4 ms·

https://web.archive.org/web/20201105144800/https://codeload.github.com/nyaadevs/nyaa/zip/master https://web.archive.org/web/20201105144800/https://codeload....

by Hamuko 6y ago

https://web.archive.org/web/20201105144800/https://codeload.github.com/nyaadevs/nyaa/zip/master https://web.archive.org/web/20201105144800/https://codeload.... Have at 'em. .docker/es_sync_config.json .docker/nyaa-config-partial.py config.example.py migrations/versions/2bceb2cb4d7c_add_comment_count_to_torrent.py nyaa/api_handler.py nyaa/static/search-sukebei.xml nyaa/templates/home.html nyaa/torrents.py utils/api_info.py utils/api_uploader_v2.py

femto113 6y ago
The smoking gun is right there in config.example.py: TRACKER_API_AUTH = 'topsecret' TRACKER_API_URL = 'http://127.0.0.1:6881/api'
- gnomewascool 6y ago
  How is that a smoking gun? It connects with a tracker, which might be used to help distribute copyrighted works illegally, but also any other types of files. It's possible I'm not getting your sarcasm.
  - blitblitblit 6y ago
    It's a sarcastic joke, nothing there but a place holder for your own API key and you would have to set it up. There's no place like 127.0.0.1. :D
  - deleted 6y ago
    [deleted]
- swirepe 6y ago
  A smoking gun is just circumstantial evidence. The real damning thing in that repository are the few lines that play Toy Story 2 if you run them.
- apolymath 6y ago
  They might as well send a DMCA to Microsoft, Mozilla, Google, and Apple to take down their web browsers since their web browsers allow users to download copywritten materials.
contravariant 6y ago
Okay this is just getting weird. One of those is just a database update that counts how many comments a torrent has. Another is just some database credentials (probably not the ones you want to use in production, unless you don't mind people knowing your passwords). The HTML template for the home page is also in there for some reason. And then to finish things off they added the OpenSearch definition which I think you can use to add Nyaa/Sukebei as a search engine to your browser. Really the most suspicious ones are the python scripts in utils, which connect to the api on https://nyaa.si https://nyaa.si by default. Although those also only seem to allow you to upload torrents (not an infrinfing activity) and download the info of a single entry on nyaa (possibly infringing?). Also they curiously left out sync_es.py, not that that one does anything too interesting (it synchronizes a elasticsearch database with a MySql database) but it is the script that actually uses those configuration files they picked out.

by Hamuko 6y ago

femto113 6y ago

The smoking gun is right there in config.example.py: TRACKER_API_AUTH = 'topsecret' TRACKER_API_URL = 'http://127.0.0.1:6881/api'

gnomewascool 6y ago
How is that a smoking gun? It connects with a tracker, which might be used to help distribute copyrighted works illegally, but also any other types of files. It's possible I'm not getting your sarcasm.
- blitblitblit 6y ago
  It's a sarcastic joke, nothing there but a place holder for your own API key and you would have to set it up. There's no place like 127.0.0.1. :D
- deleted 6y ago
  [deleted]
swirepe 6y ago
A smoking gun is just circumstantial evidence. The real damning thing in that repository are the few lines that play Toy Story 2 if you run them.
apolymath 6y ago
They might as well send a DMCA to Microsoft, Mozilla, Google, and Apple to take down their web browsers since their web browsers allow users to download copywritten materials.

contravariant 6y ago

Okay this is just getting weird. One of those is just a database update that counts how many comments a torrent has. Another is just some database credentials (probably not the ones you want to use in production, unless you don't mind people knowing your passwords). The HTML template for the home page is also in there for some reason. And then to finish things off they added the OpenSearch definition which I think you can use to add Nyaa/Sukebei as a search engine to your browser. Really the most suspicious ones are the python scripts in utils, which connect to the api on https://nyaa.si https://nyaa.si by default. Although those also only seem to allow you to upload torrents (not an infrinfing activity) and download the info of a single entry on nyaa (possibly infringing?). Also they curiously left out sync_es.py, not that that one does anything too interesting (it synchronizes a elasticsearch database with a MySql database) but it is the script that actually uses those configuration files they picked out.