Tits & Bits - pr0n 2.0 —————————

1. Tits & Bits - pr0n 2.0————————— Matt Peterson matt@peterson.org CCC Camp 2007

2. finger • Typical teenage work @ an mom-n-pop ISP • Rocking ISDN with /28 in 1996 • Did some WiFi stuff • 30k deserts dwellers, early 2000’s • Various fee and for-free networks • Retired web 2.0 worker bee (AS36017) • Not a formal uid0 or priv15 person • Somewhere in the middle • Hitting quarter life crisis, girly drinks

3. file tits_n_bits.ppt • Focus on tech side of adult content distribution • Very quick industry background • My day job, how we’re different • Batch encoding & codec selection • Performance monitoring • Quick security overview • Feedback and reporting • Not a lawyer; § 2257 regulations (USA specific) • Not a studio, ask ioerror for those juicy details • Not a porn guy, technically

4. info pr0n • Historically innovators with technology • VHS vs. Betamax • RealVideo, Xing, MJPEG web streaming • Online credit card processing • Historically lacking clue • Security (chmod o+rw ~/.htpasswd) • Biz models (publisher H lost $$ in late 90s online) • Somewhat had some innovation in web 1.0, clearly playing catch-up to web 2.0 space • Unknown if web 2.0 features are even useful

5. Industry • Unknown actual size • $2.6 billion online • $2.5 billion offline • Luke Ford claims 1 in 1000 pay • DTI Services (DxLive.com) • $80 million / 2007 / nytimes.com • HogTied, FuckingMachines, etc (Kink.com) • $16 million / 2005 / 7x7.com • FriendFinder, Alt.com (Various Inc) • $200 million / 2007 / Unconfirmed • AEBN.net (Adult Entertainment Broadcast Network) • $200 million / 2007 / Unconfirmed

6. Industry cont. • Yes, full of frat boys (not everyone) • "Conferences" put hacker drinking to shame, ie: bars open @ 9AM or never close • Events literally every 3 weeks, international & US focus - Internext/AVN, XBIZ, Webmaster Access, Phoenix Forum, Cybernet Expo, … • Studios realizing DVD sales are down, lacking online strategy • VOD doesn’t have an good ‘long tail’ ROI • DRM being a great example of this

8. Industry cont. • Blacklist of terms for search engine G & Y seem to change weekly, hard to find broker, internal politics • US title § 2257 is a mixed blessing • A tier-1 ISP went though every "teen" title we had on a conf call to “approve” us • Automatically excluded for bestiality, hentai, anime, etc • Hardcore (insex.com) hosted in Netherlands • We even have our own social network: adultwhoswho.com

9. Industry cont. • Large established ecosystem, large: • TGP’s (the gallery pages) • Membership sites • Affiliate networks • Traffic brokers • Member area ad’s • Revenue share • Cross sells • Exit coupons • List keeps going… • Extremely incestuous

10. Membership Sites Industry Media, Events & Org’s Niche Network VOD Reviews or TGP’s Traffic Brokers Billing

11. My day job: VideoBox (legal name Meta Interfaces LLC) • Est. 2003, Biz model is vertical </venture capitalist speak> • Our technology : LAMJ shop, custom C/Perl/PHP • Our network : AS36472 • Our own self inflected problems : Like any good start-up How our model is unique (or atleast the koolaid we drink) • No per-minute or VOB charges, single flat rate per month • Fresh content, 5 DVD’s added per a day (straight) 1 day (gay) • Stream or download, save to your own hard drive • “Pick-n-wank” interface, download the bits you actually care about • NO DRM, NO Spam (I built the mail servers, I’d know) • High internal goals for accurate metadata & video quality • “Optimized” download speeds, no rate-limiting • Compete on technological innovation (not content or brand)

12. /dev/paycheck • License content directly from studios or distributors • Tricky as legal rights get sold around • Not uncommon to see recycled content • Competitors • Knockoff: VideosZ, DVDbox, Vixeo, DVDstore • VOD: HotMovies, AEBN • We're small compared to adult hosting companies • FlyingCroc/Accretive = SexTracker; Jupiter Hosting = GFY • DTI, ISPrime, Choopa, CWIE, NationalNet, etc • all of em >5-50Gb/s (years before MySpace or YouTube showed up on the scene) • For some mainstream comparison: • YouTube >200Gb/s, MySpace >60Gb/s, all in-house, non-CDN figures • Data as of ~6 months ago

14. diff • Base feature is filmstrip pick-n-wank UI of custom WMV8

15. zer0 day Features that are live today • Lucene-powered search: X studio + Y star + Z genre • User comments per each DVD chapter • Flash player: our usual filmstrip, loop'ing • Recommendation engine • end goal is “zero hand navigation”, similar to Amazon w/ one-click to buy; one click to.. • you've been watching X seconds, others who like these seconds also like Y seconds • feature allows opt-out

16. patch • Add H.264 • iPhone, iPod, PSP, Zune, Netgear set top appliances • RSS feeds for favorites, recommendations, studios, etc. • Additional flash player functionality • Tagging or playlist of favorite loops • Possible mash-up’s (licensing issues, studios confused) • i18n • Español, Deutsch, Français, 日本語, 中文 • Other stuff • That I can’t share tonight

17. /dcc • Historically used part-time labor & home machines for encoding • Need to add FLV & H264 versions “fast”, yielded ripping farm • 15 encoders (Dell OptiPlex 745 - Core Duo 2.4Ghz E6600/4Mb cache) • 3 rippers (random desktops, store VOB’s temporarily) • 1 DVD jukebox (configured w/ 150 discs at a time) - SCSI lives! • 24 hrs to process 200 DVD’s (start to finish) • rip VOB, encode, transcode, metadata, rsync to colo

18. /dcc cont. • Existing metadata is useless • Sample ifo.xml (lsdvd) dumps below # title too long <title>unknown</title> <provider_id>TWIGGET_THE_MIDGET_SQUIRTING_</provider_id> # doesn't match boxcover <title>unknown</title> <provider_id>CALIENTE__CUTIES_01_DVD</provider_id> # null or unknown title name <title>unknown</title> <provider_id>UNDEFINED</provider_id>

19. /dcc cont. • Data grows fast • 95% done w/ FLV • Starting H.264 soon (ETA 2 months to process) • Current solution is ~35TB in 4U

21. AS36472

22. “speed test” • Typical analysis is Netflow or sFlow, network is vendor C, no sFlow love, our alternative is a hack • We really only care about outbound, use data we already have.. Apache access_log • Multicast syslog into a fifo on log servers • Prior to SQL insert also gather some additional metrics: • GeoIP (Maxmind) • Download Kb/s (custom Apache module; averages) • ASN info (origin ASN, next hop ASN, peer vs. transit)

23. “speed test” cont. • Adjust route-map to other ISP's to tune "best route” (hint shortest AS-path or cheapest route isn’t the best, US peer routes) • We are very aggressive to fix customer complaints (internal SLA is >200Kb/s) • hard for US (Comcast in particular) • easy for Asia & somewhat for Euro • UK is traffic shaping hell; "Fair Use Policy”? • Tricky to detect download managers • Process around 90 video req/sec • 90% of users download vs. stream

24. “speed test” cont. • Yields other interesting data points, such as: • Avg KBps per each video cache server • Internal SLA goal by video format type • Top downloads by country • Straight vs. Gay by Geo • OEM or “white label”

25. Top 5 Scenes for DE 2007-08-07 to 2007-08-08 • Clusterfuck #5, Scene 2 • Inside Job #3, Scene 1 • Screw My Wife Please #8 (And Make Her Scream!), Scene 5 • American Ass #2, Scene 3 • American Ass #2, Scene 4 Top 5 Scenes for NL 2007-08-07 to 2007-08-08 • Black Dick For The White Chick, Scene 6 • American Ass #2, Scene 5 • Alan Smithee's Street Walkers #1, Scene 2 • American Ass #2, Scene 4 • American Ass #2, Scene 2 Top 5 Scenes for US 2007-08-07 to 2007-08-07 • 18 Inch Anal Club, Scene 2 • M.I.L.F. Money #8, Scene 1 • Anal Angels #3, Scene 1 • Mr. 18" & the She-Male Pussy Cats, Scene 1 • American Ass #2, Scene 4

26. security • Not usual XSS & htpasswd problems • Many sites PHP based, not us • Most billers prefer to FTP a htpasswd file or do raw SQL • Extremely rare to have a real API *sigh* • Aggressive download managers • 20 simultaneous of 20Kb will speed up my DL, right!#@? • Custom Apache modules & shiny load balancer rules • limit simultaneous IP connections & Req/Sec, no limit on bandwidth • Can't completely limit against src IP (lots of proxies, some w/o Via or XFF headers); limit based on session ID instead • Users with malware, DNS hijacking • No longer system32/hosts hacking, registry exploits (you know this already) • Challenging to clue users into anti-spyware/virii/mal utilities

27. Colo email • Matt, • I think when Meta first signed up here at XXX we received quite a few free passwords. Apparently most of these expired fairly recently. Is there any chance you can send over some new ones? It would be greatly appreciated. • Thank you, • AXX DXXXXXXXX • General Manager • ZZZ Inc. • “The World’s Finest Data Centers”

28. actual SVN email • Modified: • trunk/config/session/session_conf_root.xml • Log: • Tranny is coming up a little too frequently - reducing configured % • Modified: trunk/config/session/session_conf_root.xml • =================================================================== • --- trunk/config/session_conf_root.xml 2006-11-18 17:36:07 UTC (rev 3066) • +++ trunk/config/session_conf_root.xml 2006-11-18 17:52:00 UTC (rev 3067) • @@ -411,7 +411,7 @@ • <category> <name>Transsexual</name> • <id>53</id> • - <target_percent>.0140</target_percent> • + <target_percent>.0050</target_percent> • <convergence_weight>100</convergence_weight> • <streak_weight>1.0</streak_weight> • </category>

29. Dell acct rep email • Hey Matt, • Thanks for speaking with us. I also wanted to let you know that we currently are offering a buy 2 get 1 free promotion on our Optiplex desktops and Latitude notebooks, just in case there are current needs for them, Let me know. • BTW: My husband and I have checked out your website and it is one of the best we have visited. We will be interested in seeing the changes coming up. • Thanks again! • AXXXX XXXXXXX • Dell, Inc. - Account Manager • Middle Market Division

30. Best of Unsubscribed busted wife masterbating to the site I have a girlfriend to jerk me off now I'm a mother against pornoz! My life is now with Christ. your service is great but I broke up with my boyfriend and i don't really want to pay for his porn anymore.... thanks!!! getting married, hopefully my wife will take care of me

31. Best of Unsubscribed I have to cancel as i have been masturbating daily watching these videos. My cock is sore now. in the day, i felt horny too often, in office i have to go to toilet to jack off when i see a colleague with big butts, like those in videobox. i'm simply masturbating and horny too often, too much. because i jacked my meat so hard it left blisters on it so my mom made me cancel the account because of the hospital bill. she also found all my nut rags after she found out i was a member. she searched my room and also found my dildo with crap stains all over it and she was mad about the stains on the floor and the smell. she then searched everythin in the house and found my goatse collection buried under the deck. im very sorry to cancel and trust me my balls have never been bluer than they are now well gotta go i hear my mom comin down the steps.df m;aj sf/./ I might being goign to jail

32. matt@peterson.org Questions? Props to CCC crew for an awesome event!