Hacker News new | ask | show | jobs
by silotis 718 days ago
Bittorrent normally hash checks all content against metadata in the torrent file so a simple MITM wouldn't be enough to inject malicious data unless the torrent metadata itself is being sent in the clear.
2 comments

I had the same thought, i'm very confused about the details of the attacks.

As an ISP if they detect you doing it, and they control DNS servers, maybe they mark your account for death, and they could like randomly hijack you going to google.com to some download for malware, and unsuspecting user clicks accept? Not sure, i'm curious how they pulled this off.

Any http exe-file download could be hijacked if you are an ISP. Maybe KT have some "dailup login" app the user needs to login with?
But why would it be http?
I am wondering if this is one of those "using the term bittorrent for anything peer to peer" cases... maybe Webhard has its own peer-to-peer protocol that is more vulnerable, and they are just calling it bittorrent?