Re: No more torrents.....

2012-12-19 Thread Volodymyr Kostyrko

19.12.2012 01:22, Peter Wemm:

I would be very much be willing to assist with seeding if we make dht
torrent files available from my nodes located in downtown Los Angeles
for west-coast and APAC network presence.

as an aside:
I have been running libtorrent/rtorrent for a bit and it seems like a
pretty decent platform for building on.  having said that - I am not a
security researcher and would be keen to hear if libtorrent/rotrrent
suffers from these similar issues?


Oh wait, I told a lie.  It wasn't py-bittornado we used.. it was
rtorrent.  Thanks for prompting that.

I have no concerns with rtorrent except that it was a curses beastie.
It was something we had to manually start up after a machine reboot
until we did some evil scripts with screen.


The ports contain at least two torrent clients that can daemonize: 
transmission and btpd. At least first one surely knows about DHT.


--
Sphinx of black quartz, judge my vow.
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to freebsd-stable-unsubscr...@freebsd.org


Re: No more torrents.....

2012-12-19 Thread Chris Rees
On 19 Dec 2012 09:47, Volodymyr Kostyrko c.kw...@gmail.com wrote:

 19.12.2012 01:22, Peter Wemm:

 I would be very much be willing to assist with seeding if we make dht
 torrent files available from my nodes located in downtown Los Angeles
 for west-coast and APAC network presence.

 as an aside:
 I have been running libtorrent/rtorrent for a bit and it seems like a
 pretty decent platform for building on.  having said that - I am not a
 security researcher and would be keen to hear if libtorrent/rotrrent
 suffers from these similar issues?


 Oh wait, I told a lie.  It wasn't py-bittornado we used.. it was
 rtorrent.  Thanks for prompting that.

 I have no concerns with rtorrent except that it was a curses beastie.
 It was something we had to manually start up after a machine reboot
 until we did some evil scripts with screen.


 The ports contain at least two torrent clients that can daemonize:
transmission and btpd. At least first one surely knows about DHT.

Transmission definitely does, and it is built to be lightweight.

Would clusteradm be interested on that?

Chris
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to freebsd-stable-unsubscr...@freebsd.org


No more torrents.....

2012-12-18 Thread Willem Jan Withagen
Hi,

Not sure on what other list this would be discussed...

But I noticed that:

Error 503 torrents.FreeBSD.org is offline. It will probably will not be
back.

And this has been one of the small ways to support the FreeBSD
community, by offering almost all images on torrents

Got about
750 full 7.0 CD1 download
350 full 7.0 DVD1 downloads

So what is the reason for this?
policy
no more support?

--WjW

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to freebsd-stable-unsubscr...@freebsd.org


Re: No more torrents.....

2012-12-18 Thread Eitan Adler
On 18 December 2012 03:59, Willem Jan Withagen w...@digiware.nl wrote:

 So what is the reason for this?

The software used to seed the torrents was horribly insecure.   This
was found *prior* to the security incident.

 policy
 no more support?

I have been trying to convince re@ and clusteradm@ to produce web
seed torrents using the same mirrors we have now.  I imagine further
progress could be made after the 9.1 release.


-- 
Eitan Adler
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to freebsd-stable-unsubscr...@freebsd.org


Re: No more torrents.....

2012-12-18 Thread Efraín Déctor
I don't know why it went offline, however if you go to 
http://www.gotbsd.net/ you can get the latest release, I dont know if this 
can help you.


Greetings.

-Mensaje original- 
From: Willem Jan Withagen

Sent: Tuesday, December 18, 2012 2:59 AM
To: sta...@freebsd.org
Subject: No more torrents.

Hi,

Not sure on what other list this would be discussed...

But I noticed that:

Error 503 torrents.FreeBSD.org is offline. It will probably will not be
back.

And this has been one of the small ways to support the FreeBSD
community, by offering almost all images on torrents

Got about
750 full 7.0 CD1 download
350 full 7.0 DVD1 downloads

So what is the reason for this?
policy
no more support?

--WjW

___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to freebsd-stable-unsubscr...@freebsd.org 


___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to freebsd-stable-unsubscr...@freebsd.org


Re: No more torrents.....

2012-12-18 Thread Chris Rees
On 18 Dec 2012 19:44, Eitan Adler li...@eitanadler.com wrote:

 On 18 December 2012 03:59, Willem Jan Withagen w...@digiware.nl wrote:

  So what is the reason for this?

 The software used to seed the torrents was horribly insecure.   This
 was found *prior* to the security incident.

What software?

Chris
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to freebsd-stable-unsubscr...@freebsd.org


Re: No more torrents.....

2012-12-18 Thread Peter Wemm
On Tue, Dec 18, 2012 at 11:52 AM, Chris Rees utis...@gmail.com wrote:
 On 18 Dec 2012 19:44, Eitan Adler li...@eitanadler.com wrote:

 On 18 December 2012 03:59, Willem Jan Withagen w...@digiware.nl wrote:

  So what is the reason for this?

 The software used to seed the torrents was horribly insecure.   This
 was found *prior* to the security incident.

 What software?

A hybrid of bnbt, xbnbt, xbtt, and something else that I don't recall
the name of.  We ran the seeders from py-bittornado in curses mode in
about 15 screen sessions.. by hand.

The tracker/indexer code had an open http connect proxy in it (!).
The code was particularly difficult to work with and looked extremely
light for defensive programming.  (string buffer overflows, the
works).

The bottom line is the nice indexer / tracker / stats thing we had
isn't something I feel we can trust.

I do believe we can/should publish trackerless/dht torrent files to go
with the release binaries.

Perhaps an initial web-seed might work, otherwise we could have a few
folks with good ftp connectivity do an initial seed from the ftp
files.

Another option is a no-frills tracker (eg: no gui).

So, the old way:
xbnbt + xbtt + bnbt provided a tracker, an index, downloads of the
.torrent files.
via screen, we ran a farm of py-bittornado (which particpated in
utorrent-compatible pex/dht)
very high maintenence and magic.

New way:
www.freebsd.org: provides an index and downloads of the .torrent files
if required, a no-frills tracker.
as required, run py-bittornado for a week or so, and/or well connected
folks preload their clients via ftp.


-- 
Peter Wemm - pe...@wemm.org; pe...@freebsd.org; pe...@yahoo-inc.com; KI6FJV
All of this is for nothing if we don't go to the stars - JMS/B5
If Java had true garbage collection, most programs would delete
themselves upon execution. -- Robert Sewell
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to freebsd-stable-unsubscr...@freebsd.org


Re: No more torrents.....

2012-12-18 Thread pete wright

 A hybrid of bnbt, xbnbt, xbtt, and something else that I don't recall
 the name of.  We ran the seeders from py-bittornado in curses mode in
 about 15 screen sessions.. by hand.

 The tracker/indexer code had an open http connect proxy in it (!).
 The code was particularly difficult to work with and looked extremely
 light for defensive programming.  (string buffer overflows, the
 works).

 The bottom line is the nice indexer / tracker / stats thing we had
 isn't something I feel we can trust.

 I do believe we can/should publish trackerless/dht torrent files to go
 with the release binaries.

 Perhaps an initial web-seed might work, otherwise we could have a few
 folks with good ftp connectivity do an initial seed from the ftp
 files.


I would be very much be willing to assist with seeding if we make dht
torrent files available from my nodes located in downtown Los Angeles
for west-coast and APAC network presence.

as an aside:
I have been running libtorrent/rtorrent for a bit and it seems like a
pretty decent platform for building on.  having said that - I am not a
security researcher and would be keen to hear if libtorrent/rotrrent
suffers from these similar issues?


-pete

-- 
pete wright
www.nycbug.org
@nomadlogicLA
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to freebsd-stable-unsubscr...@freebsd.org


Re: No more torrents.....

2012-12-18 Thread Peter Wemm
On Tue, Dec 18, 2012 at 3:19 PM, pete wright nomadlo...@gmail.com wrote:

 A hybrid of bnbt, xbnbt, xbtt, and something else that I don't recall
 the name of.  We ran the seeders from py-bittornado in curses mode in
 about 15 screen sessions.. by hand.

 The tracker/indexer code had an open http connect proxy in it (!).
 The code was particularly difficult to work with and looked extremely
 light for defensive programming.  (string buffer overflows, the
 works).

 The bottom line is the nice indexer / tracker / stats thing we had
 isn't something I feel we can trust.

 I do believe we can/should publish trackerless/dht torrent files to go
 with the release binaries.

 Perhaps an initial web-seed might work, otherwise we could have a few
 folks with good ftp connectivity do an initial seed from the ftp
 files.


 I would be very much be willing to assist with seeding if we make dht
 torrent files available from my nodes located in downtown Los Angeles
 for west-coast and APAC network presence.

 as an aside:
 I have been running libtorrent/rtorrent for a bit and it seems like a
 pretty decent platform for building on.  having said that - I am not a
 security researcher and would be keen to hear if libtorrent/rotrrent
 suffers from these similar issues?

Oh wait, I told a lie.  It wasn't py-bittornado we used.. it was
rtorrent.  Thanks for prompting that.

I have no concerns with rtorrent except that it was a curses beastie.
It was something we had to manually start up after a machine reboot
until we did some evil scripts with screen.

-- 
Peter Wemm - pe...@wemm.org; pe...@freebsd.org; pe...@yahoo-inc.com; KI6FJV
All of this is for nothing if we don't go to the stars - JMS/B5
If Java had true garbage collection, most programs would delete
themselves upon execution. -- Robert Sewell
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to freebsd-stable-unsubscr...@freebsd.org


Re: No more torrents.....

2012-12-18 Thread pete wright
On Tue, Dec 18, 2012 at 3:22 PM, Peter Wemm pe...@wemm.org wrote:
 On Tue, Dec 18, 2012 at 3:19 PM, pete wright nomadlo...@gmail.com wrote:

 A hybrid of bnbt, xbnbt, xbtt, and something else that I don't recall
 the name of.  We ran the seeders from py-bittornado in curses mode in
 about 15 screen sessions.. by hand.

 The tracker/indexer code had an open http connect proxy in it (!).
 The code was particularly difficult to work with and looked extremely
 light for defensive programming.  (string buffer overflows, the
 works).

 The bottom line is the nice indexer / tracker / stats thing we had
 isn't something I feel we can trust.

 I do believe we can/should publish trackerless/dht torrent files to go
 with the release binaries.

 Perhaps an initial web-seed might work, otherwise we could have a few
 folks with good ftp connectivity do an initial seed from the ftp
 files.


 I would be very much be willing to assist with seeding if we make dht
 torrent files available from my nodes located in downtown Los Angeles
 for west-coast and APAC network presence.

 as an aside:
 I have been running libtorrent/rtorrent for a bit and it seems like a
 pretty decent platform for building on.  having said that - I am not a
 security researcher and would be keen to hear if libtorrent/rotrrent
 suffers from these similar issues?

 Oh wait, I told a lie.  It wasn't py-bittornado we used.. it was
 rtorrent.  Thanks for prompting that.

 I have no concerns with rtorrent except that it was a curses beastie.
 It was something we had to manually start up after a machine reboot
 until we did some evil scripts with screen.


ah ok - understood.  well i'll keep an eye on the lists, and if some
trackerless torrents become available i'll be sure to contribute my
resources to this :)  I'd volunteer to help build them but
unfortunately my human bandwidth is limited atm.

cheers,
-pete

-- 
pete wright
www.nycbug.org
@nomadlogicLA
___
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to freebsd-stable-unsubscr...@freebsd.org