BitTorrent dismisses security concerns raised about its Sync app

BitTorrent dismissed claims that its popular peer-to-peer file synchronization program BitTorrent Sync has an insecure cryptographic implementation that potentially gives the company access to users’ files.

A group of security researchers who recently reverse engineered parts of BitTorrent Sync released a report Monday outlining several potential security issues they found. The most serious of those issues had to do with the leak of cryptographic hashes that correspond to folders shared between users to GetSync.com, a remote server operated by BitTorrent.

The analysis revealed the “probable leak of all hashes to getsync.com and access for BitTorrent Inc to all shared data,” the researchers said in their report posted on the website of the Hackito Ergo Sum security conference.

To read this article in full or to leave a comment, please click here