Zona Alarm Secure Website is not Secure!

albertross_2

Don't shoot the messenger..

Contact http://www.theregister.co.uk/odds/about/contact/

They would be interested in this sort of thing, and I suspect it would get sorted pretty quickly once exposed.

Paul_Varjak

Thank you albertross, I have now e-mailed the security consultant at 'The Register'.

Paul_Varjak

I just got a call from John Slavitt - who is the worldwide legal boss for Check Point software (Zone Labs Parent Company).

He acknowledges the problem, which is now being fixed. He now has to report the security vulnerability to various agencies (including the FBI), but they do not shoot the messenger in the US!

In fact, there is a federally-funded agency (CERT) which can bring pressure to bear on Zone Labs if the security problems are not fixed. I have made a telephone report to CERT also and will be following that up in writing. If Zone Labs do not fix the problem, CERT can publish details of the flaw!

thomas01155

wow he called you should of asked him for a free copy.

Paul_Varjak

In an earlier post I said that I would not give anyone at Zone Labs the password to my account.

So, Zone Labs reset my password (to one of their choosing) so they could access my account as if they were me!

I have now cancelled my order with Zone Labs and got my money back! I will be sending them a message asking them to close my account as well.

Paul_Varjak

Zone Labs have, seemingly, solved the problem on their website. They have also responded to my request to close my account.

John_Gray

The ZoneLabs Antivirus update server seems to have been offline for at least 24 hours now. I wonder whether there is any connection?

John

PS Ten minutes after I posted that, I've just tried again, and it has now downloaded and applied the latest AV update! Dontcha just love computers?...