Tridium patches control systems bug after a year More than 300,000 automation systems – covering lighting control, building automation and security, heating and air conditioning and more – need patching after a slew of vulnerabilities in the Tridium Niagara AX went public thanks to an ISC-CERT advisory. The announcement of the vulnerabilities comes nearly synchronously with …
I hope they gave him a little incentive at the end of it all. The other day I watched an interview with the guy who compromised one of the most common hotel keycard locks - he said he never even bothered to contact the vendor because there was no way to fix the issue without replacing ~4 million circuit boards, so (more or less) "[f*ck it]".
Companies really should treat these guys right when they try to be helpful like this.
OK so if I somehow stumble across a gaping hole in someone's product that could cause their customers terrible consequences and spend a year of my time working with them to help resolve their issue I should be content that they don't press charges?
...and we wonder why security in so many products is complete shit.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
