w00t-labs / libtorrent

Automatically exported from code.google.com/p/libtorrent
Other
0 stars 0 forks source link

Tracker exchange extension steals passkeys from private trackers #726

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
My torrent isn't private but it's hosted on both public and private torrent 
trackers. The problem is libtorrent steals passkeys from private trackers and 
it gets its users in trouble.

I disabled the extension by modifying lt_trackers.cpp but I wonder if there's a 
proper way to disable it.

It would be ideal if the extension would filter out trackers with passkeys.

Original issue reported on code.google.com by BadPointer0 on 18 Mar 2015 at 10:40

GoogleCodeExporter commented 8 years ago
my assumptions was that if your torrent isn't private, none of the trackers in 
it aren't either.

are you adding the private tracker manually to a non-private torrent?

If so, I believe you're also violating the spirit of private torrents, since 
you'll share private peers with public ones and vice versa.

anyway, the proper way to disable it is to pass in 0 as flags to the session 
constructor and then add the extensions you want manually. Because of issues 
like these, lt_trackers won't be enabled by default in future releases of 
libtorrent, starting with 1.0.4.

Original comment by arvid.no...@gmail.com on 18 Mar 2015 at 12:31

GoogleCodeExporter commented 8 years ago
>are you adding the private tracker manually to a non-private torrent?
I'm not adding private tracker manually but libtorrent was able to find them 
via DHT anyway.

These private trackers don't mind hosting public torrent. Public torrents even 
have badges saying FREE/Platinum because users can download them without 
registration.

Original comment by BadPointer0 on 18 Mar 2015 at 12:46

GoogleCodeExporter commented 8 years ago
disabled by default in 1.0.4

Original comment by arvid.no...@gmail.com on 27 Mar 2015 at 11:05