News for hackers. Stuff that matters.

A comment on GitHub has received a DMCA from MPA about torrent tracker nyaa.si. Parent comment

Re:GitHub has received a DMCA from MPA about torrent tracker... by Hamuko on Tuesday January 19, 2021 @02:53PM (#25837989)
https://web.archive.org/web/20201105144800/https://codeload....

Have at 'em.

    .docker/es_sync_config.json
    .docker/nyaa-config-partial.py
    config.example.py
    migrations/versions/2bceb2cb4d7c_add_comment_count_to_torrent.py
    nyaa/api_handler.py
    nyaa/static/search-sukebei.xml
    nyaa/templates/home.html
    nyaa/torrents.py
    utils/api_info.py
    utils/api_uploader_v2.py
[ Parent | on HN ]
Re:GitHub has received a DMCA from MPA about torrent tracker... by femto113 on Tuesday January 19, 2021 @03:02PM (#25838099)
The smoking gun is right there in config.example.py:

    TRACKER_API_AUTH = 'topsecret'
    TRACKER_API_URL = 'http://127.0.0.1:6881/api'
[ Parent | on HN ]
Re:GitHub has received a DMCA from MPA about torrent tracker... by swirepe on Tuesday January 19, 2021 @04:05PM (#25838873)
A smoking gun is just circumstantial evidence.

The real damning thing in that repository are the few lines that play Toy Story 2 if you run them.

[ Parent | on HN ]
Re:GitHub has received a DMCA from MPA about torrent tracker... by gnomewascool on Tuesday January 19, 2021 @03:21PM (#25838360)
How is that a smoking gun?

It connects with a tracker, which might be used to help distribute copyrighted works illegally, but also any other types of files.

It's possible I'm not getting your sarcasm.

[ Parent | on HN ]
Re:GitHub has received a DMCA from MPA about torrent tracker... by blitblitblit on Tuesday January 19, 2021 @03:25PM (#25838410)
It's a sarcastic joke, nothing there but a place holder for your own API key and you would have to set it up. There's no place like 127.0.0.1. :D
[ Parent | on HN ]
Re:GitHub has received a DMCA from MPA about torrent tracker... by contravariant on Tuesday January 19, 2021 @03:35PM (#25838542)
Okay this is just getting weird. One of those is just a database update that counts how many comments a torrent has. Another is just some database credentials (probably not the ones you want to use in production, unless you don't mind people knowing your passwords). The HTML template for the home page is also in there for some reason. And then to finish things off they added the OpenSearch definition which I think you can use to add Nyaa/Sukebei as a search engine to your browser.

Really the most suspicious ones are the python scripts in utils, which connect to the api on https://nyaa.si by default. Although those also only seem to allow you to upload torrents (not an infrinfing activity) and download the info of a single entry on nyaa (possibly infringing?).

Also they curiously left out sync_es.py, not that that one does anything too interesting (it synchronizes a elasticsearch database with a MySql database) but it is the script that actually uses those configuration files they picked out.

[ Parent | on HN ]