xiaomlove / nexusphp

A private tracker application base on NexusPHP
https://nexusphp.org
GNU General Public License v2.0
901 stars 185 forks source link

[request] Warning before downloading software? (it can and IMO frequently contains malware) #267

Open slrslr opened 3 months ago

slrslr commented 3 months ago

IMO warez / software packages distributed via Torrent often contains malware. These people are using trackers to distribute it.

So to protect users, tracker reputation and legal issues, warning of a user is needed, when he/she tries to download torrent with a payload files that ends with a known executable file extension. Sample warning:

Malware warning!\nThis torrent contains file types that are known to be capable of running malicious code on your computer. This could lead to your personal information being compromised, your money being stolen and illegal activities being carried out on your computer! Always scan executable files with up-to-date anti-virus software, for example https://www.virustotal.com

Implementation ideas: A) condition executed before torrent file download that checks payload file names against mentioned known executable extensions and if user did not disable the malware warnings, there will be a confirmation malware warning message (quoted above). Ideally 7+ seconds needs to pass before user can click the confirmation button or a tickbox not to show this warning anymore. I would link to a https://www.virustotal.com which can be used to scan the files.

B) if not possible to trigger the warning on download, then trigger it on a details.php page

C) cronjob? will insert an admin defined warning into each torrent details.php page in case the torrent payload files contains executable extensions

D) admin can disallow publishing torrent containing executable extensions in its payload files

Side note: https://docs.virustotal.com/reference/overview offers API to report file malware status based on a file {md5, sha1, sha256} hash.