No more torrents.....

[pete wright]

On Tue, Dec 18, 2012 at 3:22 PM, Peter Wemm <peter at wemm.org> wrote:
> On Tue, Dec 18, 2012 at 3:19 PM, pete wright <nomadlogic at gmail.com> wrote:
>>>
>>> A hybrid of bnbt, xbnbt, xbtt, and something else that I don't recall
>>> the name of.  We ran the seeders from py-bittornado in curses mode in
>>> about 15 screen sessions.. by hand.
>>>
>>> The tracker/indexer code had an open http connect proxy in it (!).
>>> The code was particularly difficult to work with and looked extremely
>>> light for defensive programming.  (string buffer overflows, the
>>> works).
>>>
>>> The bottom line is the nice indexer / tracker / stats thing we had
>>> isn't something I feel we can trust.
>>>
>>> I do believe we can/should publish trackerless/dht torrent files to go
>>> with the release binaries.
>>>
>>> Perhaps an initial web-seed might work, otherwise we could have a few
>>> folks with good ftp connectivity do an initial seed from the ftp
>>> files.
>>
>>
>> I would be very much be willing to assist with seeding if we make dht
>> torrent files available from my nodes located in downtown Los Angeles
>> for west-coast and APAC network presence.
>>
>> as an aside:
>> I have been running libtorrent/rtorrent for a bit and it seems like a
>> pretty decent platform for building on.  having said that - I am not a
>> security researcher and would be keen to hear if libtorrent/rotrrent
>> suffers from these similar issues?
>
> Oh wait, I told a lie.  It wasn't py-bittornado we used.. it was
> rtorrent.  Thanks for prompting that.
>
> I have no concerns with rtorrent except that it was a curses beastie.
> It was something we had to manually start up after a machine reboot
> until we did some evil scripts with screen.
>

ah ok - understood.  well i'll keep an eye on the lists, and if some
trackerless torrents become available i'll be sure to contribute my
resources to this :)  I'd volunteer to help build them but
unfortunately my human bandwidth is limited atm.

cheers,
-pete

-- 
pete wright
www.nycbug.org
@nomadlogicLA