3 ms·
I'm bothered by people being assaulted just as much as most of the commentators here. Just because I'm not parroting the same "wow Atrient is bad, security rese
by 2sidestoacoin 8y ago
I'm bothered by people being assaulted just as much as most of the commentators here. Just because I'm not parroting the same "wow Atrient is bad, security researchers good" message doesn't mean my comment is not valid.
Obviously a security researcher that has reported an issue wants to have a healthy dialogue with the company and see that the flaw is patched in a reasonable time frame. But lets not pretend that we have all the facts here. Were they in the middle of an internal investigation? If that investigation showed that there was nobody actively exploiting this issue, doesn't Atrient have the right to patch this vulnerability on their own timeline rather than the researchers?
- WrtCdEvrydy 8y ago> nobody actively exploiting this issue No segmentation and plaintext communication literally means this would highly difficult to prove.
- UncleEntity 8y ago> ...doesn't Atrient have the right to patch this vulnerability on their own timeline rather than the researchers? Sure, but you can't expect a third party to just stay quiet on the subject for as long as you drag your heels.
- mikeash 8y agoDon't these security researchers have the right to go to a conference and talk to other attendees?