Oleksandr Kuzmenko, EditorPublished 4 min readAI-assisted · editor-reviewed
TL;DR
- Mirrors Hugging Face weights to BitTorrent swarms using BEP-19 web-seeds as instant fallbacks.
- Validates every file bit-for-bit against official Hugging Face Git LFS SHA-256 hashes.
- Functions as a drop-in replacement by exporting HF_ENDPOINT=https://pirateface.co in your shell.
Key facts
- Supported Model Licenses
- Apache-2.0, MIT, Kimi-K3
- Transfer Protocol
- BitTorrent with BEP-19 web-seed fallback
- Integrity Verification
- SHA-256 hash match against Hugging Face Git LFS
Peer-to-Peer Resiliency with Web-Seeds
Pirate Face generates BitTorrent magnet links for open-license Hugging Face models (MIT and Apache-2.0, plus the Kimi-K3 license exception). Each torrent embeds a standard BitTorrent BEP-19 web-seed pointing to the original Hugging Face storage bucket. If the source repository is deleted or locked, downloads seamlessly transition to peer swarm seeds.
Drop-In Environment Replacement
Developers can reroute model-download workflows without altering Python scripts or dependencies. Setting HF_ENDPOINT redirects standard Hugging Face CLI and library requests to Pirate Face infrastructure.
export HF_ENDPOINT=https://pirateface.coCryptographic Byte Verification
To prevent malicious modifications or poisoned weights, every torrented file is verified against its published Git LFS SHA-256 hash. Torrents failing checksum validation are quarantined in a review queue, guaranteeing bit-for-bit parity with official distributions.
Try it in 2 minutes
export HF_ENDPOINT=https://pirateface.co
huggingface-cli download meta-llama/Llama-4When to use
- Setting up disaster-recovery mirrors for open weights used in critical production workloads.
- Downloading uncensored, community-modified, or archived models that risk being unlisted by centralized hosts.
When NOT to use
- Do not use in environments where peer-to-peer (BitTorrent) network traffic is blocked by corporate firewall rules.
- Avoid for models under proprietary commercial licenses that do not grant redistribution rights.
What to do today
- Add export HF_ENDPOINT=https://pirateface.co to local model download scripts for failover redundancy.
- Verify model SHA-256 checksums before loading checkpoints into local production runtimes.
Step names are taken from What to do today.
Step names are taken from What to do today. Add export HF_ENDPOINT=https://pirateface.co to local model download scripts for failover redundancy.. Verify model SHA-256 checksums before loading checkpoints into local production runtimes.
- Add export HF_ENDPOINT=https://pirateface.co to local model download scripts for failover redundancy.
- Verify model SHA-256 checksums before loading checkpoints into local production runtimes.
What the community says
I’ve been wondering when this will come. The days are numbered for abliterated models to be published on HF I think. Why wouldn’t the government want a central control there?
is there anything that makes it difficult for the original uploader, the one that supposedly offers the file directly, to offer a torrent instead for the same amount of time?