Moving past all of the excitement from yesterday, we are definitely making some progress. However, I do not want people to get the false impression that PowerDNN has learned from their mistake. Their security scanner is still online this morning, even after repeated requests from DNN Corp as well community members to take it offline. For a hosting company to publicly offer a hacking tool which puts all DotNetNuke community members at risk, is completely unprofessional. There is no question that PowerDNN offers a solid DotNetNuke hosting infrastructure. Unfortunately their recent behavior and lack of cooperation speaks volumes in terms of their business ethics. I am still hopeful that I will witness some very basic actions on the part of PowerDNN which demonstrate that they can be trusted.

I'm with Penny, Charles, Vitaly, and Peter.

I have dealt with PowerDNN and Tony V. for almost three years now and from my experience Tony is trustworthy and professional.

Yes, I think they made some mistakes but who on these forums have never made a mistake?

Greg

Leazon, it is one thing to make a mistake and take corrective action as you get more information.  But Tony, representing PowerDNN, knows very well how reckless it is to have that security tool out there in the public - to be used by the good and the bad.   He has been told outright how reckless this move is...and still, today it remains available.

And you are taking this lightly.  And I can see why.  I tracerouted to your site, and I can see that you are hosted with PowerDNN.  So, you are "patched" (well not officially, but a hacky type of patch at least).  The rest of the DotNetNuke community is at significant risk - not because of the specific vulnerability that was reported - but because this security tool puts hackers on the fast track to exploiting any old vulnerability on unpatched sites.

This is the equivelant of putting a sign on your own front door that says "I have a home alarm system, but my next door neighbor doesn't."  As the neighbor, how would that make you feel?

Dan