Ars Technica's Dan Goodin is being sued by Keeper Security over an article about a defect in its password manager

Cory Doctorow 8:28 am Thu Dec 21, 2017

On December 15, Ars Technica ran a story by veteran security reporter Dan Goodin in which Goodin reported on a disclosure by Google researcher Tavis Ormandy, who had discovered that Keeper Security's password manager, bundled with Windows 10, was vulnerable to a password stealing bug that was very similar to a bug that had been published more than a year before.

Ormandy had reported the bug to Keeper Security in advance of publication and waited until the company had issued a patch to disclose it.

Keeper Security has filed a lawsuit in Illinois (where it is based) against Goodin and Ars Technica, alleging that the factual report of the defects in its products "made false and misleading statements about the Keeper software application suggesting that it had a 16-month old bug that allowed sites to steal user passwords."

Keeper Security previously threatened to sue Fox IT, a security research firm, over publication of another defect in its products.

Illinois has good anti-SLAPP laws, which protect critical speech from legal attacks that try to outspend critics, which bodes well for Ars and Goodin. In the meantime, the lawsuit has attracted critical attention to Keeper Security, as security journalists and researchers speak out against "ridiculous" actions that are tantamount to "bullying."

Keeper Security Inc v Goodin et Al

Security firm Keeper sues news reporter over vulnerability story [Zack Whittaker/Zdnet]

Vice obtained one of the FBI honeypot cellphones that reeled in alleged crooks

ANOM was a black market cellphone platform sold to crooks with the promise of secret comms. Sadly for them, the software was made by the FBI, leading to many arrests. Since the chips were called in, the spooked Google Pixel 4s have been appearing online for sale and Vice bought one. Joseph Cox: When booting… READ THE REST
security.txt is like robots.txt, but for security policies

Many websites have a robots.txt, a plain-text file that tells search engines to ignore certain files and folders on the site. Security.txt is a proposed standard to do likewise with security policies. "When security risks in web services are discovered by independent security researchers who understand the severity of the risk, they often lack the… READ THE REST
Russian hackers used Microsoft vendors to breach customers: Report

"The suspected Russian hackers behind the worst U.S. cyber attack in years leveraged reseller access to Microsoft Corp services to penetrate targets that had no compromised network software from SolarWinds," Joseph Menn and Raphael Satter at Reuters report: While updates to SolarWinds' Orion software was previously the only known point of entry, security company CrowdStrike… READ THE REST
Get a complete picture of your cat's oral health with a $68 Basepaws test

Cats…well, they just don't care what you think. Sure, they love you in their own way. But they've got their own agenda. And what you want … is usually pretty far down their priority list, even if it's in their own best interests. That often includes items related to their own health, including dental care.… READ THE REST
Extend your vision for dark movie nights with this $8.50 LED backlight for smart TVs

You've got a big ole TV. It's 55"…or 65"…or 75". It's glorious. Absolutely glorious. But while its brilliance is obviously sublime, that could blind you to a couple of other facts to consider. Like how staring at a bright TV against an otherwise dark wall at night actually disrupts how our eyes measure light. Rather than… READ THE REST
From CSS to JavaScript, here are 10 coding bundles that can make you a master programmer

The web development world is more than a world. It's a whole universe. That's because, for every project you see on the web, there were likely 10 different ways to reach that final product. But which way is the best way? Well, that's the question only a fully trained and knowledgeable web creator can answer… READ THE REST