uTorrent 3.3 alpha randomizes Peer-ID during sessions

Martin Brinkmann
Sep 22, 2012
Updated • Dec 2, 2012
File Sharing, Internet
|
5

It is almost certain that public - and likely private - Bittorrent traffic is monitored to a great extent by companies that specialize in these kind of operations. Information such as IP addresses, downloaded files, date and time, program name and version, and other information are likely recorded by these companies. Most users know that it is the IP address that makes them identifiable, and some take great care to anonymize their online presence because of this. There are several options to do just that, from using virtual private networks or proxy servers to seedboxes or open wireless networks.

Fingerprinting techniques may however reveal connections even if an IP address is changed regularly. Bittorrent clients are for instance sending out a peer-ID on connects which may or may not get randomized automatically by the application. The popular uTorrent application for instance up until now randomized the peer-ID on every start of the program, but not during sessions.

The peer-ID in this case may reveal links between seemingly unrelated user sessions. This is for instance the case if you have changed your IP during a session but not restarted the uTorrent client.

To avoid this from happening, Bittorrent INC. has added a new feature to the uTorrent 3.3 client that is randomizing the peer-ID for public torrent downloads during sessions.  The feature has been enabled in one of the latest alpha builds of the client to mitigate tracking using the ID.

Feature: don't use a consistent peer-id (to mitigate tracking)

Other Bittorrent clients have had implemented similar measures for some time now. The popular uTorrent alternative qbittorrent for instance supports an anonymous mode feature that is taking anonymity a step further:

  • peer-ID without client fingerprint
  • user-agent will be empty
  • trackers will only be used if they are using proxy servers
  • listen sockets are closed
  • incoming connections only accepted though Socks5 or I2P proxy

It is not really clear when the current stable version of uTorrent will be moved to version 3.3. Considering that it is currently in alpha it may take a while before stable users benefit from the protection.

You find a download link of the latest uTorrent alpha build on the official forum where updates are regularly posted. Keep in mind that it is an alpha and may be less stable because of it. (via Reddit)

Advertisement

Tutorials & Tips


Previous Post: «
Next Post: «

Comments

  1. Decent60 said on November 11, 2013 at 7:33 pm
    Reply

    K-Lite pack MEGA. All you need to know lol If it won’t play with that, then it needed a whole new program to use anyways.

  2. Anonymous said on November 11, 2013 at 10:48 pm
    Reply

    VLC Player has played just about every file for me. If VLC can’t play it, then the file was probably malicious anyways

    1. Martin Brinkmann said on November 11, 2013 at 10:53 pm
      Reply

      As I said, VLC should have you covered. But if you use Media Player or something similar, you may like this.

  3. Ron said on November 11, 2013 at 11:39 pm
    Reply

    Media Player Classic – Home Cinema (MPC-HC) or Media Player Classic – BE (MPC-BE) should be able to play (almost) anything also. MPC-BE is my player of choice. (It also has a small footprint on your hard drive, which is something I always take into consideration when choosing between different programs.)

  4. brian Tran said on November 12, 2013 at 3:28 pm
    Reply

    love utorrent..

Leave a Reply

Check the box to consent to your data being stored in line with the guidelines set out in our privacy policy

We love comments and welcome thoughtful and civilized discussion. Rudeness and personal attacks will not be tolerated. Please stay on-topic.
Please note that your comment may not appear immediately after you post it.