News for hackers. Stuff that matters.
Re:I Know What You Download on BitTorrent by debacle on Monday July 13, 2020 @01:19PM (#23823126)
The flip side: When I was an intern I once had four people arrive at my desk (including an HR lawyer) for torrenting ubuntu server.

Thankfully I shared a cube wall with someone smart enough to realize the confusion, and explain me out of being walked out.

They were monitoring for torrent traffic, but weren't paying attention to what was being torrented. Apparently a company-wide warning had gone out the week before I started.

Re:I Know What You Download on BitTorrent by Symbiote on Monday July 13, 2020 @01:29PM (#23823250)
I was "caught" by some monitoring system sharing Knoppix on a machine in the CS lab at university. I'd forgotten about it, and it had been running for months.

One of the helpdesk staff told me that it had been noticed, since the bandwidth to that machine was very high, but he unofficially liked the idea of the university being top of the seeding table, so I should leave it running :-D

[1] http://torrent.unix-ag.uni-kl.de/stats.html?info_hash=8dcb18... (but mine would have been in 2007 or so).

Re:I Know What You Download on BitTorrent by marvelous on Monday July 13, 2020 @02:58PM (#23824281)
My university did ban p2p, no matter the content. Officially for upload bandwidth savings.
Re:I Know What You Download on BitTorrent by Scoundreller on Monday July 13, 2020 @09:13PM (#23827524)
Mine did too. Though oddly the wifi in the classrooms was fair-game, but this was before most people had laptops, and even fewer ones that could last more than 2 hours without charging.

I remember downloading some content over IRC to share on the campus network because I knew how to use it and it was slow, but not blocked.

Re:I Know What You Download on BitTorrent by josefx on Tuesday July 14, 2020 @07:38AM (#23830699)
My university had bad wifi and I think 50mb drive space per student. I ended up plugging in my laptop directly and spoofing a whitelisted IP/MAC combination (the PCi just plugged out) for several assignments.
Re:I Know What You Download on BitTorrent by Symbiote on Tuesday July 14, 2020 @10:52AM (#23832628)
Those fees they charge the international students did go somewhere, then :-D

I had as much backed-up space as I could justify (some gigabytes by default), plenty of space for laptops where there were power sockets as well as 1Gb/s wired and fast wifi connections, personal webspace/server, a PostgreSQL database, a Tomcat server, remote SSH access to all computers and a distributed computing system (Condor).

Looking at the current guide for students[1], they also get access to a local Gitlab instance, a private IaaS cloud and a GPU cluster.

[1] http://www.imperial.ac.uk/computing/csg/services/

Re:I Know What You Download on BitTorrent by Cthulhu_ on Tuesday July 14, 2020 @04:00AM (#23829577)
I don't blame them, it can end up costing a lot of the available bandwidth, and it's a finite resource.
Re:I Know What You Download on BitTorrent by ben_w on Tuesday July 14, 2020 @05:42AM (#23830062)
My industrial experience year at university was at a research lab, working with satellite imagery.

I got two urgent panicked phone calls from the same person within five minutes of each other for bulk-downloading satellite images from, if memory serves, NASA.

Re:I Know What You Download on BitTorrent by sixothree on Monday July 13, 2020 @03:07PM (#23824368)
Not long after we started WFH I needed to share a pre-configured VM with a coworker. We tried all sorts of stuff and finally just decided to torrent it. Zipped it up tight with a password and private torrented it overnight. Next morning we were up and running.
Re:I Know What You Download on BitTorrent by na85 on Monday July 13, 2020 @07:26PM (#23826839)
Next time try Magic Wormhole.
Re:I Know What You Download on BitTorrent by arein2 on Tuesday July 14, 2020 @02:14PM (#23835571)
Has anyone got WebRTC’s file sharing to work?

You find a website that creates a link between 2 clients, and the file is shared via https (maybe the file is decrypted at the server and encrypted again using your public key). Sounds easy if both clients don’t have a public IP (to get SCP to work, at least one client needs a public IP) and every browser now has WebRTC.

Re:I Know What You Download on BitTorrent by Technetium on Wednesday July 15, 2020 @01:51AM (#23841797)
Re:I Know What You Download on BitTorrent by fomine3 on Monday July 13, 2020 @08:19PM (#23827223)
Resilio sync is delivered from BitTorrent and it works great
Re:I Know What You Download on BitTorrent by Cthulhu_ on Tuesday July 14, 2020 @04:02AM (#23829585)
Does Syncthing work over the internet, or would you still need to set up a direct line with your colleague?
Re:I Know What You Download on BitTorrent by nix23 on Tuesday July 14, 2020 @11:41AM (#23833225)
Netcat...thats what netcat is for....
Re:I Know What You Download on BitTorrent by aaronchall on Monday July 13, 2020 @06:03PM (#23826079)
How do you do that?
Re:I Know What You Download on BitTorrent by Arnavion on Monday July 13, 2020 @06:21PM (#23826227)
Use your client to create a .torrent. Send the .torrent over. Other party adds your IP as a seed. No trackers or DHT required.
Re:I Know What You Download on BitTorrent by StavrosK on Monday July 13, 2020 @07:27PM (#23826844)
Unfortunately, I've never managed to get this to work, even though the two computers have open ports and can connect to each other via nc/telnet. The other peer m just never starts downloading when I seed the file.

BitTorrent is a fantastic way to transfer files, except for this one hitch I keep hitting.

Re:I Know What You Download on BitTorrent by a1369209993 on Monday July 13, 2020 @10:11PM (#23827809)
The workaround I usually use when that happens is to pick a existing torrent that you added from a magnet link, then have the other end add the same magnet link, which downloads the magnet-linked file and then (IIUC) finds your source computer via PEX. YMMV; it's worked something like four times out of four for me, but it's a bit cargo-cult.
Re:I Know What You Download on BitTorrent by efreak on Tuesday July 14, 2020 @03:32AM (#23829441)
If your client/libtorrent hates you enough, it won't work with local peers regardless of settings, and two instances of the same version number of the same software will fail to communicate with each other despite the embedded tracker being accessible from the browser.

I wanted to about 2tb of data, mostly torrents, over a wlan from my NAS, and kept getting dropped packets. Eventually I gave up on smb and ftp, and set up opentracker (a simple download and build, with iirc two config options) on my windows desktop under WSL, and swapped the tracker to a local address; after this, it worked perfectly.

Re:I Know What You Download on BitTorrent by inopinatus on Tuesday July 14, 2020 @07:14PM (#23839260)
Many, many years ago I used to build distributed content delivery infrastructure for K-12 education systems, state and national.

I remember one customer (a state department of education) in particular had a server at each school with reasonable private bandwidth but unreliable routing and dismal internet connectivity, so we used the BitTorrent protocol for eventually-consistent asset distribution between their sites.

See also: using NNTP as your pub/sub message bus.

Re:I Know What You Download on BitTorrent by toxik on Monday July 13, 2020 @06:29PM (#23826312)
Can’t you just scp it at that point?
Re:I Know What You Download on BitTorrent by gpm on Monday July 13, 2020 @06:37PM (#23826400)
Hypothesizing - that would be more prone to network failure, torrents are very robust against either peer temporarily losing an internet connection.
Re:I Know What You Download on BitTorrent by Bnshsysjab on Monday July 13, 2020 @06:55PM (#23826576)
Iirc SCP supports resuming transfers. Granted torrent architecture is very robust, but I’ve never had a problem with the way scp resumes work.
Re:I Know What You Download on BitTorrent by wccrawford on Tuesday July 14, 2020 @06:35AM (#23830341)
To resume, someone would have to notice the failure and start it again. If this happens every few minutes, it's effectively impossible. Even once an hour means their overnight transfer is impossible with scp.
Re:I Know What You Download on BitTorrent by xorcist on Tuesday July 14, 2020 @05:36AM (#23830032)
Always use rsync. It's almost drop in compatible with scp, you could probably alias it for most uses, but it's more robust against failures and has more features.
Re:I Know What You Download on BitTorrent by toxik on Monday July 13, 2020 @06:44PM (#23826457)
That’s actually a good point, and it’d be real easy to spread to a third person were it necessary
Re:I Know What You Download on BitTorrent by hatsunearu on Tuesday July 14, 2020 @02:11AM (#23829049)
scp is terrible over links with low bandwidth and/or high ping.
Re:I Know What You Download on BitTorrent by lostlogin on Monday July 13, 2020 @06:52PM (#23826540)
I torrented a couple of Ubuntu versions from a VM and then forgot about it. In one month I got though nearly 5TB of data before I noticed. It was a home connection and unmetered, but it gave me a fright.
Re:I Know What You Download on BitTorrent by tinus_hn on Monday July 13, 2020 @01:44PM (#23823418)
How are they supposed to know what you’re torrenting?
Re:I Know What You Download on BitTorrent by loeg on Monday July 13, 2020 @05:02PM (#23825534)
The protocol is more or less all plaintext. The "best" peer to peer cipher available is rc4; almost no one uses it. The tracker announces can run over HTTPS, but often run over plain HTTP.
Re:I Know What You Download on BitTorrent by userbinator on Monday July 13, 2020 @07:44PM (#23826965)
The "best" peer to peer cipher available is rc4; almost no one uses it.

...which is unfortunate because even something like the anonymous DH that is specified, or more standard, TLS with random/self-signed certificates, would force monitors to need to MITM all connections in order to find out what they contain.

https://en.wikipedia.org/wiki/BitTorrent_protocol_encryption

Re:I Know What You Download on BitTorrent by Hyperborian on Monday July 13, 2020 @05:28PM (#23825762)
Oh god... you're not under the impression that bittorrent is a secure or anonymous protocol, are you?
Re:I Know What You Download on BitTorrent by tinus_hn on Monday July 13, 2020 @06:10PM (#23826129)
No but all they see is parts identified by hashes. How are they supposed to know whether is a Linux distro or a movie?
Re:I Know What You Download on BitTorrent by Hyperborian on Monday July 13, 2020 @06:36PM (#23826389)
Because, quite frankly, parts identified by hashes is not all they see.

If you're monitoring and logging the traffic then it's trivial to not only determine the filename of a bittorrent download, but also everything you need to connect to the torrent yourself and download it to verify that it's what the filename says, if that's what you wish to do.

And, personally, I'd expect someone to at least check the filename before accusing me of committing a crime. :(

Re:I Know What You Download on BitTorrent by tinus_hn on Tuesday July 14, 2020 @05:09AM (#23829901)
The torrent file is downloaded over a secure connection that you can’t monitor. Can you please tell me which messages in the BitTorrent protocol contain the filenames?
Re:I Know What You Download on BitTorrent by zyx321 on Tuesday July 14, 2020 @07:44AM (#23830738)
Can't you just look up the hash on DHT? Since hash is the only mandatory field in a Magnet URI.
Re:I Know What You Download on BitTorrent by tinus_hn on Wednesday July 15, 2020 @04:40AM (#23842694)
Of course but connecting to a peer to peer network and looking it up doesn’t sound ‘trivial’ to me.
Re:I Know What You Download on BitTorrent by jiggunjer on Monday July 13, 2020 @10:45PM (#23827954)
Clients can obfuscate traffic though?
Re:I Know What You Download on BitTorrent by ben509 on Monday July 13, 2020 @11:09PM (#23828071)
How much can they obfuscate it if other clients need to be able to download it?
Re:I Know What You Download on BitTorrent by tinus_hn on Tuesday July 14, 2020 @05:10AM (#23829911)
The obfuscation is just to disguise the traffic so providers can’t easily implement blanket bans on all BitTorrent traffic
Re:I Know What You Download on BitTorrent by nsilvestri on Monday July 13, 2020 @02:31PM (#23823975)
I suppose they could have known by using a tool such as the one linked in this post.