• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

The Chilling Effect

H

HardOCP News

[H] News
Joined
Dec 31, 1969
Messages
0
If you have a few moments, I recommend you check out this article that discusses, according to the author, how the web makes creating software vulnerabilities easier, disclosing them more difficult and discovering them possibly illegal.

In April, the same physics department website was hacked. A detective approached Meunier, whose name was mentioned by the staff of the vulnerable website during questioning. The detective asked Meunier for the name of the student who had discovered the February vulnerability.
Click to expand...
 
If companies want to treat "friendly" disclosure in this manner. Then they deserve the consequences that such actions bring.

However, Dr. Meunier might consider advising CERT that due to these issues "other software" should be acquired, and this company's contract should be terminated. Universities can't afford to utilize software that has such vulnerabilities. Companies like this have to be forced to take responsibility for the quality of their code.
 
You must log in or register to reply here.
Back
Top