Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...PowerDNN Security HotfixPowerDNN Security Hotfix
Previous
 
Next
New Post
5/23/2008 9:31 PM
 

Will Morgenweck wrote

 
Why is it so difficult to understand that had this been handled properly, it would still be business as usual for the DotNetNuke Community.  We all would have been properly patched and probably sooner had the Core not had to deal with all this chaos, or even better, notified promptly. 

That's what i want to say and you said it better.


Frank Wang
 
New Post
5/23/2008 9:40 PM
 

Thanks for some sanity Michael and Will!

Yes, that "known issue" thing was throwing me for a loop too.  But I started to think Will's explanation might be the case.

All I know is that two things I am very happy with - one a product and one a service - are having at it.  And some of this is starting to stink a little - smelling a little bit fishy - from a couple of different angles.  And the fake account posters aren't helping either.

Is it time for everyone to put their cards on the table yet?  Or are these threads going to continue?

Greg

 
New Post
5/23/2008 9:54 PM
 

I hope they don't get deleted because you can't hide the situation.  I would like to think that as soon as a patch is released these threads will get locked.  Then within in a few days they will just get burried in the forums.  In my opinion, that would mean that DotNetNuke Corp and PowerDNN are trying to work out their differences.  Thats what we are all hoping will happen right?  I would hate to see the DNN Corp go through this again when/if PowerDNN finds another security problem.


Will Morgenweck
VP, Product Management
DotNetNuke Corp.
 
New Post
5/23/2008 10:31 PM
 

I just want to say thank you to Will for putting some nice well thought comments on this situation.  For one reason or another that message was just not coming across from the other posts that have been made.

I too hope that this issue gets resolved quickly, which it sounds like it will, but I also have a very strong feeling that the full truth on this will never be let out.


-Mitchel Sellers
Microsoft MVP, ASPInsider, DNN MVP
CEO/Director of Development - IowaComputerGurus Inc.
LinkedIn Profile

Visit mitchelsellers.com for my mostly DNN Blog and support forum.

Visit IowaComputerGurus.com for free DNN Modules, DNN Performance Tips, DNN Consulting Quotes, and DNN Technical Support Services
 
New Post
5/24/2008 10:46 AM
 

Let me just say, without having the benefit of actually seeing what has really happened first hand, and only based on posts by the Core members here, that I don't think the DNN Core Team needs to amend anything with PowerDNN.  The Core Team is there ready to take care of these type of situations, they have the infrastructure,   processes, and staff in place, and this is not new, this has been known information for a while, as this is not the first vulnerability found in DNN, and it will not be the last.  PowerDNN started looking for vulnerabilities, or maybe just found it by chance, but the thing is that they reacted very (very) poorly because they got too excited about the possibility of getting a lot of PR out of it, the dream of every mediocre hacker or security company.

Also, the Core Team communications, sometimes a little passionate, are warranted because PowerDNN just want to cover their arses and are providing misinformation and half truths.  I trust the Core Team 100%, PowerDNN, 0%.

And the new forum accounts are also kind of funny, like no one will figure out who's behind them...

Carlos

 

 
Previous
 
Next
HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...PowerDNN Security HotfixPowerDNN Security Hotfix


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out