From owner-freebsd-questions@FreeBSD.ORG Tue Jan 25 19:40:46 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1334716A4CE for ; Tue, 25 Jan 2005 19:40:46 +0000 (GMT) Received: from mindfields.energyhq.es.eu.org (73.Red-213-97-200.pooles.rima-tde.net [213.97.200.73]) by mx1.FreeBSD.org (Postfix) with ESMTP id DD2CA43D39 for ; Tue, 25 Jan 2005 19:40:44 +0000 (GMT) (envelope-from flynn@energyhq.es.eu.org) Received: from scienide.energyhq.es.eu.org (scienide.energyhq.es.eu.org [192.168.100.1]) by mindfields.energyhq.es.eu.org (Postfix) with SMTP id B27FC3575F; Tue, 25 Jan 2005 20:40:42 +0100 (CET) Date: Tue, 25 Jan 2005 20:40:16 +0100 From: Miguel Mendez To: freebsd-questions@freebsd.org Message-Id: <20050125204016.66a125cb.flynn@energyhq.es.eu.org> In-Reply-To: <20050125192253.GA3088@gicco.homeip.net> References: <20050125192253.GA3088@gicco.homeip.net> X-Mailer: Sylpheed version 1.0.0-gtk2-20041224 (GTK+ 2.4.14; i386-portbld-freebsd5.3) Mime-Version: 1.0 Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg="pgp-sha1"; boundary="Signature=_Tue__25_Jan_2005_20_40_16_+0100_2SmmCGishnaUcuy6" cc: hampi@rootshell.be Subject: Re: Bittorrent secure? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Jan 2005 19:40:46 -0000 --Signature=_Tue__25_Jan_2005_20_40_16_+0100_2SmmCGishnaUcuy6 Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: 7bit On Tue, 25 Jan 2005 20:22:53 +0100 Hanspeter Roth wrote: > how secure is Bittorrent? How can one know how trustworthy the stuff > downloaded from other Bittorrent fellows is? This a bit OT for a FreeBSD list, but I'll answer it anyway. A torrent file contains info about the tracker and hashes for each part of the file(s). So, quick answer, no, you cannot join a tracker and inject bogus data because the hash check will fail. If you can trust the person who created the torrent and initially seeds the file you're good to go. Cheers, -- Miguel Mendez http://www.energyhq.es.eu.org PGP Key: 0xDC8514F1 --Signature=_Tue__25_Jan_2005_20_40_16_+0100_2SmmCGishnaUcuy6 Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (FreeBSD) iD8DBQFB9qCknLctrNyFFPERAm+0AKCdDqufqnqyzk47O7MNFFcstj8s4ACguvtk jKLMoW4DJwKqR3C3QypAA+g= =rB1v -----END PGP SIGNATURE----- --Signature=_Tue__25_Jan_2005_20_40_16_+0100_2SmmCGishnaUcuy6--