TheGeeks: News

[Len]

Utorrent v3 banned from 1st March 2018 

In the last few days knowledge of a major Utorrent v3.x vulnerability/security flaw discovered by Google security researcher Tavis Ormandy was made public - it was found in old and new versions of uTorrent v3.x releases dating back over 4yrs.
Our initial checks a month ago showed a severe issue and we initially banned 3.5.1S because of this.

Older uTorrent versions 1.8.2, 2.0.4 and 2.2.1 are not affected in the same way as uTorrent versions 3.x.

We therefore reluctantly have decided to ban ALL utorrent 3.x variations in alpha, beta or production releases until a firm true fix has been applied on any new v3.x releases.
from 1st March 2018 v3.x versions will NOT WORK ON THE TRACKER - you're therefore advised to change your app ASAP for your own safety.


For those who use the uTorrent version 3.x, please downgrade to the versions of uTorrent above as they are allowed versions of uTorrent (1.8.3 2.2.1 or 2.0.4). These have LESS security risks THAN v3.x

Alternatively change to a viable alt like Qbitorrent 3.3.16/4.04 -or- deluge 1.3.15 as they have a more stable environment and LOOK and behave similar to utorrent 3.x - and are FREEware.
Our approved Torrent Client list


Older 1.6.x 1.7.x 1.8.x 2.0.4 and 2.2.1 uTorrent versions will remain workable on the tracker.(These have LESS security risks THAN v3.x)

The exploits as they are do not work on 1.8.2, 2.0.4 and 2.2.1, you have uTorrent 1.8.2, 2.0.4 and 2.2.1 all you have to do is disable the Web UI (if it is enabled) and change the advanced setting "net.discoverable" to false.
Neither of these mean 2.2.1 is in the clear, but even though yes, it is outdated, and no, it is no longer maintained, it is still in better shape than newer uT versions.


Please make sure you protect yourself and have the correct settings done.


*IF* Utorrent complies with the google notification in FULL we may whitelist future v3.x releases. So far they just added another token to v3.5.3.S and it's still vulnerable because the flaw's still there.

This Utorrent ban is not a fix. 3.x has had way too many issues to think that more serious ones won't crop up.

References:
https://torrentfreak.com/bittorrent-client-utorrent-suffers-security-vulnerability-180220/

http://orbitaldownloads.com/utorrent_2.2.1-build-25249/

http://orbitaldownloads.com/utorrent_1.8.2-build-15167/info/
.
https://www.qbittorrent.org/
http://deluge-torrent.org/