You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
IMO warez / software packages distributed via Torrent often contains malware. These people are using trackers to distribute it.
So to protect users, tracker reputation and legal issues, warning of a user is needed, when he/she tries to download torrent with a payload files that ends with a known executable file extension. Sample warning:
Malware warning!\nThis torrent contains file types that are known to be capable of running malicious code on your computer. This could lead to your personal information being compromised, your money being stolen and illegal activities being carried out on your computer! Always scan executable files with up-to-date anti-virus software, for example https://www.virustotal.com
Implementation ideas:
A) condition executed before torrent file download that checks payload file names against mentioned known executable extensions and if user did not disable the malware warnings, there will be a confirmation malware warning message (quoted above). Ideally 7+ seconds needs to pass before user can click the confirmation button or a tickbox not to show this warning anymore. I would link to a https://www.virustotal.com which can be used to scan the files.
B) if not possible to trigger the warning on download, then trigger it on a details.php page
C) cronjob? will insert an admin defined warning into each torrent details.php page in case the torrent payload files contains executable extensions
D) admin can disallow publishing torrent containing executable extensions in its payload files
IMO warez / software packages distributed via Torrent often contains malware. These people are using trackers to distribute it.
So to protect users, tracker reputation and legal issues, warning of a user is needed, when he/she tries to download torrent with a payload files that ends with a known executable file extension. Sample warning:
Implementation ideas:
A) condition executed before torrent file download that checks payload file names against mentioned known executable extensions and if user did not disable the malware warnings, there will be a confirmation malware warning message (quoted above). Ideally 7+ seconds needs to pass before user can click the confirmation button or a tickbox not to show this warning anymore. I would link to a https://www.virustotal.com which can be used to scan the files.
B) if not possible to trigger the warning on download, then trigger it on a details.php page
C) cronjob? will insert an admin defined warning into each torrent details.php page in case the torrent payload files contains executable extensions
D) admin can disallow publishing torrent containing executable extensions in its payload files
Side note: https://docs.virustotal.com/reference/overview offers API to report file malware status based on a file {md5, sha1, sha256} hash.
The text was updated successfully, but these errors were encountered: