Stop using uTorrent
Tavis Ormandy, the gifted gunslinger from Google Project Zero, has a new warning: Stop using uTorrent, both as a program running on your computer, and on the web.
Günter Born has a good explainer. His take:
Any files (which are write enabled) could be removed from the victim’s computer. All it takes is to lure the user to a prepared website.
An interesting side-note, from kuchikir on the Project Zero site says that earlier versions of uTorrent are just fine. Versions from 3.0 onward (according to his/her tests) are vulnerable:
The torrenting community largely eschews 3.0+ because the only apparent work post-2.2.1 has been to add advertisements, bloating 2.2.1’s 391KB of torrenting perfection into a 1MB+ monstrosity. The last meaningful exploit that wasn’t introduced by these 3.x additions was fixed in version 1.6.1, which was released in 2007. 1.6.1, 1.8.5, 2.0.4, and 2.2.1 are all recommended clients for this nearly unparalleled level of security to go with their stability and performance.
https://www.askwoody.com/2018/stop-using-utorrent/
-
Spartan@HIDevolution Company Representative
I stopped using uTorrent since it went form V2 to V3. Anyone using uTorrent post v2 is like saying I'm ok to have a virus on my computer.
-
Spartan@HIDevolution Company Representative
Ditto, been using it for years -
Thanks for the tip!
-
When I was on Linux I tried few different clients but it felt not complete for me. Now I use utorrent 1.8.2 and it's just working.
I would try 1.8.4 if I had a link for it. -
BitIso, flud, Negashade(discontinued),
-
Tixati.
-
Okay, this isnt done intentionally, its a flaw.
https://thehackernews.com/2018/02/torrent-download-software.html?m=1Maleko48 likes this. -
I like to use Deluge.
-
Been using qBittorrent and while it was a little irritating at first I was able to change it up to how I am used to using a client.
Having the web interface is nice when I am too lazy to get out of bed to start the torrents before going to sleep.
UTorrent warning
Discussion in 'Security and Anti-Virus Software' started by Primes, Feb 23, 2018.