For
Writing
|
in 02/12/2016 at 11.50
this week, the Pirate Bay and KickAss Torrents, two of the great torrent of platforms world, adopted the new plugin developed by the Popcorn Time team called Torrents Time. With it, you can watch videos and consume content directly from browser via streaming . However, a number of criticisms have been made to the plugin, including some related to security.
Andrew Sampson, application developer streaming aurous songs, analyzed Torrents Time and discovered several problems that could put safety of users at risk. One of the most worrying problems is related to the CORS, which is the mechanism that allows the resources of a page of internet may be requested by another domain. This is one of the most important resources for the operation of the plug at the same time it is used by any page in HTML5, which opens the door to malicious users.
Sampson could list seven serious problems and which can be exploited by hackers . One of the gravest allows malicious people to do with the user to download a torrent file in the background without him knowing. All this can be done by introducing a single line of code.
In addition, anyone with access to the site’s JavaScript could find the address IP of user, the country where he lives and even the browser they are using.
in short, the Torrents Time has serious security problems and the recommended is that users do not make use of the service if they wish to remain protected. However, for those who want to use the plugin, the good news is that the software is still in phase beta and that, therefore, some (or all) security issues found may be resolved soon
Source:. Andrew Sampson
Sign up for our channel and learn about technology
Source:! CanalTech.com.br
No comments:
Post a Comment