Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[request] Warning before downloading software? (it can and IMO frequently contains malware) #267

Open
slrslr opened this issue Jul 24, 2024 · 0 comments

Comments

@slrslr
Copy link

slrslr commented Jul 24, 2024

IMO warez / software packages distributed via Torrent often contains malware. These people are using trackers to distribute it.

So to protect users, tracker reputation and legal issues, warning of a user is needed, when he/she tries to download torrent with a payload files that ends with a known executable file extension. Sample warning:

Malware warning!\nThis torrent contains file types that are known to be capable of running malicious code on your computer. This could lead to your personal information being compromised, your money being stolen and illegal activities being carried out on your computer! Always scan executable files with up-to-date anti-virus software, for example https://www.virustotal.com

Implementation ideas:
A) condition executed before torrent file download that checks payload file names against mentioned known executable extensions and if user did not disable the malware warnings, there will be a confirmation malware warning message (quoted above). Ideally 7+ seconds needs to pass before user can click the confirmation button or a tickbox not to show this warning anymore. I would link to a https://www.virustotal.com which can be used to scan the files.

B) if not possible to trigger the warning on download, then trigger it on a details.php page

C) cronjob? will insert an admin defined warning into each torrent details.php page in case the torrent payload files contains executable extensions

D) admin can disallow publishing torrent containing executable extensions in its payload files

Side note: https://docs.virustotal.com/reference/overview offers API to report file malware status based on a file {md5, sha1, sha256} hash.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant