tribler

This release contains critical security updates.
PLEASE UPDATE from V6.4.0 to V6.4.1.

The anonymity in V6.4.0 did not function properly.
Users are advised to only enable anonymous downloading in V6.4.1 it if
they understand the implications stated within the on-screen advisory.

Our experimental hidden seeding feature did not perform adequately.
You are likely to function as a exit node for the traffic of other
users. Very very bad of us. We're working hard on fixing this issue,
but that will take significant amount of work (issue #23 in Github).

We want to get this right. We are very grateful for the help that
security expert "Yawning" is giving us. All critical issues raised by
him/her are either fixed or are being working on. Especially the
advise to replace our simplistic AES-ECB with AES-GCM saved us quite
some development time. You can track our progress at:
https://github.com/Tribler/tribler/issues/1066
Detailed issues:

• removed all references to gmpy.rand (security cleanup)
• one-time AES keys are generated with python's random.randint() (FIXED)
• code for researching homomorphic encryption removed, how not to do
  RSA: def rsa_encrypt(key, element) (security cleanup)
• warn user about the dangers of enabling anonymity (temporary emergency fix)
• Fix Tribler crashes when starting Tribler just after stopping it.
• Fix: allow removing torrents from own channel (Thanks Dan Arnould!)
• Fixes for the tunnel community.
• Make TunnelCommunity (P2P encrypted proxy downloads) loading configurable and disabled by default
• Opt-in dialog for TunnelCommunity
• Several fixes and cleanups for the cryptographic code.
• Update .deb dependencies
• Update windows packager for new curves.ec location
• Updated tunneled download test description

To see a complete list of the changes, please see:
https://github.com/Tribler/tribler/compare/v6.4.0...v6.4.1

Replace swift with TFTP for torrent collecting.

Complete re-write of most important functions in Tribler.

• hot fix from 6.3.0 for database upgrade
• A year of bug fixing, polishing and performance tweaking
• towards anonymous streaming
  • Tor-like anonymous tunnel building, based on UDP
  • Support for Cell,Create,Extend, and Ping Tor protocol messages
  • Diffie-Hellman session key exchange
  • Real-time crawler for bandwidth performance (inspired by metrics.torproject.org)
  • decentralised directory service for Tor-like routers
  • automatic anonymous 50MByte test download using new Tor-like protocol
  • no general anonymous downloads yet, trial-only
• thumbnail navigation
  • single-click streaming from main screen
  • channels can now optionally be browsed by thumbnails
  • Youtube-like GUI composed of user-generated images
  • Prepares the way for remote control navigation & operation
• complete rewrite of the elastic database engine (the dispersy overlay)
  • use of Twisted frameworks instead of our custom event-handlers
  • less reliance on master bootstrap servers (new discovery community)
  • improvements in NAT puncturing efficiency
  • faster data synchronisation between Tribler peers
• dropped support for Mac models from 2008, due to Python support issues

Click here for a detailed view of all 2540 commits, 429 changed files with 8,871 additions and 20,864 deletions:
https://github.com/Tribler/tribler/compare/Tribler:v6.2.0...v6.3.0

Never released, went to V6.3.1 directly.

Changes since last version:

• Video on demand is back! No more waiting for video downloads! Also, we have seeking now.
• Less disk and CPU consumption
• UI improvements
• Fixes for the bugs found in 6.1 and reported by the community during the 6.2 RCs (Thanks!)