3 ms·
This is going to be exploitable for a long time. BitTorrent clients often use UPnP to forward ports automatically. Many Windows users remain on old uTorrent ve
by Scaevolus 11y ago
This is going to be exploitable for a long time.
BitTorrent clients often use UPnP to forward ports automatically. Many Windows users remain on old uTorrent versions after multiple unwanted "features" (advertising, built-in bitcoin miner, ...).
On the bright side, open source BitTorrent clients appear to have low amplification factors (libtorrent does 4x vs 40x for uTorrent).
- yincrash 11y agoYup. Transmission limits its handshake resends only 3 times. https://trac.transmissionbt.com/ticket/5984 https://trac.transmissionbt.com/ticket/5984 https://trac.transmissionbt.com/ticket/5888 https://trac.transmissionbt.com/ticket/5888
- PhilChip 11y agoDoes this also affect UPnP? The article mentions only µTP
- r1ch 11y agoIn this context, UPnP is what allows uTP to be used as a reflector, since the target reflector will have their ports opened automatically by UPnP (normally a NAT would block it). That said, improperly configured UPnP can also be used to perform DRDoS via SSDP.