Hey all. Can someone/anyone explain the reasoning for many (most) trackers:
a) Blacklisting ALL uTorrent versions when their is version 3.5.3 which patched the vulnerability.
b) Blacklisting 3.x versions and allowing 2.2.1 which is still vulnerable, but asking users to change net.discoverable to false

Now I don't argue that they want to be safe than sorry and that uTorrent 2.2.1 might be the best version yet, but software upgrades are there for a reason. And security patches are usually one of the reasons.
I personally don't agree with these semi measures.

Why not just whitelist 3.5.3 which is proven safe and urge users to upgrade to that version instead of asking to downgrade and be vulnerable, or asking to migrate to other clients using 3rd party tools and completely banning a client that has a safe version (3.5.3) and millions of active users. By the way none of these tools can migrate my 100 RSS filters and settings from uTorrent to ANY client.

/rant over

Sent from my SM-T113 using Tapatalk

Yeah @masonos, you asked a very interesting question and I'm interested in the answer too!
This is not my answer, just tell what I know. I saw some people said that utorrent 3.5.3 was not fully patched so trackers still block it! The vulnerabilities come from RFC from which user might be under attacked via browsing the site which has malicious scripts. Something like that, and I'm not good at this, lol. Looking for more info!

Ok the vulnerability was initially found by Tavis Ormandy at Project Zero https://bugs.chromium.org/p/project-...detail?id=1524

Now that issue remains open and has not yet been closed that is why some trackers are still NOT allowing all uTorrent 3.*.* versions , since Tavis does not seem to have retested the latest patch from uTorrent. He did test their first attempt and it failed badly, but they have released another version after that. By the way the way they tried to patch it the first time indicates uTorrent devs have no idea what there doing.

That said Tavis has recently tweeted "Yes, I believe there's been a new update that solves all the problems reported." https://twitter.com/taviso/status/971494080852250627

Notice that he says "believe" further indicating it is not been tested.

As for v2 it appears that the code needed to exploit the vulnerability had not been built until after v2 . V2 should be allowed and is on many trackers until a vulnerability is found in it.

To sum it all up everyone seems to be waiting on Tavis at project Zero to give the uTorrent patch the ok.

ok

Torrent is the most popular way for downloading anything easily but not it's very difficult to access the torrent site because of Geo-restriction and also not safe to download anything via Torrents. That's why I start searching for the solution and after searching what I know VPN is the best way to keep your downloading files secure from torrent. NordVPN its also great VPN for the torrent but what I search in this article you will get the Best Torrent VPN who will not only secure your files to download from torrent also guarantee to make you true Anonymity.

Originally Posted by Richard Chung

Torrent is the most popular way for downloading anything easily but not it's very difficult to access the torrent site because of Geo-restriction and also not safe to download anything via Torrents. That's why I start searching for the solution and after searching what I know VPN is the best way to keep your downloading files secure from torrent. NordVPN its also great VPN for the torrent but what I search in this article you will get the Best Torrent VPN who will not only secure your files to download from torrent also guarantee to make you true Anonymity.

An issue with utorrent is that no matter which VPN you use, utorrent's built-in functions may harm you as people mentioned in the above posts. VPN is a good choice, but to protect you safer, I also suggest using qbittorrent. And when using VPN for torrents, please don't forget to set your VPN internet driver as the client's internet connection: Options -> Advanced -> Network Interfaces -> choose your VPN connection.
P/S: I'm not a fan of qbittorrent, sure, as it lacks of what I need.

Just use qbittorrent or biglybt. These are two very good clients that are being updated regularly. Been using both since many months now. PIA seems to be the most popular VPN Service Provider among private tracker users.

The issues with utorrent are not going to end.. I have been reading these issues with patches and security threats since 2014. Its been 4 years and whenever I search something related to utorrent the most common thing that always pops up is "is Utorrent safe?"

I had a few problems with utorrent client. I switched to BitTorrents 2 weeks back. I don't think they will ever going to fix it with proper patches.

Utorrent and bittorrent are the same code and developed by thee same company it has had the same issues . Just the gui is different.

https://engineering.bittorrent.com/2...-utorrent-web/

Isn't utorrent the client that used the user's machine to mine bitcoins?
And only after it was reported removed it?

I would stay away from such torrent clients. I understand that it's very usable
(at least it was last time I tried it) but I wouldn't trust this client any more
after this scandal.

That said, I don't think that this is necessarily the reason why it was banned
(vulnerabilities are also big issue as mentioned earlier) but it would add some
points if I were a torrent tracker owner.