105
14-Year Vulnerability in qBittorrent Leaves Millions Exposed to RCE Attacks (securityonline.info)
submitted 19 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
10 comments fedilink hide all child comments
top 10 comments
sorted by: hot top controversial new old
[-] deltapi@lemmy.world 7 points 6 hours ago

Wow this sure is overstated. The biggest actual risk here is ISPs doing deep inspection and getting data from private trackers.

Not nothing, but the 'RCE' they are claiming relies on an edge case and a lot of manual work on the part of a potential attacker who would also need to be able to intercept your traffic on the off chance you run qbit on windows and use qbit to install python.

This, to me, is a big nothing burger.

[-] ryannathans@aussie.zone 30 points 14 hours ago

Bit overblown given you need to be on windows, actively MITM attacked and manually updating Python via qbittorrent

[-] higgsboson@dubvee.org 6 points 12 hours ago

Nice... I was putting off 5.0.0 because I never install major releases until there's been a patch. I worked in software too long to trust.

[-] doc@fedia.io 30 points 18 hours ago

Upgrade to 5.0.1 to patch.

[-] JoeKrogan@lemmy.world 5 points 14 hours ago

Thanks for posting OP ๐Ÿ‘

[-] n3m37h@sh.itjust.works 18 points 19 hours ago

Will be updating tonight, cheers

[-] ThePantser@lemmy.world 7 points 19 hours ago

I switched back to nzb full time last week. Don't need to run a VPN and it is more stable. It's still cheaper than streaming with 2 paid indexers and 2 paid servers.

[-] devfuuu@lemmy.world 4 points 14 hours ago

not including the full speed and no need to think about seeds. I miss using usenet, should go back to it.

[-] Robust_Mirror@aussie.zone 2 points 6 hours ago* (last edited 3 hours ago)

I do stremio + torrentio addon + real Debrid.

Interface and features on par with any modern streaming service (continue watching, new episode alerts, library, categories, search etc), every show and movie all in one app, full speed, no need for VPN or worry about seeds (I've found shows with 0 seeds that work because it was cached on real Debrid) for $3/month.

Also supports a ton of devices/TV's. Dead simple to use once it's set-up, my parents and in laws both use it with no issue on Chromecast with Google TV after I set it up for them.

Oh and if you don't want to pay you can forget real Debrid and it'll still stream torrents at the cost of slightly worse loading times (but entirely usable, I did it for 3 years) but if you live somewhere that you feel the need to use a VPN for that, unless you also use the VPN for something else putting that money into real Debrid instead is worth it.

[-] kitnaht@lemmy.world 3 points 18 hours ago

Paid indexers? Isn't everything on the DHT anyhow? And a VPN is only $2/mo.

this post was submitted on 31 Oct 2024
105 points (96.5% liked)

Cybersecurity

5607 readers
202 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !cybersecurity@lemmy.capebreton.social !securitynews@infosec.pub !netsec@links.hackliberty.org !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 1 year ago
MODERATORS
kid@sh.itjust.works
Lanky_Pomegranate530@midwest.social