Password app developer overlooks security hole to preserve ads
http://www.engadget.com/2016/06/04/keepass-wont-fix-security-hole-due-to-ads/
Think it's bad when companies take their time fixing security
vulnerabilities? Imagine what happens when they avoid fixing
those holes in the name of a little cash. KeePass 2 developer
Dominik Reichl has declined to patch a flaw in the password
manager's update check as the "indirect costs" of the upgrade
(which would encrypt web traffic) are too high -- namely, it'd
lose ad revenue. Yes, the implication is that profit is more
important than protecting users.
- - -
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
I have consulted to Google, but I am not currently
doing so -- my opinions expressed here are mine alone.
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
