Security company sues Ars Technica for reporting bug

Stefan Mileschin · 24th December 2017, 05:53

Insists that bug in Keeper could not steal password.

Keeper, a password manager software maker, has filed a lawsuit against a tech reporter and Ars Technica over reporting a vulnerability disclosure in its product.

According to ZDNet Dan Goodin, security editor at Ars Technica, was named defendant in a suit filed Tuesday by Chicago-based Keeper Security, which accused Goodin of "false and misleading statements" about the company's password manager.

Goodin’s story was published in December 15, and quoted Google security researcher Tavis Ormandy, who said in a vulnerability disclosure report he posted a day earlier that a security flaw in Keeper allowed "any website to steal any password" through the password manager's browser extension.

When Ormandy tested the bundled password manager, he found a password stealing bug that was nearly identical to one he previously discovered in 2016. He posted a proof-of-concept exploit for the new vulnerability.

http://fudzilla.com/news/45255-secur...-reporting-bug

24th December 2017, 05:53	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 148,500	Security company sues Ars Technica for reporting bug Insists that bug in Keeper could not steal password. Keeper, a password manager software maker, has filed a lawsuit against a tech reporter and Ars Technica over reporting a vulnerability disclosure in its product. According to ZDNet Dan Goodin, security editor at Ars Technica, was named defendant in a suit filed Tuesday by Chicago-based Keeper Security, which accused Goodin of "false and misleading statements" about the company's password manager. Goodin’s story was published in December 15, and quoted Google security researcher Tavis Ormandy, who said in a vulnerability disclosure report he posted a day earlier that a security flaw in Keeper allowed "any website to steal any password" through the password manager's browser extension. When Ormandy tested the bundled password manager, he found a password stealing bug that was nearly identical to one he previously discovered in 2016. He posted a proof-of-concept exploit for the new vulnerability. http://fudzilla.com/news/45255-secur...-reporting-bug

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Tesla sues ex-Autopilot chief for stealing company secrets	Stefan Mileschin	WebNews	0	29th January 2017 13:55
OS X 10.11 El Capitan: the Ars Technica review	Stefan Mileschin	WebNews	0	1st October 2015 18:01
CNN wants to prove that drones are safe for news reporting	Stefan Mileschin	WebNews	0	25th June 2014 08:15
Intel to Change Financial Reporting Structure	Stefan Mileschin	WebNews	0	8th April 2014 08:56
OS X 10.9 Mavericks: the Ars Technica review	Stefan Mileschin	WebNews	0	23rd October 2013 10:58
Crytek 'Not Enforcing' Bug Reporting Ban	Stefan Mileschin	WebNews	0	31st January 2013 07:02
Ars Technica acquired	jmke	WebNews	1	19th May 2008 18:27
Audio-Technica ATH-EW9 Headphones	jmke	WebNews	0	18th August 2006 17:08
Ars Technica 2006 CES coverage	jmke	WebNews	0	5th January 2006 16:36
Microsoft buys security company	jmke	WebNews	6	19th December 2004 21:58