new obsfucation method in the last couple days?

[drez]

Is there a new obsfucation method that started in the last couple days?
Some .nzb's I've been getting are being decoded as 4 random characters with the correct extension.
I can provide a nzb if you need one to look at

[Quade]

Sure send the nzb to ts@newsbin.com

What version are you using? Let me know after you've sent it so I can look for it.

[drez]

I'm using the latest build (5524)
sending you a couple nzbs so you can see what I mean

----- Edit

Just sent you 4 of them, I did notice all the .nzb's end with -4P so maybe that's something. but take a look at them

[Quade]

Does look like a new scheme.

Thanks for the NZB's. They're basically naked MKV's posted with some PAR files. If you use "$(NZBFILE)" in the unrar path the path will include the NZB FIlename so, renaming is pretty easy.

"D:\UnRAR\<NZB Filename>\TGUE.mkv"

I looked at one of the MKV's and the actual filename doesn't appear in the MKV meta-data so, only the NZB Filename is useful for renaming. It renames some MKV's already but not this new format.

[drez]

Does look like a new scheme.

Thanks for the NZB's. They're basically naked MKV's posted with some PAR files. If you use "$(NZBFILE)" in the unrar path the path will include the NZB FIlename so, renaming is pretty easy.

"D:\UnRAR\<NZB Filename>\TGUE.mkv"

I looked at one of the MKV's and the actual filename doesn't appear in the MKV meta-data so, only the NZB Filename is useful for renaming. It renames some MKV's already but not this new format.

Glad I could help in some way and point out something funky
I've just been downloading stuff to named folders then renaming the .mkv so it's easy enough
and like I said, I only see these on ONE indexer out of the 4 I use (I can't get access to the one that starts with O yet)

[Quade]

It's the posting group that controls the final filename, not the indexer so, I'd suggest the one indexer that supplies these NZB's simply has an in with this posting group.

[drez]

It's the posting group that controls the final filename, not the indexer so, I'd suggest the one indexer that supplies these NZB's simply has an in with this posting group.

Probably, and lately their indexing has been wacky so we'll see what happens.

[meenich]

[quote="Quade"]Sure send the nzb to ts@newsbin.com

What version are you using? Let me know after you've sent it so I can look for it.[/quote]

I actually posted a request to look into this same new obfuscation method back when you put up RC4 or RC5, but you must have missed it back then. Glad you're looking into it now