PassThePopcorn (PTP) News - PTP bans uTorrent 3.x

uTorrent is banned! We've blacklisted the uTorrent 3.x line-up due to a severe security flaw that can impact not only site security and the security of our peers but more-so the security of the users that are running uTorrent. This means only 1.6.x, 1.8.x and 2.x versions are allowed! See more on our torrent client whitelist.

This security flaw can allow a remote attack to download things to the affected computer using nothing more than code running in the background of a web page that is visited. This includes the ability to remotely download an executable to the machine's startup folder.

Other risks involved may be the ability to pull peer data and passkeys from the client, which is why we are taking a fairly aggressive approach of axing the entire 3.x line-up until we definitely know the flaw no longer exists in a new version. We are not ready to move forward with any faith nor optimism for the company to have actually secured their product in their latest "fixed" release.

We strongly suggest you take this severe and dangerous flaw seriously and immediately discontinue use of the client on any tracker. Just having the client running in the background is all that is required to use this exploit against you.

That said, from what we have been able to determine, the 1.6.x, 1.8.x and 2.x line are not nearly as vulnerable as the 3.x line-up. However, to be safe it is strongly advised to set Advanced -> net.discoverable to false and restart the client. For the time being, we will continue to allow 1.6.x, 1.8.x and 2.x. This may not be a lasting thing.

Ah we just reading that article, someone left a link but I have yet to try it.
Plugin to make migrating to deluge fairly painless: https://github.com/Laharah/deluge-uTorrentImport

It may help people out in this rough situation, let me know what you think and if it works well.