Settings

Theme

Rqbit – BitTorrent Client in Rust

github.com

3 points by dither8 a year ago · 3 comments

Reader

dither8OP a year ago

This post was inspired by recent discussion here:

RCE Vulnerability in QBittorrent - https://news.ycombinator.com/item?id=42004219

See also:

https://news.ycombinator.com/item?id=38506835, 11 months ago, 14 comments

  • AlbertoGP a year ago

    > This post was inspired by recent discussion here:

    > RCE Vulnerability in QBittorrent - https://news.ycombinator.com/item?id=42004219

    Worth noting that Rust will not prevent that kind of security hole:

    > To be fair, this function ignoreSslErrors is not from the authors of qBittorrent, it comes from QT framework. The idea behind the function is that you provide it a small whitelist of errors you wish to ignore, for example in a Dev build you may well want to ignore self-signed errors for your Dev environment. The trouble is, you can call it with no arguments and this means you will ignore every error. This may have been misunderstood by the qBittorrent maintainers, maybe not.

Keyboard Shortcuts

j
Next item
k
Previous item
o / Enter
Open selected item
?
Show this help
Esc
Close modal / clear selection