1.3 FS no go + ransomware alert ? #236

New Issue

icwtch · 2021-11-06T12:34:46Z

icwtch commented

2021-11-06 12:34:46 +00:00

Hi, follow-up to my other post. Tested out another file sharing session. Sender on MacOS Big Sur. Receiver on Windows 11. Both on cwtch 1.3.File was 67 Mb file.
Starting speeds were hovering around 20 kbps.
At about 80% of transmission, uploading speeds progressively deteriorated, to get to 5 kbps after more than 2 hours of uploading.
Next morning, file still didn't finished uploading and speeds were 1 kbps...
Secundo, looking for some sort of log on MacOS console, only thing i could find was this :

XXXXXXXXXX RansomWhere[109]: OBJECTIVE-SEE RANSOMWHERE?: /Applications/Cwtch.app/Contents/MacOS/Cwtch is quickly creating encrypted files

So basically an alert from the OS thinking cwtch is ransomware !
So, for me, file-sharing on cwtch just isn't ready for prime time yet, which basically means reverting to onionshare till it's fixed...

Hi, follow-up to my other post. Tested out another file sharing session. Sender on MacOS Big Sur. Receiver on Windows 11. Both on cwtch 1.3.File was 67 Mb file. Starting speeds were hovering around 20 kbps. At about 80% of transmission, uploading speeds progressively deteriorated, to get to 5 kbps after more than 2 hours of uploading. Next morning, file still didn't finished uploading and speeds were 1 kbps... Secundo, looking for some sort of log on MacOS console, only thing i could find was this : > XXXXXXXXXX RansomWhere[109]: OBJECTIVE-SEE RANSOMWHERE?: /Applications/Cwtch.app/Contents/MacOS/Cwtch is quickly creating encrypted files So basically an alert from the OS thinking cwtch is ransomware ! So, for me, file-sharing on cwtch just isn't ready for prime time yet, which basically means reverting to onionshare till it's fixed...

kalos commented

2021-11-06 17:20:51 +00:00

On secundo - that's Patrick Wardle's utility RansomeWhere doing its job and reporting that files are being encrypted. All it means is that Cwtch is doing it's job. It's not a value judgement.

sarah commented

2021-11-06 17:40:13 +00:00

File-sharing on cwtch just isn't ready for prime time yet, which basically means reverting to onionshare till it's fixed...

There are definitely performance improvements that we can make (and will make afer a few more fundemental issues have been addressed).

It's an experiment for a reason, though on the speed front Tor itself has been suffering from a period of performance issues over the last couple of weeks - https://metrics.torproject.org/torperf-failures.html?start=2021-08-08&end=2021-11-06&server=onion

/Cwtch is quickly creating encrypted files

This is hilarious. Things might improve with the new storage engine I'm in the middle of implementing which should reduce the number encrypted files that Cwtch creates.

But, Cwtch will create encrypted files - to have that as any kind of IoC strikes me missing the forest for the trees.

> File-sharing on cwtch just isn't ready for prime time yet, which basically means reverting to onionshare till it's fixed... There are definitely performance improvements that we can make (and will make afer a few more fundemental issues have been addressed). It's an experiment for a reason, though on the speed front Tor itself has been suffering from a period of performance issues over the last couple of weeks - https://metrics.torproject.org/torperf-failures.html?start=2021-08-08&end=2021-11-06&server=onion > /Cwtch is quickly creating encrypted files This is hilarious. Things might improve with the new storage engine I'm in the middle of implementing which should reduce the number encrypted files that Cwtch creates. But, Cwtch will create encrypted files - to have that as any kind of IoC strikes me missing the forest for the trees.

icwtch commented

2021-11-06 18:05:17 +00:00

thx for the feedback. The thing that bothers me is that the share never finishes,it kinda goes into a braindead state and just keeps going at 1 kbps, so a share of >70 Mb after 10 hours still didn't manage to get completed.
@kalos yea that's right, i have that utility running and actually allowed cwtch for doing its thing.
@sarah no problem having cwtch encrypting files, but for the moment file-sharing just isn't usable enough for me to opt in...

thx for the feedback. The thing that bothers me is that the share never finishes,it kinda goes into a braindead state and just keeps going at 1 kbps, so a share of >70 Mb after 10 hours still didn't manage to get completed. @kalos yea that's right, i have that utility running and actually allowed cwtch for doing its thing. @sarah no problem having cwtch encrypting files, but for the moment file-sharing just isn't usable enough for me to opt in...

dan closed this issue

2022-04-11 15:56:16 +00:00

Sign in to join this conversation.