I was also flabbergasted when I observed this. No idea why this is not default, but you can configure
"Fail downloads" = "Executables", "Potentially dangerous"in the Sonarr Indexer options to prevent these downloads. Enable advanced settings first.Good find, thanks! Kind of annoyed I can’t set those values in Prowlarr to automatically propagate to all the *arrs, but still good to have the option once Prowlarr indexers are sync’d to other apps.
I actually saw this last night while I was looking for another setting. Why would I ever want sonarr to download an executable, and why would they think I’d want it that way by default? It made me wonder if I was missing something.
“Why do I need to download 7zip? That’s too hard. Everything should be a self-extracting exe!”
A few moments later…
I think this isnt a thing with prowlarr, is it?
I use Prowlarr, but had to configure it in Sonarr. I don’t see any option for it in Prowlarr
The author getting pissed every step of the way is really funny, great write-up!
I blacklist just about anything executable from downloading in Qbit but it stills feels a little clunky, I wish the ARRs would inspect the torrents and immediately ignore the .exe ones before they even hit Qbit, I feel like it should be a default option to help the Newbies out.
Next Sonarr release will have this.
I remember spotting this when the Mario Galaxy film came out. The top seed was a 2GB exe.
I hope we come full circle and we get “Avril Lavine - Girlfriend.mp3.exe”
There was a GTA6.exe that appeared on the torrent sites around the time of the first gameplay video leaks, I’m sure it got a few people.
I hope we get “Full Circle - No Doubt.mp3.exe” :)
No doubt. :D
Cool to see someone pull this kind of malware apart. Interesting read.
The problem is your roommate, your parent, or 3am you double clicking it in the downloads folder. (do NOT execute execute the skid malware)>
Yeah, like any of those scrubs has access to any folders of any importance.
I’ve been hit by this a few times recently too. No ill effects other than needing to clear it from the queue thankfully.
I have been using cleanuparr to automate this. I have exes blocked in the download client and then cleanuparr sees they aren’t being downloaded and removes them and triggers another search.
When this happened to me it always seemed to be episodes that hadn’t actually aired yet. I ended up installing swurapp (automatically unmonitors episodes until they’ve aired, to stop them being grabbed) and haven’t had it happen since.
This shit is why I never used the arr stack. Never automate incoming data. It fetches what I intend it to fetch.
deleted by creator
Bittorrent
Shit like this is why I’m done with public trackers.
Imagine trusting Torrents when Usenet is right there.
Imagine paying for pirated content, when high quality torrents are right there
Torrents are pretty terrible without private trackers. Since majority of free sites have no access to an API and require prowlarr/jacket to create one, a cloudflare slover to bypass bot protections and even then it’s janky.
If you use private trackers, you now have to keep seeding downloads to keep your ratio healthy, and require additional trickery to allow files to be seeded after sorting by sonarr.
Usenet is plug and play, as the indexes are built with this functionality in mind and it’s far less likely to run into malicious uploads, as there is curation occuring on the paid indexes, ie, they are insentivised to make the paying customer happy.
I have been using private trackers for 15 years now and have been extremely happy with them. I dont mind seeding back, plus not all of them have the ratio requirement. My tv show site knows it would be very hard to keep that from slipping so instead of ratio its just a certain length for episodes and season grabs. I really dont care about keeping my bittorrent app running since i leave my pc on anyway. As for sonarr it just copies the file to the new directory and renames it, after a few months ill do a cleanup that takes 2 min.
As for usenet, my coworker loves it but he definitely says it has issues which may or may not be an issue today or workarounds for it? He has said the takedown requests are so fast now that finding a lot of stuff that releases quickly can be difficult if you dont use sonarr or radarr to grab right away. Every now and then he has to ask me to find stuff.
The only real issues ive ever had is the instability where sometimes theres outages and not much you can do. I remember last year or maybe year before that one of the biggest had a 2 month outage and things looked bleak.
I disagree. I have some private trackers, but I never use 'em anymore, mostly due to ratio requirements. I just don’t have the space on my local drive to hold and seed all those files forever. Spending a bit of time on your initial *arr configs, means everything just works, even using all public trackers. I can’t remember the last time my system grabbed a wrong/bad file. Been dialed in for years at this point.
I have never used a private tracker and have got everything I ever wanted allegedly from just googling… I really don’t see the need for private trackers especially with the upload ratio in mind…
Hold on, even if you’re using torrents, you still have to pay for a decent indexer right? Or has stuff changed in the last few years?
I’ve been at this since Napster was a thing, so imagine my surprise to hear that folks are paying to pirate.
Usenet I get, but private trackers? only real benefit would be a risk reduction of being caught by your ISP, but that’s easily overcome by using a VPN.
VPN and public trackers gets you more shows and films than any human could ever consume. I’m not sure why any other method exists.
No, most public ones are fine. Always have been. I’ve never used a private tracker and have had very few issues. Especially after using Radarr, etc. to pick out good and bad torrents.
Search lists in qbit are how most people manage.
I personally use torrentleech which is a private tracker but has basically everything and super permissive rules. Very very easy to maintain ratio and to also get invited and started. I have 4.8TB of upload credit. Searching in qbittorrent or manually across public sites took too long for me when i usually want to find a higher res or higher bitrate version of something. I also always saturate my download speed even with only a few seeds since they’re almost always seedboxes.
AH ratio - I knew there was a valid reason I chose Usenet back when I set everything up, my upload speed sucks! :)
Yeah depends on the tracker some just credit you for seeding at all which helps people like you with bad upload.
Uh no, most if not all of the paid indexers are not worth it compared to just waiting for an open invite from a quality one.
Not even the gold tier quality ones allow paid entry AFAIK. They only allow people who are long time seeders and uploaders with reputation.
The one thing you might have to pay for is a VPN in case you want to torrent on public indexers, which is often worth it because not everything will end up on private indexers, and you usually have to wait a couple of months before you can join a solid private indexer.
Many indexers have donations optional, or a points system today. The tradeoff is that invitations are now even rarer and harder to get.
Eh. I use Usenet and honestly the reliability sucks. I almost never successfully get quality media from there. It’s either missing too many blocks, doesn’t exist, or is grossly mislabeled.
What torrent sites are affected?
Technically, all* could be. They’re just indexing the torrents that are out there.
*all = the ones that would list TV shows, etc. of course
Lime and eztv were the culprits for me, I removed them from automatic search in *arr
I’ve been getting exe’s and such since I’ve been using the tech for a decade or more, though it does seem to be more common lately. I only wish sonarr would have an option to automatically blacklist and search. But at least now it does have an option to fail the download before even attempting to import it.
Rargb included a .exe which if you changed to .txt was just a message saying don’t reupload. It was to prevent indexers or something with basic “don’t download .exe” rules. So that is probably why it is not fail by default in Sonarr for everyone? I don’t know for sure but it is something.