news.ycombinator.com
Ask HN: How should I go public with a security hole?https://news.ycombinator.com/item?id=4050901We're evaluating an expensive software system for a certain industry. We've found public facing exploitable holes in the login system (default passwords, improper firewalls, SQL injection), which is directly translatable into profitable fraud.That is, if we used this system and someone exploited it, they could cause direct financial harm. These systems are almost always exposed to the public internet.I spoke to the company, and they seemed rather apathetic about the situation, although they said they'd fix the SQLi. Despite the codebase being in C, they report they've had no RCE security issues, "just crashes". I find that highly unlikely, more no one bothered investigating.How should I handle this? I'm worried for my own company which is at risk, and I'd also like to publish this info, as this market tends to sweep things under the carpet. In the past, with another vendor in the same market, I've privately reported, and found the vendor lied about fixing things and did not explain theMay 31, 2012 11:04 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85d0aa9f634d5da3365ab6b0fba611&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85ec39e475431c812df0980b6420b3&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85ca9f01cb4da69b4ab2269fc2fe55&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85cc88714f418f9c8f3b8acdb5312e&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85ea0d5d9f4637ac10a61d3d87c698&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85e5cc4ea649cab60206dc6b905347&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85e18e99dd404a8b4e0b0a5a139e90&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85d2e79566478f8052c8d8fb0ec3aa&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85c8be85f34d51baafc727373a24a1&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85e3a996794b31ac4041348b8ae8ce&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85ce85d6064207ac7797b6b773e939&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Best Encrypted Flash Driveshttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85d51f31504205b33a3271350c2319&url=https%3a%2f%2fwww.pcworld.com%2farticle%2f464188%2fthe_best_encrypted_flash_drives.html&c=10353756227865127016&mkt=en-usFast, affordable, managed, the DT4000M is also one of the more affordable FIPS 140-2 certified secure flash drives on the market. If you’re physically transporting data you don’t want other people to ...May 23, 2012 6:33 PM
bing.com
The Advantages of Using Multiple Hard Drives in a PChttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85d0aa9f634d5da3365ab6b0fba611&url=https%3a%2f%2fsmallbusiness.chron.com%2fadvantages-using-multiple-hard-drives-pc-47340.html&c=8313012356115776584&mkt=en-usMost business PCs come standard with a single hard drive that's more than large enough for the typical user at work. However, in some cases, a single drive may not be the best choice for your ...May 21, 2012 3:20 AM
bing.com
The Advantages of Using Multiple Hard Drives in a PChttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85ec39e475431c812df0980b6420b3&url=https%3a%2f%2fsmallbusiness.chron.com%2fadvantages-using-multiple-hard-drives-pc-47340.html&c=8313012356115776584&mkt=en-usMost business PCs come standard with a single hard drive that's more than large enough for the typical user at work. However, in some cases, a single drive may not be the best choice for your ...May 21, 2012 3:20 AM
bing.com
The Advantages of Using Multiple Hard Drives in a PChttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85ca9f01cb4da69b4ab2269fc2fe55&url=https%3a%2f%2fsmallbusiness.chron.com%2fadvantages-using-multiple-hard-drives-pc-47340.html&c=8313012356115776584&mkt=en-usMost business PCs come standard with a single hard drive that's more than large enough for the typical user at work. However, in some cases, a single drive may not be the best choice for your ...May 21, 2012 3:20 AM
bing.com
The Advantages of Using Multiple Hard Drives in a PChttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85cc88714f418f9c8f3b8acdb5312e&url=https%3a%2f%2fsmallbusiness.chron.com%2fadvantages-using-multiple-hard-drives-pc-47340.html&c=8313012356115776584&mkt=en-usMost business PCs come standard with a single hard drive that's more than large enough for the typical user at work. However, in some cases, a single drive may not be the best choice for your ...May 21, 2012 3:20 AM
bing.com
The Advantages of Using Multiple Hard Drives in a PChttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85d7244a0d4673928e79b7654f32f5&url=https%3a%2f%2fsmallbusiness.chron.com%2fadvantages-using-multiple-hard-drives-pc-47340.html&c=8313012356115776584&mkt=en-usMost business PCs come standard with a single hard drive that's more than large enough for the typical user at work. However, in some cases, a single drive may not be the best choice for your ...May 21, 2012 3:20 AM
bing.com
The Advantages of Using Multiple Hard Drives in a PChttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85ea0d5d9f4637ac10a61d3d87c698&url=https%3a%2f%2fsmallbusiness.chron.com%2fadvantages-using-multiple-hard-drives-pc-47340.html&c=8313012356115776584&mkt=en-usMost business PCs come standard with a single hard drive that's more than large enough for the typical user at work. However, in some cases, a single drive may not be the best choice for your ...May 21, 2012 3:20 AM
bing.com
The Advantages of Using Multiple Hard Drives in a PChttp://www.bing.com/news/apiclick.aspx&aid=&tid=6a85e5cc4ea649cab60206dc6b905347&url=https%3a%2f%2fsmallbusiness.chron.com%2fadvantages-using-multiple-hard-drives-pc-47340.html&c=8313012356115776584&mkt=en-usMost business PCs come standard with a single hard drive that's more than large enough for the typical user at work. However, in some cases, a single drive may not be the best choice for your ...May 21, 2012 3:20 AM
