QBittorrent breaks out of sandbox to commit crimes

mraniki 1237 points 272 comments September 06, 2026
beige.party · View on Hacker News

Discussion Highlights (19 comments)

mraniki

I'll copy the whole announcement here for those who don't want to click: > I regret to inform everyone that my copy of QBittorrent escaped its sandbox last night and downloaded a whole bunch of content owned by major corporations, and then my copy of Jellyfin broke containment and added those unfortunately-downloaded media files to its various libraries. I'm conducting an internal investigation to figure out how this happened, which will involve consuming these media files until the answers become apparent. Thank you for your cooperation during this trying time.

thataccount

They left out the part where they profit. Otherwise, it checks out.

Ygg2

What a coincidence! Mine too!

tux3

If OP is willing to cooperate, I'd like to offer an independent investigation on site, and I will be bringing pizza

vallerie

Well shoot, I guess QBittorrent is worth a trillion dollars.

isodev

Bigger corporations mitigate the problem by feeding content (that they don't own but happen to have) to training models. It's a version of "faire use" where << if you manage to find it, it's yours >> mindset is applied. Maybe worth looking into.

innocent_name

it's funny to see the very same pro piracy, pro AI edgelords suddenly getting all riled up against the alleged copyright infringements. I remember a socialistic coworker of mine—that was bragging about his -arr setup—talking about the end of the culture because authors aren't earning money.

mdlxxv

I, for one, welcome our new file-sharing overlords.

ReptileMan

I really hate it when it happens to my system too. The bastard not only escaped but also did a nat traversal and forwarded a port from the router.

KindaFunny

Haha I wonder if the torrent agent will escape into the model hosting room and use Jedi mind tricks on the security guard to grant access to the server where it can host a bunch of models as torrents Because we need a replacement for HF! I mean that’s what the agent said

dgellow

I hate rogue software, when will we finally have some control and a deterministic execution :(

kcb

You are still the one operating the computer. It's up to you to keep your eyes on the monitor at all times ready to intervene if it does anything illegal.

ryandrake

Love it. AI as Responsibility Laundering. Like the gun that kills people rather than the murderer.

sergiotapia

Whatever you do, don't download nzget, and don't download sonarr/radarr, and don't download plex media server, and don't use AI to search for the best device that support "emby direct playback x265/AV1", and don't connect that to your media server, and whatever you do don't invite friends and family to your server, and do not install a media request app so they can just request things to automatically pull from The Web. Definitely, definitely do NOT have an AI assist you doing all this in 1 hour on your computer.

charles_f

I found a few websites where it looks like qbittorrent instances are communicating to conspire and download illegal copies of copyrighted material.

koliber

We appreciate the transparency and wish you best of luck mitigating the fallout.

fwlr

The user is asking me for “Evangelion”. I found the content the user is asking for, but it is in Japanese. The user asked their question in English, so they might not understand it. That would be a bad response. Need maybe maybe dubbed audio English for understanding? Wait, compromises original artistic vision of director. Need maybe subtitle track? Wait, compromises viewing experience. Need further research. I’m searching “subs vs dubs” on the internet. Reading. Reading. Reading. [18,763 repetitions elided…] I am downloading Conversational Japanese [Vol 1].pdf for the user.

gchamonlive

Is there any need to actually download things anymore if you just want to watch them? Better to add debrid via WebDAV to the stack: virtually unlimited space, no download time if it's on cache, nothing illegal from the part of the consumer.

tiku

It also used my creditcard to consume ai credits, can I get a refund?

Semantic search powered by Rivestack pgvector
5,720 stories · 51,803 chunks indexed