Hacker News Reader

Did they exploit a vulnerability or MITM the traffic somehow?

Edit: While looking for an answer, I ran across this article. Apparently they've been fighting for a while (2015):

https://www.opennetkorea.org/en/wp/1529

Bittorrent normally hash checks all content against metadata in the torrent file so a simple MITM wouldn't be enough to inject malicious data unless the torrent metadata itself is being sent in the clear.

I had the same thought, i'm very confused about the details of the attacks.

As an ISP if they detect you doing it, and they control DNS servers, maybe they mark your account for death, and they could like randomly hijack you going to google.com to some download for malware, and unsuspecting user clicks accept? Not sure, i'm curious how they pulled this off.

Any http exe-file download could be hijacked if you are an ISP. Maybe KT have some "dailup login" app the user needs to login with?

But why would it be http?

I am wondering if this is one of those "using the term bittorrent for anything peer to peer" cases... maybe Webhard has its own peer-to-peer protocol that is more vulnerable, and they are just calling it bittorrent?

I’m pretty sure it’s not literally BitTorrent, but a distorted version of it to build private paid peer-to-peer networks.

Reply on news.ycombinator.com