Security researcher gets threats over Amazon review

Post by navbaker » Fri, Jul 01, 2016, 9:53 PM UTC

nostromo wrote: post #11

pmyjavec wrote: post #8

"The result is that the unique network ID of your socket is transported in an unencrypted form to the Chinese server" The use of The word "Chinese" in this article is amusing. Is it really important or necessary? Would it be preferable if the data was sent to a US server ?

If you're a US citizen, you would be a bit better off if it was a US server, because the records from the server would be available to the US court system. This is helpful if a customer ends up suing the company, or if there is a security breach that is investigated by US-based law enforcement. I agree, the inclusion does hint at Sinophobia. But it's also a valid detail for security conscious customers to consider.

Post by thesimon » Fri, Jul 01, 2016, 9:58 PM UTC

maxerickson wrote: post #13

r00fus wrote: post #9

Of note, from the amazon review: "But before we get to that: I received this product at a discount in return for writing an honest review of it. Onwards!" Could that have anything to do with the manufacturer's attitude?

I sort of wonder if Amazon is the entity providing the discount. (I spent a minute trying to figure it out and didn't find anything)

Post by stcredzero » Fri, Jul 01, 2016, 9:58 PM UTC

nostromo wrote: post #10

jswny wrote: post #7

To me this seems like an odd tactic to use as the manufacturer. Did the boss just pick some random employee and decide that one guy had to get the review taken down other wise he was fired? Also, I'm inclined to believe that this isn't the case because I also don't believe that those "other reviewers" actually complained about his review. Why would anyone else care that he left a truthful review about the product? If…

Dollars to donuts, there is no employee. It's the manufacturer writing him and concocting a story.

Post by int_handler » Fri, Jul 01, 2016, 10:01 PM UTC

nostromo wrote: post #11

pmyjavec wrote: post #8

"The result is that the unique network ID of your socket is transported in an unencrypted form to the Chinese server" The use of The word "Chinese" in this article is amusing. Is it really important or necessary? Would it be preferable if the data was sent to a US server ?

If you're a US citizen, you would be a bit better off if it was a US server, because the records from the server would be available to the US court system. This is helpful if a customer ends up suing the company, or if there is a security breach that is investigated by US-based law enforcement. I agree, the inclusion does hint at Sinophobia. But it's also a valid detail for security conscious customers to consider.

Post by wai1234 » Fri, Jul 01, 2016, 10:01 PM UTC