4 ms·

This is how you do a security alert. Notify the manufacturer of the software, notify the press so it is made public and thus people will install updates, and k

by 51Cards 15y ago

This is how you do a security alert. Notify the manufacturer of the software, notify the press so it is made public and thus people will install updates, and keep the details secret until it's fixed. Kudos to the discoverer.

r00fus 15y ago
You know, it's a bit of FUD since I have no workaround/prevention angle. Great. I run skype on one of my machines (OSX) and it's now vulnerable...
- cheald 15y ago
  Our solution is "Use Google Talk until it's resolved".
  - rmoriz 15y ago
    sadly no screen/desktop sharing
    - code_duck 15y ago
      with either intended or unintended partners, hmm?
    - mirkules 15y ago
      iChat works well for that.
    - dools 15y ago
      Check out showscreen.com - it's better than Skype I reckon
nbpoole 15y ago
Unfortunately, it's not so simple. Alerting the public before a fix is out is a double-edged sword: it also means malicious attackers have a chance to replicate the finding and abuse it.
- lancewiggs 15y ago
  Then perhaps the flow should be amended: Alert the public after the fix, or after a week, whichever is the earlier.