Follow up in #BREINFAIL

BREIN is now claiming that they didn’t make the false reports, that I blogged about yesterday.

I was hoping for them to say just that, it was kind of what I was expecting. That’s because I left some parts a bit open (about Experian). I don’t need Experians research, as there is something as interesting as two different versions of the experian document out there….

Yes! I have promised not to publish it yet, but the people that gave me the alternative version have sent the data to wikileaks. I will link to the report as soon as I have a link to give you, but keep an eye on Wikileaks for the time being. It also contains the rest of the documents that I talked about yesterday.

The alternative PDF is the one that BREIN has sent to the court of Amsterdam. It has a certain details that is quite interesting that proves BREIN has done the report themselves, and that Experian is not the creators. We only received a fax so we could not check for all the data we wanted.

If running “pdfinfo” on the .PDF file you’ll find this data:

CreationDate:   Thu Jul 30 15:55:34 2009
ModDate:        Fri Aug 28 17:12:52 2009

That means that the original PDF was created in July, and then it has been altered at least on 28 of august. That was just a couple of days before it was sent via fax to our lawyer in the netherlands. It was actually modified on a Friday after normal work hours. So after the weekend it was sent to our lawyer.

The interesting thing is yet again the footers! Remember the old one? It said:

Copyright © 2009 Experian Ltd

Yes, this alternative version (originally sent to the court, remember, the court can verify the document!) contains the same. But just before that it also contains this:

Dept.: 00    Invoice Ref.:FOC
Copyright © 2009 Experian Ltd

The interesting thing here is that data is missing in the faxed version, compared to the original sent to the court.

Why would Experian send out two different versions? And why would Experian send out a PDF with a modification date — hell, they made the document through a computerized system. Yes, some PDFs from Experian contains a modification date as well, but those matches the creation date.

I was hoping to release the document myself right now, but I’m leaving tomorrow morning to the far east. I hope that Wikileaks will have the document online in a few hours, otherwise I will get the document somewhere on the web myself after I land.

Mr. Kuk, you’re busted!

EDIT: The data is now available as a torrent by one of the people who gave it to me

49 comments ↓

#1 Breki Tomasson on 10.10.09 at 21:59

Oooh, this just keeps getting better. ;-) Can’t wait for them to fall into the hole they’re digging for themselves.

#2 Sune on 10.10.09 at 21:59

You own those guys! Great work.

#3 Tweets that mention Follow up in #BREINFAIL — Copy me happy -- Topsy.com on 10.10.09 at 22:00

[...] This post was mentioned on Twitter by Niclas and Erik Fredriksen. Erik Fredriksen said: RT: @brokep: http://bit.ly/1bbI1T now that #BREIN has #lied even more in the news, it's time for the last blow… [...]

#4 youngdand on 10.10.09 at 22:02

He said with a big cheesy grin on his face.

Nice one. Give em enough rope! and they took it all. but it still stopped 6 foot from the ground.

#5 Maria on 10.10.09 at 22:09

Is his name Kuk? Really? :D HAHAHA!! :D :D

#6 Goran Karacic on 10.10.09 at 22:10

<3

Come to Zagreb, get some free beer…we'll celebrate the fall of BREIN

#7 Simon on 10.10.09 at 22:22

Already long-time posting about the BREIN issues on my own website.
The stories are in Dutch, but I guess Google Translate can solve most of that.

I might rewrite them in English sometime, just not now.

#8 Daniel on 10.10.09 at 22:24

They are just digging in deeper before jumping into their big hole.

#9 Simon on 10.10.09 at 23:17

http://www.geenstijl.nl/archives/images/Jouwspullen800.jpg

Translation of the “Laptop” part:
Sony VAIO
‘It’s a very nice laptop. It’s been confiscated from a hacker once. I’d rather not give any more information, considering the people we as copyright-organization have to deal with.’

Just so you know.

#10 Matt on 10.10.09 at 23:59

Youre the best! :D

#11 TwittLink - Your headlines on Twitter on 11.10.09 at 00:13

[...] Follow up in #BREINFAIL — Copy me happy [...]

#12 Emil on 11.10.09 at 01:11

Now up on Wikileaks: http://wikileaks.org/wiki/BREIN_vs._The_Pirate_Bay_legal_information_and_potentially_forged_Experian_report%2C_2009

#13 Simon on 11.10.09 at 01:36

Ok, I’ve been translating a lot, just one post short, but here’s a special about BREIN, from the Dutchy’s perspective:
http://www.casa-laguna.net/specials/brein/

#14 Jon on 11.10.09 at 01:37

Datumet 30:e juli nämns ju i ditt tidigare inlägg… Det var ju då någon gjort en tidigare kreditupplysning. Samband?

#15 b on 11.10.09 at 01:37

Let’s hope this is enough.

#16 0x5318008 on 11.10.09 at 10:35

Did anyone notice the timezone difference, too?

“Experian Report Reservella.PDF”;
CreateDate: 2009-07-30 T 15:55:34 +08:00
ModifyDate: 2009-08-28 T 17:12:52 +02:00

I don’t know what that means, but I don’t see it mentioned anywhere.

#17 Bo on 11.10.09 at 11:09

Men kommer det innebära någon förändring? Svenska antipiratbyrån har anklagats för att begå brott gång på gång (dataintrång, infiltratörer, svarta pengar osv). Redan 2005 konstaterade datainspektionen att man bröt mot personuppgiftslagen (PUL) – och vad hände? De fick ett undantag och sen kom IPRED. Men har de dömts för de brott de begick innan sitt undantag? Någon som vet?

#18 John Doe on 11.10.09 at 12:47

Hey, that timezone difference thingy is also interesting! Although the Netherlands are usually in GMT+1, it is likely that the PDF was altered on another system (unless Experian changed it’s system between the creation and modification dates).

By the way, the director of BREIN is Tim Kuik, not Kuk.

#19 Sune on 11.10.09 at 14:41

Run strings on ‘experian-report-reservella.pdf’. You’ll find some amazing and gorgeous things in there. There are several embedded XML files for example.

#20 Sune on 11.10.09 at 14:45

What you’re missing so far – although the time stamps are correct – is that the modification took place six (6) time zones away from where the document was originally created.

2009-07-30T15:55:34+08:00
2009-08-28T17:12:52+02:00
2009-08-28T17:12:52+02:00

#21 Grey on 11.10.09 at 14:47

The timezone +8.00 (the creation timezone) is western Austrailia, Malaysia, Philipines, China or Mongolia.

The timezone +2.00 (the modification timezone) is eastern Africa, Saudi Arabia, Iraq, Kuwait, or Russia (the european part).

Anybody who understand what this mean? I don’t.

#22 Sune on 11.10.09 at 15:01

I’d really recommend getting a ‘real’ report from Experian and comparing this metadata. There are references to creation tools such as Highwire and iText. It would be interesting to see if these match. And then to get an official reply from Experian in such case that they do not and have never used these tools to create their PDFs.

Emil: you could have shortened that link with bit.ly, you boob.

#23 Sune on 11.10.09 at 15:02

http://bit.ly/3FPYK5

#24 Grey on 11.10.09 at 15:08

Ops. I made a mistake. Timezone +2.00 is Finland, Estonia, Latia, Lithuania, Belarus, Ukraine, Moldva, Romania, Bulgaria, Greece, Turkey, Syria, Jordan, Libya, Egypt, and Congo (eastern part), Zambia, Malawi, Zombabwe, Mosambique, Botswana and South-Africa

Makes even less sense.

#25 Anonym fegis on 11.10.09 at 15:19

Maria: No, his name is Kuik. But I suppose it’s funnier to call him Kuk.

#26 Sune on 11.10.09 at 15:20

I think the explanation for the different time zones can be as follows.

Experian have offices in 30+ countries. If in fact they were behind a first report then this report may have been generated by an office in +0800 GMT.

The following two time stamps however point to +0200 GMT – which is coincidentally (gee whiz) right smack dab in the middle of the Netherlands.

Gee whiz. Gosh golly gee whiz. I think you can now castrate Mr Kuk. ;)

#27 Sune on 11.10.09 at 15:21

You could also call him ‘Kuik-head’. ;)

#28 Sune on 11.10.09 at 15:49

@0×5318008: Sorry, didn’t see your post. Yes I do think it makes a difference. A BIG difference. Consider the likelihood Experian get a request for a report, assign it to an office at +0800 GMT such as Hong Kong, then a month later modify this report in the same time zone as Mr Kuk?

That likelihood doesn’t even equate to a little red dot on a Malaysian map.

#29 L on 11.10.09 at 15:50

Netherlands time zone is +0100 GMT.

#30 whatever on 11.10.09 at 15:56

I hope your lawyer has told you that it doesn´t really matter whether or not they faked anything (at best the judge is pissed at them, but it cannot affect the verdict). The thing is, it doesn´t matter who owns Reservella or who is its director, it only matters if you guys can exert control over TPB. If control of the website is obfuscated behind a few shell companies, that can only hurt your case.

There has been a very similar case before a dutch court involving a website hosted by a foreign limited through an anonymous foundation where similar complaints (it’s not really “my” website) where completely ignored by the judge. The best and pherhaps only way to dodge this is to prove who does control TPB and show it isn’t you.

So please tell us this isn’t the only point that was brought up in the “verzet”, because if so, I’m seriously worried that you’re wasting your options.

#31 ryan on 11.10.09 at 16:20

Sunde, you now have two kuks!

:) )

Great job, now to wait and see if it pays off or the courts are so far corrupted that they try to sweet it under the carpet.

#32 abeijer on 11.10.09 at 20:59

As stated above it seems that the report is converted with highwire. A html to pdf converter. As I understand it, highwire use Corda’s (the company behind the app) server to do the actual conversion. Maybe it’s possible to see who’s made the actual altering/conversion? Maybe corda has logged an IP?
Just a long shot. I’m definitly not an expert in this area.

#33 anon on 12.10.09 at 04:42

the plot is getting pretty damn thick.

#34 anon on 12.10.09 at 04:44

it would make a good film noir

#35 DanM on 12.10.09 at 06:53

Other Experian reports:

http://www.experian.com/products/pdf/sample_developed_profile.pdf
http://www.infocubic.net/pdf/Bahrain.pdf
http://www.experian.co.jp/business-information/pdf/Russia.pdf

It looks like the only think stripped was the invoice number, which in this case was FOC; presumably “Free Of Charge”

#36 john Doe on 12.10.09 at 09:54

DN skriver om detta nu:

http://www.dn.se/fordjupning/europa2009/pirate-bay-atalade-polisanmaler-upphovsrattsorganisation-1.971975

#37 Annie on 12.10.09 at 10:10

But yet an other strange thing is that the owner of all PB domains registred is no one else but Fredrik N.
Domain ID:D104576138-LROR
Domain Name:THEPIRATEBAY.ORG
Created On:28-Jun-2004 16:08:27 UTC
Last Updated On:18-Jun-2009 07:12:07 UTC
Expiration Date:28-Jun-2015 16:08:27 UTC
Sponsoring Registrar:Key-Systems GmbH (R51-LROR)
Status:CLIENT TRANSFER PROHIBITED
Registrant ID:P-7524559
Registrant Name:Fredrik Neij
Registrant Organization:Reservella
Registrant Street1:Box 161
Registrant Street2:
Registrant Street3:
Registrant City:Stockholm
Registrant State/Province:
Registrant Postal Code:11479
Registrant Country:SE
Registrant Phone:+46.707323819

Isn’t that strange when you claim he’s not at all involved withe any company by the name RESERVELLA.

#38 Cliff on 12.10.09 at 11:16

Nope annie that are two different things … Neij regitered the name for reservella … I can sell you my second hand subaru … that doesn’t mean that I will pay your speedtickets! Nor will subaru do so … that’s just the point … these are free fields they can even put Michael Jackson in it if they like … it is completely irrelevant to the case.

#39 pumpkin's status on Monday, 12-Oct-09 10:43:02 UTC - Identi.ca on 12.10.09 at 12:45

[...] up in #BREINFAIL http://blog.brokep.com/2009/10/10/follow-up-in-breinfail/ #tpb [...]

#40 r0b on 12.10.09 at 13:08

I can’t believe that BREIN would be so stupid to try to falsify documents. I can’t help to think that there’s something else going on. Really weird situation.

#41 Tobias on 12.10.09 at 14:43

Netherlands timezone is GMT+2 (CEST) in the summer time, GMT+1 winter time (CET).

#42 jag on 12.10.09 at 16:29

GMT +2 is CET during summer time.
GMT +1 is CET during winter time.

#43 Nick on 12.10.09 at 22:43

So now even more people will understand what type of criminal these music recording and movie industry corporate parasites are and also why we are boycotting their business to death.

Joint the boycott!

No CD, No for fee download, no DVD, no movie theater, Nothing!

Do not feed the parasites!

#44 Mobila la comanda on 13.10.09 at 02:20

Yes, I agree, you can see here the current time zone for Amsterdam:
http://www.timeanddate.com/worldclock/city.html?n=16

Current time zone offset: UTC/GMT +2 hours
Time zone abbreviation: CEST – Central European Summer Time

#45 Mobila la comanda on 13.10.09 at 02:35

Suspicion has long centered on Neij because his name shows up on The Pirate Bay’s WHOIS information as the contact (Reservella is listed as the owner). The new document from Experian seems to confirm that Neij was in fact linked with Reservella—so we asked him for an explanation.

Neij tells Ars that he is “listed as a contact for the domain, where they have chosen to add their company name as well. I can only assume it has something to do with the upcoming sale. As with most customers that have my name as proxy, I can not edit the WHOIS information, because they still have the domains in their registrar accounts for which I don’t have access. They are allowed to use my name in the whois as long as they are costumers of [Neij's business] DCP Networks.”

So Neij’s name was simply plugged into the WHOIS information by the person who currently controls the domain; this also seems to be a possible explanation for the credit report information as well. Whoever Reservella is, he or she wants to remain well hidden.

http://arstechnica.com/tech-policy/news/2009/10/who-owns-the-pirate-bay-part-ii.ars

#46 En kompis on 13.10.09 at 10:09

Important: see DanM’s comment at 35

“FOC” most likely means “free of charge”.

An Experian report on a person’s individual credit status is FOC. A report on a company’s financial status is NOT (see credit reports DanM refers to).

In other words, if I want to know my credit status it’ll be FOC. If I want to know Reservella’s or Microsoft’s or Ford’s or BMW’s status I need to pay.

It seems that the report has been forged, copying an individual’s report (which Brein could have obtained free at any time) rather than a company’s report which Brein would have had to pay for.

Lycka til.

#47 Sune on 13.10.09 at 16:22

Annie evidently doesn’t know much about how the Internet and ICANN registrars work. LULZ

#48 Sune on 13.10.09 at 16:29

@DanM: There are really dumb spelling errors in those reports I am sure Experian would never let through. However the PDF at Experian’s own site would have to be genuine. And an interesting thing about this report is that it too has been modified after the fact – and in different time zones as well.

CreateDate: 2007-11-12T16:07:53+08:00
ModifyDate: 2009-06-04T11:21:46+09:00
MetadataDate: 2009-06-04T11:21:46+09:00

What’s more, the same generators were used in both cases.
Producer: Highwire by Corda Technologies (using iText 1.2 by lowagie.com)

Thus a later modification date in a different time zone seems to be legit.

FWIW.

#49 Blowmywind on 13.10.09 at 18:12

One thing that would be nice was if you also posted the alledged documentation from Kronfogden that is s’posed to prove that you fellas have nuttin’ to do with Reservella.

I want to write a story about this as a freelancer, but it gets to biased for any serious newspaper if I only supply parts of the documentation.