Not likely an inside job. There is a reason this was done as an app update
and not a part of a patch to Window eyes itself. The app central server has
always been quite open to allow users of Window eyes to develop and share
apps. The apps themselves are insular from Window Eyes itself, IOW you
couldn't get an app to wreck people's Window Eyes, you could only do things
that would affect performance as long as the app is running.
Up until now, nobody has taken advantage of this openness. Now, thanks to
one person's idiocy, AI Squared is going to have to take measures to keep
this from happening again. I am sure we will still get user developed apps,
but the process is going to become slower and more complicated.
Regards,
Chris
-----Original Message-----
From: Stephen Clark
Sent: Friday, January 16, 2015 2:00 PM
To: [email protected]
Subject: Re: Bad News, Good News
I find it very disconcerting as well that it happened right after the
product is released by ASQuare. I'm thinking it's an inside job with in
the company. Unless they really gave that much control over to their
consumers. In that case, WOW! that's even worse.
Either way, the whole thing is really sick.
On 1/16/2015 3:19 PM, Chris Skarstad wrote:
obviously this individual possesses a real knowledge of Window-eyes
scripting, to the point that they were able to circumvent GW Micro/AI
Squared's app update servers, and set it so the announcement would happen
every few minutes. That's not something the average joe user knows how to
do. it's very disconcerting, and I hope this individual will not be
allowed to continue with these antics.
On 1/16/2015 2:52 PM, net bat wrote:
they are testing the waters, so to speak to see how far they could go. if
they attack again they will do real damage to us if they are not
stopped.
-----Original Message-----
From: Chris Skarstad
Sent: Friday, January 16, 2015 11:39 AM
To: [email protected]
Subject: Re: Bad News, Good News
Well, the beta process ended when the full
window-eyes 9 was released a couple days ago, so no harm was done
there. Really, all this individual did was insert a bunch of scary
words into an app update. Folks either found it annoying or disturbing,
probably a bit of both, but no actual harm to any systems was done.
That doesn't mean that someone might not try, which is why AI Squared is
beefing up security. Good idea there.
On 1/16/2015 1:41 PM, Max G. Swanson wrote:
The bad news is of course that our insular world of sightless computing
has apparently been invaded by some mean-spirited hacker. GW Toolkit,
as
an app on practically all systems running W.E., is certainly a good
target
choice if there's ill intent.
The good news is that the leak has been plugged, and the whole program
is
running somewhat smoother with the updated toolkit installed. Perhaps
this effort sabotaged the whole beta process.
Hope I'm not opening a can of worms by discussing this subject, as I
didn't see mention of it in the latest Digest--only in the announcement
from AI Squared. Of course my reading of the latter half of said digest
was hampered by some of the usual stop-and-start, and the
Browse-Mode-Find
feature's confusing number-signs with greater-thans during multiple
searches.
Things are, nevertheless, improving, thanks to the savvy and vigilant
crew
at GW/AI!
If you reply to this message it will be delivered to the original sender
only. If your reply would benefit others on the list and your message is
related to GW Micro, then please consider sending your message to
[email protected] so the entire list will receive it.
GW-Info messages are archived at http://www.gwmicro.com/gwinfo. You can
manage your list subscription at http://www.gwmicro.com/listserv.
If you reply to this message it will be delivered to the original sender
only. If your reply would benefit others on the list and your message is
related to GW Micro, then please consider sending your message to
[email protected] so the entire list will receive it.
GW-Info messages are archived at http://www.gwmicro.com/gwinfo. You can
manage your list subscription at http://www.gwmicro.com/listserv.
If you reply to this message it will be delivered to the original sender
only. If your reply would benefit others on the list and your message is
related to GW Micro, then please consider sending your message to
[email protected] so the entire list will receive it.
GW-Info messages are archived at http://www.gwmicro.com/gwinfo. You can
manage your list subscription at http://www.gwmicro.com/listserv.
If you reply to this message it will be delivered to the original sender
only. If your reply would benefit others on the list and your message is
related to GW Micro, then please consider sending your message to
[email protected] so the entire list will receive it.
GW-Info messages are archived at http://www.gwmicro.com/gwinfo. You can
manage your list subscription at http://www.gwmicro.com/listserv.
If you reply to this message it will be delivered to the original sender only.
If your reply would benefit others on the list and your message is related to
GW Micro, then please consider sending your message to [email protected] so
the entire list will receive it.
GW-Info messages are archived at http://www.gwmicro.com/gwinfo. You can manage
your list subscription at http://www.gwmicro.com/listserv.
