In uTorrent 2.2.1 the absolute worst that could happen would be that you would get the popup informing you something was wrong by asking for admin name and admin password (and even this non-exploit required a rather bizarre set of circumstances that normal users would never encounter, most would not have the webui module installed but even if they did it requires you to have set two options that no one would normally change from default).Įven the 'least' of the potential problems, which was crashing the client, had zero people reporting that this happened to them when using uTorrent 2.2.1. Read the 'modern client' patch notes and you will see when each eventually fixed these issues, and yes these 'modern clients' are still somewhat risky to use as iirc they all have claimed to have fixed one or more of these attacks only to have failed to do so correctly (just like uTorrent 3.x did). This means 'modern clients' like qbit, deluge, and transmission were actually the ones you could exploit while uTorrent 2.2.1 users were safe. The irony here is that, once again, all so called modern clients were fully and completely susceptible to this exploit (or all three versions of dns rebind, cross site attacks, and token spoofing) for an unknown period of time (assume years here). None banned uTorrent 2.2.1 because of this flap, and as far as I know every site that temp banned 2.2.1 when this story broke allows uTorrent 2.2.1 again. This trickled down the private tracker hierarchy and now no site accepts that this fake news exploit affects 2.2.1 at all.or they would have banned the uTorrent 2.2.1 client. It may well be that the uninformed on reddit did not read the evidence as presented on the HDB thread that led to HDB immediately un-blacklisting uTorrent 2.2.1 after the fake news in the flap was disproved. None yet have been able to (the most recent big example was PTP's banning of uTorrent for a few days that was, without revealing anything critical, never going to be a long term ban, they can pop on and post about it if they want of course). If you think that you can prove it then do so. UTorrent 2.2.1 is not susceptible to this exploit and never was. This is the classic example of fake news in action. BitTorrent / uTorrent (current versions are essentially the same client nowadays)Īlso see the sidebar Related Links list under 'Client Software'.

That aside the 'main' ones in use tend to be Deluge, qBittorrent, rTorrent, Transmission, uTorrent 2.2.1. Most people do not recommend using the current BitTorrent/uTorrent clients nowadays.

Reddit utorrent 2.2.1