full-disclosure - Re: Barracuda backdoor

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <112122.1304048449@localhost>
Date: Thu, 28 Apr 2011 23:40:49 -0400
From: Valdis.Kletnieks@...edu
To: Tõnu Samuel <tonu@....ee>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Barracuda backdoor

On Thu, 28 Apr 2011 19:18:59 +0300, Tõnu Samuel said:

> From: Chelsi Newland [mailto:cnewland@...racuda.com] 
> Sent: Wednesday, April 27, 2011 5:51 PM
> Subject: FW: Current (Expires 2011-11-21)
> Importance: High
>
>
> Please note we have proof of payment to you from the end user.  Either
> reimburse this customer, or send payment for this order.
>
> Please advise payment on your account so we can enable their unit.
>
> Sincerely,
>
> Chelsi Newland| Barracuda Networks | Credit/Collections Manager

You *do* realize that isn't proof of anything other than "show us the money or
we turn off the subscription features" - which is a known common and well
documented practice (see the NANOG thread I referenced).  I don't see anything
here that says they went out of their way to *totally* break the unit.

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/