Durev VPN Accused of Plagiarizing Independent Researchers' Articles for Commercial YouTube Promotion
Independent researcher zarazaexe has accused the commercial VPN service Durev VPN of repurposing multiple technical articles for YouTube advertising without attribution or permission.
The original publications covered reverse engineering of the MAX messenger, analysis of Russian TSPU whitelist mechanisms, examination of MinTsifry root certificates, and a detailed review of the Teleга client. Durev VPN converted these texts into video scripts, changed first-person statements to references to their own specialists, and removed any mention of the source author or project name.
One video titled СРОЧНО УДАЛИ СЕРТИФИКАТ МИНЦИФРЫ accumulated 795,000 views within two days. The service's Telegram bot lists 260,000 users, and the cheapest subscription costs 313 rubles per month. Rough calculations suggest that even modest conversion rates could generate several million rubles in recurring revenue from the viewed content.
Direct textual overlaps include the claim that specialists scanned 46 million Russian IP addresses and found 63,000 entries in permitted whitelists, identical descriptions of default-deny and fail-closed architectures, and matching explanations of ECH behavior under DPI inspection. The video also repeated an earlier factual error from the source article regarding total UDP blocking inside whitelists.
Additional videos reused findings from the MAX messenger analysis, including the behavior of class com.my.tracker.core.o.f, MediaDrm Widevine UUID handling in TEE, and the network_security_config.xml flag that permits cleartext traffic. Some material was also drawn from articles published by runetfreedom.
When contacted, the Durev VPN representative demanded proof of patents, suggested the research was generated by Claude, and later invoked fair use while refusing to add attribution. After receiving a DMCA warning, the representative stated the issue would be reviewed by their lawyer within one week. The researcher published the complete conversation and noted that the disputed segment referencing the 46-million-address scan was later edited out of the published video.
The service itself is registered in Kazakhstan. Its client uses the Happ application on non-Android platforms and offers test access for 17 rubles. Measured performance on the test profile showed 494 ms latency with 20 Mbit/s download and 46 Mbit/s upload speeds.
Related articles
Secure Custom Domain Setup for Client Status Pages Using CNAME, Certbot and Go Instead of ACME On-Demand
A detailed case study describes how a monitoring service implemented white-label status pages on customer domains without relying on ACME on-demand certificate issuance. The approach uses pre-validated domains stored in a database, background DNS checks via CNAME or A-record matching, and a root helper script running on a systemd timer to handle certbot issuance and nginx configuration. Key design choices separate privileges so the Go application never touches certificates or nginx directly, while loopback endpoints are protected against proxy header spoofing. The solution explicitly addresses risks such as DoS through malicious Host headers exhausting Let's Encrypt rate limits, private key exposure, and first-visitor latency during TLS handshakes. Hysteresis in DNS status prevents temporary resolution glitches from disabling active customer pages. The entire implementation stays under a few hundred lines of code and runs reliably on a single server with nginx in front of the Go application.
Russia's Rassvet LEO Satellite System Enters Real-World Testing Phase
The Russian low-orbit satellite constellation Rassvet has moved from laboratory development into active field trials with real consumers across multiple regions. Bureau 1440, part of IKS Holding, has begun delivering satellite internet services and installed the first user terminal on a long-distance Russian Railways train. CEO Alexey Shelobkov stated that the project advanced to service validation in 2026, ahead of schedule, and will now test performance over large territories and in motion. The initiative aims to provide high-speed connectivity to remote areas, reduce the digital divide, and create an independent Russian hybrid communications system. Shelobkov emphasized that Rassvet is not merely a response to Starlink but a strategic necessity for sovereign infrastructure free from foreign hardware and policy dependencies. Roscosmos is simultaneously increasing engagement with private companies to commercialize space activities.
Putin Calls Rumors of Russian Bank Deposit Freeze 'Stupid Fakes'
Russian President Vladimir Putin dismissed rumors about a possible freeze on citizens' bank deposits, describing them as rather stupid fakes during a plenary session at the Eastern Economic Forum on September 3. He stated that there are no grounds for such concerns and recalled the events of 2022 when citizens rushed to withdraw funds amid anxious sentiments. The financial system handled the situation without closing cash desks, allowing all requested amounts to be disbursed calmly. Putin emphasized that Russians continue to keep money in the financial system and are increasingly directing it to the stock market. According to the Central Bank of Russia, net inflows to private investors' brokerage accounts in the second quarter of 2026 exceeded 1 trillion rubles, marking a 19% increase from the previous quarter and a record since observations began in 2021.
Building a Cybersecurity News Aggregator: Story Clustering, Seven Importance Signals and Strict Filtering Thresholds
The idea for an information security news aggregator emerged years ago with the goal of delivering only the most relevant stories while eliminating noise. Early versions relied on the rut5_base_sum_gazeta summarization model and TextRank for importance scoring, but performance remained unsatisfactory. The current system processes roughly one thousand items daily from more than 200 sources and publishes only about 0.5 percent of them. A hybrid approach now combines a transparent seven-feature formula that scores story importance with an LLM that removes irrelevant content and generates concise summaries. The formula incorporates signals such as confirmation count, CVSS severity, exploitation status from KEV, source tier, proximity to Russian readers, depth of analysis, and publication speed. Penalties are applied for vendor self-promotion, webinars, and job postings. Stories are clustered using CVE identifiers, shared trigrams, and named entities to avoid duplicate posts while preserving original reporting.