Hacker News Reader

Looks like there was a discussion back then on the github issues, https://github.com/Tribler/tribler/issues/1066

EDIT: Had a chance to look through it now, looks like they addressed all the concerns back by 2015

i.e.

1. Replacing the custom crypto code with more standard libraries (looks like they settled on NACL/libsodium's implementations).

2. Switched to AES-GCM and then later ChaChaPoly

3. Fixed up the tor protocol issues too.

Probably more but there's a lot going on.

ECB and random.randint, wow. I'm not sure any dev comment could redeem crypto sins like that in such a project.

Deadly mistakes from 2014. Full redesign and new Rust code.

Are you suggesting the subject line is inappropriate? I just thought spook meant spy (probably the only audience to whom strong encryption and anonymity actually matter) I guess there's an older more offensive meaning.