NamesDontMatter
08-02-2006, 02:22 PM
If any of you are McAfee users, you may have noticed a cool new Security Center installation this morning. But one thing that makes this new launch interesting is that with the Launch of four other new products McAfee is Issuing a major bug fix.
The bug fix closes a hole in its SecurityCenter application which had been spotted by security expert, eEye. McAfee rated the hole as 'medium' in terms of its severity.
But eEye's chief hacking officer, Marc Maiffret, took umbrage at McAfee's previous behaviour.
It had quietly fixed another problem eEye had told the company about without even bothering to tell its customers.
"Fixing an extremely critical vulnerability without the proper notification is a disservice to customers," Maiffret complained.
More information on this story can be found here (http://www.eeye.com/html/research/advisories/index.html)
In my opinion the new security center certainly looks better, but now McAfee users have to relearn how to navigate it. Many users are not at ease with this situation where McAfee tries to slip a Major Bug fix under the radar, It is simply not pleasant for the customers.
http://www.techpowerup.com/img/06-08-02/NewMcAfee_thm.jpg (http://www.techpowerup.com/img/06-08-02/NewMcAfee.jpg) http://www.techpowerup.com/img/06-08-02/NewMcAfee2_thm.jpg (http://www.techpowerup.com/img/06-08-02/NewMcAfee2.jpg)
Source: TheINQ (http://www.theinq.com/default.aspx?article=33424)
The bug fix closes a hole in its SecurityCenter application which had been spotted by security expert, eEye. McAfee rated the hole as 'medium' in terms of its severity.
But eEye's chief hacking officer, Marc Maiffret, took umbrage at McAfee's previous behaviour.
It had quietly fixed another problem eEye had told the company about without even bothering to tell its customers.
"Fixing an extremely critical vulnerability without the proper notification is a disservice to customers," Maiffret complained.
More information on this story can be found here (http://www.eeye.com/html/research/advisories/index.html)
In my opinion the new security center certainly looks better, but now McAfee users have to relearn how to navigate it. Many users are not at ease with this situation where McAfee tries to slip a Major Bug fix under the radar, It is simply not pleasant for the customers.
http://www.techpowerup.com/img/06-08-02/NewMcAfee_thm.jpg (http://www.techpowerup.com/img/06-08-02/NewMcAfee.jpg) http://www.techpowerup.com/img/06-08-02/NewMcAfee2_thm.jpg (http://www.techpowerup.com/img/06-08-02/NewMcAfee2.jpg)
Source: TheINQ (http://www.theinq.com/default.aspx?article=33424)