Re: [Full-disclosure] Barracuda backdoor

[Tõnu Samuel <tonu@xxxxxx>]

On Thu, 2011-04-28 at 12:09 -0400, Valdis.Kletnieks@xxxxxx wrote:
> On Thu, 28 Apr 2011 13:09:14 +0300, =?ISO-8859-1?Q?T=F5nu_Samuel?= said:
> 
> > One day their Barracuda product stopped working.
> 
> OK... That's hardly surprising, given the high-quality software engineering
> that Barracuda is known for.. ;)
> 
> > Barracuda not only disabled all kind of subscription services but also
> > used some kind of backdoor in their products to disable product customer
> > had paid long time ago.
> 
> And I should believe this claim, why?
> 

Sue me. Sometime such claim is good enough because they will not sue me.
And if they do, this makes me happy. I got sued multiple times for what
I say in public and I never lost the case yet.

> Now the question is - given that *that* Barracuda was at least semi-functional
> even when off support, do we have any indication that your unit was in fact
> intentionally disabled?  It could very well be the symptoms you are seeing are
> the unit being just plain *broken*.

Yes I do have proofs, including Barracuda mails confirming it. There are
multiple of them including this one:

From: Chelsi Newland [mailto:cnewland@xxxxxxxxxxxxx] 
Sent: Wednesday, April 27, 2011 5:51 PM
Subject: FW: Current (Expires 2011-11-21)
Importance: High


Please note we have proof of payment to you from the end user.  Either
reimburse this customer, or send payment for this order.

Please advise payment on your account so we can enable their unit. 

Sincerely,

Chelsi Newland| Barracuda Networks | Credit/Collections Manager

  Tõnu

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/