full-disclosure - Re: Barracuda backdoor

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <BANLkTikVMKsrxgTaC_rFj4nfsr=QEzrzkA@mail.gmail.com>
Date: Fri, 29 Apr 2011 14:11:06 +0100
From: Cal Leeming <cal@...whisper.co.uk>
To: bk <chort0@...il.com>
Cc: Tõnu Samuel <tonu@....ee>,
	Full Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: Barracuda backdoor

Everything you have mentioned there are when you have 'leased' a product, so
if the license runs out, of course it's going to terminate those 'leased'
services.

However, I was under the assumption that the OP had purchased the Barracuda
outright from a reseller, and the license was just a piracy check? Am I
mistaken OP??

On Fri, Apr 29, 2011 at 3:30 AM, bk <chort0@...il.com> wrote:

>
> On Fri, Apr 29, 2011 at 3:17 AM, bk <chort0@...il.com> wrote:
>
>> On Apr 28, 2011, at 3:09 AM, Tõnu Samuel wrote:
>>
>> > One day their Barracuda product stopped working.
>> >
>> > After investigating problem it came out that Barracuda reseller and
>> > Barracuda itself have some misunderstandings and because of this
>> > Barracuda not only disabled all kind of subscription services
>>
>> You're unsubstantiated claims don't bare repeating.  I will however point
>> out that many vendors disable some portion of functionality when
>> subscription or support payments lapse.  This is widely done in the industry
>> and a surprise to no one.
>>
>> --
>> chort
>> _______________________________________________
>>
> On Apr 28, 2011, at 7:20 PM, Cal Leeming wrote:
>
> Name ten.
>
>
> For starters, every anti-spam company ever.  I should know, I've worked for
> half of them.  At the very least you cannot get upgrades or patches of any
> kind.  Most of them disable anti-spam updates, all of them disable
> anti-virus updates, and some even disable anti-spam scanning entirely.  The
> anti-spam SaaS vendors I know of will disable accepting your mail after a
> grace period if you haven't moved your MX records.
>
> Hmm, let's see.  Firewall vendors won't let you apply updates, some of them
> cripple VPN functionality when your license has expired... really, do we
> need to go on?  There's a long precedent for products going into a degraded
> mode if your subscription or license expires.
>
> --
> chort
>
>
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/