mikeiechan Posted July 1, 2008 Report Share Posted July 1, 2008 can hackers hack your computer via utorrent webui i was wounder if hackers can hack your computer via utorrent webui,cause when i was downloading something from a private tracker site,i got this messagehttp://img204.imageshack.us/img204/7156/utorrentcu1.pngif you want to download from a private tracker,you would need a username and password,can any expert look at the picture and tell me whats happening Link to comment Share on other sites More sharing options...
jewelisheaven Posted July 1, 2008 Report Share Posted July 1, 2008 Did that IP correspond to any of the peers in the list for the site? I'm presuming it doesn't correspond to your external IP. Or the site's IP?I'm not sure if hacking the uT is an appropriate word... and I don't know about any exploits causing remote access privilege elevation, the main exploits reported/patched in uT relate to crashing the client. The webui was patched for file access outside the storage dir...So what I'd do if that was the only torrent you've run... pop the administrators a note asking if others have reported rogue access requests. Link to comment Share on other sites More sharing options...
Lord Alderaan Posted July 2, 2008 Report Share Posted July 2, 2008 Hack your computer? NoHack your µtorrent? YesHackers could bruteforce, man-in-the-middle, lucky guess your webui password if you have it enabled. This is NOT real easy. But if you want to protect yourself from that use the restricted to IP functionality in the webui tab. If you don't need the webui then don't enable it. Link to comment Share on other sites More sharing options...
Switeck Posted July 3, 2008 Report Share Posted July 3, 2008 webui probably should lock out ips from connecting to it if they fail to guess the password after 10 tries, configurable of course. Link to comment Share on other sites More sharing options...
jewelisheaven Posted July 3, 2008 Report Share Posted July 3, 2008 Well as I understand it, it didn't even verify the user was authenticated previously... the backend processed commands before some change recently to a non-standard MIME-type Link to comment Share on other sites More sharing options...
Lord Alderaan Posted July 3, 2008 Report Share Posted July 3, 2008 The thing is the worst they could do is remove some torrents (+data).But it's a hard to get in if you have a decent password cos man-in-the-middle isn't very likely to happen. (And Bruteforce/lucky Guess won't work) Link to comment Share on other sites More sharing options...
jewelisheaven Posted July 3, 2008 Report Share Posted July 3, 2008 Well, I do think that some sort of message or alert would be prudent with some large number of failed authentication attempts. Link to comment Share on other sites More sharing options...
mikeiechan Posted August 17, 2008 Author Report Share Posted August 17, 2008 this is today,the same thing is happening all over again,this time is even worse,i have close webui,i dont what iam doing wronghttp://i211.photobucket.com/albums/bb310/mikeiechan/why.jpgplease help me out here,if you need to ask me a question about anything,just ask,as i dont want to lose my accnt on the private tracker sitethanks Link to comment Share on other sites More sharing options...
Firon Posted August 17, 2008 Report Share Posted August 17, 2008 You could use the restrict IPs function to ensure only IPs you know can access it. Link to comment Share on other sites More sharing options...
mikeiechan Posted August 17, 2008 Author Report Share Posted August 17, 2008 wow,that a function i never knew,learn something new today how do i use that function ? can you please explain step by stepthank you Link to comment Share on other sites More sharing options...
Ultima Posted August 18, 2008 Report Share Posted August 18, 2008 Input the IPs you'd like to restrict access to in the relevant input field in Preferences > Web UI -- that's all. Link to comment Share on other sites More sharing options...
mikeiechan Posted August 30, 2008 Author Report Share Posted August 30, 2008 hey alli have input the ip address i like to restrict access toand look(the picture below) it even worsehttp://img294.imageshack.us/img294/1429/utorrentaa5.pngwhat should i do ? Link to comment Share on other sites More sharing options...
thelittlefire Posted August 30, 2008 Report Share Posted August 30, 2008 ... Different message. How about you make a thread with some background? Like what you're expecting it to do.Those messages don't relate to WebUI. Link to comment Share on other sites More sharing options...
mikeiechan Posted August 30, 2008 Author Report Share Posted August 30, 2008 different messageit all the same messagebanned 192 405 583 (example ip address)so on,with 7-10 more but with different ip addresswhy would u need to look at the background foriam just downloading a torrent,that allif those message dosent relete to webui,what does it relete toread what firon told me to do Link to comment Share on other sites More sharing options...
thelittlefire Posted August 30, 2008 Report Share Posted August 30, 2008 Well the "Banned IP address" message happens when people send you bad data. However on that kind of a distribution, I'd first be sure now that your torrent is legitimate and/or how many peers are left compared to what YOU SEE in your client versus the tracker/index site you used to download it.In 1.8 you can specify which messages to show... so I'd simply tell you to turn on misc. messages + WebUI in verbose and error and you'll see webui related messages. Link to comment Share on other sites More sharing options...
mikeiechan Posted August 30, 2008 Author Report Share Posted August 30, 2008 Well the "Banned IP address" message happens when people send you bad data. However on that kind of a distribution, I'd first be sure now that your torrent is legitimate and/or how many peers are left compared to what YOU SEE in your client versus the tracker/index site you used to download it.iam downloading from a private tracker site,so how can people be sending me bad data,can you explain the whole thing more clearerIn 1.8 you can specify which messages to show... so I'd simply tell you to turn on misc. messages + WebUI in verbose and error and you'll see webui related messages.how do i do this? Link to comment Share on other sites More sharing options...
thelittlefire Posted August 30, 2008 Report Share Posted August 30, 2008 Logger tab, right click, ... select the options under the (now submenus) for Verbose and Error.As to why the peers are sending you bad data, make a post on that tracker's forum.. mention the torrent it's on. Ask if others are also having trouble downloading data. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.