No more torrents.....

[Peter Wemm]

On Tue, Dec 18, 2012 at 3:19 PM, pete wright <nomadlogic at gmail.com> wrote:
>>
>> A hybrid of bnbt, xbnbt, xbtt, and something else that I don't recall
>> the name of.  We ran the seeders from py-bittornado in curses mode in
>> about 15 screen sessions.. by hand.
>>
>> The tracker/indexer code had an open http connect proxy in it (!).
>> The code was particularly difficult to work with and looked extremely
>> light for defensive programming.  (string buffer overflows, the
>> works).
>>
>> The bottom line is the nice indexer / tracker / stats thing we had
>> isn't something I feel we can trust.
>>
>> I do believe we can/should publish trackerless/dht torrent files to go
>> with the release binaries.
>>
>> Perhaps an initial web-seed might work, otherwise we could have a few
>> folks with good ftp connectivity do an initial seed from the ftp
>> files.
>
>
> I would be very much be willing to assist with seeding if we make dht
> torrent files available from my nodes located in downtown Los Angeles
> for west-coast and APAC network presence.
>
> as an aside:
> I have been running libtorrent/rtorrent for a bit and it seems like a
> pretty decent platform for building on.  having said that - I am not a
> security researcher and would be keen to hear if libtorrent/rotrrent
> suffers from these similar issues?

Oh wait, I told a lie.  It wasn't py-bittornado we used.. it was
rtorrent.  Thanks for prompting that.

I have no concerns with rtorrent except that it was a curses beastie.
It was something we had to manually start up after a machine reboot
until we did some evil scripts with screen.

-- 
Peter Wemm - peter at wemm.org; peter at FreeBSD.org; peter at yahoo-inc.com; KI6FJV
"All of this is for nothing if we don't go to the stars" - JMS/B5
"If Java had true garbage collection, most programs would delete
themselves upon execution." -- Robert Sewell