Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Not that the average user necessarily knows this, but in principle can't the user agent string sent by the browser be spoofed?


Sure but chances are that 90% of the users don't know how to do it. Also it's a good warning for the users. It's primarily not for protecting the torrent site but for protecting the users anyway.


Sure, but its not about user agents.


How else would you detect the operating system of the client making the request?


I have no idea if the the trackers are doing this or not, but you could use TCP/IP stack fingerprinting. It's a bit costly, so I doubt it's in use. But it could be one way to achieve it. It's certainly not 100% accurate, but my experience with nmap is the detection works surprisingly well:

https://nmap.org/book/man-os-detection.html


That requires the server to be able to make network requests to the host - not gonna happen for most users busting your site.


Only if you use nmap as-is. Also majority of torrent software uses UPnP IGD to open TCP port (which is then advertised to the tracker).

I’m not sure but I think µTorrent on Windows also listens on the Toredo provided IPv6 address.


What do you think it's about, then?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: