Silly Seedboxes
Tuesday, June 5, 2012
Just got a seedbox. snooped around a little. Make sure everything was setup right before I started to use it.
Noticed that in the /tmp/ directory it was storing all the .torrent files. cat a few of them sure enough peoples hashes from all the users on that box. It was a problem in deluge.
file: json_api.py
Line: tmp_file = os.path.join(tempfile.gettempdir(), url.split("/")[-1])
Patch submitted by admin I brought it up to:http://dev.deluge-torrent.org/attachment/ticket/2112/json_api_patch.diff
http://dev.deluge-torrent.org/ticket/2112
This is bad because you are not spouse to leak your hash to other people. You can download files under the other persons ID. It can also create lots of other problems I wont get into.
Labels: