Some of Our Sources
- Techcrunch
- Just Creative
- Pearsonified
- You The Designer
- Inspiredology
- Crazy Leaf Design
- Web Design Ledger
- Wal You
- Willems Lab
- Dev To
Help Webnuz
Referal links:
May 6, 2015 02:00 am
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/8AX07wlQudY/cyberlock-lawyers-threaten-security-researcher-over-vulnerability-disclosure
Cyberlock Lawyers Threaten Security Researcher Over Vulnerability Disclosure
qubezz writes: Security researcher Phar (Mike Davis/IOActive) gave his 30 days of disclosure notice to Cyberlock (apparently a company that makes electronic lock cylinders) that he would release a public advisory on vulnerabilities he found with the company's security devices. On day 29, their lawyers responded with a request to refrain, feigning ignorance of the previous notice, and invoking mention of the DMCA (this is not actually a DMCA takedown notice, as the law firm is attempting to suppress initial disclosure through legal wrangling). Mike's blog states: "The previous DMCA threats are from a company called Cyberlock, I had planned to do a fun little blog post (cause i ... hate blog posts) on the fun of how I obtained one, extracted the firmware bypassing the code protection and figured out its "encryption" and did various other fun things a lock shouldn't do for what its marketed as.. But before I could write that post I needed to let them know what issues we have deemed weaknesses in their gear.. the below axe grinderery is the results. (sic)" What should researchers do when companies make baseless legal threats to maintain their security-through-obscurity?Related: Bitcoin exchange company Coinbase has been accused of spying on a dark net researcher.Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/8AX07wlQudY/cyberlock-lawyers-threaten-security-researcher-over-vulnerability-disclosure
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot