false positive.

 

You can trust the sister site. I run custom windows, no defender, no AV and no internet. Out of ALL softs from there, not one has had a virus.

 

I agree about Sister Site files, but this is a rather fantastical claim. With no internet or other network connectivity, you could still have all sorts of nasty things running and wouldn't even know unless you checked every single process the machine is running. You maybe are/aren't submitting to Virus Total type of sites, or updating your Definitions in a client-side AV. Instead you are mostly depending on heuristic detections. (and not even that with 0 AV).
You aren't running a firewall to even see any outbound solicitation attempts at all. Wifi and Bluetooth also disabled?

"nothing happening" is not the same as good advice or best practice.

 

Completely agree with you. In 2005, I used to go to internet cafes to download things from various websites (as I didn't have internet on my PC). Then I would take my CDs back to my PC and transfer everything there, including viruses, haha. The thing is, during that time, I didn't know much about computers. But a friend of mine, who was a genius in that area, would come over and I would say to him, 'Can you check my PC? It's super slow and keeps freezing.' He would tell me, 'Look at the number of viruses you have, most of them are in System32.' And I would say, 'But I'm offline, how is that possible?' And he would explain what you just said, that even in offline mode, viruses can run in the background.

 

Yes, I run no wifi( no card) no bluetooth. I have checked processes, nothing “seems “ different than any other sdd I use. No use for a firewall if it go out. No slow downs, no lag no nothing. I really haven’t used AV in years. Or defender. I use different drives for different occasions, depending on the task. All run just fine. I think its all about how you manage your sources and what your doing. I know where to ‘get’ content thats trusted, Like I said works for me and no issues. Even everyday web browsing you dont need it. Just watch where your going.

 

The thing to take away from this is that connecting internet to a running production machine is just plain dumb. In the instance of connecting a production machine to the internet you "reap what you sow". That is to say when your shit starts disappearing and all your apps revert to trials 99% of the time the root cause has been self-inflicted.

 

I have used this exact model on ALL production machines I have owned over the years. Production machines are built tweaked and NEVER connected (for even a second) to internet - no win update, no AV, no defender, no ms-store BS, no telemetry, ms account crap, etc, etc... . Production machines get connected to my backend admin lan and are single homed (1 nic card). None of the desktop machines (even the internet ones) use wifi or BT, and all connections are WIRED to a managed switch. The only thing that uses wifi in my domain are laptops - NONE of which are used for production. NONE of the laptops can ever be connected to ADMIN and internet at the same time, by design...This way the private connectivity to the rest of the machines on the admin vlan stays intact. All backend lan connections are WIRED to a vlan on a managed switch that is secluded LOCAL only. I have other machines (win7 desktops only, with IME turned OFF in BIOS) that are configured solely for the purpose of dealing with internet access. Only those machines are dual homed and have connections to the admin and internet vlans but internet traffic is heavily regulated and machines are configured so as no traffic passes from internet to my admin lan unless I want it to. This method has served well for many moons and will continue to do so.

 

Last edited: Jul 9, 2023

Ok, well I will buy your next book on Syngress. Let me know when that comes out.

In such a book, you can extol the virtues about air-gapping systems, perhaps in the context of Olympic Games. Or as you would call it, Stuxnet.

So you think, "how would someone jump an air gap and get the files to a machine where they can be run?" Obviously, they would get you to do this for them. But how, right?

Let's say for example, we have a 100% legit, clean release, and a perfectly trustworthy uploader.
There are 3 internet facing machines between you and the uploader; and that is after they transfer the files. That is only just http/https, and two of them not even being actually secured by Sister Site. All three links with the file integrity and location secured by nothing but a http site/locker password and an OCR. This does not even take into account the security of said http sites.

You trust FFS file locker websites? It doesn't sound like it to me: https://audiosex.pro/threads/file-sharing-services-vs-vpns.71042/

 

Last edited: Jul 9, 2023

It's called social engineering. 99.9% of your spam/junk/scam email uses this same kind of methodology to scam and manipulate gullible types into giving up something that is wanted by those sending you the scammy spam/junk in the first place. Descriptions of the way I do things above are strictly having to do with the things that are within my control. Like tearing apart every piece of downloaded material, scanning the crap out of it, paying close attention to checksums, sandboxing, and using common sense even after the tools give you their "verdict"...

It's not necessarily a matter of trust, as far as those "FFS" sites go. It's more a matter of how they operate/appear to the outside world (like with the anti-vpn crap they are throwing down). As I have said, clean releases can be had any number of places (for FREE) outside the realm of the "FFS sites". As far as what constitutes "clean" is ALL up to you (the end user) to decide. That is to say, the burden of proof that something is OK to install or not falls with the end user. Which is why processes and conduct employed on the end user side to make certain one has a "clean" release is paramount to surviving the pitfalls of the scene in the first place. No one said the scene was a rose garden and there will always be those who will put that to the test. As to what I "trust" as far as the internet goes - hardly anything, is the answer I would give you. Personally, I believe that is the healthiest tac to take when dealing with the internet at large - trust no one, everything is suspect until proven innocent.

 

Last edited: Jul 9, 2023

Hey! Could i also get help to for what the sister site is?

 

Yes, you can.

 

Thaaank you!!

 

That's true. You can also download them from other sites that have downloaded them from the sister site. How much trust you want to put into these places is a matter for your own judgement, but when the free download from katfile.com has just crapped out on me for the umpteenth time and it's insisting I wait another two hours before I can attempt to try the captcha again, I've been known to test my luck with one of these.

I also hate the idea of paying somebody so I can download warez. When you could game the various sites through free debrids and VPN's it wasn't so bad but free leeching of big files from sister site has become almost impossible of late.