Oh no no no this is absolutely not an inside job, lets really stop and
think here a minute. Why would AI Squared effectively throw themselves
under the bus by offering an app update with such a message, only to
repair it later with a statement saying they were going to beef up
security? The app central repository is open, but it might not be for
much longer if this crap kkkeeps up! There's always gotta be one bad
apple in the bunch to try and ruin everyone's time.
On 1/16/2015 4:21 PM, Chris wrote:
Not likely an inside job. There is a reason this was done as an app
update and not a part of a patch to Window eyes itself. The app
central server has always been quite open to allow users of Window
eyes to develop and share apps. The apps themselves are insular from
Window Eyes itself, IOW you couldn't get an app to wreck people's
Window Eyes, you could only do things that would affect performance as
long as the app is running.
Up until now, nobody has taken advantage of this openness. Now, thanks
to one person's idiocy, AI Squared is going to have to take measures
to keep this from happening again. I am sure we will still get user
developed apps, but the process is going to become slower and more
complicated.
Regards,
Chris
-----Original Message----- From: Stephen Clark
Sent: Friday, January 16, 2015 2:00 PM
To: [email protected]
Subject: Re: Bad News, Good News
I find it very disconcerting as well that it happened right after the
product is released by ASQuare. I'm thinking it's an inside job with in
the company. Unless they really gave that much control over to their
consumers. In that case, WOW! that's even worse.
Either way, the whole thing is really sick.
On 1/16/2015 3:19 PM, Chris Skarstad wrote:
obviously this individual possesses a real knowledge of Window-eyes
scripting, to the point that they were able to circumvent GW Micro/AI
Squared's app update servers, and set it so the announcement would
happen every few minutes. That's not something the average joe user
knows how to do. it's very disconcerting, and I hope this individual
will not be allowed to continue with these antics.
On 1/16/2015 2:52 PM, net bat wrote:
they are testing the waters, so to speak to see how far they could
go. if
they attack again they will do real damage to us if they are not
stopped.
-----Original Message-----
From: Chris Skarstad
Sent: Friday, January 16, 2015 11:39 AM
To: [email protected]
Subject: Re: Bad News, Good News
Well, the beta process ended when the full
window-eyes 9 was released a couple days ago, so no harm was done
there. Really, all this individual did was insert a bunch of scary
words into an app update. Folks either found it annoying or
disturbing,
probably a bit of both, but no actual harm to any systems was done.
That doesn't mean that someone might not try, which is why AI
Squared is
beefing up security. Good idea there.
On 1/16/2015 1:41 PM, Max G. Swanson wrote:
The bad news is of course that our insular world of sightless
computing
has apparently been invaded by some mean-spirited hacker. GW
Toolkit, as
an app on practically all systems running W.E., is certainly a good
target
choice if there's ill intent.
The good news is that the leak has been plugged, and the whole
program is
running somewhat smoother with the updated toolkit installed. Perhaps
this effort sabotaged the whole beta process.
Hope I'm not opening a can of worms by discussing this subject, as I
didn't see mention of it in the latest Digest--only in the
announcement
from AI Squared. Of course my reading of the latter half of said
digest
was hampered by some of the usual stop-and-start, and the
Browse-Mode-Find
feature's confusing number-signs with greater-thans during multiple
searches.
Things are, nevertheless, improving, thanks to the savvy and
vigilant crew
at GW/AI!
If you reply to this message it will be delivered to the original
sender
only. If your reply would benefit others on the list and your
message is
related to GW Micro, then please consider sending your message to
[email protected] so the entire list will receive it.
GW-Info messages are archived at http://www.gwmicro.com/gwinfo. You can
manage your list subscription at http://www.gwmicro.com/listserv.
If you reply to this message it will be delivered to the original
sender only. If your reply would benefit others on the list and your
message is related to GW Micro, then please consider sending your
message to [email protected] so the entire list will receive it.
GW-Info messages are archived at http://www.gwmicro.com/gwinfo. You
can manage your list subscription at http://www.gwmicro.com/listserv.
If you reply to this message it will be delivered to the original
sender only. If your reply would benefit others on the list and your
message is related to GW Micro, then please consider sending your
message to [email protected] so the entire list will receive it.
GW-Info messages are archived at http://www.gwmicro.com/gwinfo. You
can manage your list subscription at http://www.gwmicro.com/listserv.
If you reply to this message it will be delivered to the original
sender only. If your reply would benefit others on the list and your
message is related to GW Micro, then please consider sending your
message to [email protected] so the entire list will receive it.
GW-Info messages are archived at http://www.gwmicro.com/gwinfo. You
can manage your list subscription at http://www.gwmicro.com/listserv.
If you reply to this message it will be delivered to the original
sender only. If your reply would benefit others on the list and your
message is related to GW Micro, then please consider sending your
message to [email protected] so the entire list will receive it.
GW-Info messages are archived at http://www.gwmicro.com/gwinfo. You
can manage your list subscription at http://www.gwmicro.com/listserv.
If you reply to this message it will be delivered to the original sender only.
If your reply would benefit others on the list and your message is related to
GW Micro, then please consider sending your message to [email protected] so
the entire list will receive it.
GW-Info messages are archived at http://www.gwmicro.com/gwinfo. You can manage
your list subscription at http://www.gwmicro.com/listserv.
