# How secure is Bittorrent?

**URL:** <https://boards.straightdope.com/t/how-secure-is-bittorrent/320577>\
**Category:** Factual Questions\
**Created:** [September 7, 2005, 9:38pm UTC](https://boards.straightdope.com/t/how-secure-is-bittorrent/320577 "2005-09-07T21:38:10Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Muad\_Dib](https://avatars.discourse-cdn.com/v4/letter/m/35a633/32.png) [@Muad\_Dib](https://boards.straightdope.com/u/Muad_Dib)\
**Post date:** [September 7, 2005, 9:38pm UTC](https://boards.straightdope.com/t/how-secure-is-bittorrent/320577/1 "2005-09-07T21:38:10Z")

</div>

Bittorent has become increadibly popular over the last two years. A few months ago I read that Bittorrent traffic now makes up more than a third of all Internet communications.

But how safe is it?

Are the people who use Bittorent going to get a knock on the door by the RIAA, as many who use Kazaa, et al did? What would it take for a third party to find out, or track, what a person has been downloading? What about specific clients, do they make any difference in regards to privacy and security? Azureus is currently the most popular client, how does it fare in these matters?

---

<div class="post-metadata">

**Author:** ![gazpacho](https://avatars.discourse-cdn.com/v4/letter/g/6f9a4e/32.png) [@gazpacho](https://boards.straightdope.com/u/gazpacho)\
**Post date:** [September 7, 2005, 9:49pm UTC](https://boards.straightdope.com/t/how-secure-is-bittorrent/320577/2 "2005-09-07T21:49:44Z")

</div>

There is nothing in bittorrent that adds anonymity. So people that are downloading from you know your IP address just like most of the other p2p programs out there.

---

<div class="post-metadata">

**Author:** ![Emerald\_Hawk](https://avatars.discourse-cdn.com/v4/letter/e/e495f1/32.png) [@Emerald\_Hawk](https://boards.straightdope.com/u/Emerald_Hawk)\
**Post date:** [September 7, 2005, 10:24pm UTC](https://boards.straightdope.com/t/how-secure-is-bittorrent/320577/3 "2005-09-07T22:24:55Z")

</div>

> [@Muad'Dib](#):
>
> Are the people who use Bittorent going to get a knock on the door by the RIAA, as many who use Kazaa, et al did?

They are already [knocking](http://news.com.com/MPAA+targets+core+BitTorrent,+eDonkey+users/2100-1025_3-5490804.html). The article refers to the people who run the tracking servers, but it is no harder to go after individual uploaders.

In order to download (completely legal public domain files) anonymously, one would have to use a complex and inefficient program like freenet, set up a complex network of zombie computers, or use a different public library terminal every day (and wear a disguise 🆒 ).

---

<div class="post-metadata">

**Author:** ![DougC](https://avatars.discourse-cdn.com/v4/letter/d/7feea3/32.png) [@DougC](https://boards.straightdope.com/u/DougC)\
**Post date:** [September 7, 2005, 10:45pm UTC](https://boards.straightdope.com/t/how-secure-is-bittorrent/320577/4 "2005-09-07T22:45:54Z")

</div>

> [@](#):
>
> …In order to download (completely legal public domain files) anonymously, one would have to use a complex and inefficient program like freenet…

- 
  - 
    - Freenet is easy to download from, once you understand the proper “downloading technique”. It’s inserting material for sharing/upload that’s the bother. That’s the reason there’s not a whole lot on it; it’s the part someone needs to work on. … And Freenet demands 24/7/365 uptime to work well. If leaving your computer running constantly is not your thing, then Freenet is not the game for you.  
~

---

<div class="post-metadata">

**Author:** ![Nanoda](https://avatars.discourse-cdn.com/v4/letter/n/ce73a5/32.png) [@Nanoda](https://boards.straightdope.com/u/Nanoda)\
**Post date:** [September 7, 2005, 10:55pm UTC](https://boards.straightdope.com/t/how-secure-is-bittorrent/320577/5 "2005-09-07T22:55:19Z")

</div>

You’re looking at anonymity, which was never a priority (or even a concern) when the protocol was developed. Only speed and efficiency of data distribution was.

When your BitTorrent client connects to the tracker, it is issued a list of IPs of other clients with which it can share data. (Read the .pdf entitled ‘Economics Paper’ from [here](http://www.bittorrent.com/documentation.html) for much more info) Knowing this, it’s obvious that anyone who wants to know what users are downloading can just query the tracker for IP addresses.

---

<div class="post-metadata">

**Author:** ![Charlie\_Tan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/charlie_tan/32/12582_2.png) [@Charlie\_Tan](https://boards.straightdope.com/u/Charlie_Tan)\
**Post date:** [September 7, 2005, 11:10pm UTC](https://boards.straightdope.com/t/how-secure-is-bittorrent/320577/6 "2005-09-07T23:10:54Z")

</div>

I’ve had long e-mail talks with mods about talking about these things on this board. For some reason, illegal drug use is OK, but filesharing is not. Whatever.

Before this is closed, I just want to say that as a 3 year veteran BT user (I got in early), there are ways around this. I won’t talk about details here, but my e-mail is listed under my profile.

Aside: Bram Cohen, who wrote the script, is getting next to nothing for inventing the protocol. I feel sorry for the guy

---

<div class="post-metadata">

**Author:** ![Muad\_Dib](https://avatars.discourse-cdn.com/v4/letter/m/35a633/32.png) [@Muad\_Dib](https://boards.straightdope.com/u/Muad_Dib)\
**Post date:** [September 7, 2005, 11:15pm UTC](https://boards.straightdope.com/t/how-secure-is-bittorrent/320577/7 "2005-09-07T23:15:55Z")

</div>

> [@Emerald Hawk](#):
>
> They are already [knocking](http://news.com.com/MPAA+targets+core+BitTorrent,+eDonkey+users/2100-1025_3-5490804.html). The article refers to the people who run the tracking servers, but it is no harder to go after individual uploaders.
> 
> In order to download (completely legal public domain files) anonymously, one would have to use a complex and inefficient program like freenet, set up a complex network of zombie computers, or use a different public library terminal every day (and wear a disguise 🆒 ).

There is no way to make it more secure?

---

<div class="post-metadata">

**Author:** ![Purd\_Werfect](https://avatars.discourse-cdn.com/v4/letter/p/e47c2d/32.png) [@Purd\_Werfect](https://boards.straightdope.com/u/Purd_Werfect)\
**Post date:** [September 7, 2005, 11:32pm UTC](https://boards.straightdope.com/t/how-secure-is-bittorrent/320577/8 "2005-09-07T23:32:27Z")

</div>

There’s proxy stuff you can supposedly do, but I wouldn’t risk it. There’s only going to be increased efforts dedicated to shutting down torrents.

---

<div class="post-metadata">

**Author:** ![Saranga](https://avatars.discourse-cdn.com/v4/letter/s/d6d6ee/32.png) [@Saranga](https://boards.straightdope.com/u/Saranga)\
**Post date:** [September 8, 2005, 4:11am UTC](https://boards.straightdope.com/t/how-secure-is-bittorrent/320577/9 "2005-09-08T04:11:24Z")

</div>

> [@Muad'Dib](#):
>
> There is no way to make it more secure?

Unlike Napster or Kazaa-type programs, Bittorrent was created in a post-Napster environment to be used for legal purposes. Businesses or individuals can use it to distribute large files at high-speeds with reduced load on their own fileservers (because the downloaders upload to each other). World of Warcraft currently uses it to distribute patches.

That said, why would a program like that make any attempt to give its users anonymity? Anonymity necessarily makes downloading programs slower, because then clients need to “discover” peers as opposed to simply getting them from a central tracker (a la Bittorrent). Bittorrent is really not at all “secure” in terms of protecting the anonymity of downloaders.
