Symantec's 'Submit-A-Deal' Flawed
from the oops dept
Normally, I don't bother posting stories about flawed security on websites. We all know that they're there, and one more case doesn't really prove much of a point. However, this latest example, by Wired News' Brian Mcwilliams (who seems to be the Wired News reporter-in-charge-of-hacking) is interesting in a few ways. The story is about how Symantec's website had an option to let companies offer up business proposals (often suggesting that they be acquired). It turns out that this "submit a deal" system wasn't even the slightest bit secured. It was just wide open, so that anyone could see all the various deals that people were submitting to Symantec. As I said, news that a database that should have been absolutely private was available, is not news. However, when it happens to a company that claims to create security software, it makes you wonder. The second interesting tidbit is that this flaw exposed the fact that the Vmyths site was trying to sell itself to Symantec. This would be unfortunate, because Vmyths has made its name by pointing out the conflicts of interest all the anti-virus and security companies (including Symantec) have in announcing new virus finds. Vmyths tries to tone down the virus hype by pointing out that these companies make more money by scaring you into buying their products. For years, Vmyths has always said they wouldn't take any advertising dollars from these companies, to preserve its independence. Now, they're trying to sell out to one of them? It makes you wonder how honest they've been about Symantec claims.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Reader Comments
Subscribe: RSS
View by: Time | Thread
Deal Sites
[ link to this | view in thread ]