-25

If BT over Tor is bad for privacy, why VPN is not? (lemmy.ml)

submitted 1 year ago* (last edited 1 year ago) by umami_wasbi@lemmy.ml to c/piracy@lemmy.dbzer0.com

9 comments fedilink hide all child comments

This is an continuation of my last post, specifically a comment from @rufus@discuss.tchncs.de:

It will never get recommended. It’s bad for the network and bad for your privacy.

Excluding that doing so is bad for the network, why it is "private" using VPN but not Tor, inferring from common consensus. The main point in the blog post is a protocol level problem:

apparently in some cases uTorrent, BitSpirit, and libTorrent simply write your IP address directly into the information they send to the tracker and/or to other peers

Tor and VPN are both transports what wrap other traffic within. If that statement is true, no transport can save the information leaking nature of the BT protocol itself.

you are viewing a single comment's thread
view the rest of the comments

[+] umami_wasbi@lemmy.ml -12 points 1 year ago

If your client or something leaks your IP it happens anyways, if you route it over one node or seven. All the extra energy is just wasted.

Yes. That's how I see the problem.

And bittorrent puts even more strain on the TOR network the way it works. Probably making it slower for anybody else.

I understand and agree.

In the context of this question, I don't really cares if the IP changes or if UDP supported or the network degraded. I'm asking a more fundamental one: when the data in the BT protocol contains sensitive information, then why VPN/I2P is acceptable but Tor (or other transport) are not? That sensitive info is still being transmitted. If that Tor blog is true, then no matter what we use, it is still bad for privacy.

[-] rufus@discuss.tchncs.de 7 points 1 year ago* (last edited 1 year ago)

Well, I don't know the exact reasons. I read somewhere that it's been a frequent issue. That has either to do with the way the torrent client is programmed and it doesn't pay attention to the specifics for that case. Or the users frequently get the config wrong.

For example: Since Tor doesn't support UDP, if your torrent client sends out a UDP packet, it goes over your normal internet connection, immediately revealing your real IP. Whereas if you used a VPN, the packed had been tunneled and that would disguise you.

Also the Socks-Proxy setup is more complicated. Seems to be the case there are just many more possibilities to get it wrong.

I don't know any reason why you couldn't theoretically get it watertight. But you have to pay close attention to do it right.

There could be specifics to torrent traffic that expose you in some way. I'm not sure, you'd need to ask a security expert about this. But a torrent download is another kind of data stream than the web-surfing Tor was made for. I know there was research done on Tor. I can only speculate.