Security Basics mailing list archives

Re: File sharing with Bittorrent: what possible security threads?


From: "Razi Shaban" <razishaban () gmail com>
Date: Wed, 26 Mar 2008 17:36:58 +0200

I think the most common and worrisome problem you'll face is Hippard's
#1, the embedded malware etc.

Most of the rest are things that are quite dangerous, but not as
likely to occur.

--
razi


On 26 Mar 2008 14:36:35 -0000, hibbard () wapa gov <hibbard () wapa gov> wrote:
There are a ton of security problems in Bittorrent.


 1) As you mentioned embedded malware, trojans and other nasties in the files that people are downloading.


 2) Bittorrent clients have had some security flaws exposed in them recently. Utorrent recently had a flaw that 
allowed an attacker to execute code.


 3) Bittorrent sites are not that secure. Many users will use a common password for everything. When a bittorrent 
site gets hacked and user accounts passwords are exposed, it leads to account hijackings elsewhere.


 4) When you are downloading/uploading, your IP address is visible to the everyone in the same download. You know the 
problems with that.


 5) The legal implications. See number 4 on how you get caught. Bittorrent is the new Napster, Kazaa, Limewire, 
eDonkey. Everyone is using it now and it has the attention of the world at the moment.


 6) Bittorrent is not liked among the higher level "release" groups. There is an ongoing war between the "elitist" 
hackers who are the first to crack software and strictly use FTP to share amongst themselves and bittorrent sites. 
They get mad when they see their releases that were only meant for their groups ending up on bittorrent sites. They 
wage war on the sites and problems 1-4 are of even greater concern.


 Those are some basics that I can think of.



Current thread: