Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

BitTorrent Sync is not open source or even open protocol and I personally caught them lying about their cryptography by reverse engineering it a bit. Found calls setting up 128 bit AES rather than 256 bit as they claimed in documentation. Posted it on their forum and was told that I was correct and the docs were outdated.

I didn't take my RE any deeper, but trust it at your own risk. I'd recommend SyncThing over it as a good open alternative, though it's admittedly not as polished yet.

Admittedly I am listing several closed tools, but only those I've had good experiences with.



Thanks, that helps. I was wary of it in the first place, but now I know I'll stay away.

I do love the idea of OwnCloud, and I've tried it a few times in the past. But it almost feels like they are paying more attention to making a "virtual web desktop" with the new file editing stuff, and less attention to proper file syncing. I've tried to use them for syncing in the past on my CoLo file server, and on a fast machine in my home, and it's just too slow and buggy for now. I wish I was a competent programmer so I could contribute in that department.

Late edit: I just realized you took my statement about BitTorrent's "open nature" to mean open source or protocol. I apologize, I didn't mean it that way and should have worded it better. What I meant was "open for all to see what you're transferring". Basically, the contents would be easy to snoop from what I understand. Sorry about any confusion.


Looks like the BitTorrent Sync specs have been updated http://www.bittorrent.com/sync/tech-specs


Yes, they updated them after I mentioned it. However, it leaves me questioning other things which I didn't look at and overall, I'm just not happy trusting a closed cryptosystem.

I'd be willing to accept closed source if they at least published a cryptographic protocol, but closed source and closed protocol, where I myself have seen that the little bit of vague documentation that they do have has been incorrect in the past, is quite untrustworthy in my opinion.

Considering the number of alternatives available - may as well just use something else. I'll give it another look if they open the protocol in one way or another as they do surely have the ease of use nailed down.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: