RE: Offical 3.50 Torrent
What is the difference between creating a fake torrent and a fake exe file? Not much.
If a user trusts the official site for exe files then the site is just as trustworthy for torrents. Patchou can create an official torrent for the installation file. Peers can send any data they want to other peers on a torrent. However this fake data will never make it into the finished download. It does this by calculcating hashes of portions of the file and stores them in the torrent file. When the user downloads a block of data it calculates the hash of the block. If it does not match the hash in the torrent it is discarded.
If Patchou creates a torrent of Messenger Plus then it will be a valid torrent which you can trust. How will you know which one was created by Patchou? It will be on the official site.
If a user does not trust exe files which are not from the official site then surely they will not trust torrent files not from the official site?
|