Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Transmission BitTorrent app contained malware

forum.transmissionbt.com

Post reply on HN
Print view View original

281–290 of 355 posts

Re: Transmission BitTorrent app contained malware

#281

Post by nevir »

startling wrote: post #192
nevir wrote: post #94

Earlier quoted context omitted.

Unsure if there are any currently publicly known exploits, but it sure isn't unheard of for VirtualBox: * http://arstechnica.com/security/2015/05/extremely-serious-vi... * http://www.securityfocus.com/archive/1/495095 * https://www.cert.be/advisories/oracle-vm-virtualbox-two-priv... * http://www.coresecurity.com/content/virtualbox-privilege-esc...

"Requires a 0-day" is still a huge barrier. It's not 100% secure, sure, but it's an improvement.

Yeah, not arguing that. Just don't treat it like a panacea

Re: Transmission BitTorrent app contained malware

#282

Post by rstacruz »

542458 wrote: post #280
dave2000 wrote: post #75

All that stuff - bittorrent, soulseek, calibre etc - lives in a vm, with access to the host only via samba shares. I'll decide what you see and where you can write. Yes, it's great you download stuff. No, you can't write to the stuff I'm sharing. Yes, having a web-server serving up books to the outside world is great. No, you can't serve up anything from my filesystem to anyone who feels like it. When you can't (be b…

> soulseek Neat. Never heard of this one before - what makes it special?

It's a very old P2P file sharing network modeled after Napster. It's main propositions (in my opinion) are its active users who share harder-to-find electronic music, and its discussion groups which are available inside the app.

Re: Transmission BitTorrent app contained malware

#284

Post by nmjohn »

x0 wrote: post #248
owaislone wrote: post #221

Earlier quoted context omitted.

It is 2016. SSL is not slow anymore. Only case it could be deemed slow would be on a webpage where the browser has to download a ton of small files likes images. Each image would require a new connection and each connection would require full SSL handshake. Even then the fix is not to not use SSL but to bundle all the images/files into 1.

Maybe not computationally, but if you're 100ms, 200ms, 300ms or more away from the rest of the internet, all the SSL handshakes really add up.

Keep in mind the topic at hand is downloading a single large file, the TLS handshake is a rounding error of the total time, regardless of where you are in the world.

Re: Transmission BitTorrent app contained malware

#285

Post by mirimir »

dave2000 wrote: post #75

All that stuff - bittorrent, soulseek, calibre etc - lives in a vm, with access to the host only via samba shares. I'll decide what you see and where you can write. Yes, it's great you download stuff. No, you can't write to the stuff I'm sharing. Yes, having a web-server serving up books to the outside world is great. No, you can't serve up anything from my filesystem to anyone who feels like it. When you can't (be b…

You can also lease a VPS (anonymously even) and use Deluge with a webGUI. Said webGUI can be a Tor onion service, for better isolation.

But still, this is about malware in Transmission itself, not anything downloaded using it. So the fact that it's a BitTorrent client is rather beside the point, I think.

Re: Transmission BitTorrent app contained malware

#286

Post by thirdsun »

rstacruz wrote: post #282
542458 wrote: post #280

Earlier quoted context omitted.

> soulseek Neat. Never heard of this one before - what makes it special?

It's a very old P2P file sharing network modeled after Napster. It's main propositions (in my opinion) are its active users who share harder-to-find electronic music, and its discussion groups which are available inside the app.

I didn't know Soulseek is still alive - brings me back to the days of Direct Connect / DC++ and hunting down rare live sets and (as you mentioned) electronic music over ISDN/dial up.

Re: Transmission BitTorrent app contained malware

#287

Post by unfamiliar »

nodesocket wrote: post #273

If the file /System/Library/CoreServices/XProtect.bundle/Contents/Resources/XProtect.plist contains: Description OSX.KeRanger.A LaunchServices LSItemContentType com.apple.application-bundle Matches MatchFile NSURLTypeIdentifierKey public.unix-executable MatchType Match Pattern 488DBDD0EFFFFFBE00000000BA0004000031C04989D8*31F64C89E7*83F8FF7457C785C4EBFFFF00000000 Does that mean I am infected?

What does the match pattern mean exactly, how is it used to identify the executable?

Re: Transmission BitTorrent app contained malware

#288

Post by voltagex_ »

acdha wrote: post #241
voltagex_ wrote: post #238

Earlier quoted context omitted.

Shouldn't you be using HTTPS for all downloads and grabbing the sha1s and image from different mirrors?

That is a good idea but note the use of GPG - if you aren't able to forge that signature, the verification step will fail.

Right, I missed that.

Re: Transmission BitTorrent app contained malware

#289

Post by tomschlick »

unfamiliar wrote: post #287
nodesocket wrote: post #273

If the file /System/Library/CoreServices/XProtect.bundle/Contents/Resources/XProtect.plist contains: Description OSX.KeRanger.A LaunchServices LSItemContentType com.apple.application-bundle Matches MatchFile NSURLTypeIdentifierKey public.unix-executable MatchType Match Pattern 488DBDD0EFFFFFBE00000000BA0004000031C04989D8*31F64C89E7*83F8FF7457C785C4EBFFFF00000000 Does that mean I am infected?

What does the match pattern mean exactly, how is it used to identify the executable?

The match type is saying that to match a file it must be fingerprint (hash) match using the Key provided below it.

Re: Transmission BitTorrent app contained malware

#290

Post by thaumasiotes »

conceit wrote: post #265
thaumasiotes wrote: post #257

Earlier quoted context omitted.

Your extremely ignorant argument immediately implies that the clubs used to hit baseballs are necessarily related to flying mammals. The facts that the english word analogy descends in a complicated manner from a greek word referring to mathematical proprotions, and the english word logic descends in a somewhat less complicated manner from a greek word referring to speech, and that those greek words shared their pron…

The similarity between according to" + "ratio," and “of or pertaining to speech or reason or reasoning, rational, reasonable” is just too simple and striking to be missed and forgotten. No linguistic reasoning is needed however, to see that an analogy essentially needs logic to work in any language. It helps however. EG in English tongue still language in an idiomatic metaphorical sense, analog to the original meanin…

You are making an argument which includes, but is even dumber than, the etymological fallacy ( https://en.wikipedia.org/wiki/Etymological_fallacy ).

I stand by "extremely ignorant".

Post reply on HN