Durev VPN Accused of Plagiarizing Independent Researchers' Articles for Commercial YouTube Promotion

Independent Russian cybersecurity researcher zarazaexe has publicly accused the commercial VPN service Durev VPN of systematically copying technical articles about Russian internet censorship systems, messenger analysis, and government-issued certificates. The team behind Durev VPN allegedly rewrote the original research into YouTube video scripts, replaced first-person statements with references to their own specialists, and removed all attribution to the source author or project. One video titled СРОЧНО УДАЛИ СЕРТИФИКАТ МИНЦИФРЫ reportedly gained 795,000 views in two days, while the service's Telegram bot shows 260,000 users and charges a minimum subscription of 313 rubles per month. Specific copied elements include scanning results of 46 million Russian IP addresses that yielded 63,000 entries in TSPU whitelists, architectural descriptions of default-deny and fail-closed policies, ECH handling by DPI systems, and detailed reverse-engineering findings from the MAX messenger client. The researcher documented the reuse of his earlier errors about UDP blocking inside whitelists and identical analogies comparing root certificates to apartment keys. When confronted, the Durev VPN representative initially demanded patents, invoked fair use, and later claimed the matter would be reviewed by their lawyer within a week. The researcher published the full chat logs and removed the disputed segment from one video after the complaint.

HabrTranslated from Russian

Read at source

Independent researcher zarazaexe has accused the commercial VPN service Durev VPN of repurposing multiple technical articles for YouTube advertising without attribution or permission.

The original publications covered reverse engineering of the MAX messenger, analysis of Russian TSPU whitelist mechanisms, examination of MinTsifry root certificates, and a detailed review of the Teleга client. Durev VPN converted these texts into video scripts, changed first-person statements to references to their own specialists, and removed any mention of the source author or project name.

One video titled СРОЧНО УДАЛИ СЕРТИФИКАТ МИНЦИФРЫ accumulated 795,000 views within two days. The service's Telegram bot lists 260,000 users, and the cheapest subscription costs 313 rubles per month. Rough calculations suggest that even modest conversion rates could generate several million rubles in recurring revenue from the viewed content.

Direct textual overlaps include the claim that specialists scanned 46 million Russian IP addresses and found 63,000 entries in permitted whitelists, identical descriptions of default-deny and fail-closed architectures, and matching explanations of ECH behavior under DPI inspection. The video also repeated an earlier factual error from the source article regarding total UDP blocking inside whitelists.

Additional videos reused findings from the MAX messenger analysis, including the behavior of class com.my.tracker.core.o.f, MediaDrm Widevine UUID handling in TEE, and the network_security_config.xml flag that permits cleartext traffic. Some material was also drawn from articles published by runetfreedom.

When contacted, the Durev VPN representative demanded proof of patents, suggested the research was generated by Claude, and later invoked fair use while refusing to add attribution. After receiving a DMCA warning, the representative stated the issue would be reviewed by their lawyer within one week. The researcher published the complete conversation and noted that the disputed segment referencing the 46-million-address scan was later edited out of the published video.

The service itself is registered in Kazakhstan. Its client uses the Happ application on non-Android platforms and offers test access for 17 rubles. Measured performance on the test profile showed 494 ms latency with 20 Mbit/s download and 46 Mbit/s upload speeds.

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Other

Mail.ru Reduces Lifetime 1TB Cloud Storage Promo to Standard 8GB Quota for Select Users
Kimi K3 Open Model Surpasses Closed AI Leaders with Million-Token Context and 896 Experts
Innostage Completes Functional Testing of PT NGFW 1.10.3 Across 156 Criteria