uTorrent and BitTorrent clients have 'highly critical' security hole

I use Azureus, thats safe right?

screw u .torrent

are people that cheap to not buy giganews with ecryption protection, cmon. GIGANEWS FTW! NEWSGROUPS FOR ALL!

Originally posted by tavek:

---

are people that cheap to not buy giganews with ecryption protection, cmon. GIGANEWS FTW! NEWSGROUPS FOR ALL!

---

Originally posted by core2kid:

---

I use Azureus, thats safe right?

---

Well, a lot of trackers have banned version 1.8 and above for fear that it is sending data to MediaSentry and other companies. And, it's closed source so a lot of people cannot even analyse it and find out if it is true. Why not switch to something else? Azureus and Halite are great clients, both support encryption and ipfilter.dat.

Quote:

---

I heard that Newsgroups don't as much stuff as torrents thats why i haven't made the switch....

---

sheesh.. they only just found this out.. Dan posted about this hole 2 years ago ;) It's an old one, goes right back to bitcomet days.

Originally posted by varnull:

---

sheesh.. they only just found this out.. Dan posted about this hole 2 years ago ;) It's an old one, goes right back to bitcomet days.

---

Originally posted by tatsh:

---

Well, a lot of trackers have banned version 1.8 and above for fear that it is sending data to MediaSentry and other companies. And, it's closed source so a lot of people cannot even analyse it and find out if it is true.

---

If you own a computer with a connection to the internet, you are open to be hacked or attacked. That's the bottom line. All the updates from MS, torrent files, P2P. No one is fully safe.

I got a Feeling the Riaa Got Something to o with this. whether its to scare us, or they found the exploit i dunno

i use other torrents utorrents are garbage and have always been garbage.

so are older bittorent files ok? or should i just download Azureus, now called Vuze? I just got a new comp so im tryin real hard not to screw it up at all

That's old news, just re-printed. Rhyskidd posted the discovery months ago on several security lists.

It's a THEORETICAL flaw. There is NO evidence of an exploit in the wild.

1.8 is no longer a beta.

No evidence of the exploit being used doesn't mean it hasn't or won't be used. Just means that you haven't yet seen it. Though anyone who knowingly uses flawed software knowing it has security holes almost deserves to be hacked..

trick1, Oh yeah!

I will be forwarding this thread to a bitcomit user who has stopped opening torrents with it because some of his jobs were downloading but nothing was happening. We both came to the same conclusion, drop Bit Comit and in the meantime kill the jobs that have gone wacky.

Anyone using a P2P ought to be watchful for things that don't add up.

Sorry to be an alarmist! The anomily is probably not part of a plot for hijacking your computer. The data does not appear to be going anywhere on my friends computer. After reading this artical, he freaked out and spent the night figuring out what was going on. He did a controled test on one of the anomilies. He could not find where the data was going. We can presume the blocks were being discarded and not used somewhere else.

It is safer to carefully check into things that do not add up than presume everything is safe.

Never liked utorrent....always had bad performance....now with this little security hole, it's even worse....glad I didn't use it.
I use BitTyrant...I know it's old, but it works better than anything I've used.

mrk44, what you you like about it? I have never heard of it.

Google it. It's a modification of the Azureus 2.5 source code. They say on average, there was a 70% increase in speed compared to Azureus 2.5.
Go to the homepage and read more: http://bittyrant.cs.washington.edu/

Sorry Mark, but that's bull.. the maximum speed you will ever get from a properly configured torrent client is your maximum line speed. You can't get 200mbps over a 10mbps cable.. simple as.

Rules of the game are changing.. the undernet is becoming stronger with more users every day. Investigations are ongoing into good darknet torrent sites and clients. TPB need to force encryption of packets through the tracker.. become more like a private tracker. I know they are getting more and more annoyed about the ip gathering spies wading through the swarms.

For now only use a torrent client which has peer blocks and encryption.. older exploited and compromised clients are no longer acceptable...

As for µtorrent.. how can anybody trust a closed source application which is owned and made by macrovision?

varnull: Well, actually I wasn't saying that you get higher speeds than your line speed, just better performance on certain torrents on which you don't achieve max speeds.... Anyway, what do you suggest for a good client?

I personally use Vuze on Windows and Deluge on Linux. They're my two favourite's and very customizable. I might even switch to using Vuze on linux rather than Deluge if it interests me. Though I always get maximum speed on both clients. Deluge is just a little more simple.

Originally posted by mrk44:

---

varnull: Well, actually I wasn't saying that you get higher speeds than your line speed, just better performance on certain torrents on which you don't achieve max speeds.... Anyway, what do you suggest for a good client?

---

gm: You're right, I used Azureus for a while as well and wasn't happy because I was never getting the highest speeds that my line can get. So I went to look for another client, and found bittyrant. It's nickname is the "selfish bittorrent client". If you go to the homepage here, you can read more about the modifications they made to Azureus 2.5. The GUI is the same, but the performance is much better. I don't know how safe it is, but it has the same features as Azureus plus a little extra.

thanks mrk44. :)

I'll give that a look see and go from there. ;)

varnull.. what's your opinion on a torrent client?? :D

.....gm

Azureus is hoggish but it delivers. It uses more computer resources to push.

Just try it for your self. The new interface sucks.

I never heard of bittyrant. It sounds real good and probably has a more tollerable interface.