Durev VPN Accused of Plagiarizing Independent Researchers' Articles for Commercial YouTube Promotion
Independent researcher zarazaexe has accused the commercial VPN service Durev VPN of repurposing multiple technical articles for YouTube advertising without attribution or permission.
The original publications covered reverse engineering of the MAX messenger, analysis of Russian TSPU whitelist mechanisms, examination of MinTsifry root certificates, and a detailed review of the Teleга client. Durev VPN converted these texts into video scripts, changed first-person statements to references to their own specialists, and removed any mention of the source author or project name.
One video titled СРОЧНО УДАЛИ СЕРТИФИКАТ МИНЦИФРЫ accumulated 795,000 views within two days. The service's Telegram bot lists 260,000 users, and the cheapest subscription costs 313 rubles per month. Rough calculations suggest that even modest conversion rates could generate several million rubles in recurring revenue from the viewed content.
Direct textual overlaps include the claim that specialists scanned 46 million Russian IP addresses and found 63,000 entries in permitted whitelists, identical descriptions of default-deny and fail-closed architectures, and matching explanations of ECH behavior under DPI inspection. The video also repeated an earlier factual error from the source article regarding total UDP blocking inside whitelists.
Additional videos reused findings from the MAX messenger analysis, including the behavior of class com.my.tracker.core.o.f, MediaDrm Widevine UUID handling in TEE, and the network_security_config.xml flag that permits cleartext traffic. Some material was also drawn from articles published by runetfreedom.
When contacted, the Durev VPN representative demanded proof of patents, suggested the research was generated by Claude, and later invoked fair use while refusing to add attribution. After receiving a DMCA warning, the representative stated the issue would be reviewed by their lawyer within one week. The researcher published the complete conversation and noted that the disputed segment referencing the 46-million-address scan was later edited out of the published video.
The service itself is registered in Kazakhstan. Its client uses the Happ application on non-Android platforms and offers test access for 17 rubles. Measured performance on the test profile showed 494 ms latency with 20 Mbit/s download and 46 Mbit/s upload speeds.
Related articles
Linus Torvalds Embraces Generative AI for Coding After Initial Skepticism
Linus Torvalds has publicly shared his evolving views on generative AI tools for programming during the Open Source Summit Europe. The Linux creator noted that AI assistance makes small personal projects more enjoyable by accelerating the path from idea to working result. He described using an AI model to modernize the outdated C-based user interface of a custom guitar pedal project. Initial AI output proved unusable until Torvalds supplied the existing implementation and clear instructions on required changes. Torvalds emphasized that AI helps newcomers achieve tangible outcomes that feel meaningful compared to professional-grade software. At the same time he urged caution when applying these tools to serious kernel development work. He also highlighted the growing burden on maintainers who must review increasing volumes of low-quality, AI-generated vulnerability reports and superficial patches.
Hacker or Engineer? Reconstructing Attack Chains in Industrial OT Networks
Positive Technologies expert Anton Kutepov presents a detailed educational scenario from the Standoff online polygon to demonstrate how security teams can trace an attack from initial perimeter compromise to unauthorized writes on a PLC. The case begins with an unexpected SCADA server command to a hydrocracking unit controller outside the maintenance window. By correlating network traffic, endpoint telemetry, authentication logs, and asset context, analysts reconstruct the full path: exploitation of a vulnerable DMZ system, lateral movement via Kerberoasting and Active Directory certificate abuse, RDP access to an engineering workstation, and finally weakening of Windows Defender on the SCADA server before issuing the control command. The analysis shows that a single permitted industrial protocol operation becomes suspicious only when placed in the context of prior defensive control changes and anomalous access routes. The article stresses that protecting OT environments requires continuous asset inventory, unified telemetry from traffic and endpoints, and pre-approved response playbooks that avoid disrupting the physical process.
Russia Sets 2030 Deadline to Deliver LTE Internet to Small Settlements
The Russian Ministry of Digital Development has outlined a timeline to provide mobile LTE internet access to small settlements with populations between 100 and 1,000 people by the end of 2030. Minister Maksut Shadaev stated in the State Duma that the next major milestone involves connecting an additional 1,800 settlements by 2027. Over the past six years, LTE service has already reached more than 8,000 such localities through the ongoing federal program. The initiative focuses on building the necessary mobile infrastructure rather than guaranteeing signal coverage at every geographic point. Residents in these areas are expected to gain reliable access to standard digital services without needing to search for optimal signal locations. Progress will be measured by actual deployed infrastructure and operational connectivity at the 2027 checkpoint.
Russian Woman Fined 15,000 Rubles for ChatGPT-Generated Bear Image That Sparked Police Hunt
A resident of Magdagachi in Russia's Amur region used ChatGPT to add a bear to a photo of Krasnoarmeyskaya street as a prank on her friend. The realistic image spread through messengers, prompting residents to alert police and sending hunters with equipment to search for the nonexistent animal. The incident reached the district head, causing widespread fear, with one local resident too afraid to leave home or visit the store. The woman later confessed to police that the image was AI-generated, admitted guilt in court under part 9 of article 13.15 of the Russian Code of Administrative Offenses, and received a reduced fine of 15,000 rubles due to her remorse and first offense. Her iPhone 15 was not confiscated after she explained its necessity for work. This marks the second similar case involving AI-generated bears, following a 30,000-ruble fine and iPhone 11 confiscation in Duldurga, Zabaykalye region, in September.