thewayne: (Default)
$10,000,000AU later....

The Australian Competition and Consumer Commission has fined Dell AU $10mAU (approx $6.5mUS) after a nasty little sales scheme was uncovered and reported. Dell AU would show a PC for sale, and on the side show a monitor with a price crossed out and a lower price shown as a possible add-on. Except the lower price was actually higher than if you'd navigated elsewhere in the site and added the monitor on yourself.

Pretty damn scummy! But hey, they're a corporation, what do you expect?

In addition to the fine, Dell AU is paying reparations WITH INTEREST! And probably pinky swears not to do it again.

Now, the best thing about the fine amount? I mean, $10mil seems a bit small. THE FINE AMOUNT IS MORE THAN DELL MADE WITH THEIR PRICING SHENANIGANS! So their attempt at scamming the public actually caused them to lose money on the scam! THIS is how government fines should work - if you're found to have done something deliberately abusive to the public, the fine should negate any profit that you made from what you did, AND cost you beyond that!

https://arstechnica.com/gadgets/2023/08/dell-fined-6-5m-after-admitting-it-made-overpriced-monitors-look-discounted/
thewayne: (Default)
Adobe Photoshop contains a buffer overflow vulnerability in its TIFF features that has already been the target of a public proof-of-concept exploit, as well as another unspecified security problem that allows attackers to secretly infect systems simply by getting users to open a specially crafted file.

I just bought, new, full student price, Adobe Creative Suite CS5.5, late last year. Probably 7 or 8 months ago. And now they want me to pay $200 for a bug in the system that everyone else patches for free. There's another wonderful quote from the article: "Adobe only makes the general recommendation that its customers should "follow security best practices and exercise caution when opening files from unknown or untrusted sources" as the holes do represent substantial threats."

"Security best practices" from everyone else is to download and install a patch that is freely available from the vendor. This idiocy from Adobe is going to cost them a lot of customers who are going to stop paying for the product and start pirating it. I am very happy with the feature set of the 5.5 suite and see no need to upgrade to PS 6 at this time, so I think I'm going to risk staying unpatched. I don't normally deal with files from untrusted sources, I'll have to be more vigilant about TIFF files, though. The unspecified vulnerability does concern me, though.

And there is proof of concept code for this exploit in the wild. Now that Adobe says it's not going to help people with software less than a year old, it will massively raise the visibility of this bug on the radar of exploiters and IT WILL be targeted.

http://www.h-online.com/security/news/item/Adobe-puts-a-price-tag-on-security-updates-for-Photoshop-and-others-1571517.html

But it's really not a problem! Adobe, all hail, says that Photoshop is not a target, so there's nothing to worry about!

http://www.h-online.com/security/news/item/Adobe-Photoshop-is-not-a-target-for-attackers-1572717.html

EVERYTHING is a target these days. NO SOFTWARE SHOULD GO UNPATCHED. While I hate the amountflood of patches that Microsoft releases, they are very good at patching their products. Apple releases patches at a slower rate, but is also very diligent about patching. Adobe needs to stop seeing this as a revenue stream and recognize that this is a responsibility that, if not fulfilled, is going to cost them customers.

Idiots. I wish I owned some Adobe stock so I could start a shareholder action to whack them upside the head with clue-by-fours.


EDIT: Adobe backs down, will release a patch for PS 5 and 5.5.

http://www.h-online.com/security/news/item/Adobe-backs-down-will-release-patches-for-critical-holes-1574341.html

June 2025

S M T W T F S
123456 7
8910 11121314
15 1617 18 1920 21
22232425262728
2930     

Syndicate

RSS Atom

Most Popular Tags

Style Credit

Expand Cut Tags

No cut tags
Page generated Jun. 24th, 2025 10:13 pm
Powered by Dreamwidth Studios