Open Menu
AllLocalCommunitiesAbout
lotide
AllLocalCommunitiesAbout
Login

Someone on Torrent Sites Kept Fucking With My Sonarr

⁨151⁩ ⁨likes⁩

Submitted ⁨⁨16⁩ ⁨hours⁩ ago⁩ by ⁨inari@piefed.zip⁩ to ⁨selfhosted@lemmy.world⁩

https://thereallo.dev/blog/someone-on-torrent-sites-kept-fucking-with-my-sonarr-setup

source

Comments

Sort:hotnewtop
  • UnrefinedChihuahua@lemmy.dbzer0.com ⁨25⁩ ⁨minutes⁩ ago

    The problem is your roommate, your parent, or 3am you double clicking it in the downloads folder. (do NOT execute execute the skid malware)>

    Yeah, like any of those scrubs has access to any folders of any importance.

    source
  • OneCardboardBox@lemmy.sdf.org ⁨5⁩ ⁨hours⁩ ago

    Settings -> Indexers -> Pick one -> Fail Downloads -> Select “Executables” and “Potentially dangerous”

    You still have to remove the malware from your torrent client, but at least sonarr will give up importing it and try a different torrent.

    source
    • pastaparty@lemmy.zip ⁨5⁩ ⁨hours⁩ ago

      Dealing with the executableshas been such a pain in the ass, thank you so much for pointing this out.

      source
  • LiveLM@lemmy.zip ⁨8⁩ ⁨hours⁩ ago

    Had a good chuckle at the author’s annoyance, great work.

    I blacklist just about anything executable from downloading in Qbit but it stills feels a little clunky, I wish the ARRs would inspect the torrents and immediately ignore the .exe ones before they even hit Qbit, I feel like it should be a default option to help the Newbies out.

    source
  • peppericecream@lemmy.dbzer0.com ⁨14⁩ ⁨hours⁩ ago

    I was also flabbergasted when I observed this. No idea why this is not default, but you can configure “Fail downloads” = “Executables”, “Potentially dangerous” in the Indexer options to prevent these downloads. Enable advanced settings first.

    source
    • tensor_nightly69@lemmy.world ⁨13⁩ ⁨hours⁩ ago

      Good find, thanks! Kind of annoyed I can’t set those values in Prowlarr to automatically propagate to all the *arrs, but still good to have the option once Prowlarr indexers are sync’d to other apps.

      source
    • Appoxo@lemmy.dbzer0.com ⁨11⁩ ⁨hours⁩ ago

      I think this isnt a thing with prowlarr, is it?

      source
      • ExLisper@lemmy.curiana.net ⁨10⁩ ⁨hours⁩ ago

        It is, I’ve seen it. People upload .exe files pretending to be an episode day before it’s release. Prowlarr will find those and start downloading.

        source
        • -> View More Comments
      • peppericecream@lemmy.dbzer0.com ⁨10⁩ ⁨hours⁩ ago

        I use Prowlarr, but had to configure it in Sonarr. I don’t see any option for it in Prowlarr

        source
  • Strit@lemmy.linuxuserspace.show ⁨16⁩ ⁨hours⁩ ago

    I don’t know why you ra eannoyed by this.

    You use an automatic tool. It’s bound to fail or make a mistake once in a while.

    The “uploader” likely knew this, so they had some fun. It’s not like what you are doing is legal or anything. “Le me go complain on my blog about someone messing with how I do my illegal activites”.

    source
    • Dojan@pawb.social ⁨10⁩ ⁨hours⁩ ago

      I don’t know why you are annoyed by this.

      I don’t read it as annoyance. It’s a rundown of them tracking down who is doing it and what it actually is. They’re just flagging for it.

      source
    • oneser@lemmy.zip ⁨15⁩ ⁨hours⁩ ago

      As annoying as this is, I agree. It’s a case of automate better or add a confirmation layer to the download decision.

      The reason I don’t auto-DL anything yet is cos I’m too lazy to spend hours making sure it’s setup correctly.

      source
    • Hal@piefed.nz ⁨14⁩ ⁨hours⁩ ago

      This seems like a one off for them, but for me whenever tracking ongoing TV series I would regularly get malicious files as they appear before the real ones, and get found and downloaded by sonarr.

      These days I only automate from private trackers, and enable a public tracker for an interactive search only if something can’t be found on the private trackers.

      source
      • scops@reddthat.com ⁨6⁩ ⁨hours⁩ ago

        My problem is that it’s hard to stay in good standing with private trackers while using the *arr suite. I leave everything seeded for weeks, but I never get close to 1.00 ratio on any of the files. It’s not a connectivity issue AFAICT because I do have SOME people connected and downloading from me, but by the time the torrent reaches that point where there’s hundreds/thousands of seeders, I’m still running at a big deficit.

        source
        • -> View More Comments
      • Squizzy@lemmy.world ⁨13⁩ ⁨hours⁩ ago

        The private trackers, I am looking at going back to te high seas but the cost of some of the trackers and usenet sites are high, then a debrid and I am kijd kf back where I was.

        Are there dcent free private trackers?

        source
        • -> View More Comments
  • slazer2au@lemmy.world ⁨16⁩ ⁨hours⁩ ago

    I remember spotting this when the Mario Galaxy film came out. The top seed was a 2GB exe.

    I hope we come full circle and we get “Avril Lavine - Girlfriend.mp3.exe”

    source
    • billbasher@lemmy.world ⁨2⁩ ⁨hours⁩ ago

      I hope we get “Full Circle - No Doubt.mp3.exe” :)

      source
      • slazer2au@lemmy.world ⁨1⁩ ⁨hour⁩ ago

        No doubt. :D

        source
    • FauxLiving@lemmy.world ⁨14⁩ ⁨hours⁩ ago

      There was a GTA6.exe that appeared on the torrent sites around the time of the first gameplay video leaks, I’m sure it got a few people.

      source
  • chewypoops@lemmy.world ⁨9⁩ ⁨hours⁩ ago

    Imagine trusting Torrents when Usenet is right there.

    source
  • Uncut_Lemon@lemmy.world ⁨7⁩ ⁨hours⁩ ago

    Cool to see someone pull this kind of malware apart. Interesting read.

    source
  • AverageGoob@lemmy.world ⁨7⁩ ⁨hours⁩ ago

    I have been using cleanuparr to automate this. I have exes blocked in the download client and then cleanuparr sees they aren’t being downloaded and removes them and triggers another search.

    source
  • pedroapero@lemmy.ml ⁨7⁩ ⁨hours⁩ ago

    What torrent sites are affected?

    source
    • Cyber@feddit.uk ⁨4⁩ ⁨hours⁩ ago

      Technically, all* could be. They’re just indexing the torrents that are out there.

      *all = the ones that would list TV shows, etc. of course

      source
    • db_null@lemmy.dbzer0.com ⁨7⁩ ⁨hours⁩ ago

      Lime and eztv were the culprits for me, I removed them from automatic search in *arr

      source
  • dracs@programming.dev ⁨14⁩ ⁨hours⁩ ago

    I’ve been hit by this a few times recently too. No ill effects other than needing to clear it from the queue thankfully.

    source