> ## Content Index
> Fetch the complete content index at: https://larrysalibra.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# N reasons why the spooks love Tribler
- URL: https://larrysalibra.com/n-reasons-why-the-spooks-love-tribler/
- Published: 2014-12-23T16:00:00.000Z
- Updated: 2014-12-23T16:00:00.000Z
- Author: Larry Salibra
- Tags: infosec, security, blog, #Import 2024-08-23 13:31

[Great security analysis of promises-to-make-bittorrent-anonymous app Tribler](https://tribler.org/?ref=larrysalibra.com)

> TLDR: Do not use this if your threat model includes active attackers,  
> adversaries versed in cryptography, those with lots of money, or if you  
> wish to be anonymous.

Many problems come from using sources of "random" numbers that are pseudorandom (ie. not really random) and inappropriate (dangerous!) for cryptographic use.

> Most of the fixes require major revisions to the wire protocol.  
> As it appears that there is no versioning, how that will be done is  
> left as an exercise for the student.

A junior developer worth his laptop shouldn't create a protocol (or an API!) without versioning. One wonders about the thought process of the development team.

Hat tip to [MadBitcoins](https://twitter.com/madbitcoins?ref=larrysalibra.com) for the link.