TIP: Click on subject to list as thread! ANSI
echo: alt-comp-anti-virus
to: ALL
from: DIESEL
date: 2016-02-09 01:13:00
subject: Re: Malwarebytes v2.2.0.1

Diesel 
news:XnsA58B16751B4F7D9A8@dieselpower.eternal-september.org Sun, 10
Jan 2016 05:00:52 GMT in alt.comp.anti-virus, wrote: 

> Some of the PR comments concerning the awards is very arrogant 
> considering how the program actually works under the hood and how 
> technically LIMITED it is from a coding point of view. 

And based on new found public information from Project Zero, I wasn't 
kidding in the least bit concerning it's limitations. I'm disapointed 
that they made no efforts to fix anything brought to there attention 
back in November and despite getting an extension ( they should have 
been exposed Jan 11th); they went on, making no efforts whatsoever to 
fix the issues addressed; until it was officially made public leaving 
them no choice but to semi admit it has problems, deny how long 
they've known about them, and 'promise' to resolve this within a few 
weeks for you.

Malwarebytes has lost what little respect I had left for them for 
this shady (there is no legit way to spin this) attitude towards 
these exploits. Fact is, they wouldn't be fixing them now if joe 
public didn't know they had problems and various large well known 
websites are now letting the public know about the problems. Just 
imagine how much more #### Malwarebytes would hide from you, if they 
thought they could get away with it. Make no mistake, the issues 
Project Zero has made public is common knowledge with Malwarebytes 
internal personal and has been for the last eight years or so. Yep, 
eight years, atleast! Malwarebytes has known about ALL of those 
vulnerabilities and made no effort to fix any of them.

They would NOT be making any effort to fix it now, Had Project Zero 
not made good on their threat and made what they shared with 
Malwarebytes public. Malwarebytes blew them off is what happened and 
is now in official damage control mode as a result.

The new bug bounty is another cute PR stunt. The bugs reported by 
Project Zero are eight years old. When various persons, including 
myself, brought these issues to light YEARS AGO, Malwarebytes leads 
Bruce and Marcin told myself and anyone else who mentioned it to 
pound sand, none of those issues were important and it showed by 
their refusal to even try fixing it, eight years ago.

Again, they are ONLY taking it seriously now because it's a PR 
nightmare they are trying to avoid. Based on the comments on their 
own blog, the bull#### and dazzle excuse is working nicely. Customers 
who've been fuxored for the last eight years by the company are 
begging them to continue raking them over the coals.

 



-- 
No officer, I don't know why you pulled me over...
I sure hope you do, though...
My loads late, and, the medication is wearing off.
--- NewsGate v1.0 gamma 2
* Origin: News Gate @ Net396 -Huntsville, AL - USA (1:396/4)

SOURCE: echomail via QWK@docsplace.org

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.