Hacker News new | ask | show | jobs
by Joeri 4228 days ago
So if I understand this right, there's probably a backdoor in it? Honestly though, I doubt that you can keep the NSA and FBI out of your system. If they want in, they'll get in, and there's nothing* you can do about it.

Having said that, we do need these kinds of solutions without the back doors. Why aren't any software developers from countries where mandatory backdoors aren't a thing building stuff like BTSync? And does anyone know which countries those are? For example, i live in Belgium. Were I to build such a thing, would someone show up on my doorstep and force me to backdoor it?

(*) nothing that is reasonable, only paranoia and extreme lengths will suffice.

3 comments

> If they want in, they'll get in, and there's nothing* you can do about it.

Yeah, but you don't have to make it _easy_ for them, like using closed-source software that's capitalizing on the name recognition of "BitTorrent" to pretend to be open.

(I expect that even if you lived in McLean, Virginia and never locked your doors, if you were writing open-source software, nobody would make you put a backdoor in. The intelligence agencies have shown a great bias towards doing things that people won't notice.)

Also, even assuming you can't keep the NSA and FBI out if they really care (which I somewhat agree with), it's definitely worth it to keep everyone else out. Like BitTorrent the company, or anyone MITMing any of those HTTP URLs.

They've made a preliminary response here: http://forum.bittorrent.com/topic/32575-multiple-massive-sec...
"Having said that, we do need these kinds of solutions without the back doors."

You do have that. Further, you've had it since 2006.

Point duplicity[1] to rsync.net[2].

Cheers!

[1] http://duplicity.nongnu.org/

[2] http://www.rsync.net/resources/notices/canary.txt

Those are not the same as BTsync.
but duplicity is a backup program. btsync isn't.
setting this up when I get back home. thanks.