Results 1 to 5 of 5

Thread: How long does it take?

  1. April 28th, 2004, 08:06 PM #1
    jonathans_daddy
    jonathans_daddy is offline
    Member
    Join Date
    Mar 2004
    Posts
    94

    How long does it take?

    I found a vulnerability in a product and have contacted the company regarding it. The vulnerability would allow a remote attacker to read any file on the system. The example I sent them downloaded the SAM database. The reponse I received was that they would like to wait to release the fix in the next version which is slated to be out in a few months. Is this the way companies usually handle these types of things? I figured they would be much quicker in putting out a patch to fix it. Maybe they're taking lessons from Microsoft?
    Reply With Quote Reply With Quote
  2. April 28th, 2004, 08:14 PM #2
    kryptonic
    kryptonic is offline
    T3h 1337 N00b kryptonic's Avatar
    Join Date
    Sep 2003
    Location
    Seattle, Washington.
    Posts
    523
    Hmmm I figured they would just put out a patch as in my eyes it would be quicker. Aslo when they put out the next version are they goinng to give you a free copy seeing how you found the vuln or are they goingn to make you buy it. I think you should get a free copy or something seeing how you did find it and notify them about it.

    cheers
    kryptonic
    Reply With Quote Reply With Quote
  3. April 28th, 2004, 08:17 PM #3
    AngelicKnight
    AngelicKnight is offline
    AO Autobot AngelicKnight's Avatar
    Join Date
    Aug 2003
    Posts
    2,370
    Yeah, but patches don't make money. Making people buy the latest slightly modified version does. Gotta love it.
    Reply With Quote Reply With Quote
  4. April 28th, 2004, 08:49 PM #4
    Tedob1
    Tedob1 is offline
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,785
    so if you found it, means someone else not so honest could have found it also. your not telling them to protect their ass and help them sell their product but to protect those that have already bought it. give them a reasonable time frame in which to create a patch and let them know your going to release it when that time is up. how many have to loose so they can save.
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”
    Reply With Quote Reply With Quote
  5. April 28th, 2004, 09:02 PM #5
    Spyder32
    Spyder32 is offline
    Senior Member
    Join Date
    Oct 2002
    Posts
    4,055
    Making people buy the latest slightly modified version does. Gotta love it
    Not only that, but when there's the need for constant updates/modifications/etc you can make a WHOLE lot of money, especially in microsoft's case.
    Space For Rent.. =]
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules